deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-6481
Published: 2017-03-05
Description: Multiple Cross-Site Scripting (XSS) issues were discovered in phpipam 1.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages (instructions in app/admin/instructions/preview.php; subnetId in app/admin/powerDNS/refresh-ptr-records.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96573; https://github.com/phpipam/phpipam/issues/992; http://www.securityfocus.com/bid/96573
CVE: CVE-2017-6482
Published: 2017-03-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-6394.  Reason: This candidate is a duplicate of CVE-2017-6394.  Notes: All CVE users should reference CVE-2017-6394 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-6483
Published: 2017-03-05
Description: Multiple Cross-Site Scripting (XSS) issues were discovered in ATutor 2.2.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages (lang_code in themes/*/admin/system_preferences/language_edit.tmpl.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96578; https://github.com/atutor/ATutor/issues/129; http://www.securityfocus.com/bid/96578
CVE: CVE-2017-6484
Published: 2017-03-05
Description: Multiple Cross-Site Scripting (XSS) issues were discovered in INTER-Mediator 5.5. The vulnerabilities exist due to insufficient filtration of user-supplied data (c and cred) passed to the "INTER-Mediator-master/Auth_Support/PasswordReset/resetpassword.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/INTER-Mediator/INTER-Mediator/issues/772; https://github.com/INTER-Mediator/INTER-Mediator/issues/772
CVE: CVE-2017-6485
Published: 2017-03-05
Description: A Cross-Site Scripting (XSS) issue was discovered in php-calendar before 2017-03-03. The vulnerability exists due to insufficient filtration of user-supplied data (errorMsg) passed to the "php-calendar-master/error.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/jasonjoh/php-calendar/issues/4; https://github.com/jasonjoh/php-calendar/issues/4
CVE: CVE-2017-6486
Published: 2017-03-05
Description: A Cross-Site Scripting (XSS) issue was discovered in reasoncms before 4.7.1. The vulnerability exists due to insufficient filtration of user-supplied data (nyroModalSel) passed to the "reasoncms-master/www/nyroModal/demoSent.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/reasoncms/reasoncms/issues/264; https://github.com/reasoncms/reasoncms/releases/tag/v4.7.1; https://github.com/reasoncms/reasoncms/issues/264
CVE: CVE-2017-6487
Published: 2017-03-05
Description: Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (state, element, id, tab, cid) passed to the "EPESI-master/modules/Utils/RecordBrowser/favorites.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96586; https://github.com/Telaxus/EPESI/issues/165; http://www.securityfocus.com/bid/96586
CVE: CVE-2017-6488
Published: 2017-03-05
Description: Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (visible, tab, cid) passed to the EPESI-master/modules/Utils/RecordBrowser/Filters/save_filters.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96955; https://github.com/Telaxus/EPESI/issues/166; http://www.securityfocus.com/bid/96955
CVE: CVE-2017-6489
Published: 2017-03-05
Description: Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (element, state, cat, id, cid) passed to the EPESI-master/modules/Utils/Watchdog/subscribe.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96955; https://github.com/Telaxus/EPESI/issues/169; http://www.securityfocus.com/bid/96955
CVE: CVE-2017-6490
Published: 2017-03-05
Description: Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (cid, value, element, mode, tab, form_name, id) passed to the EPESI-master/modules/Utils/RecordBrowser/grid.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96955; https://github.com/Telaxus/EPESI/issues/167; http://www.securityfocus.com/bid/96955
CVE: CVE-2017-6491
Published: 2017-03-05
Description: Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (tooltip_id, callback, args, cid) passed to the EPESI-master/modules/Utils/Tooltip/req.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96955; https://github.com/Telaxus/EPESI/issues/168; http://www.securityfocus.com/bid/96955
CVE: CVE-2017-6492
Published: 2017-03-05
Description: SQL Injection was discovered in adm_program/modules/dates/dates_function.php in Admidio 3.2.5. The POST parameter dat_cat_id is concatenated into a SQL query without any input validation/sanitization.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/97034; https://github.com/hamkovic/Admidio-3.2.5-SQLi; http://www.securityfocus.com/bid/97034
CVE: CVE-2017-6446
Published: 2017-03-05
Description: XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96575; https://dev.dotclear.org/2.0/changeset/1e44804e7c85b45f42245111c8c0de100a2ff6e3; http://www.securityfocus.com/bid/96575
CVE: CVE-2015-7956
Published: 2017-03-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015.  Notes: none
CVE: CVE-2015-7957
Published: 2017-03-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015.  Notes: none
CVE: CVE-2015-7958
Published: 2017-03-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015.  Notes: none
CVE: CVE-2015-7959
Published: 2017-03-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015.  Notes: none
CVE: CVE-2015-7960
Published: 2017-03-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015.  Notes: none
CVE: CVE-2016-9647
Published: 2017-03-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-9648
Published: 2017-03-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-9649
Published: 2017-03-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2017-6334
Published: 2017-03-06
Description: dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the host_name field of an HTTP POST request, a different vulnerability than CVE-2017-6077.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: http://www.securityfocus.com/bid/96463; https://www.exploit-db.com/exploits/41459/; https://www.exploit-db.com/exploits/41472/
CVE: CVE-2017-6351
Published: 2017-03-06
Description: The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / password. Once the device is set to DEBUG mode, an attacker can connect to the device using the telnet protocol and log into the device with the 'abarco' hardcoded manufacturer account. This account is not documented, nor is the DEBUG feature or the use of telnetd on port tcp/5885.
CVSS Score: 8.1 (HIGH)
CWE: CWE-798
References: http://www.securityfocus.com/bid/96588; http://www.wepresentwifi.com/; https://www.exploit-db.com/exploits/41480/
CVE: CVE-2017-6416
Published: 2017-03-06
Description: An issue was discovered in SysGauge 1.5.18. A buffer overflow vulnerability in SMTP connection verification leads to arbitrary code execution. The attack vector is a crafted SMTP daemon that sends a long 220 (aka "Service ready") string.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96568; https://www.exploit-db.com/exploits/41479/; http://www.securityfocus.com/bid/96568
CVE: CVE-2017-6497
Published: 2017-03-06
Description: An issue was discovered in ImageMagick 6.9.7. A specially crafted psd file could lead to a NULL pointer dereference (thus, a DoS).
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/96594; https://bugs.debian.org/856882; https://github.com/ImageMagick/ImageMagick/commit/7f2dc7a1afc067d0c89f12c82bcdec0445fb1b94
CVE: CVE-2017-6498
Published: 2017-03-06
Description: An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.debian.org/security/2017/dsa-3808; http://www.securityfocus.com/bid/96591; https://bugs.debian.org/856878
CVE: CVE-2017-6499
Published: 2017-03-06
Description: An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak (thus, a DoS).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: http://www.debian.org/security/2017/dsa-3808; http://www.securityfocus.com/bid/96590; https://bugs.debian.org/856880
CVE: CVE-2017-6500
Published: 2017-03-06
Description: An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-3808; http://www.securityfocus.com/bid/96592; https://bugs.debian.org/856879
CVE: CVE-2017-6501
Published: 2017-03-06
Description: An issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file could lead to a NULL pointer dereference.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/96589; https://bugs.debian.org/856881; https://github.com/ImageMagick/ImageMagick/commit/d31fec57e9dfb0516deead2053a856e3c71e9751
CVE: CVE-2017-6502
Published: 2017-03-06
Description: An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore (thus, a DoS).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96763; https://github.com/ImageMagick/ImageMagick/commit/126c7c98ea788241922c30df4a5633ea692cf8df; http://www.securityfocus.com/bid/96763
CVE: CVE-2017-6503
Published: 2017-03-06
Description: WebUI in qBittorrent before 3.3.11 did not escape many values, which could potentially lead to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96758; https://github.com/qbittorrent/qBittorrent/commit/6ca3e4f094da0a0017cb2d483ec1db6176bb0b16; https://www.qbittorrent.org/news.php
CVE: CVE-2017-6504
Published: 2017-03-06
Description: WebUI in qBittorrent before 3.3.11 did not set the X-Frame-Options header, which could potentially lead to clickjacking.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: https://github.com/qbittorrent/qBittorrent/commit/f5ad04766f4abaa78374ff03704316f8ce04627d; https://www.qbittorrent.org/news.php; https://github.com/qbittorrent/qBittorrent/commit/f5ad04766f4abaa78374ff03704316f8ce04627d
CVE: CVE-2016-10244
Published: 2017-03-06
Description: The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/ChangeLog?h=VER-2-7; http://www.debian.org/security/2017/dsa-3839; http://www.securityfocus.com/bid/97405
CVE: CVE-2017-5197
Published: 2017-03-06
Description: There is XSS in SilverStripe CMS before 3.4.4 and 3.5.x before 3.5.2. The attack vector is a page name. An example payload is a crafted JavaScript event handler within a malformed SVG element.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96572; https://www.silverstripe.org/download/security-releases/; http://www.securityfocus.com/bid/96572
CVE: CVE-2017-5633
Published: 2017-03-06
Description: Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow remote attackers to (1) change the admin password, (2) reboot the device, or (3) possibly have unspecified other impact via crafted requests to CGI programs.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: http://seclists.org/fulldisclosure/2017/Feb/70; http://www.securityfocus.com/bid/96475; http://seclists.org/fulldisclosure/2017/Feb/70
CVE: CVE-2017-5999
Published: 2017-03-06
Description: An issue was discovered in sysPass 2.x before 2.1, in which an algorithm was never sufficiently reviewed by cryptographers. The fact that inc/SP/Core/Crypt.class is using the MCRYPT_RIJNDAEL_256() function (the 256-bit block version of Rijndael, not AES) instead of MCRYPT_RIJNDAEL_128 (real AES) could help an attacker to create unknown havoc in the remote system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: http://www.securityfocus.com/bid/96562; https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://github.com/nuxsmin/sysPass/commit/a0e2c485e53b370a7cc6d833e192c3c5bfd70e1f
CVE: CVE-2017-6411
Published: 2017-03-06
Description: Cross Site Request Forgery (CSRF) on D-Link DSL-2730U C1 IN_1.00 devices allows remote attackers to change the DNS or firewall configuration or any password.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/96560; https://www.exploit-db.com/exploits/41478/; http://www.securityfocus.com/bid/96560
CVE: CVE-2017-6508
Published: 2017-03-07
Description: CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-93
References: http://git.savannah.gnu.org/cgit/wget.git/commit/?id=4d729e322fae359a1aefaafec1144764a54e8ad4; http://lists.gnu.org/archive/html/bug-wget/2017-03/msg00018.html; http://www.securityfocus.com/bid/96877
CVE: CVE-2013-5653
Published: 2017-03-07
Description: The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2017-0013.html; http://rhn.redhat.com/errata/RHSA-2017-0014.html; http://www.debian.org/security/2016/dsa-3691
CVE: CVE-2016-10040
Published: 2017-03-07
Description: Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service (application crash) via a xml file with multiple nested open tags.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/12/24/2; http://www.openwall.com/lists/oss-security/2017/01/14/4; http://www.securityfocus.com/bid/95113
CVE: CVE-2016-5315
Published: 2017-03-07
Description: The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-3762; http://www.openwall.com/lists/oss-security/2016/06/15/2; http://www.securityfocus.com/bid/91204
CVE: CVE-2016-6244
Published: 2017-03-07
Description: The sys_thrsigdivert function in kern/kern_sig.c in the OpenBSD kernel 5.9 allows remote attackers to cause a denial of service (panic) via a negative "ts.tv_sec" value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2016/07/17/7; http://www.securityfocus.com/bid/91805; http://www.openwall.com/lists/oss-security/2016/07/17/7
CVE: CVE-2016-7145
Published: 2017-03-07
Description: The m_authenticate function in ircd/m_authenticate.c in nefarious2 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.openwall.com/lists/oss-security/2016/09/05/9; https://github.com/evilnet/nefarious2/commit/f50a84bad996d438e7b31b9e74c32a41e43f8be5; http://www.openwall.com/lists/oss-security/2016/09/05/9
CVE: CVE-2016-9148
Published: 2017-03-07
Description: Cross-site scripting (XSS) vulnerability in CA Service Desk Manager (formerly CA Service Desk) 12.9 and 14.1 allows remote attackers to inject arbitrary web script or HTML via the QBE.EQ.REF_NUM parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/139660/CA-Service-Desk-Manaager-12.9-14.1-Code-Execution.html; http://seclists.org/fulldisclosure/2016/Nov/53; http://www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20161109-02-security-notice-for-ca-service-desk-manager.html
CVE: CVE-2016-9164
Published: 2017-03-07
Description: Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) 8.4 SP1 and earlier and CA Unified Infrastructure Management Snap (formerly CA Nimsoft Monitor Snap) allows remote attackers to read arbitrary files via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/139661/CA-Unified-Infrastructure-Management-Bypass-Traversal-Disclosure.html; http://seclists.org/fulldisclosure/2016/Nov/55; http://www.securityfocus.com/bid/94257
CVE: CVE-2016-9571
Published: 2017-03-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-9606.  Reason: This candidate is a duplicate of CVE-2016-9606.  Reason: this ID was intended for one issue, but was associated with two issues.  Notes: All CVE users should reference CVE-2016-9606 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-3159
Published: 2017-03-07
Description: Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://camel.apache.org/security-advisories.data/CVE-2017-3159.txt.asc?version=1&modificationDate=[PII_REDACTED]00&api=v2; http://www.openwall.com/lists/oss-security/2017/05/22/2; http://www.securityfocus.com/bid/96321
CVE: CVE-2016-4946
Published: 2017-03-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in Cloudera HUE 3.9.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) First name or (2) Last name field in the HUE Users page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf; http://www.securityfocus.com/bid/93881; http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf
CVE: CVE-2016-4947
Published: 2017-03-07
Description: Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to desktop/api/users/autocomplete.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf; http://www.securityfocus.com/bid/93880; http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf
CVE: CVE-2016-4948
Published: 2017-03-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in Cloudera Manager 5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Template Name field when renaming a template; (2) KDC Server host, (3) Kerberos Security Realm, (4) Kerberos Encryption Types, (5) Advanced Configuration Snippet (Safety Valve) for [libdefaults] section of krb5.conf, (6) Advanced Configuration Snippet (Safety Valve) for the Default Realm in krb5.conf, (7) Advanced Configuration Snippet (Safety Valve) for remaining krb5.conf, or (8) Active Directory Account Prefix fields in the Kerberos wizard; or (9) classicWizard parameter to cmf/cloudera-director/redirect.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf; http://www.securityfocus.com/bid/93878; http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf
CVE: CVE-2016-4949
Published: 2017-03-07
Description: Cloudera Manager 5.5 and earlier allows remote attackers to obtain sensitive information via a (1) stderr.log or (2) stdout.log value in the filename parameter to /cmf/process/<process_id>/logs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf; http://www.securityfocus.com/bid/93882; http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf