deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-8392
Published: 2017-05-01
Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 8 because of missing a check to determine whether symbols are NULL in the _bfd_dwarf2_find_nearest_line function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://security.gentoo.org/glsa/201709-02; https://sourceware.org/bugzilla/show_bug.cgi?id=21409; https://security.gentoo.org/glsa/201709-02
CVE: CVE-2017-8393
Published: 2017-05-01
Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a global buffer over-read error because of an assumption made by code that runs for objcopy and strip, that SHT_REL/SHR_RELA sections are always named starting with a .rel/.rela prefix. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy and strip, to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://security.gentoo.org/glsa/201709-02; https://sourceware.org/bugzilla/show_bug.cgi?id=21412; https://security.gentoo.org/glsa/201709-02
CVE: CVE-2017-8394
Published: 2017-05-01
Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 due to NULL pointer dereferencing of _bfd_elf_large_com_section. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://security.gentoo.org/glsa/201709-02; https://sourceware.org/bugzilla/show_bug.cgi?id=21414; https://security.gentoo.org/glsa/201709-02
CVE: CVE-2017-8395
Published: 2017-05-01
Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid write of size 8 because of missing a malloc() return-value check to see if memory had actually been allocated in the _bfd_generic_get_section_contents function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://security.gentoo.org/glsa/201709-02; https://sourceware.org/bugzilla/show_bug.cgi?id=21431; https://security.gentoo.org/glsa/201709-02
CVE: CVE-2017-8396
Published: 2017-05-01
Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 because the existing reloc offset range tests didn't catch small negative offsets less than the size of the reloc field. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://security.gentoo.org/glsa/201709-02; https://sourceware.org/bugzilla/show_bug.cgi?id=21432; https://security.gentoo.org/glsa/201709-02
CVE: CVE-2017-8397
Published: 2017-05-01
Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 and an invalid write of size 1 during processing of a corrupt binary containing reloc(s) with negative addresses. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://security.gentoo.org/glsa/201709-02; https://sourceware.org/bugzilla/show_bug.cgi?id=21434; https://security.gentoo.org/glsa/201709-02
CVE: CVE-2017-8398
Published: 2017-05-01
Description: dwarf.c in GNU Binutils 2.28 is vulnerable to an invalid read of size 1 during dumping of debug information from a corrupt binary. This vulnerability causes programs that conduct an analysis of binary programs, such as objdump and readelf, to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://security.gentoo.org/glsa/201709-02; https://sourceware.org/bugzilla/show_bug.cgi?id=21438; https://security.gentoo.org/glsa/201709-02
CVE: CVE-2017-8399
Published: 2017-05-01
Description: PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2_match.c, related to a "pattern with very many captures."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98315; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=783; https://security.gentoo.org/glsa/201710-09
CVE: CVE-2017-6564
Published: 2017-05-01
Description: On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains the lowest privileges, can post to the idSourceFileName parameter found within the /download directory. This ability allows for an attacker to download sensitive system files from the host machine such as databases which contain information that can aid in further attacks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.u235.io/single-post/2017/05/01/Penetrating-Fuel-Management-Systems; https://gist.github.com/Stick-U235/b187931f828e92866d09b9bdeb956ca2; http://www.u235.io/single-post/2017/05/01/Penetrating-Fuel-Management-Systems
CVE: CVE-2017-6565
Published: 2017-05-01
Description: On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the roleDiag user, which can be obtained by exploiting CVE-2013-7247, has the ability to upload files to the server hosting the web service. As no sanitization checks are in place, an attacker can upload a malicious payload.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: http://www.u235.io/single-post/2017/05/01/Penetrating-Fuel-Management-Systems; https://gist.github.com/Stick-U235/b187931f828e92866d09b9bdeb956ca2; http://www.u235.io/single-post/2017/05/01/Penetrating-Fuel-Management-Systems
CVE: CVE-2017-8400
Published: 2017-05-01
Description: In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function png_load() in lib/png.c:755. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/matthiaskramm/swftools/issues/13; https://github.com/matthiaskramm/swftools/issues/13
CVE: CVE-2017-8401
Published: 2017-05-01
Description: In SWFTools 0.9.2, an out-of-bounds read of heap data can occur in the function png_load() in lib/png.c:724. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/matthiaskramm/swftools/issues/14; https://github.com/matthiaskramm/swftools/issues/14
CVE: CVE-2017-8403
Published: 2017-05-01
Description: 360fly 4K cameras allow unauthenticated Wi-Fi password changes and complete access with REST by using the Bluetooth Low Energy pairing procedure, which is available at any time and does not require a password. This affects firmware 2.1.4. Exploitation can use the 360fly Android or iOS application, or the BlueZ gatttool program.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://www.slideshare.net/fuguet/bluediot-when-a-mature-and-immature-technology-mixes-becomes-an-idiot-situation-75529672; https://www.slideshare.net/fuguet/bluediot-when-a-mature-and-immature-technology-mixes-becomes-an-idiot-situation-75529672
CVE: CVE-2015-8257
Published: 2017-05-02
Description: The devtools.sh script in AXIS network cameras allows remote authenticated users to execute arbitrary commands via shell metacharacters in the app parameter to (1) app_license.shtml, (2) app_license_custom.shtml, (3) app_index.shtml, or (4) app_params.shtml.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://packetstormsecurity.com/files/138083/AXIS-Authenticated-Remote-Command-Execution.html; http://www.securityfocus.com/bid/92159; https://www.exploit-db.com/exploits/40171/
CVE: CVE-2016-10243
Published: 2017-05-02
Description: TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.debian.org/security/2017/dsa-3803; http://www.openwall.com/lists/oss-security/2017/03/05/1; http://www.securityfocus.com/bid/96593
CVE: CVE-2016-4442
Published: 2017-05-02
Description: The rack-mini-profiler gem before 0.10.1 for Ruby allows remote attackers to obtain sensitive information about allocated strings and objects by leveraging incorrect ordering of security checks.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2016/06/10/2; https://github.com/MiniProfiler/rack-mini-profiler/blob/v0.10.1/CHANGELOG.md; https://github.com/MiniProfiler/rack-mini-profiler/commit/4273771d65f1a7411e3ef[PII_REDACTED]d0e2d257c
CVE: CVE-2016-4467
Published: 2017-05-02
Description: The C client and C-based client bindings in the Apache Qpid Proton library before 0.13.1 on Windows do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate when using the SChannel-based security layer, which allows man-in-the-middle attackers to spoof servers via an arbitrary valid certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://www.openwall.com/lists/oss-security/2016/07/15/3; http://www.securityfocus.com/bid/91788; http://www.securitytracker.com/id/1036316
CVE: CVE-2016-5006
Published: 2017-05-02
Description: The Cloud Controller in Cloud Foundry before 239 logs user-provided service objects at creation, which allows attackers to obtain sensitive user credential information via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://pivotal.io/security/cve-2016-5006; https://www.cloudfoundry.org/CVE-2016-5006/; https://pivotal.io/security/cve-2016-5006
CVE: CVE-2016-5063
Published: 2017-05-02
Description: The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote attackers to bypass authorization checks and make an RPC call via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-285
References: http://www.securityfocus.com/bid/93948; https://docs.bmc.com/docs/display/bsa87/Notification+of+Windows+RSCD+Agent+vulnerability+in+BMC+Server+Automation+CVE-2016-5063; https://www.exploit-db.com/exploits/43902/
CVE: CVE-2016-5810
Published: 2017-05-02
Description: upAdminPg.asp in Advantech WebAccess before 8.1_20160519 allows remote authenticated administrators to obtain sensitive password information via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://www.zerodayinitiative.com/advisories/ZDI-16-429; https://ics-cert.us-cert.gov/advisories/ICSA-16-173-01; http://www.zerodayinitiative.com/advisories/ZDI-16-429
CVE: CVE-2017-5689
Published: 2017-05-02
Description: An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/98269; http://www.securitytracker.com/id/1038385
CVE: CVE-2017-6551
Published: 2017-05-02
Description: Pexip Infinity before 14.2 allows remote attackers to cause a denial of service (service restart) or execute arbitrary code via vectors related to Conferencing Nodes.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/97954; https://www.pexip.com/sites/pexip/files/Pexip_Security_Bulletin_2017-04-10.pdf; http://www.securityfocus.com/bid/97954
CVE: CVE-2017-7440
Published: 2017-05-02
Description: Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and Mac 9.2.0 through 9.2.2, when e-mail preview is enabled, allows remote attackers to conduct clickjacking attacks via a crafted e-mail message.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1021
References: https://www.gfi.com/support/products/Clickjacking-vulnerability-in-Kerio-Connect-8-and-9-CVE-2017-7440; https://www.gfi.com/support/products/Clickjacking-vulnerability-in-Kerio-Connect-8-and-9-CVE-2017-7440
CVE: CVE-2017-7483
Published: 2017-05-02
Description: Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to an out of bounds read.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2017/05/01/15; http://www.openwall.com/lists/oss-security/2017/05/01/18; https://lists.debian.org/debian-lts-announce/2021/06/msg00012.html
CVE: CVE-2017-8086
Published: 2017-05-02
Description: Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=4ffcdef4277a91af15a3c09f7d16af072c29f3f2; http://www.openwall.com/lists/oss-security/2017/04/25/5; http://www.securityfocus.com/bid/98012
CVE: CVE-2017-8112
Published: 2017-05-02
Description: hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: http://www.openwall.com/lists/oss-security/2017/04/26/5; http://www.securityfocus.com/bid/98015; https://bugzilla.redhat.com/show_bug.cgi?id=1445621
CVE: CVE-2017-8418
Published: 2017-05-02
Description: RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.
CVSS Score: 3.3 (LOW)
CWE: CWE-668
References: http://www.openwall.com/lists/oss-security/2017/05/01/14; https://github.com/bbatsov/rubocop/issues/4336; http://www.openwall.com/lists/oss-security/2017/05/01/14
CVE: CVE-2017-8419
Published: 2017-05-02
Description: LAME through 3.99.5 relies on the signed integer data type for values in a WAV or AIFF header, which allows remote attackers to cause a denial of service (stack-based buffer overflow or heap-based buffer overflow) or possibly have unspecified other impact via a crafted file, as demonstrated by mishandling of num_channels.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://sourceforge.net/p/lame/bugs/458/; https://sourceforge.net/p/lame/bugs/458/
CVE: CVE-2017-7216
Published: 2017-05-02
Description: The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to obtain sensitive information via unspecified request parameters.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97590; https://security.paloaltonetworks.com/CVE-2017-7216; http://www.securityfocus.com/bid/97590
CVE: CVE-2017-7476
Published: 2017-05-02
Description: Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the save_abbr function in time_rz.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://git.savannah.gnu.org/gitweb/?p=gnulib.git%3Ba=commit%3Bh=94e[PII_REDACTED]5ff59dd8ce2a0b56a4b566965a4; http://www.securityfocus.com/bid/98098; https://bugzilla.redhat.com/show_bug.cgi?id=1444774
CVE: CVE-2017-8421
Published: 2017-05-02
Description: The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a memory leak vulnerability which can cause memory exhaustion in objdump via a crafted PE file. Additional validation in dump_relocs_in_section in objdump.c can resolve this.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: https://security.gentoo.org/glsa/201709-02; https://sourceware.org/bugzilla/show_bug.cgi?id=21440; https://security.gentoo.org/glsa/201709-02
CVE: CVE-2014-9940
Published: 2017-05-02
Description: The regulator_ena_gpio_free function in drivers/regulator/core.c in the Linux kernel before 3.19 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted application.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=60a2362f769cf549dc466134efe71c8bf9fbaaba; http://www.debian.org/security/2017/dsa-3945; http://www.securityfocus.com/bid/98195
CVE: CVE-2015-9004
Published: 2017-05-02
Description: kernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows local users to gain privileges via a crafted application, related to the perf_pmu_register and perf_event_open functions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c3c87e770458aa004bd7ed3f29945ff436fd6511; http://www.securityfocus.com/bid/98166; https://github.com/torvalds/linux/commit/c3c87e770458aa004bd7ed3f29945ff436fd6511
CVE: CVE-2017-0331
Published: 2017-05-02
Description: An elevation of privilege vulnerability in the NVIDIA video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel 3.10. Android ID: A-34113000. References: N-CVE-2017-0331.
CVSS Score: 7.8 (HIGH)
CWE: CWE-367
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/98150; https://source.android.com/security/bulletin/2017-05-01
CVE: CVE-2017-7428
Published: 2017-05-03
Description: NetIQ iManager 3.x before 3.0.3.1 has an issue in the renegotiation of connection parameters with Tomcat.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://bugzilla.novell.com/show_bug.cgi?id=1029431; https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~; https://www.netiq.com/support/kb/doc.php?id=7016795
CVE: CVE-2017-7430
Published: 2017-05-03
Description: Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a persistent XSS vulnerability in Framework.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.novell.com/show_bug.cgi?id=1024959; https://bugzilla.novell.com/show_bug.cgi?id=1030691; https://dl.netiq.com/Download?buildid=24FxpmqdThE~
CVE: CVE-2017-7431
Published: 2017-05-03
Description: Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://bugzilla.novell.com/show_bug.cgi?id=1024963; https://bugzilla.novell.com/show_bug.cgi?id=1030692; https://dl.netiq.com/Download?buildid=24FxpmqdThE~
CVE: CVE-2017-7432
Published: 2017-05-03
Description: Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability.
CVSS Score: 9.8 (CRITICAL)
References: https://bugzilla.novell.com/show_bug.cgi?id=1027619; https://dl.netiq.com/Download?buildid=24FxpmqdThE~; https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~
CVE: CVE-2017-8453
Published: 2017-05-03
Description: Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/98317; http://www.zerodayinitiative.com/advisories/ZDI-17-134/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2017-8454
Published: 2017-05-03
Description: Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/98320; http://www.zerodayinitiative.com/advisories/ZDI-17-135/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2017-8455
Published: 2017-05-03
Description: Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/98319; http://www.zerodayinitiative.com/advisories/ZDI-17-140/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2015-9057
Published: 2017-05-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject arbitrary web script or HTML via multiple parameters, related to /users/index.htm, /quarantine/spam/manage.htm, /quarantine/spam/whitelist.htm, /queues/mail/index/, /system/ssh.htm, /queues/mail/?domain=, and /quarantine/virus/manage.htm.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-024/?fid=7431; https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-024/?fid=7431
CVE: CVE-2015-9058
Published: 2017-05-03
Description: Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-024/?fid=7431; https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-024/?fid=7431
CVE: CVE-2016-10367
Published: 2017-05-03
Description: In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch), an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request utilizing a simple URL encoding bypass, %252f instead of /.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-016/?fid=8341; https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-016/?fid=8341
CVE: CVE-2016-10368
Published: 2017-05-03
Description: Open redirect vulnerability in Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the back parameter to the /login URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-016/?fid=8341; https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-016/?fid=8341
CVE: CVE-2017-8458
Published: 2017-05-03
Description: Brave 0.12.4 has a URI Obfuscation issue in which a string such as https://safe.example.com@unsafe.example.com/ is displayed without a clear UI indication that it is not a resource on the safe.example.com web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-74
References: https://github.com/brave/browser-laptop/issues/4748; https://hackerone.com/reports/175529; https://github.com/brave/browser-laptop/issues/4748