deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-16671
Published: 2017-11-09
Description: A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. No size checking is done when setting the user field for Party B on a CDR. Thus, it is possible for someone to use an arbitrarily large string and write past the end of the user field storage buffer. NOTE: this is different from CVE-2017-7617, which was only about the Party A buffer.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://downloads.digium.com/pub/security/AST-2017-010.html; http://www.securityfocus.com/bid/101760; https://issues.asterisk.org/jira/browse/ASTERISK-27337
CVE: CVE-2017-16672
Published: 2017-11-09
Description: An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. A memory leak occurs when an Asterisk pjsip session object is created and that call gets rejected before the session itself is fully established. When this happens the session object never gets destroyed. Eventually Asterisk can run out of memory and crash.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-772
References: http://downloads.digium.com/pub/security/AST-2017-011.html; http://www.securityfocus.com/bid/101765; https://issues.asterisk.org/jira/browse/ASTERISK-27345
CVE: CVE-2017-16673
Published: 2017-11-09
Description: Datto Backup Agent 1.0.6.0 and earlier does not authenticate incoming connections. This allows an attacker to impersonate a Datto Backup Appliance to "pair" with the agent and issue requests to this agent, if the attacker can reach the agent on TCP port 25566 or 25568, and send unspecified "specific information" by which the agent identifies a network device that is "appearing to be a valid Datto."
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.datto.com/partner-security-update-nov2017; https://www.datto.com/partner-security-update-nov2017
CVE: CVE-2017-16674
Published: 2017-11-09
Description: Datto Windows Agent allows unauthenticated remote command execution via a modified command in conjunction with CVE-2017-16673 exploitation, aka an attack with a malformed primary whitelisted command and a secondary non-whitelisted command. This affects Datto Windows Agent (DWA) 1.0.5.0 and earlier. In other words, an attacker could combine this "primary/secondary" attack with the CVE-2017-16673 "rogue pairing" attack to achieve unauthenticated access to all agent machines running these older DWA versions.
CVSS Score: 8.0 (HIGH)
References: https://www.datto.com/partner-security-update-nov2017; https://www.datto.com/partner-security-update-nov2017
CVE: CVE-2017-16651
Published: 2017-11-09
Description: Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including configuration files, as exploited in the wild in November 2017. The attacker must be able to authenticate at the target system with a valid username/password as the attack requires an active session. The issue is related to file-based attachment plugins and _task=settings&_action=upload-display&_from=timezone requests.
CVSS Score: 7.8 (HIGH)
CWE: CWE-552, CWE-552
References: http://packetstormsecurity.com/files/161226/Roundcube-Webmail-1.2-File-Disclosure.html; http://www.securityfocus.com/bid/101793; https://github.com/roundcube/roundcubemail/issues/6026
CVE: CVE-2015-7501
Published: 2017-11-09
Description: Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://rhn.redhat.com/errata/RHSA-2015-2500.html; http://rhn.redhat.com/errata/RHSA-2015-2501.html; http://rhn.redhat.com/errata/RHSA-2015-2502.html
CVE: CVE-2017-16711
Published: 2017-11-09
Description: The swf_DefineLosslessBitsTagToImage function in lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failure, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) because of extractDefinitions in lib/readers/swf.c and fill_line_bitmap in lib/devices/render.c, as demonstrated by swfrender.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/101797; https://github.com/matthiaskramm/swftools/issues/46; http://www.securityfocus.com/bid/101797
CVE: CVE-2017-16757
Published: 2017-11-09
Description: Hola VPN 1.34 has weak permissions (Everyone:F) under %PROGRAMFILES%, which allows local users to gain privileges via a Trojan horse 7za.exe or hola.exe file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://www.securityfocus.com/bid/101787; https://www.vulnerability-lab.com/get_content.php?id=2062; http://www.securityfocus.com/bid/101787
CVE: CVE-2017-16758
Published: 2017-11-09
Description: Cross-site scripting (XSS) vulnerability in admin/partials/uif-access-token-display.php in the Ultimate Instagram Feed plugin before 1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "access_token" parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/144921/WordPress-Ultimate-Instagram-Feed-1.2-Cross-Site-Scripting.html; https://plugins.trac.wordpress.org/changeset/1758562/ultimate-instagram-feed; https://wpvulndb.com/vulnerabilities/8947
CVE: CVE-2017-16759
Published: 2017-11-09
Description: The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-22
References: https://blog.librenms.org/2017/08/22/librenms-security-fix-during-the-installation-process/; https://github.com/librenms/librenms/commit/7887b2e1c7158204ac69ca43beafce66e4d3a3b4; https://github.com/librenms/librenms/commit/d3094fa6578b29dc34fb5a7d0bd6deab49ecc911
CVE: CVE-2017-11309
Published: 2017-11-10
Description: Buffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers to execute arbitrary code via a long response.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-119
References: http://downloads.avaya.com/css/P8/documents/101044086; http://hyp3rlinx.altervista.org/advisories/AVAYA-OFFICE-IP-%28IPO%29-v9.1.0-10.1-SOFT-CONSOLE-REMOTE-BUFFER-OVERFLOW-0DAY.txt; http://packetstormsecurity.com/files/144883/Avaya-IP-Office-IPO-10.1-Soft-Console-Remote-Buffer-Overflow.html
CVE: CVE-2017-11461
Published: 2017-11-10
Description: NetApp OnCommand Unified Manager for 7-mode (core package) versions prior to 5.2.1 are susceptible to a clickjacking or "UI redress attack" which could be used to cause a user to perform an unintended action in the user interface.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/101778; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; http://www.securityfocus.com/bid/101778
CVE: CVE-2017-12779
Published: 2017-11-10
Description: The Node_GetData function in corec/corec/node/node.c in mkvalidator 0.5.1 allows remote attackers to cause a denial of service (Null pointer dereference and application crash) via a crafted mkv file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2017/Nov/19; https://github.com/Matroska-Org/foundation-source/issues/24
CVE: CVE-2017-12780
Published: 2017-11-10
Description: The ReadData function in ebmlstring.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (invalid free and application crash) via a crafted mkv file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2017/Nov/19; https://github.com/Matroska-Org/foundation-source/issues/24
CVE: CVE-2017-12781
Published: 2017-11-10
Description: The EBML_BufferToID function in ebmlelement.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer dereference and application crash) via a crafted mkv file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2017/Nov/19; https://github.com/Matroska-Org/foundation-source/issues/24
CVE: CVE-2017-12782
Published: 2017-11-10
Description: The ReadData function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2017/Nov/19; https://github.com/Matroska-Org/foundation-source/issues/24
CVE: CVE-2017-12783
Published: 2017-11-10
Description: The ReadDataFloat function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2017/Nov/19; https://github.com/Matroska-Org/foundation-source/issues/24
CVE: CVE-2017-12800
Published: 2017-11-10
Description: The EBML_FindNextElement function in ebmlmain.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer dereference and application crash) via a crafted mkv file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2017/Nov/19; https://github.com/Matroska-Org/foundation-source/issues/24
CVE: CVE-2017-12801
Published: 2017-11-10
Description: The UpdateDataSize function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2017/Nov/19; https://github.com/Matroska-Org/foundation-source/issues/24
CVE: CVE-2017-12802
Published: 2017-11-10
Description: The EBML_IntegerValue function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2017/Nov/19; https://github.com/Matroska-Org/foundation-source/issues/24
CVE: CVE-2017-12803
Published: 2017-11-10
Description: The Node_ValidatePtr function in corec/corec/node/node.c in mkclean 0.8.9 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2017/Nov/19; https://github.com/Matroska-Org/foundation-source/issues/24
CVE: CVE-2017-12969
Published: 2017-11-10
Description: Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to cause a denial of service (heap corruption and crash) or execute arbitrary code via a long string to the open method.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://downloads.avaya.com/css/P8/documents/101044091; http://hyp3rlinx.altervista.org/advisories/AVAYA-OFFICE-IP-%28IPO%29-v9.1.0-10.1-VIEWERCTRL-ACTIVE-X-BUFFER-OVERFLOW-0DAY.txt; http://packetstormsecurity.com/files/144882/Avaya-IP-Office-IPO-10.1-Active-X-Buffer-Overflow.html
CVE: CVE-2017-15638
Published: 2017-11-10
Description: The SuSEfirewall2 package before 3.6.312-2.13.1 in SUSE Linux Enterprise (SLE) Desktop 12 SP2, Server 12 SP2, and Server for Raspberry Pi 12 SP2; before 3.6.312.333-3.10.1 in SLE Desktop 12 SP3 and Server 12 SP3; before 3.6_SVNr208-2.18.3.1 in SLE Server 11 SP4; before 3.6.312-5.9.1 in openSUSE Leap 42.2; and before 3.6.312.333-7.1 in openSUSE Leap 42.3 might allow remote attackers to bypass intended access restrictions on the portmap service by leveraging a missing source net restriction for _rpc_ services.
CVSS Score: 6.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2017-11/msg00014.html; http://lists.opensuse.org/opensuse-updates/2017-11/msg00014.html
CVE: CVE-2017-16249
Published: 2017-11-10
Description: The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until eventually replying (~300 seconds) with an HTTP 500 error. While the server is hung, print jobs over the network are blocked and the web interface is inaccessible. An attacker can continuously send this malformed request to keep the device inaccessible to legitimate traffic.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/144908/Debut-Embedded-httpd-1.20-Denial-Of-Service.html; https://www.exploit-db.com/exploits/43119/; https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-017/?fid=10211
CVE: CVE-2017-16562
Published: 2017-11-10
Description: The UserPro plugin before 4.9.17.1 for WordPress, when used on a site with the "admin" username, allows remote attackers to bypass authentication and obtain administrative access via a "true" value for the up_auto_log parameter in the QUERY_STRING to the default URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://codecanyon.net/item/userpro-user-profiles-with-social-login/5958681?s_rank=9; https://wpvulndb.com/vulnerabilities/8950; https://www.exploit-db.com/exploits/43117/
CVE: CVE-2017-16567
Published: 2017-11-10
Description: Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Favorites" feature. This vulnerability allows remote attackers to inject and permanently store malicious JavaScript payloads, which are executed when users access the affected functionality. Exploitation of this vulnerability can lead to Session Hijacking and Credential Theft, Execution of unauthorized actions on behalf of users, and Exfiltration of sensitive data. This vulnerability presents a potential risk for widespread exploitation in connected IoT environments.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/43122/; https://www.exploit-db.com/exploits/43122/
CVE: CVE-2017-16568
Published: 2017-11-10
Description: Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Radio" functionality. This vulnerability allows attackers to inject malicious JavaScript payloads, which become permanently stored on the server and execute when a user plays the compromised radio stream. Exploitation of this vulnerability can lead to Session hijacking and unauthorized access, Persistent manipulation of web content within the application, and Phishing or malicious redirects to external domains. This vulnerability can be exploited to manipulate media server behavior in enterprise and home network environments.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/43123/; https://www.exploit-db.com/exploits/43123/
CVE: CVE-2017-16633
Published: 2017-11-10
Description: In Joomla! before 3.8.2, a logic bug in com_fields exposed read-only information about a site's custom fields to unauthorized users.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/101702; http://www.securitytracker.com/id/1039757; https://developer.joomla.org/security-centre/[PII_REDACTED]3-core-information-disclosure.html
CVE: CVE-2017-16634
Published: 2017-11-10
Description: In Joomla! before 3.8.2, a bug allowed third parties to bypass a user's 2-factor authentication method.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/101701; http://www.securitytracker.com/id/1039757; https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-2-factor-authentication-bypass
CVE: CVE-2017-16754
Published: 2017-11-10
Description: Bolt before 3.3.6 does not properly restrict access to _profiler routes, related to EventListener/ProfilerListener.php and Provider/EventListenerServiceProvider.php.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732
References: http://www.securityfocus.com/bid/101777; https://github.com/bolt/bolt/commit/aa[PII_REDACTED]5457a2e4abc8b079672935fe0840; https://github.com/bolt/bolt/releases/tag/v3.3.6
CVE: CVE-2017-5201
Published: 2017-11-10
Description: NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allow remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors, a different vulnerability than CVE-2016-3064.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/101776; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; http://www.securityfocus.com/bid/101776
CVE: CVE-2017-9758
Published: 2017-11-10
Description: Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: http://www.securityfocus.com/bid/101700; https://community.rsa.com/community/products/netwitness/blog/2017/10/27/inaudible-subversion-did-your-hi-fi-just-subvert-your-pc; https://www.kb.cert.org/vuls/id/446847
CVE: CVE-2017-16521
Published: 2017-11-10
Description: In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used.
CVSS Score: 9.8 (CRITICAL)
References: https://gitlab.com/inedo/buildmaster/commit/4f4c737fefe44c[PII_REDACTED]f535fb7ef468d721; https://inedo.com/blog/buildmaster-582-released; https://inedo.com/buildmaster/versions#v5.8
CVE: CVE-2017-16760
Published: 2017-11-10
Description: Inedo BuildMaster before 5.8.2 has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://inedo.com/blog/buildmaster-582-released; https://inedo.myjetbrains.com/youtrack/issue/BM-3100; https://inedo.com/blog/buildmaster-582-released
CVE: CVE-2017-16761
Published: 2017-11-10
Description: An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://inedo.com/blog/buildmaster-582-released; https://inedo.com/buildmaster/versions#v5.8; https://inedo.myjetbrains.com/youtrack/issue/BM-3101
CVE: CVE-2017-16762
Published: 2017-11-10
Description: Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/channelcat/sanic/issues/633; https://github.com/channelcat/sanic/releases/tag/0.5.1; https://github.com/channelcat/sanic/issues/633
CVE: CVE-2017-16763
Published: 2017-11-10
Description: An exploitable vulnerability exists in the YAML parsing functionality in config.py in Confire 0.2.0. Due to the user-specific configuration being loaded from "~/.confire.yaml" using the yaml.load function, a YAML parser can execute arbitrary Python commands resulting in command execution. An attacker can insert Python into loaded YAML to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/bbengfort/confire/commit/8cc86a5ec2327e070f1d576d61bbaadf861597ea; https://github.com/bbengfort/confire/issues/24; https://joel-malwarebenchmark.github.io/blog/2017/11/12/cve-2017-16763-configure-loaded-through-confire/
CVE: CVE-2017-16764
Published: 2017-11-10
Description: An exploitable vulnerability exists in the YAML parsing functionality in the read_yaml_file method in io_utils.py in django_make_app 0.1.3. A YAML parser can execute arbitrary Python commands resulting in command execution. An attacker can insert Python into loaded YAML to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/illagrenan/django-make-app/issues/5; https://joel-malwarebenchmark.github.io/blog/2017/11/12/cve-2017-16764-vulnerability-in-django-make-app/; https://github.com/illagrenan/django-make-app/issues/5
CVE: CVE-2017-16765
Published: 2017-11-10
Description: XSS exists on D-Link DWR-933 1.00(WW)B17 devices via cgi-bin/gui.cgi.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/shiham101/d8f98d4ce302c12576f39af2ad2448ca; https://gist.github.com/shiham101/d8f98d4ce302c12576f39af2ad2448ca
CVE: CVE-2017-16780
Published: 2017-11-10
Description: The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-352
References: https://blog.mybb.com/2017/11/07/mybb-1-8-13-released-security-maintenance-release/; https://www.exploit-db.com/exploits/43136/; https://blog.mybb.com/2017/11/07/mybb-1-8-13-released-security-maintenance-release/
CVE: CVE-2017-16781
Published: 2017-11-10
Description: The installer in MyBB before 1.8.13 has XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://blog.mybb.com/2017/11/07/mybb-1-8-13-released-security-maintenance-release/; https://www.exploit-db.com/exploits/43137/; https://blog.mybb.com/2017/11/07/mybb-1-8-13-released-security-maintenance-release/
CVE: CVE-2017-16782
Published: 2017-11-10
Description: In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/home-assistant/home-assistant-polymer/pull/514; https://github.com/home-assistant/home-assistant-polymer/pull/514
CVE: CVE-2017-16783
Published: 2017-11-10
Description: In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://packetstormsecurity.com/files/159690/CMS-Made-Simple-2.1.6-Server-Side-Template-Injection.html; https://www.netsparker.com/web-applications-advisories/ns-17-032-server-side-template-injection-vulnerability-in-cms-made-simple/; http://packetstormsecurity.com/files/159690/CMS-Made-Simple-2.1.6-Server-Side-Template-Injection.html
CVE: CVE-2017-16784
Published: 2017-11-10
Description: In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.netsparker.com/web-applications-advisories/ns-17-031-reflected-xss-vulnerability-in-cms-made-simple/; https://www.netsparker.com/web-applications-advisories/ns-17-031-reflected-xss-vulnerability-in-cms-made-simple/
CVE: CVE-2017-16785
Published: 2017-11-10
Description: Cacti 1.1.27 has reflected XSS via the PATH_INFO to host.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1039774; https://github.com/Cacti/cacti/issues/1071; http://www.securitytracker.com/id/1039774
CVE: CVE-2017-16520
Published: 2017-11-11
Description: Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269
References: https://inedo.com/blog/buildmaster-582-released; https://inedo.com/buildmaster/versions#v5.8; https://inedo.myjetbrains.com/youtrack/issue/BM-3107