deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-11064
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overread is observed during processing of ACA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_PASSPOINT_LIST and QCA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_LIST cfg80211 vendor commands in __wlan_hdd_cfg80211_set_passpoint_list and hdd_extscan_passpoint_fill_network_list function respectively. Android ID: A-36815952. References: QC-CR#2054770, QC-CR#2058447, QC-CR#2066628, QC-CR#2087785
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-11067
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the Athdiag procfs entry does not have a proper address sanity check which may potentially lead to the use of an out-of-range pointer offset.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-15217
Published: 2017-10-10
Description: ImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in coders/sgi.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/101231; https://github.com/ImageMagick/ImageMagick/issues/759; https://usn.ubuntu.com/3681-1/
CVE: CVE-2017-15218
Published: 2017-10-10
Description: ImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in coders/png.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/101233; https://github.com/ImageMagick/ImageMagick/issues/760; https://usn.ubuntu.com/3681-1/
CVE: CVE-2017-9683
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing a meta image, an integer overflow can occur, if user-defined image offset and size values are too large.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/101117; https://source.android.com/security/bulletin/2017-10-01; http://www.securityfocus.com/bid/101117
CVE: CVE-2017-9686
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a possible double free/use after free in the SPS driver when debugfs logging is used.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-9687
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, two concurrent threads/processes can write the value of "0" to the debugfs file that controls ipa ipc log which will lead to the double-free in ipc_log_context_destroy(). Another issue is the Use-After-Free which can happen due to the race condition when the ipc log is deallocated via the debugfs call during a log print.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-9697
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory while reading command registration table entries in diag_dbgfs_read_table.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-9706
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an array out-of-bounds access can potentially occur in a display driver.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-9714
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an out of bound memory access may happen in limCheckRxRSNIeMatch in case incorrect RSNIE is received from the client in assoc request.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101117; https://source.android.com/security/bulletin/2017-10-01; http://www.securityfocus.com/bid/101117
CVE: CVE-2017-9715
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a vendor command, a buffer over-read can occur.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-9717
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while parsing Netlink attributes, a buffer overread can occur.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-1503
Published: 2017-10-10
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 129578.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg22006815; http://www.securityfocus.com/bid/101234; http://www.securitytracker.com/id/1039521
CVE: CVE-2017-15189
Published: 2017-10-10
Description: In Wireshark 2.4.0 to 2.4.1, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by adding decrements.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: http://www.securityfocus.com/bid/101228; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14080; https://code.wireshark.org/review/23663
CVE: CVE-2017-15190
Published: 2017-10-10
Description: In Wireshark 2.4.0 to 2.4.1, the RTSP dissector could crash. This was addressed in epan/dissectors/packet-rtsp.c by correcting the scope of a variable.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/101229; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14077; https://code.wireshark.org/review/23635
CVE: CVE-2017-15191
Published: 2017-10-10
Description: In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash. This was addressed in epan/dissectors/packet-dmp.c by validating a string length.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://www.securityfocus.com/bid/101227; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14068; https://code.wireshark.org/review/23591
CVE: CVE-2017-15192
Published: 2017-10-10
Description: In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by considering a case where not all of the BTATT packets have the same encapsulation level.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/101235; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14049; https://code.wireshark.org/review/23470
CVE: CVE-2017-15193
Published: 2017-10-10
Description: In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-mbim.c by changing the memory-allocation approach.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/101240; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14056; https://code.wireshark.org/review/23537
CVE: CVE-2017-15219
Published: 2017-10-10
Description: The dotCMS 4.1.1 application is vulnerable to Stored Cross-Site Scripting (XSS) affecting a vanity-urls Title field, a containers Description field, and a templates Description field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/dotCMS%20%3E%204.1.1%20-%20Stored%20XSS; https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/dotCMS%20%3E%204.1.1%20-%20Stored%20XSS
CVE: CVE-2017-1538
Published: 2017-10-10
Description: IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive information from an undocumented URL. IBM X-Force ID: 130735.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22008385; http://www.securityfocus.com/bid/101198; https://exchange.xforce.ibmcloud.com/vulnerabilities/130735
CVE: CVE-2017-8994
Published: 2017-10-10
Description: A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the execution of code remotely.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/100588; https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03767en_us; https://www.tenable.com/security/research/tra-2017-25
CVE: CVE-2017-15225
Published: 2017-10-10
Description: _bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory leak) via a crafted ELF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: https://sourceware.org/bugzilla/show_bug.cgi?id=22212; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=b55ec8b676ed05d93ee49d6c79ae0403616c4fb0; https://sourceware.org/bugzilla/show_bug.cgi?id=22212
CVE: CVE-2017-15226
Published: 2017-10-10
Description: Zyxel NBG6716 V1.00(AAKG.9)C0 devices allow command injection in the ozkerz component because beginIndex and endIndex are used directly in a popen call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.secarma.co.uk/labs/sohopelessly-broken-0-day-strategy/; https://www.secarma.co.uk/labs/sohopelessly-broken-0-day-strategy/
CVE: CVE-2017-5700
Published: 2017-10-11
Description: Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to bypass Administrator and User passwords via access to password storage.
CVSS Score: 8.4 (HIGH)
CWE: CWE-522
References: http://www.securityfocus.com/bid/101241; https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-fr; http://www.securityfocus.com/bid/101241
CVE: CVE-2017-5701
Published: 2017-10-11
Description: Insecure platform configuration in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows an attacker with physical presence to run arbitrary code via unauthorized firmware modification during BIOS Recovery.
CVSS Score: 7.1 (HIGH)
References: http://www.securityfocus.com/bid/101257; https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-fr; http://www.securityfocus.com/bid/101257
CVE: CVE-2017-5721
Published: 2017-10-11
Description: Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to execute arbitrary code via manipulation of memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-fr; https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-fr
CVE: CVE-2017-5722
Published: 2017-10-11
Description: Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows attackers with local or physical access to bypass enforcement of integrity protections via manipulation of firmware storage.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269
References: http://www.securityfocus.com/bid/101236; https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00084&languageid=en-fr; http://www.securityfocus.com/bid/101236
CVE: CVE-2017-15188
Published: 2017-10-11
Description: A persistent (stored) XSS vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the hosts array parameter to module/admin_device/index.php.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_device_index%20stored%20XSS; https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_device_index%20stored%20XSS
CVE: CVE-2017-15194
Published: 2017-10-11
Description: include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1039569; https://github.com/Cacti/cacti/commit/93f661d8adcfa6618b11522cdab30e97bada33fd; https://github.com/Cacti/cacti/issues/1010
CVE: CVE-2017-15195
Published: 2017-10-11
Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can edit swimlanes of a private project of another user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://openwall.com/lists/oss-security/2017/10/04/9; https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef[PII_REDACTED]fc2d4be79f0; https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE: CVE-2017-15196
Published: 2017-10-11
Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can remove columns from a private project of another user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://openwall.com/lists/oss-security/2017/10/04/9; https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef[PII_REDACTED]fc2d4be79f0; https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE: CVE-2017-15197
Published: 2017-10-11
Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new category to a private project of another user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://openwall.com/lists/oss-security/2017/10/04/9; https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef[PII_REDACTED]fc2d4be79f0; https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE: CVE-2017-15198
Published: 2017-10-11
Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can edit a category of a private project of another user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://openwall.com/lists/oss-security/2017/10/04/9; https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef[PII_REDACTED]fc2d4be79f0; https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE: CVE-2017-15199
Published: 2017-10-11
Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can edit metadata of a private project of another user, as demonstrated by Name, Email, Identifier, and Description.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://openwall.com/lists/oss-security/2017/10/04/9; https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef[PII_REDACTED]fc2d4be79f0; https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE: CVE-2017-15200
Published: 2017-10-11
Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of another user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://openwall.com/lists/oss-security/2017/10/04/9; https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef[PII_REDACTED]fc2d4be79f0; https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE: CVE-2017-15201
Published: 2017-10-11
Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://openwall.com/lists/oss-security/2017/10/04/9; https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef[PII_REDACTED]fc2d4be79f0; https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE: CVE-2017-15202
Published: 2017-10-11
Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://openwall.com/lists/oss-security/2017/10/04/9; https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef[PII_REDACTED]fc2d4be79f0; https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE: CVE-2017-15203
Published: 2017-10-11
Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories from a private project of another user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://openwall.com/lists/oss-security/2017/10/04/9; https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef[PII_REDACTED]fc2d4be79f0; https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE: CVE-2017-15204
Published: 2017-10-11
Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can add automatic actions to a private project of another user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://openwall.com/lists/oss-security/2017/10/04/9; https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef[PII_REDACTED]fc2d4be79f0; https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE: CVE-2017-15205
Published: 2017-10-11
Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project of another user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://openwall.com/lists/oss-security/2017/10/04/9; https://github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1; https://kanboard.net/news/version-1.0.47
CVE: CVE-2017-15206
Published: 2017-10-11
Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link to a private project of another user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://openwall.com/lists/oss-security/2017/10/04/9; https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef[PII_REDACTED]fc2d4be79f0; https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE: CVE-2017-15207
Published: 2017-10-11
Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a private project of another user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://openwall.com/lists/oss-security/2017/10/04/9; https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef[PII_REDACTED]fc2d4be79f0; https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE: CVE-2017-15208
Published: 2017-10-11
Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can remove automatic actions from a private project of another user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://openwall.com/lists/oss-security/2017/10/04/9; https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef[PII_REDACTED]fc2d4be79f0; https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE: CVE-2017-15209
Published: 2017-10-11
Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://openwall.com/lists/oss-security/2017/10/04/9; https://github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1; https://kanboard.net/news/version-1.0.47
CVE: CVE-2017-15210
Published: 2017-10-11
Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can see thumbnails of pictures from a private project of another user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://openwall.com/lists/oss-security/2017/10/04/9; https://github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1; https://kanboard.net/news/version-1.0.47
CVE: CVE-2017-15211
Published: 2017-10-11
Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link to a private project of another user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://openwall.com/lists/oss-security/2017/10/04/9; https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef[PII_REDACTED]fc2d4be79f0; https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE: CVE-2017-15212
Published: 2017-10-11
Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can at least see the names of tags of a private project of another user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://openwall.com/lists/oss-security/2017/10/04/9; https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef[PII_REDACTED]fc2d4be79f0; https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE: CVE-2017-15213
Published: 2017-10-11
Description: Stored XSS vulnerability in Flyspray before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges, via the real_name or email_address field to themes/CleanFS/templates/common.editallusers.tpl.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2017/10/07/1; https://github.com/Flyspray/flyspray/commit/754ec5d04348ef7ecb8cb02ade976dc412b031f8; https://github.com/Flyspray/flyspray/releases/tag/v1.0-rc6
CVE: CVE-2017-15214
Published: 2017-10-11
Description: Stored XSS vulnerability in Flyspray 1.0-rc4 before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges and also to execute JavaScript against other users (including unauthenticated users), via the name, title, or id parameter to plugins/dokuwiki/lib/plugins/changelinks/syntax.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2017/10/07/1; https://github.com/Flyspray/flyspray/commit/00cfae5661124f9d67ac6733db61b2bfee34dccc; https://github.com/Flyspray/flyspray/releases/tag/v1.0-rc6
CVE: CVE-2017-15215
Published: 2017-10-11
Description: Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to inject JavaScript via the searchtags parameter to index.php. If the victim is an administrator, an attacker can (for example) take over the admin session or change global settings or add/delete links. It is also possible to execute JavaScript against unauthenticated users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2017/10/07/2; https://github.com/shaarli/Shaarli/pull/987; https://github.com/shaarli/Shaarli/releases/tag/v0.9.2
CVE: CVE-2017-15232
Published: 2017-10-11
Description: libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/libjpeg-turbo/libjpeg-turbo/pull/182; https://github.com/mozilla/mozjpeg/issues/268; https://usn.ubuntu.com/3706-1/