deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-6810
Published: 2017-03-11
Description: paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.fplinks.php (linkid parameter).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96939; https://github.com/paintballrefjosh/MaNGOSWebV4/issues/20; http://www.securityfocus.com/bid/96939
CVE: CVE-2017-6811
Published: 2017-03-11
Description: paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.shop.php (id parameter).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96939; https://github.com/paintballrefjosh/MaNGOSWebV4/issues/19; http://www.securityfocus.com/bid/96939
CVE: CVE-2017-6812
Published: 2017-03-11
Description: paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.vote.php (id parameter).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96939; https://github.com/paintballrefjosh/MaNGOSWebV4/issues/17; http://www.securityfocus.com/bid/96939
CVE: CVE-2017-6814
Published: 2017-03-12
Description: In WordPress before 4.7.3, there is authenticated Cross-Site Scripting (XSS) via Media File Metadata. This is demonstrated by both (1) mishandling of the playlist shortcode in the wp_playlist_shortcode function in wp-includes/media.php and (2) mishandling of meta information in the renderTracks function in wp-includes/js/mediaelement/wp-playlist.js.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2017/03/06/8; http://www.debian.org/security/2017/dsa-3815; http://www.securityfocus.com/bid/96601
CVE: CVE-2017-6815
Published: 2017-03-12
Description: In WordPress before 4.7.3 (wp-includes/pluggable.php), control characters can trick redirect URL validation.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: http://www.debian.org/security/2017/dsa-3815; http://www.securityfocus.com/bid/96600; http://www.securitytracker.com/id/1037959
CVE: CVE-2017-6816
Published: 2017-03-12
Description: In WordPress before 4.7.3 (wp-admin/plugins.php), unintended files can be deleted by administrators using the plugin deletion functionality.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-863
References: http://www.debian.org/security/2017/dsa-3815; http://www.securityfocus.com/bid/96598; http://www.securitytracker.com/id/1037959
CVE: CVE-2017-6817
Published: 2017-03-12
Description: In WordPress before 4.7.3 (wp-includes/embed.php), there is authenticated Cross-Site Scripting (XSS) in YouTube URL Embeds.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.debian.org/security/2017/dsa-3815; http://www.securityfocus.com/bid/96601; http://www.securitytracker.com/id/1037959
CVE: CVE-2017-6818
Published: 2017-03-12
Description: In WordPress before 4.7.3 (wp-admin/js/tags-box.js), there is cross-site scripting (XSS) via taxonomy term names.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96601; http://www.securitytracker.com/id/1037959; https://codex.wordpress.org/Version_4.7.3
CVE: CVE-2017-6819
Published: 2017-03-12
Description: In WordPress before 4.7.3, there is cross-site request forgery (CSRF) in Press This (wp-admin/includes/class-wp-press-this.php), leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://openwall.com/lists/oss-security/2017/03/06/7; http://www.securityfocus.com/bid/96602; http://www.securitytracker.com/id/1037959
CVE: CVE-2017-5624
Published: 2017-03-12
Description: An issue was discovered in OxygenOS before 4.0.3 for OnePlus 3 and 3T. The attacker can persistently make the (locked) bootloader start the platform with dm-verity disabled, by issuing the 'fastboot oem disable_dm_verity' command. Having dm-verity disabled, the kernel will not verify the system partition (and any other dm-verity protected partition), which may allow for persistent code execution and privilege escalation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://securityresear.ch/2017/02/08/oneplus3-bootloader-vulns/; https://securityresear.ch/2017/02/08/oneplus3-bootloader-vulns/
CVE: CVE-2017-5626
Published: 2017-03-12
Description: OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that allow the attacker to lock/unlock the bootloader, disregarding the 'OEM Unlocking' checkbox, without user confirmation and without a factory reset. This allows for persistent code execution with high privileges (kernel/root) with complete access to user data.
CVSS Score: 9.8 (CRITICAL)
References: https://securityresear.ch/2017/02/08/oneplus3-bootloader-vulns/; https://securityresear.ch/2017/02/08/oneplus3-bootloader-vulns/
CVE: CVE-2017-6444
Published: 2017-03-12
Description: The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many ACK packets. After the attacker stops the exploit, the CPU usage is 100% and the router requires a reboot for normal operation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.exploitalert.com/view-details.html?id=26137; https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://packetstormsecurity.com/files/141449/Mikrotik-Hap-Lite-6.25-Denial-Of-Service.html
CVE: CVE-2017-6820
Published: 2017-03-12
Description: rcube_utils.php in Roundcube before 1.1.8 and 1.2.x before 1.2.4 is susceptible to a cross-site scripting vulnerability via a crafted Cascading Style Sheets (CSS) token sequence within an SVG element.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96817; https://github.com/roundcube/roundcubemail/commit/cbd35626f7db7855f3b5e2db00d28ecc1554e9f4; https://github.com/roundcube/roundcubemail/commit/fa2824fdcd44af3f970b2797feb47652482c8305
CVE: CVE-2017-6823
Published: 2017-03-12
Description: Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an app=user&act=edit action.
CVSS Score: 8.8 (HIGH)
CWE: CWE-294
References: http://rungga.blogspot.co.id/2017/03/privilege-escalation-manipulation-of.html; http://www.securityfocus.com/bid/96889; https://www.exploit-db.com/exploits/41594/
CVE: CVE-2014-9645
Published: 2017-03-12
Description: The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an "ifconfig /usbserial up" command or a "mount -t /snd_pcm none /" command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://git.busybox.net/busybox/commit/?id=4e314faa0aecb66717418e9a47a4451aec59262b; http://openwall.com/lists/oss-security/2015/01/24/4; http://seclists.org/fulldisclosure/2020/Mar/15
CVE: CVE-2015-4407
Published: 2017-03-13
Description: Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service interruption) via a crafted HTTP request, aka the PSIA issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.hikvision.com/En/Press-Release-details_435_i1023.html; http://www.hikvision.com/En/Press-Release-details_435_i1023.html
CVE: CVE-2015-4408
Published: 2017-03-13
Description: Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service interruption) via a crafted HTTP request, aka the ISAPI issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.hikvision.com/En/Press-Release-details_435_i1023.html; http://www.hikvision.com/En/Press-Release-details_435_i1023.html
CVE: CVE-2015-4409
Published: 2017-03-13
Description: Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service interruption) via a crafted HTTP request, aka the SDK issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.hikvision.com/En/Press-Release-details_435_i1023.html; http://www.hikvision.com/En/Press-Release-details_435_i1023.html
CVE: CVE-2017-5619
Published: 2017-03-13
Description: An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attackers can login with the hashed password itself (e.g., from the DB) instead of the valid password string.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/96937; https://zammad.com/de/news/security-advisory-zaa-2017-01; http://www.securityfocus.com/bid/96937
CVE: CVE-2017-5620
Published: 2017-03-13
Description: An XSS issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attachments are opened in a new tab instead of getting downloaded. This creates an attack vector of executing code in the domain of the application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96937; https://zammad.com/de/news/security-advisory-zaa-2017-01; http://www.securityfocus.com/bid/96937
CVE: CVE-2017-5621
Published: 2017-03-13
Description: An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. XSS can be triggered via malicious HTML in a chat message or the content of a ticket article, when using either the REST API or the WebSocket API.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96937; https://zammad.com/de/news/security-advisory-zaa-2017-01; http://www.securityfocus.com/bid/96937
CVE: CVE-2017-5674
Published: 2017-03-13
Description: A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP ("GET system.ini HTTP/1.1\n\n" - note the lack of "/" in the path field of the request) request that will disclose the configuration file with the login password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://www.cybereason.com/cve-ip-cameras/; https://www.cybereason.com/zero-day-exploits-turn-hundreds-of-thousands-of-ip-cameras-into-iot-botnet-slaves/; https://www.cybereason.com/cve-ip-cameras/
CVE: CVE-2017-5675
Published: 2017-03-13
Description: A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models. The mail-sending form in the mail.htm page allows an attacker to inject a command into the receiver1 field in the form; it will be executed with root privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://www.cybereason.com/cve-ip-cameras/; https://www.cybereason.com/zero-day-exploits-turn-hundreds-of-thousands-of-ip-cameras-into-iot-botnet-slaves/; https://www.cybereason.com/cve-ip-cameras/
CVE: CVE-2017-5929
Published: 2017-03-13
Description: QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://access.redhat.com/errata/RHSA-2017:1675; https://access.redhat.com/errata/RHSA-2017:1676; https://access.redhat.com/errata/RHSA-2017:1832
CVE: CVE-2017-6080
Published: 2017-03-13
Description: An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, caused by lack of a protection mechanism involving HTTP Access-Control headers. To exploit the vulnerability, an attacker can send cross-domain requests directly to the REST API for users with a valid session cookie and receive the result.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-352
References: http://www.securityfocus.com/bid/96937; https://zammad.com/de/news/security-advisory-zaa-2017-01; http://www.securityfocus.com/bid/96937
CVE: CVE-2017-6081
Published: 2017-03-13
Description: A CSRF issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. To exploit the vulnerability, an attacker can send cross-domain requests directly to the REST API for users with a valid session cookie.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/96937; https://zammad.com/de/news/security-advisory-zaa-2017-01; http://www.securityfocus.com/bid/96937
CVE: CVE-2017-6180
Published: 2017-03-13
Description: Keekoon KK002 devices 1.8.12 HD have a Cross Site Request Forgery Vulnerability affecting goform/formChnUserPwd and goform/formUserMng (and the entire set of other pages).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://hsw69.wordpress.com/2015/10/22/keekoon-kk002-ip-camera-csrf-exploitation/; https://hsw69.wordpress.com/2015/10/22/keekoon-kk002-ip-camera-csrf-exploitation/
CVE: CVE-2015-6671
Published: 2017-03-13
Description: Open edX edx-platform before 2015-08-25 requires use of the database for storage of SAML SSO secrets, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging access to a database backup.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://github.com/edx/edx-platform/pull/9471; https://open.edx.org/CVE-2015-6671; https://github.com/edx/edx-platform/pull/9471
CVE: CVE-2017-6807
Published: 2017-03-13
Description: mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a server can copy their session cookie to a different web site on the same server to get access to that site.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96843; https://github.com/UNINETT/mod_auth_mellon/releases/tag/v0.13.1; https://sympa.uninett.no/lists/uninett.no/arc/modmellon/2017-03/msg00008.html
CVE: CVE-2014-3926
Published: 2017-03-13
Description: Cross-site scripting (XSS) vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://blog.talosintelligence.com/2014/09/looking-glasses-with-bacon.html; https://gist.github.com/bittorrent3389/8fee7cdaa73d1d351ee9; https://github.com/Cougar/lg/issues/3
CVE: CVE-2013-4659
Published: 2017-03-14
Description: Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on routers of multiple vendors including ASUS RT-AC66U and TRENDnet TEW-812DRU.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.linux-magazine.com/Issues/2014/161/Security-and-SOHO-Routers; https://packetstormsecurity.com/files/122562/ASUS-RT-AC66U-ACSD-Remote-Root-Buffer-Overflow.html; http://www.linux-magazine.com/Issues/2014/161/Security-and-SOHO-Routers
CVE: CVE-2014-8688
Published: 2017-03-14
Description: An issue was discovered in Telegram Messenger 2.6 for iOS and 1.8.2 for Android. Secret chat messages are available in cleartext in process memory and a .db file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://blog.zimperium.com/telegram-hack/; https://blog.zimperium.com/telegram-hack/
CVE: CVE-2016-8747
Published: 2017-03-14
Description: An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11InputBuffer.java allows remote attackers to read data that was intended to be associated with a different request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://svn.apache.org/viewvc?view=revision&revision=1774161; http://svn.apache.org/viewvc?view=revision&revision=1774166; http://tomcat.apache.org/security-8.html
CVE: CVE-2016-9368
Published: 2017-03-14
Description: An issue was discovered in Eaton xComfort Ethernet Communication Interface (ECI) Versions 1.07 and prior. By accessing a specific uniform resource locator (URL) on the webserver, a malicious user may be able to access files without authenticating.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284, CWE-284
References: https://ics-cert.us-cert.gov/advisories/ICSA-17-061-01; https://ics-cert.us-cert.gov/advisories/ICSA-17-061-01
CVE: CVE-2017-6367
Published: 2017-03-14
Description: In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an invalid Content-Length header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/96887; https://www.exploit-db.com/exploits/41596/; http://www.securityfocus.com/bid/96887
CVE: CVE-2017-6398
Published: 2017-03-14
Description: An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600. An authenticated user can execute a terminal command in the context of the web server user (which is root). Besides, the default installation of IMSVA comes with default administrator credentials. The saveCert.imss endpoint takes several user inputs and performs blacklisting. After that, it uses them as arguments to a predefined operating-system command without proper sanitization. However, because of an improper blacklisting rule, it's possible to inject arbitrary commands into it.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.securityfocus.com/bid/96859; https://www.rapid7.com/db/modules/exploit/linux/http/trend_micro_imsva_exec; http://www.securityfocus.com/bid/96859
CVE: CVE-2017-6874
Published: 2017-03-14
Description: Race condition in kernel/ucount.c in the Linux kernel through 4.10.2 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls that leverage certain decrement behavior that causes incorrect interaction between put_ucounts and get_ucounts.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=040757f738e13caaa9c5078bca79aa97e11dde88; http://www.securityfocus.com/bid/96856; https://github.com/torvalds/linux/commit/040757f738e13caaa9c5078bca79aa97e11dde88
CVE: CVE-2017-6877
Published: 2017-03-14
Description: Cross-site scripting (XSS) vulnerability in SVG file handling in Lutim 0.7.1 and earlier allows remote attackers to inject arbitrary web script.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96855; https://framagit.org/luc/lutim/commit/4c0df8f8b10122339b908dcd9b1117348b49dcab; https://framagit.org/luc/lutim/issues/38
CVE: CVE-2017-6883
Published: 2017-03-14
Description: The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF image. The vulnerability could lead to information disclosure; an attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/96870; http://www.zerodayinitiative.com/advisories/ZDI-17-133/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2016-10169
Published: 2017-03-14
Description: The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2017/01/28/9; http://www.securityfocus.com/bid/95883; https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
CVE: CVE-2016-10170
Published: 2017-03-14
Description: The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2017/01/28/9; http://www.securityfocus.com/bid/95883; https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
CVE: CVE-2016-10171
Published: 2017-03-14
Description: The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2017/01/28/9; http://www.securityfocus.com/bid/95883; https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
CVE: CVE-2016-10172
Published: 2017-03-14
Description: The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2017/01/28/9; http://www.securityfocus.com/bid/95883; https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
CVE: CVE-2016-10188
Published: 2017-03-14
Description: Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary code by causing a file transfer connection to expire.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.debian.org/security/2017/dsa-3853; http://www.openwall.com/lists/oss-security/2017/01/30/4; http://www.openwall.com/lists/oss-security/2017/01/31/11
CVE: CVE-2016-10189
Published: 2017-03-14
Description: BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.debian.org/security/2017/dsa-3853; http://www.openwall.com/lists/oss-security/2017/01/30/4; http://www.openwall.com/lists/oss-security/2017/01/31/11
CVE: CVE-2017-5668
Published: 2017-03-14
Description: bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-10189.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2017/01/30/4; http://www.openwall.com/lists/oss-security/2017/01/31/11; http://www.securityfocus.com/bid/95932
CVE: CVE-2017-5957
Published: 2017-03-14
Description: Stack-based buffer overflow in the vrend_decode_set_framebuffer_state function in vrend_decode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator (QEMU), allows a local guest users to cause a denial of service (application crash) via the "nr_cbufs" argument.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2017/02/13/3; http://www.securityfocus.com/bid/96215; https://bugzilla.redhat.com/show_bug.cgi?id=1421126
CVE: CVE-2017-6335
Published: 2017-03-14
Description: The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a small samples per pixel value in a CMYKA TIFF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2017/02/28/2; http://www.securityfocus.com/bid/96544; https://bugzilla.redhat.com/show_bug.cgi?id=1427975
CVE: CVE-2017-2983
Published: 2017-03-14
Description: Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to escalation of privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.securityfocus.com/bid/96863; http://www.securitytracker.com/id/1037993; https://helpx.adobe.com/security/products/shockwave/apsb17-08.html