deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-16599
Published: 2018-01-23
Description: This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.reports.templates.misc.sample_jsp servlet, which listens on TCP port 8081 by default. When parsing the type parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of Administrator. Was ZDI-CAN-5190.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-668
References: https://zerodayinitiative.com/advisories/ZDI-17-964; https://zerodayinitiative.com/advisories/ZDI-17-964
CVE: CVE-2017-16600
Published: 2018-01-23
Description: This vulnerability allows remote attackers to overwrite files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.reports.templates.network.traffic_005freport_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to overwrite any files accessible to the Administrator. Was ZDI-CAN-5191.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-668
References: http://www.securityfocus.com/bid/102528; https://zerodayinitiative.com/advisories/ZDI-17-965; http://www.securityfocus.com/bid/102528
CVE: CVE-2017-16601
Published: 2018-01-23
Description: This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.reports.templates.service.service_005ffailures_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to overwrite any files accessible to the Administrator. Was ZDI-CAN-5192.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-668
References: https://zerodayinitiative.com/advisories/ZDI-17-966; https://zerodayinitiative.com/advisories/ZDI-17-966
CVE: CVE-2017-16602
Published: 2018-01-23
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.tools.exec_jsp servlet, which listens on TCP port 8081 by default. When parsing the command parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of Administrator. Was ZDI-CAN-5193.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-134
References: https://zerodayinitiative.com/advisories/ZDI-17-967; https://zerodayinitiative.com/advisories/ZDI-17-967
CVE: CVE-2017-16603
Published: 2018-01-23
Description: This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.settings.upload_005ffile_005fdo_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate user-supplied data, which can allow for the upload of files. An attacker can leverage this vulnerability to execute code under the context of Administrator. Was ZDI-CAN-5194.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-668
References: https://zerodayinitiative.com/advisories/ZDI-17-968; https://zerodayinitiative.com/advisories/ZDI-17-968
CVE: CVE-2017-16604
Published: 2018-01-23
Description: This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.cnnic.asset.deviceReport.deviceReport_005fexport_005fdo_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to overwrite any files accessible to the Administrator. Was ZDI-CAN-5195.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-668
References: https://zerodayinitiative.com/advisories/ZDI-17-969; https://zerodayinitiative.com/advisories/ZDI-17-969
CVE: CVE-2017-16605
Published: 2018-01-23
Description: This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.db.save_005fattrs_jsp servlet, which listens on TCP port 8081 by default. When parsing the id parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to overwrite any files accessible to the Administrator. Was ZDI-CAN-5196.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-668
References: http://www.securityfocus.com/bid/102512; https://zerodayinitiative.com/advisories/ZDI-17-970; http://www.securityfocus.com/bid/102512
CVE: CVE-2017-16606
Published: 2018-01-23
Description: This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp._3d.add_005f3d_005fview_005fdo_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code under the context of Administrator. Was ZDI-CAN-5197.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-668
References: https://zerodayinitiative.com/advisories/ZDI-17-971; https://zerodayinitiative.com/advisories/ZDI-17-971
CVE: CVE-2017-16607
Published: 2018-01-23
Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within heapdumps.jsp. The issue results from the lack of proper validation of a user-supplied string before using it to download heap memory dump. An attacker can leverage this in conjunction with other vulnerabilities to disclose sensitive information in the context of the current process. Was ZDI-CAN-4718.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-200
References: http://www.securityfocus.com/bid/102219; https://www.tenable.com/security/research/tra-2018-02; https://zerodayinitiative.com/advisories/ZDI-17-949
CVE: CVE-2017-16608
Published: 2018-01-23
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within exec.jsp. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current user. Was ZDI-CAN-4749.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-134
References: https://www.tenable.com/security/research/tra-2018-02; https://zerodayinitiative.com/advisories/ZDI-17-950; https://www.tenable.com/security/research/tra-2018-02
CVE: CVE-2017-16609
Published: 2018-01-23
Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within download.jsp. The issue results from the lack of proper validation of a user-supplied string before using it to download a file. An attacker can leverage this vulnerability to expose sensitive information. Was ZDI-CAN-4750.
CVSS Score: 7.5 (HIGH)
CWE: CWE-39, CWE-200
References: https://www.tenable.com/security/research/tra-2018-02; https://zerodayinitiative.com/advisories/ZDI-17-951; https://www.tenable.com/security/research/tra-2018-02
CVE: CVE-2017-16610
Published: 2018-01-23
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within upload_save_do.jsp. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code under the context of the current user. Was ZDI-CAN-4751.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-668
References: https://www.tenable.com/security/research/tra-2018-02; https://zerodayinitiative.com/advisories/ZDI-17-952; https://www.tenable.com/security/research/tra-2018-02
CVE: CVE-2017-17406
Published: 2018-01-23
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within an exposed RMI registry, which listens on TCP ports 1800 and 1850 by default. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute arbitrary code under the context of the current process. Was ZDI-CAN-4753.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://www.tenable.com/security/research/tra-2018-02; https://zerodayinitiative.com/advisories/ZDI-17-953; https://www.tenable.com/security/research/tra-2018-02
CVE: CVE-2017-17407
Published: 2018-01-23
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager v7.2.699 build 1001. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the content parameter provided to the script_test.jsp endpoint. A crafted content request parameter can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code under the context of the web service. Was ZDI-CAN-5080.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-134
References: https://zerodayinitiative.com/advisories/ZDI-17-954; https://zerodayinitiative.com/advisories/ZDI-17-954
CVE: CVE-2017-18048
Published: 2018-01-23
Description: Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is blocked but .PHP (uppercase) is not.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://blogs.securiteam.com/index.php/archives/3559; https://github.com/monstra-cms/monstra/issues/426; https://securityprince.blogspot.in/2017/12/monstra-cms-304-arbitrary-file-upload.html
CVE: CVE-2017-18049
Published: 2018-01-23
Description: In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, which may be executed if imported without sanitization into common software (including Microsoft Excel). For example, the CSV data may contain untrusted user input from the "First Name" field of a user's /myprofile page.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-74
References: https://www.exploit-db.com/exploits/43396/; https://www.silverstripe.org/download/security-releases/ss-2017-007; https://www.exploit-db.com/exploits/43396/
CVE: CVE-2018-6022
Published: 2018-01-23
Description: Directory traversal vulnerability in application/admin/controller/Main.php in NoneCms through 1.3.0 allows remote authenticated users to delete arbitrary files by leveraging back-office access to provide a ..\ in the param.path parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://blackwolfsec.cc/2018/01/22/Nonecms/; http://blackwolfsec.cc/2018/01/22/Nonecms/
CVE: CVE-2018-6029
Published: 2018-01-23
Description: The copy function in application/admin/controller/Article.php in NoneCms 1.3.0 allows remote attackers to access the content of internal and external network resources via Server Side Request Forgery (SSRF), because URL validation only considers whether the URL contains the "csdn" substring.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: http://blackwolfsec.cc/2018/01/23/Nonecms_ssrf/; http://blackwolfsec.cc/2018/01/23/Nonecms_ssrf/
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-23
Description: On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before e7358f54a3954df16d4f87e3cad35063f1c17de5 and the DPDK before commit 3f12b9f23b6499ff66ec8b0de941fb469297e5d0, additionally Multiple vendor NIC firmware is affected.
CVSS Score: 8.6 (HIGH)
CWE: CWE-254
References: http://seclists.org/oss-sec/2015/q4/425; https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00046&languageid=en-fr; https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper-smolyar.pdf
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-23
Description: Jenkins PMD Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: http://www.securityfocus.com/bid/102844; https://jenkins.io/security/advisory/2018-01-22/; http://www.securityfocus.com/bid/102844
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-23
Description: Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: https://jenkins.io/security/advisory/2018-01-22/; https://jenkins.io/security/advisory/2018-01-22/
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-23
Description: Jenkins DRY Plugin 2.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: https://jenkins.io/security/advisory/2018-01-22/; https://jenkins.io/security/advisory/2018-01-22/
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-23
Description: Jenkins FindBugs Plugin 4.71 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: https://jenkins.io/security/advisory/2018-01-22/; https://jenkins.io/security/advisory/2018-01-22/
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-23
Description: Jenkins Warnings Plugin 4.64 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: https://jenkins.io/security/advisory/2018-01-22/; https://jenkins.io/security/advisory/2018-01-22/
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-23
Description: Jenkins Release Plugin 2.9 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing attackers to trigger release builds.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/102834; https://jenkins.io/security/advisory/2018-01-22/; http://www.securityfocus.com/bid/102834
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-23
Description: Jenkins Translation Assistance Plugin 1.15 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing attackers to override localized strings displayed to all users on the current Jenkins instance if the victim is a Jenkins administrator.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/102809; https://jenkins.io/security/advisory/2018-01-22/; http://www.securityfocus.com/bid/102809
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-23
Description: On Jenkins instances with Authorize Project plugin, the authentication associated with a build may lack the Computer/Build permission on some agents. This did not prevent the execution of Pipeline `node` blocks on those agents due to incorrect permissions checks in Pipeline: Nodes and Processes plugin 2.17 and earlier.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-862
References: https://jenkins.io/security/advisory/2018-01-22/; https://jenkins.io/security/advisory/2018-01-22/
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-17383.  Reason: This candidate is a reservation duplicate of CVE-2017-17383.  Notes: All CVE users should reference CVE-2017-17383 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-15090
Published: 2018-01-23
Description: An issue has been found in the DNSSEC validation component of PowerDNS Recursor from 4.0.0 and up to and including 4.0.6, where the signatures might have been accepted as valid even if the signed data was not in bailiwick of the DNSKEY used to sign it. This allows an attacker in position of man-in-the-middle to alter the content of records by issuing a valid signature for the crafted records.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-347, CWE-347
References: http://www.securityfocus.com/bid/101982; https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-03.html; http://www.securityfocus.com/bid/101982
CVE: CVE-2017-15091
Published: 2018-01-23
Description: An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly keyword. This missing check allows an attacker with valid API credentials to flush the cache, trigger a zone transfer or send a NOTIFY.
CVSS Score: 7.1 (HIGH)
CWE: CWE-863, CWE-358
References: http://www.securityfocus.com/bid/101982; https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2017-04.html; http://www.securityfocus.com/bid/101982
CVE: CVE-2017-15092
Published: 2018-01-23
Description: A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0.6, where the qname of DNS queries was displayed without any escaping, allowing a remote attacker to inject HTML and Javascript code into the web interface, altering the content.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/101982; https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-05.html; http://www.securityfocus.com/bid/101982
CVE: CVE-2017-15093
Published: 2018-01-23
Description: When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized user to update the Recursor's ACL by adding and removing netmasks, and to configure forward zones. It was discovered that the new netmask and IP addresses of forwarded zones were not sufficiently validated, allowing an authenticated user to inject new configuration directives into the Recursor's configuration.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/101982; https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-06.html; http://www.securityfocus.com/bid/101982
CVE: CVE-2017-15094
Published: 2018-01-23
Description: An issue has been found in the DNSSEC parsing code of PowerDNS Recursor from 4.0.0 up to and including 4.0.6 leading to a memory leak when parsing specially crafted DNSSEC ECDSA keys. These keys are only parsed when validation is enabled by setting dnssec to a value other than off or process-no-validate (default).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-401, CWE-772
References: http://www.securityfocus.com/bid/101982; https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-07.html; http://www.securityfocus.com/bid/101982
CVE: CVE-2017-15105
Published: 2018-01-23
Description: A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence (NXDOMAIN answer) of an existing wildcard record, or trick unbound into accepting a NODATA proof.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-358, CWE-20
References: http://www.securityfocus.com/bid/102817; https://lists.debian.org/debian-lts-announce/2018/01/msg00039.html; https://lists.debian.org/debian-lts-announce/2019/02/msg00022.html
CVE: CVE-2017-15107
Published: 2018-01-23
Description: A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.
CVSS Score: 7.5 (HIGH)
CWE: CWE-358
References: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00027.html; http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2018q1/011896.html; http://www.securityfocus.com/bid/102812
CVE: CVE-2017-2740
Published: 2018-01-23
Description: A potential security vulnerability has been identified with the command line shell of the HP ThinPro operating system 6.1, 5.2.1, 5.2, 5.1, 5.0, and 4.4. The vulnerability could result in a local unauthorized elevation of privilege on an HP thin client device.
CVSS Score: 7.8 (HIGH)
References: https://support.hp.com/us-en/document/c05379294; https://support.hp.com/us-en/document/c05379294
CVE: CVE-2017-2741
Published: 2018-01-23
Description: A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
References: https://support.hp.com/us-en/document/c05462914; https://www.exploit-db.com/exploits/42176/; https://www.exploit-db.com/exploits/45273/