deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-4922
Published: 2017-08-01
Description: VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure issue due to the service startup script using world writable directories as temporary storage for critical information. Successful exploitation of this issue may allow unprivileged host users to access certain critical information when the service gets restarted.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100012; http://www.securitytracker.com/id/1039013; https://www.vmware.com/security/advisories/VMSA-2017-0013.html
CVE: CVE-2017-4923
Published: 2017-08-01
Description: VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-based backup feature.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200, CWE-522
References: http://www.securityfocus.com/bid/99997; http://www.securitytracker.com/id/1039013; https://www.vmware.com/security/advisories/VMSA-2017-0013.html
CVE: CVE-2017-1500
Published: 2017-08-01
Description: A Reflected Cross Site Scripting (XSS) vulnerability exists in the authorization function exposed by RESTful Web Api of IBM Worklight Framework 6.1, 6.2, 6.3, 7.0, 7.1, and 8.0. The vulnerable parameter is "scope"; if you set as its value a "realm" not defined in authenticationConfig.xml, you get an HTTP 403 Forbidden response and the value will be reflected in the body of the HTTP response. By setting it to arbitrary JavaScript code it is possible to modify the flow of the authorization function, potentially leading to credential disclosure within a trusted session.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg2C1000316; https://exchange.xforce.ibmcloud.com/vulnerabilities/129404; http://www-01.ibm.com/support/docview.wss?uid=swg2C1000316
CVE: CVE-2017-8571
Published: 2017-08-01
Description: Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a security feature bypass vulnerability due to the way that it handles input, aka "Microsoft Office Outlook Security Feature Bypass Vulnerability".
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99452; http://www.securitytracker.com/id/1039012; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8571
CVE: CVE-2017-8572
Published: 2017-08-01
Description: Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows an information disclosure vulnerability due to the way that it discloses the contents of its memory, aka "Microsoft Office Outlook Information Disclosure Vulnerability".
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/99453; http://www.securitytracker.com/id/1039010; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8572
CVE: CVE-2017-8663
Published: 2017-08-01
Description: Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a remote code execution vulnerability due to the way Microsoft Outlook parses specially crafted email messages, aka "Microsoft Office Outlook Memory Corruption Vulnerability"
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100004; http://www.securitytracker.com/id/1039011; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8663
CVE: CVE-2017-12138
Published: 2017-08-02
Description: XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.securityfocus.com/bid/100091; https://github.com/XOOPS/XoopsCore25/issues/523; http://www.securityfocus.com/bid/100091
CVE: CVE-2017-12139
Published: 2017-08-02
Description: XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/100094; https://github.com/XOOPS/XoopsCore25/issues/524; http://www.securityfocus.com/bid/100094
CVE: CVE-2017-12140
Published: 2017-08-02
Description: The ReadDCMImage function in coders\dcm.c in ImageMagick 7.0.6-1 has an integer signedness error leading to excessive memory consumption via a crafted DCM file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-681
References: http://www.securityfocus.com/bid/100096; https://github.com/ImageMagick/ImageMagick/issues/533; https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
CVE: CVE-2017-12141
Published: 2017-08-02
Description: In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/Yeraze/ytnef/issues/50; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/; https://somevulnsofadlab.blogspot.com/2017/07/ytnefheap-buffer-overflow-in.html
CVE: CVE-2017-12142
Published: 2017-08-02
Description: In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/Yeraze/ytnef/issues/49; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/; https://somevulnsofadlab.blogspot.com/2017/07/ytnefinvalid-memory-read-in-swapdword.html
CVE: CVE-2017-12143
Published: 2017-08-02
Description: In libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_info in lqt_quicktime.c, which allows attackers to cause a denial of service via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://somevulnsofadlab.blogspot.com/2017/07/libquicktimeallocation-failed-in.html; https://sourceforge.net/p/libquicktime/mailman/message/35888850/; https://somevulnsofadlab.blogspot.com/2017/07/libquicktimeallocation-failed-in.html
CVE: CVE-2017-12144
Published: 2017-08-02
Description: In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: http://www.securityfocus.com/bid/100098; https://github.com/Yeraze/ytnef/issues/51; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE: CVE-2017-12145
Published: 2017-08-02
Description: In libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_ftyp in ftyp.c, which allows attackers to cause a denial of service via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://somevulnsofadlab.blogspot.com/2017/07/libquicktimeallocation-failed-in_30.html; https://sourceforge.net/p/libquicktime/mailman/message/35888849/; https://somevulnsofadlab.blogspot.com/2017/07/libquicktimeallocation-failed-in_30.html
CVE: CVE-2017-12199
Published: 2017-08-02
Description: The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp-admin/admin-ajax.php POST actions: catalogue_update_order list-item, video_update_order video-item, image_update_order list-item, tag_group_update_order list_item, category_products_update_order category-product-item, custom_fields_update_order field-item, categories_update_order category-item, subcategories_update_order subcategory-item, and tags_update_order tag-list-item.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/kevins1022/cve/blob/master/wordpress-product-catalog.md; https://github.com/kevins1022/cve/blob/master/wordpress-product-catalog.md
CVE: CVE-2017-12200
Published: 2017-08-02
Description: The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has XSS in the Add Product Manually component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kevins1022/cve/blob/master/wordpress-product-catalog.md; https://github.com/kevins1022/cve/blob/master/wordpress-product-catalog.md
CVE: CVE-2017-11364
Published: 2017-08-02
Description: The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the target application by leveraging Certificate Transparency logs.
CVSS Score: 8.8 (HIGH)
CWE: CWE-295
References: http://www.securitytracker.com/id/1039015; https://developer.joomla.org/security-centre/[PII_REDACTED]4-core-installer-lack-of-ownership-verification.html; https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Hanno-Boeck-Abusing-Certificate-Transparency-Logs.pdf
CVE: CVE-2017-11494
Published: 2017-08-02
Description: SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/archive/1/540946/100/0/threaded; http://www.securityfocus.com/bid/100067; https://www.exploit-db.com/exploits/42408/
CVE: CVE-2016-7812
Published: 2017-08-02
Description: The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to SSL v3.0, which may result in the attacker to eavesdrop on an encrypted communication.
CVSS Score: 3.1 (LOW)
CWE: CWE-310
References: http://www.securityfocus.com/bid/94829; https://jvn.jp/en/vu/JVNVU92900492/; http://www.securityfocus.com/bid/94829
CVE: CVE-2016-7844
Published: 2017-08-02
Description: GigaCC OFFICE ver.2.3 and earlier allows remote attackers to execute arbitrary OS commands via specially crafted mail template.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-78
References: http://www.securityfocus.com/bid/95680; https://asp.gigacc.com/user/publicurl/view.do%3Bjsessionid=28438FE401A764B7CEDB3664AB2AC67C.ap04?job=view&direct=true&TI=9l1sf6jfp0bafkv9bh2e5fs43k&ID=9qbnmp2qetc5u9vc8crqbl804s; https://jvn.jp/en/vu/JVNVU91417143/index.html
CVE: CVE-2016-7845
Published: 2017-08-02
Description: GigaCC OFFICE ver.2.3 and earlier allows remote attackers to upload arbitrary files as a user profile image, which may be exploited for unauthorized file sharing.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95680; https://asp.gigacc.com/user/publicurl/view.do%3Bjsessionid=28438FE401A764B7CEDB3664AB2AC67C.ap04?job=view&direct=true&TI=9l1sf6jfp0bafkv9bh2e5fs43k&ID=9qbnmp2qetc5u9vc8crqbl804s; https://jvn.jp/en/vu/JVNVU91417143/index.html
CVE: CVE-2017-2138
Published: 2017-08-02
Description: Cross-site request forgery (CSRF) vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and v3) allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://tips.cs-cart.jp/fix-csrf-20170406.html; https://jvn.jp/en/jp/JVN87770873/index.html; http://tips.cs-cart.jp/fix-csrf-20170406.html
CVE: CVE-2017-2278
Published: 2017-08-02
Description: The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://www.iid.co.jp/information/170714.html; https://jvn.jp/en/jp/JVN24238648/index.html; http://www.iid.co.jp/information/170714.html
CVE: CVE-2017-2279
Published: 2017-08-02
Description: Untrusted search path vulnerability in Tween Ver1.6.6.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://jvn.jp/en/jp/JVN17523256/index.html; https://jvn.jp/en/jp/JVN17523256/index.html
CVE: CVE-2017-2280
Published: 2017-08-02
Description: WN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: http://www.iodata.jp/support/information/2017/wn-ax1167gr/; https://jvn.jp/en/jp/JVN01312667/index.html; http://www.iodata.jp/support/information/2017/wn-ax1167gr/
CVE: CVE-2017-2281
Published: 2017-08-02
Description: WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.iodata.jp/support/information/2017/wn-ax1167gr/; https://jvn.jp/en/jp/JVN01312667/index.html; http://www.iodata.jp/support/information/2017/wn-ax1167gr/
CVE: CVE-2017-2282
Published: 2017-08-02
Description: Buffer overflow in WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary commands via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.iodata.jp/support/information/2017/wn-ax1167gr/; https://jvn.jp/en/jp/JVN01312667/index.html; http://www.iodata.jp/support/information/2017/wn-ax1167gr/
CVE: CVE-2017-2283
Published: 2017-08-02
Description: WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the device.
CVSS Score: 8.0 (HIGH)
CWE: CWE-798
References: http://www.iodata.jp/support/information/2017/wn-g300r3_2/; https://jvn.jp/en/jp/JVN51410509/index.html; http://www.iodata.jp/support/information/2017/wn-g300r3_2/
CVE: CVE-2017-2284
Published: 2017-08-02
Description: Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN92921024/index.html; https://plugins.trac.wordpress.org/changeset/1697216/#file3; https://wordpress.org/plugins/popup-maker/#developers
CVE: CVE-2017-2285
Published: 2017-08-02
Description: Cross-site scripting vulnerability in Simple Custom CSS and JS prior to version 3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://jvn.jp/en/jp/JVN31459091/index.html; https://plugins.trac.wordpress.org/changeset/1695440/#file6; https://wordpress.org/plugins/custom-css-js/#developers
CVE: CVE-2017-2286
Published: 2017-08-02
Description: Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S), NFC Port Software Version 5.3.6.7 and earlier (for RC-S320, RC-S310/J1C, RC-S310/ED4C), PC/SC Activator for Type B Ver.1.2.1.0 and earlier, SFCard Viewer 2 Ver.2.5.0.0 and earlier, NFC Net Installer Ver.1.1.0.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://jvn.jp/en/jp/JVN16136413/index.html; https://jvn.jp/en/jp/JVN16136413/index.html
CVE: CVE-2017-2287
Published: 2017-08-02
Description: Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://jvn.jp/en/jp/JVN33797604/index.html; https://jvn.jp/en/jp/JVN33797604/index.html
CVE: CVE-2017-2288
Published: 2017-08-02
Description: Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://jvn.jp/en/jp/JVN74554973/index.html; https://jvn.jp/en/jp/JVN74554973/index.html
CVE: CVE-2016-9981
Published: 2017-08-02
Description: IBM AppScan Enterprise Edition 9.0 contains an unspecified vulnerability that could allow an attacker to hijack a valid user's session. IBM X-Force ID: 120257
CVSS Score: 8.1 (HIGH)
CWE: CWE-384
References: http://www.ibm.com/support/docview.wss?uid=swg22006430; http://www.securitytracker.com/id/1039073; https://exchange.xforce.ibmcloud.com/vulnerabilities/120257
CVE: CVE-2017-1118
Published: 2017-08-02
Description: IBM WebSphere MQ Internet Pass-Thru 2.0 and 2.1 could allow n attacker to cause the MQIPT to stop responding due to an incorrectly configured security policy. IBM X-Force ID: 121156.
CVSS Score: 7.5 (HIGH)
References: http://www.ibm.com/support/docview.wss?uid=swg22006580; http://www.securityfocus.com/bid/100021; https://exchange.xforce.ibmcloud.com/vulnerabilities/121156
CVE: CVE-2017-1383
Published: 2017-08-02
Description: IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 127155.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: http://www.ibm.com/support/docview.wss?uid=swg22005803; https://exchange.xforce.ibmcloud.com/vulnerabilities/127155; http://www.ibm.com/support/docview.wss?uid=swg22005803
CVE: CVE-2017-1467
Published: 2017-08-02
Description: A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escalation or unauthorized access. IBM X-Force ID: 128466.
CVSS Score: 8.1 (HIGH)
References: http://www.ibm.com/support/docview.wss?uid=swg22006063; http://www.securityfocus.com/bid/100103; https://exchange.xforce.ibmcloud.com/vulnerabilities/128466
CVE: CVE-2017-1468
Published: 2017-08-02
Description: IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-force ID: 128467.
CVSS Score: 7.8 (HIGH)
References: http://www.ibm.com/support/docview.wss?uid=swg22006067; http://www.securityfocus.com/bid/100099; https://exchange.xforce.ibmcloud.com/vulnerabilities/128467
CVE: CVE-2017-1495
Published: 2017-08-02
Description: IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensitive information including access credentials. IBM X-Force ID: 128693.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-119
References: http://www.ibm.com/support/docview.wss?uid=swg22006068; https://exchange.xforce.ibmcloud.com/vulnerabilities/128693; http://www.ibm.com/support/docview.wss?uid=swg22006068
CVE: CVE-2012-5030
Published: 2017-08-02
Description: Cisco IOS before 15.2(4)S6 does not initialize an unspecified variable, which might allow remote authenticated users to cause a denial of service (CPU consumption, watchdog timeout, crash) by walking specific SNMP objects.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: https://www.cisco.com/c/en/us/td/docs/ios/15_2s/release/notes/15_2s_rel_notes/15_2s_caveats_15_2_4s.html; https://www.cisco.com/c/en/us/td/docs/ios/15_2s/release/notes/15_2s_rel_notes/15_2s_caveats_15_2_4s.html
CVE: CVE-2014-8903
Published: 2017-08-02
Description: IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5iFix10 and 6.0.5 before 6.0.5.6 allows remote authenticated users to load arbitrary Java classes via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://www-01.ibm.com/support/docview.wss?uid=swg21700098; http://www.securityfocus.com/bid/73947; http://www-01.ibm.com/support/docview.wss?uid=swg21700098
CVE: CVE-2015-0194
Published: 2017-08-02
Description: XML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IT06733; http://www-01.ibm.com/support/docview.wss?uid=swg21699482; http://www.securityfocus.com/bid/73401
CVE: CVE-2015-0839
Published: 2017-08-02
Description: The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the-middle attackers to execute arbitrary code by leveraging use of a short GPG key id from a keyserver to verify print plugin downloads.
CVSS Score: 8.1 (HIGH)
CWE: CWE-320
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162442.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162880.html; http://www.openwall.com/lists/oss-security/2015/05/29/2
CVE: CVE-2015-1174
Published: 2017-08-02
Description: Session fixation vulnerability in Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 and earlier allows remote attackers to hijack web sessions via a session id.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384
References: http://packetstormsecurity.com/files/133296/UNIT4TETA-TETA-WEB-22.62.3.4-Session-Fixation.html; http://packetstormsecurity.com/files/133296/UNIT4TETA-TETA-WEB-22.62.3.4-Session-Fixation.html
CVE: CVE-2015-2560
Published: 2017-08-02
Description: Manage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of users with the Administrator role via an addOrModifyUser operation to servlets/DCOperationsServlet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://packetstormsecurity.com/files/131062/Manage-Engine-Desktop-Central-9-Unauthorized-Administrative-Password-Reset.html; http://www.securityfocus.com/archive/1/535004/100/1400/threaded; http://www.securityfocus.com/bid/73380
CVE: CVE-2015-2690
Published: 2017-08-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in views/add-license-form.php in the Digium Addons module (digiumaddoninstaller) before 2.11.0.7 for FreePBX allow remote attackers to inject arbitrary web script or HTML via the (1) add_license_key, (2) add_license_first_name, (3) add_license_last_name, (4) add_license_company, (5) add_license_address1, (6) add_license_address2, (7) add_license_city, (8) add_license_state, (9) add_license_post_code, (10) add_license_country, (11) add_license_phone, or (12) add_license_email parameter in an add-license-form page to admin/config.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://git.freepbx.org/projects/FREEPBX/repos/digiumaddoninstaller/commits/2aad006024b74c9ff53943d3e68527a3dffac855; http://packetstormsecurity.com/files/131591/FreePBX-12.0.43-Cross-Site-Scripting.html; http://www.securityfocus.com/archive/1/535333/100/1100/threaded
CVE: CVE-2015-3642
Published: 2017-08-02
Description: The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices with firmware 9.x before 9.3 Build 68.5, 10.0 through Build 78.6, 10.1 before Build 130.13, 10.1.e before Build 130.1302.e, 10.5 before Build 55.8, and 10.5.e before Build 55.8007.e makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://support.citrix.com/article/CTX200378; http://support.citrix.com/article/CTX200378
CVE: CVE-2015-5203
Published: 2017-08-02
Description: Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-415
References: http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html; http://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html; http://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html