deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-14620
Published: 2017-09-30
Description: SmarterStats Version 11.3.6347 will Render the Referer Field of HTTP Logfiles from URL /Data/Reports/ReferringURLsWithQueries resulting in Stored Cross Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://xss.cx/cve/2017/14620/smarterstats.v11-3-6347.html; https://www.exploit-db.com/exploits/42923/; http://xss.cx/cve/2017/14620/smarterstats.v11-3-6347.html
CVE: CVE-2017-14702
Published: 2017-09-30
Description: ERS Data System 1.8.1.0 allows remote attackers to execute arbitrary code, related to "com.branaghgroup.ecers.update.UpdateRequest" object deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/wshepherd0010/advisories/blob/master/CVE-2017-14702.md; https://www.exploit-db.com/exploits/42952/; https://github.com/wshepherd0010/advisories/blob/master/CVE-2017-14702.md
CVE: CVE-2017-14738
Published: 2017-09-30
Description: FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module (under the search function).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://feedback.filerun.com/topics/189-critical-security-update-available/; https://blog.spentera.com/2017/09/29/blind-sql-injection-vulnerability-in-filerun-2017-09-18/; https://www.exploit-db.com/exploits/42922/
CVE: CVE-2017-14920
Published: 2017-09-30
Description: Stored XSS vulnerability in eGroupware Community Edition before 16.1.20170922 allows an unauthenticated remote attacker to inject JavaScript via the User-Agent HTTP header, which is mishandled during rendering by the application administrator.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2017/09/28/12; https://github.com/EGroupware/egroupware/commit/0ececf8c78f1c3f9ba15465f53a682dd7d89529f; http://openwall.com/lists/oss-security/2017/09/28/12
CVE: CVE-2017-14921
Published: 2017-09-30
Description: Stored XSS vulnerability via IMG element at "Filename" of Filemanager in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2017/09/28/11; https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/146c5aaafd826c1c8990333c393bff6f64c90786; https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/24e39e1e930097b8793a03b8864d3c484ede546b
CVE: CVE-2017-14922
Published: 2017-09-30
Description: Stored XSS vulnerability via IMG element at "History" of Profile, Calendar, Tasks, and CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2017/09/28/11; https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/146c5aaafd826c1c8990333c393bff6f64c90786; https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/24e39e1e930097b8793a03b8864d3c484ede546b
CVE: CVE-2017-14923
Published: 2017-09-30
Description: Stored XSS vulnerability via IMG element at "Leadname" of CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2017/09/28/11; https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/146c5aaafd826c1c8990333c393bff6f64c90786; https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/24e39e1e930097b8793a03b8864d3c484ede546b
CVE: CVE-2017-14924
Published: 2017-09-30
Description: Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with an IMG element, related to tiki-assignuser.php.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: http://openwall.com/lists/oss-security/2017/09/28/13; https://sourceforge.net/p/tikiwiki/code/63829; https://tiki.org/article449-Security-and-bug-fix-updates-Tiki-17-1-Tiki-16-3-15-5-and-Tiki-12-12-released
CVE: CVE-2017-14925
Published: 2017-09-30
Description: Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS allows an authenticated user to edit global permissions if an administrator opens a wiki page with an IMG element, related to tiki-objectpermissions.php. For example, an attacker could assign administrator privileges to every unauthenticated user of the site.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: http://openwall.com/lists/oss-security/2017/09/28/13; https://sourceforge.net/p/tikiwiki/code/63872; https://tiki.org/article449-Security-and-bug-fix-updates-Tiki-17-1-Tiki-16-3-15-5-and-Tiki-12-12-released
CVE: CVE-2017-14926
Published: 2017-09-30
Description: In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Content::Content in Annot.cc via a crafted PDF document.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://bugs.freedesktop.org/show_bug.cgi?id=102601; https://lists.debian.org/debian-lts-announce/2020/11/msg00014.html; https://bugs.freedesktop.org/show_bug.cgi?id=102601
CVE: CVE-2017-14927
Published: 2017-09-30
Description: In Poppler 0.59.0, a NULL Pointer Dereference exists in the SplashOutputDev::type3D0() function in SplashOutputDev.cc via a crafted PDF document.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://bugs.freedesktop.org/show_bug.cgi?id=102604; https://bugs.freedesktop.org/show_bug.cgi?id=102604
CVE: CVE-2017-14928
Published: 2017-09-30
Description: In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Configuration::Configuration in Annot.cc via a crafted PDF document.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://bugs.freedesktop.org/show_bug.cgi?id=102607; https://lists.debian.org/debian-lts-announce/2020/11/msg00014.html; https://bugs.freedesktop.org/show_bug.cgi?id=102607
CVE: CVE-2017-14929
Published: 2017-09-30
Description: In Poppler 0.59.0, memory corruption occurs in a call to Object::dictLookup() in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opFill, Gfx::doPatternFill, Gfx::doTilingPatternFill and Gfx::drawForm calls (aka a Gfx.cc infinite loop), a different vulnerability than CVE-2017-14519.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://bugs.freedesktop.org/show_bug.cgi?id=102969; https://www.debian.org/security/2018/dsa-4097; https://bugs.freedesktop.org/show_bug.cgi?id=102969
CVE: CVE-2017-14930
Published: 2017-09-30
Description: Memory leak in decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: https://sourceware.org/bugzilla/show_bug.cgi?id=22191; https://sourceware.org/bugzilla/show_bug.cgi?id=22191
CVE: CVE-2017-14931
Published: 2017-09-30
Description: ExifImageFile::readDQT in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted JPEG file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2017/Sep/34; https://github.com/skysider/openexif_vulnerabilities; http://seclists.org/fulldisclosure/2017/Sep/34
CVE: CVE-2017-14932
Published: 2017-09-30
Description: decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://sourceware.org/bugzilla/show_bug.cgi?id=22204; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=e338894dc2e603683bed2172e8e9f25b29051005; https://sourceware.org/bugzilla/show_bug.cgi?id=22204
CVE: CVE-2017-14933
Published: 2017-09-30
Description: read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://www.securityfocus.com/bid/101203; https://security.gentoo.org/glsa/201811-17; https://sourceware.org/bugzilla/show_bug.cgi?id=22210
CVE: CVE-2017-14934
Published: 2017-09-30
Description: process_debug_info in dwarf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file that contains a negative size value in a CU structure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-131, CWE-835
References: http://www.securityfocus.com/bid/101204; https://sourceware.org/bugzilla/show_bug.cgi?id=22219; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=[PII_REDACTED]b2521af979f1e5c4a89bfb90fba0b
CVE: CVE-2017-14935
Published: 2017-09-30
Description: Pulse Secure Pulse One On-Premise 2.0.1649 and below does not properly validate requests, which allows remote users to query and obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40971; http://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40971
CVE: CVE-2017-14938
Published: 2017-09-30
Description: _bfd_elf_slurp_version_tables in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: http://www.securityfocus.com/bid/101212; https://blogs.gentoo.org/ago/2017/09/26/binutils-memory-allocation-failure-in-_bfd_elf_slurp_version_tables-elf-c/; https://sourceware.org/bugzilla/show_bug.cgi?id=22166
CVE: CVE-2017-14939
Published: 2017-09-30
Description: decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to read_1_byte.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101216; https://blogs.gentoo.org/ago/2017/09/26/binutils-heap-based-buffer-overflow-in-read_1_byte-dwarf2-c/; https://sourceware.org/bugzilla/show_bug.cgi?id=22169
CVE: CVE-2017-14940
Published: 2017-09-30
Description: scan_unit_for_symbols in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://blogs.gentoo.org/ago/2017/09/26/binutils-null-pointer-dereference-in-scan_unit_for_symbols-dwarf2-c/; https://sourceware.org/bugzilla/show_bug.cgi?id=22166; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=0d76029f92182c3682d8be2c833d45bc9a2068fe
CVE: CVE-2017-14942
Published: 2017-09-30
Description: Intelbras WRN 150 devices allow remote attackers to read the configuration file, and consequently bypass authentication, via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-552
References: http://whiteboyz.xyz/authentication-bypass-intelbras-wrn-150.html; https://www.exploit-db.com/exploits/42916/; http://whiteboyz.xyz/authentication-bypass-intelbras-wrn-150.html
CVE: CVE-2017-14944
Published: 2017-09-30
Description: Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://inedo.com/blog/proget-4714-released; http://inedo.com/blog/proget-4714-released
CVE: CVE-2017-14945
Published: 2017-09-30
Description: Artifex GSView 6.0 Beta on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Possible Stack Corruption starting at KERNELBASE!RaiseException+0x[PII_REDACTED]000068."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://bugs.ghostscript.com/show_bug.cgi?id=698537; https://bugs.ghostscript.com/show_bug.cgi?id=698537
CVE: CVE-2017-14946
Published: 2017-09-30
Description: Artifex GSView 6.0 Beta on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Address controls Branch Selection starting at mupdfnet64!mIncrementalSaveFile+0x[PII_REDACTED]00344e."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://bugs.ghostscript.com/show_bug.cgi?id=698538; https://bugs.ghostscript.com/show_bug.cgi?id=698538
CVE: CVE-2017-14947
Published: 2017-09-30
Description: Artifex GSView 6.0 Beta on Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Block Data Move starting at mupdfnet64!mIncrementalSaveFile+0x[PII_REDACTED]193359."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://bugs.ghostscript.com/show_bug.cgi?id=698551; https://bugs.ghostscript.com/show_bug.cgi?id=698551
CVE: CVE-2017-9794
Published: 2017-09-30
Description: When a cluster is operating in secure mode, a user with read privileges for specific data regions can use the gfsh command line utility to execute queries. In Apache Geode before 1.2.1, the query results may contain data from another user's concurrently executing gfsh query, potentially revealing data that the user is not authorized to view.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://mail-archives.apache.org/mod_mbox/geode-user/201709.mbox/%3cCAEwge-FqzrT+deCkNkM-EQZuKfg-XuqY4cGjFiqxoKBVduY1Zw%40mail.gmail.com%3e; http://mail-archives.apache.org/mod_mbox/geode-user/201709.mbox/%3cCAEwge-FqzrT+deCkNkM-EQZuKfg-XuqY4cGjFiqxoKBVduY1Zw%40mail.gmail.com%3e
CVE: CVE-2017-14797
Published: 2017-10-01
Description: Lack of Transport Encryption in the public API in Philips Hue Bridge BSB002 SW[PII_REDACTED] allows remote attackers to read API keys (and consequently bypass the pushlink protection mechanism, and obtain complete control of the connected accessories) by leveraging the ability to sniff HTTP traffic on the local intranet network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: https://www.tiferrei.com/philips-we-need-to-talk; https://www.tiferrei.com/philips-we-need-to-talk
CVE: CVE-2017-14941
Published: 2017-10-02
Description: Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/binary1985/VulnerabilityDisclosure/blob/master/JasperSoft%20JasperReports%20-%204.7%20-%20CVE-2017-14941; https://github.com/binary1985/VulnerabilityDisclosure/blob/master/JasperSoft%20JasperReports%20-%204.7%20-%20CVE-2017-14941
CVE: CVE-2017-14954
Published: 2017-10-02
Description: The waitid implementation in kernel/exit.c in the Linux kernel through 4.13.4 accesses rusage data structures in unintended cases, which allows local users to obtain sensitive information, and bypass the KASLR protection mechanism, via a crafted system call.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6c85501f2fabcfc4fc6ed976543d252c4eaf4be9; https://github.com/torvalds/linux/commit/6c85501f2fabcfc4fc6ed976543d252c4eaf4be9; https://grsecurity.net/~spender/exploits/wait_for_kaslr_to_be_effective.c
CVE: CVE-2017-14955
Published: 2017-10-02
Description: Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote attackers to obtain sensitive user information by reading a GUI crash report.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200, CWE-362
References: http://mathias-kettner.com/check_mk_werks.php?edition_id=raw&branch=1.2.8; https://mathias-kettner.de/check_mk_werks.php?werk_id=5208&HTML=yes; https://www.exploit-db.com/exploits/43021/
CVE: CVE-2017-14957
Published: 2017-10-02
Description: Stored XSS vulnerability via a comment in inc/conv.php in BlogoText before 3.7.6 allows an unauthenticated attacker to inject JavaScript. If the victim is an administrator, an attacker can (for example) change global settings or create/delete posts. It is also possible to execute JavaScript against unauthenticated users of the blog.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2017/10/01/1; https://github.com/BlogoText/blogotext/issues/318; https://github.com/BlogoText/blogotext/pull/320/commits/1a283cc8ad2cda37e0a6aff8f4558b98ecbfd9c2
CVE: CVE-2017-14958
Published: 2017-10-02
Description: lib.php in PivotX 2.3.11 does not properly block uploads of dangerous file types by admin users, which allows remote PHP code execution via an upload of a .php file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://sourceforge.net/p/pivot-weblog/code/4490/; https://sourceforge.net/p/pivot-weblog/code/4490/
CVE: CVE-2017-14970
Published: 2017-10-02
Description: In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow group mod messages. NOTE: the vendor disputes the relevance of this report, stating "it can only be triggered by an OpenFlow controller, but OpenFlow controllers have much more direct and powerful ways to force Open vSwitch to allocate memory, such as by inserting flows into the flow table."
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-772
References: https://mail.openvswitch.org/pipermail/ovs-dev/2017-September/339085.html; https://mail.openvswitch.org/pipermail/ovs-dev/2017-September/339086.html; https://mail.openvswitch.org/pipermail/ovs-dev/2017-September/339085.html
CVE: CVE-2017-14974
Published: 2017-10-02
Description: The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain canonicalization step, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://sourceware.org/bugzilla/show_bug.cgi?id=22163; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=e70c19e3a4c26e9c1ebf0c9170d105039b56d7cf; https://sourceware.org/bugzilla/show_bug.cgi?id=22163
CVE: CVE-2017-14975
Published: 2017-10-02
Description: The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability because a data structure is not initialized, which allows an attacker to launch a denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://bugzilla.freedesktop.org/show_bug.cgi?id=102653; https://lists.debian.org/debian-lts-announce/2017/11/msg00023.html; https://www.debian.org/security/2018/dsa-4079
CVE: CVE-2017-14976
Published: 2017-10-02
Description: The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a heap-based buffer over-read vulnerability if an out-of-bounds font dictionary index is encountered, which allows an attacker to launch a denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://bugzilla.freedesktop.org/show_bug.cgi?id=102724; https://cgit.freedesktop.org/poppler/poppler/commit/?id=da63c35549e8852a410946ab016a3f25ac701bdf; https://lists.debian.org/debian-lts-announce/2017/11/msg00023.html
CVE: CVE-2017-14977
Published: 2017-10-02
Description: The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table pointer, which allows an attacker to launch a denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://bugs.freedesktop.org/show_bug.cgi?id=103045; https://lists.debian.org/debian-lts-announce/2017/11/msg00023.html; https://www.debian.org/security/2018/dsa-4079
CVE: CVE-2014-0043
Published: 2017-10-03
Description: In Apache Wicket 1.5.10 or 6.13.0, by issuing requests to special urls handled by Wicket, it is possible to check for the existence of particular classes in the classpath and thus check whether a third party library with a known security vulnerability is in use.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://lists.apache.org/thread.html/d95e962f2f059a09f5abf7086c3f4ed22d2ae2c21499d0de95d4435d%[PII_REDACTED]87%40%3Cannounce.wicket.apache.org%3E; https://lists.apache.org/thread.html/d95e962f2f059a09f5abf7086c3f4ed22d2ae2c21499d0de95d4435d%[PII_REDACTED]87%40%3Cannounce.wicket.apache.org%3E
CVE: CVE-2015-3321
Published: 2017-10-03
Description: Services and files in Lenovo Fingerprint Manager before 8.01.42 have incorrect ACLs, which allows local users to invalidate local checks and gain privileges via standard filesystem operations.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-264
References: https://support.lenovo.com/us/en/product_security/lenovo_fpr; https://support.lenovo.com/us/en/product_security/lenovo_fpr
CVE: CVE-2015-6576
Published: 2017-10-03
Description: Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo web interface to execute arbitrary Java code via an unspecified resource.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.com/files/134065/Bamboo-Java-Code-Execution.html; http://www.securityfocus.com/archive/1/536747/100/0/threaded; https://confluence.atlassian.com/x/Hw7RLg
CVE: CVE-2015-6971
Published: 2017-10-03
Description: Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows local users to submit commands to the System Update service (SUService.exe) and gain privileges by launching signed Lenovo executables.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://support.lenovo.com/us/en/product_security/lsu_privilege; https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-018/?fid=7172; https://support.lenovo.com/us/en/product_security/lsu_privilege
CVE: CVE-2015-7357
Published: 2017-10-03
Description: Cross-site scripting (XSS) vulnerability in the uDesign (aka U-Design) theme 2.3.0 before 2.7.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via a fragment identifier, as demonstrated by #<svg onload=alert(1)>.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/133867/WordPress-U-Design-Theme-2.7.9-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2015/Oct/25; http://themeforest.net/item/udesign-responsive-wordpress-theme/253220
CVE: CVE-2015-7358
Published: 2017-10-03
Description: The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, does not properly validate drive letter symbolic links, which allows local users to mount an encrypted volume over an existing drive letter and gain privileges via an entry in the /GLOBAL?? directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/133878/Truecrypt-7-Derived-Code-Windows-Drive-Letter-Symbolic-Link-Creation-Privilege-Escalation.html; http://www.openwall.com/lists/oss-security/2015/09/22/7; http://www.openwall.com/lists/oss-security/2015/09/24/3