deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-17081
Published: 2017-11-30
Description: The gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service (integer signedness error and out-of-array read) via a crafted MPEG file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3516#c1; https://github.com/FFmpeg/FFmpeg/commit/27f8d386829689c346ff0cef00d3af57b9fb8903; https://github.com/FFmpeg/FFmpeg/commit/58cf31cee7a456057f337b3102a03206d833d5e8
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-30
Description: The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside the THP implementation. touch_pmd() can be reached by get_user_pages(). In such case, the pmd will become dirty. This scenario breaks the new can_follow_write_pmd()'s logic - pmd can become dirty without going through a COW cycle. This bug is not as severe as the original "Dirty cow" because an ext4 file (or any other regular file) cannot be mapped using THP. Nevertheless, it does allow us to overwrite read-only huge pages. For example, the zero huge page and sealed shmem files can be overwritten (since their mapping can be populated using THP). Note that after the first write page-fault to the zero page, it will be replaced with a new fresh (and zeroed) thp.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/102032; http://www.securitytracker.com/id/1040020; https://access.redhat.com/errata/RHSA-2018:0180
CVE: CVE-2017-11281
Published: 2017-12-01
Description: Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100710; http://www.securitytracker.com/id/1039314; https://access.redhat.com/errata/RHSA-2017:2702
CVE: CVE-2017-11282
Published: 2017-12-01
Description: Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/144332/Adobe-Flash-appleToRange-Out-Of-Bounds-Read.html; http://www.securityfocus.com/bid/100716; http://www.securitytracker.com/id/1039314
CVE: CVE-2017-11283
Published: 2017-12-01
Description: Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.securityfocus.com/bid/100708; http://www.securitytracker.com/id/1039321; https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html
CVE: CVE-2017-11284
Published: 2017-12-01
Description: Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.securityfocus.com/bid/100708; http://www.securitytracker.com/id/1039321; https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html
CVE: CVE-2017-11285
Published: 2017-12-01
Description: Adobe ColdFusion has a cross-site scripting (XSS) vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/100711; http://www.securitytracker.com/id/1039321; https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html
CVE: CVE-2017-11286
Published: 2017-12-01
Description: Adobe ColdFusion has an XML external entity (XXE) injection vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: http://www.securityfocus.com/bid/100715; http://www.securitytracker.com/id/1039321; https://helpx.adobe.com/security/products/coldfusion/apsb17-30.html
CVE: CVE-2017-15607
Published: 2017-12-01
Description: Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors involving '/' characters or initial '.' characters, aka OT-181.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://inedo.com/blog/otter-174-released; https://inedo.myjetbrains.com/youtrack/issue/OT-181; https://inedo.com/blog/otter-174-released
CVE: CVE-2017-17083
Published: 2017-12-01
Description: In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c by ensuring that write operations are bounded by the beginning of a buffer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: http://www.securityfocus.com/bid/102029; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14249; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=79768d63d14fbce6bf7fb4d4a1c86be0c5205eb3
CVE: CVE-2017-17084
Published: 2017-12-01
Description: In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash. This was addressed in epan/dissectors/packet-iwarp-mpa.c by validating a ULPDU length.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: http://www.securityfocus.com/bid/102030; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14236; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8502fe94ef9e[PII_REDACTED]07e1a351c5e3f5c634
CVE: CVE-2017-17085
Published: 2017-12-01
Description: In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissectors/packet-cipsafety.c by validating the packet length.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: http://www.securityfocus.com/bid/102071; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14250; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f5939debe96e3c3953c6020818f1fbb80eb83ce8
CVE: CVE-2017-17086
Published: 2017-12-01
Description: Indeo Otter through 1.7.4 mishandles a "</script>" substring in an initial DP payload, which allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact, as demonstrated by the Plan Editor.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://inedo.myjetbrains.com/youtrack/issue/ILIB-11; https://inedo.myjetbrains.com/youtrack/issue/ILIB-11
CVE: CVE-2017-17087
Published: 2017-12-01
Description: fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership, as demonstrated by /etc/shadow owned by root:shadow mode 0640, but /etc/.shadow.swp owned by root:users mode 0640, a different vulnerability than CVE-2[PII_REDACTED].
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-668
References: http://openwall.com/lists/oss-security/2017/11/27/2; http://security.cucumberlinux.com/security/details.php?id=166; https://github.com/vim/vim/commit/5a73e0ca54c77e067c3b12ea6f35e3e8681e8cf8
CVE: CVE-2017-3104
Published: 2017-12-01
Description: Adobe RoboHelp has a cross-site scripting (XSS) vulnerability. This affects versions before RH12.0.4.460 and RH2017 before RH2017.0.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/100707; http://www.securitytracker.com/id/1039319; https://helpx.adobe.com/security/products/robohelp/apsb17-25.html
CVE: CVE-2017-3105
Published: 2017-12-01
Description: Adobe RoboHelp has an Open Redirect vulnerability. This affects versions before RH12.0.4.460 and RH2017 before RH2017.0.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.securityfocus.com/bid/100709; http://www.securitytracker.com/id/1039319; https://helpx.adobe.com/security/products/robohelp/apsb17-25.html
CVE: CVE-2017-10861
Published: 2017-12-01
Description: Directory traversal vulnerability in QND Advance/Standard allows an attacker to read arbitrary files via a specially crafted command.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: http://www.qualitysoft.com/qnd_vulnerabilities; https://jvn.jp/en/vu/JVNVU94198685/index.html; http://www.qualitysoft.com/qnd_vulnerabilities
CVE: CVE-2017-10874
Published: 2017-12-01
Description: PWR-Q200 does not use random values for source ports of DNS query packets, which allows remote attackers to conduct DNS cache poisoning attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-330
References: http://web116.jp/shop/hikari_p/q200/q200_00.html; https://jvn.jp/en/jp/JVN73141967/index.html; http://web116.jp/shop/hikari_p/q200/q200_00.html
CVE: CVE-2017-10891
Published: 2017-12-01
Description: Untrusted search path vulnerability in Media Go version 3.2.0.191 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://jvn.jp/en/jp/JVN08517069/index.html; https://jvn.jp/en/jp/JVN08517069/index.html
CVE: CVE-2017-10892
Published: 2017-12-01
Description: Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://jvn.jp/en/jp/JVN08517069/index.html; https://jvn.jp/en/jp/JVN08517069/index.html
CVE: CVE-2017-10894
Published: 2017-12-01
Description: StreamRelay.NET.exe ver2.14.0.7 and earlier allows remote attackers to cause a denial of service via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://jvn.jp/en/jp/JVN71291160/index.html; https://jvn.jp/en/jp/JVN71291160/index.html
CVE: CVE-2017-10895
Published: 2017-12-01
Description: sDNSProxy.exe ver1.1.0.0 and earlier allows remote attackers to cause a denial of service via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://jvn.jp/en/jp/JVN71291160/index.html; https://jvn.jp/en/jp/JVN71291160/index.html
CVE: CVE-2017-10898
Published: 2017-12-01
Description: SQL injection vulnerability in the A-Member and A-Member for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://jvn.jp/en/jp/JVN78501037/index.html; https://jvn.jp/en/jp/JVN78501037/index.html
CVE: CVE-2017-10899
Published: 2017-12-01
Description: SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://jvn.jp/en/jp/JVN78501037/index.html; https://jvn.jp/en/jp/JVN78501037/index.html
CVE: CVE-2017-10900
Published: 2017-12-01
Description: PTW-WMS1 firmware version 2.000.012 allows remote attackers to bypass access restrictions to obtain or delete data on the disk via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
References: https://jvn.jp/en/jp/JVN98295787/index.html; https://jvn.jp/en/jp/JVN98295787/index.html
CVE: CVE-2017-10901
Published: 2017-12-01
Description: Buffer overflow in PTW-WMS1 firmware version 2.000.012 allows remote attackers to conduct denial-of-service attacks via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://jvn.jp/en/jp/JVN98295787/index.html; https://jvn.jp/en/jp/JVN98295787/index.html
CVE: CVE-2017-10902
Published: 2017-12-01
Description: PTW-WMS1 firmware version 2.000.012 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://jvn.jp/en/jp/JVN98295787/index.html; https://jvn.jp/en/jp/JVN98295787/index.html
CVE: CVE-2017-10903
Published: 2017-12-01
Description: Improper authentication issue in PTW-WMS1 firmware version 2.000.012 allows remote attackers to log in to the device with root privileges and conduct arbitrary operations via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://jvn.jp/en/jp/JVN98295787/index.html; https://jvn.jp/en/jp/JVN98295787/index.html
CVE: CVE-2017-15701
Published: 2017-12-01
Description: In Apache Qpid Broker-J versions 6.1.0 through 6.1.4 (inclusive) the broker does not properly enforce a maximum frame size in AMQP 1.0 frames. A remote unauthenticated attacker could exploit this to cause the broker to exhaust all available memory and eventually terminate. Older AMQP protocols are not affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/102041; https://issues.apache.org/jira/browse/QPID-7947; https://lists.apache.org/thread.html/4054e1c90993f337eeea24a312841c0661653e673c0ff8e2cd9520fe%40%3Cdev.qpid.apache.org%3E
CVE: CVE-2017-15702
Published: 2017-12-01
Description: In Apache Qpid Broker-J 0.18 through 0.32, if the broker is configured with different authentication providers on different ports one of which is an HTTP port, then the broker can be tricked by a remote unauthenticated attacker connecting to the HTTP port into using an authentication provider that was configured on a different port. The attacker still needs valid credentials with the authentication provider on the spoofed port. This becomes an issue when the spoofed port has weaker authentication protection (e.g., anonymous access, default accounts) and is normally protected by firewall rules or similar which can be circumvented by this vulnerability. AMQP ports are not affected. Versions 6.0.0 and newer are not affected.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/102040; https://issues.apache.org/jira/browse/QPID-8039; https://lists.apache.org/thread.html/59d241e30db23b8b0af26bb273f789aa1f08515d3dc1a3868d3ba090%40%3Cdev.qpid.apache.org%3E
CVE: CVE-2017-15707
Published: 2017-12-01
Description: In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted JSON payload.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/102021
CVE: CVE-2017-13663
Published: 2017-12-01
Description: Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to decrypt log files via an exposed key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://poppopretn.com/2017/11/30/public-disclosure-firmware-vulnerabilities-in-ismartalarm-cubeone/; https://poppopretn.com/2017/11/30/public-disclosure-firmware-vulnerabilities-in-ismartalarm-cubeone/
CVE: CVE-2017-13664
Published: 2017-12-01
Description: Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to execute arbitrary commands with administrative privileges by retrieving credentials from this file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://poppopretn.com/2017/11/30/public-disclosure-firmware-vulnerabilities-in-ismartalarm-cubeone/; https://poppopretn.com/2017/11/30/public-disclosure-firmware-vulnerabilities-in-ismartalarm-cubeone/
CVE: CVE-2017-14486
Published: 2017-12-01
Description: The Vibease Wireless Remote Vibrator app for Android and the Vibease Chat app for iOS use cleartext to exchange messages with other apps and the PLAIN SASL mechanism to send auth tokens to Vibease servers, which allows remote attackers to obtain user credentials, messages, and other sensitive information by sniffing the network for XMPP traffic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://dl.acm.org/citation.cfm?id=3139942&preflayout=flat; https://dl.acm.org/citation.cfm?id=3139942&preflayout=flat
CVE: CVE-2017-14487
Published: 2017-12-01
Description: The OhMiBod Remote app for Android and iOS allows remote attackers to impersonate users by sniffing network traffic for search responses from the OhMiBod API server and then editing the username, user_id, and token fields in data/data/com.ohmibod.remote2/shared_prefs/OMB.xml.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-290
References: https://dl.acm.org/citation.cfm?id=3139942&preflayout=flat; https://dl.acm.org/citation.cfm?id=3139942&preflayout=flat
CVE: CVE-2017-14953
Published: 2017-12-01
Description: HikVision Wi-Fi IP cameras, when used in a wired configuration, allow physically proximate attackers to trigger association with an arbitrary access point by leveraging a default SSID with no WiFi encryption or authentication. NOTE: Vendor states that this is not a vulnerability, but more an increase to the attack surface of the product
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-311
References: http://packetstormsecurity.com/files/145131/HikVision-Wi-Fi-IP-Camera-Wireless-Access-Point-State.html; http://seclists.org/fulldisclosure/2017/Nov/43; http://packetstormsecurity.com/files/145131/HikVision-Wi-Fi-IP-Camera-Wireless-Access-Point-State.html
CVE: CVE-2017-15357
Published: 2017-12-01
Description: The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to gain root privileges via a symlink attack on the updater binary itself.
CVSS Score: 7.4 (HIGH)
CWE: CWE-59, CWE-362
References: https://m4.rkw.io/blog/cve201715357-local-root-privesc-in-arq-backup--596.html; https://www.arqbackup.com/download/arq5_release_notes.html; https://www.exploit-db.com/exploits/43218/
CVE: CVE-2017-16611
Published: 2017-12-01
Description: In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: http://security.cucumberlinux.com/security/details.php?id=155; http://www.openwall.com/lists/oss-security/2017/11/28/7; http://www.ubuntu.com/usn/USN-3500-1
CVE: CVE-2017-16612
Published: 2017-12-01
Description: libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like GIMP. It is also possible that an attack vector exists against the related code in cursor/xcursor.c in Wayland through 1.14.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://security.cucumberlinux.com/security/details.php?id=156; http://www.openwall.com/lists/oss-security/2017/11/28/6; http://www.ubuntu.com/usn/USN-3501-1
CVE: CVE-2017-16893
Published: 2017-12-01
Description: The application Piwigo is affected by an SQL injection vulnerability in version 2.9.2 and possibly prior. This vulnerability allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. tags.php is affected: values of the edit_list parameters are not sanitized; these are used to construct an SQL query and retrieve a list of registered users into the application.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/Piwigo/Piwigo/issues/804; https://github.com/Piwigo/Piwigo/issues/804
CVE: CVE-2017-16895
Published: 2017-12-01
Description: The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges via a crafted data packet.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://m4.rkw.io/blog/cve201716895-local-root-privesc-in-arq-backup--597.html; https://www.arqbackup.com/blog/arq-mac-import-security-update/; https://www.exploit-db.com/exploits/43216/
CVE: CVE-2017-16953
Published: 2017-12-01
Description: connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE configuration or set up a malicious configuration via a GET request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://packetstormsecurity.com/files/145121/ZTE-ZXDSL-831-Unauthorized-Configuration-Access-Bypass.html; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008762; https://www.exploit-db.com/exploits/43188/
CVE: CVE-2017-6679
Published: 2017-12-01
Description: The Cisco Umbrella Virtual Appliance Version 2.0.3 and prior contained an undocumented encrypted remote support tunnel (SSH) which auto initiated from the customer's appliance to Cisco's SSH Hubs in the Umbrella datacenters. These tunnels were primarily leveraged for remote support and allowed for authorized/authenticated personnel from the Cisco Umbrella team to access the appliance remotely and obtain full control without explicit customer approval. To address this vulnerability, the Umbrella Virtual Appliance version 2.1.0 now requires explicit customer approval before an SSH tunnel from the VA to the Cisco terminating server can be established.
CVSS Score: 6.4 (MEDIUM)
References: http://www.securityfocus.com/bid/101567; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-tunnel-gJw5thgE; https://support.umbrella.com/hc/en-us/articles/[PII_REDACTED]3
CVE: CVE-2017-17090
Published: 2017-12-02
Description: An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older. If the chan_skinny (aka SCCP protocol) channel driver is flooded with certain requests, it can cause the asterisk process to use excessive amounts of virtual memory, eventually causing asterisk to stop processing requests of any kind.
CVSS Score: 7.5 (HIGH)
CWE: CWE-459
References: http://downloads.digium.com/pub/security/AST-2017-013.html; http://www.securityfocus.com/bid/102023; http://www.securitytracker.com/id/1039948
CVE: CVE-2017-17091
Published: 2017-12-02
Description: wp-admin/user-new.php in WordPress before 4.9.1 sets the newbloguser key to a string that can be directly derived from the user ID, which allows remote attackers to bypass intended access restrictions by entering this string.
CVSS Score: 8.8 (HIGH)
CWE: CWE-330
References: http://www.securityfocus.com/bid/102024; https://codex.wordpress.org/Version_4.9.1; https://github.com/WordPress/WordPress/commit/eaf1cfdc1fe0bdffabd8d879c591b864d833326c
CVE: CVE-2017-17092
Published: 2017-12-02
Description: wp-includes/functions.php in WordPress before 4.9.1 does not require the unfiltered_html capability for upload of .js files, which might allow remote attackers to conduct XSS attacks via a crafted file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/102024; https://codex.wordpress.org/Version_4.9.1; https://github.com/WordPress/WordPress/commit/67d03a98c2cae5f41843c897f206adde299b0509
CVE: CVE-2017-17093
Published: 2017-12-02
Description: wp-includes/general-template.php in WordPress before 4.9.1 does not properly restrict the lang attribute of an HTML element, which might allow attackers to conduct XSS attacks via the language setting of a site.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/102024; https://codex.wordpress.org/Version_4.9.1; https://github.com/WordPress/WordPress/commit/3713ac5ebc90fb2011e98dfd691420f43da6c09a
CVE: CVE-2017-17094
Published: 2017-12-02
Description: wp-includes/feed.php in WordPress before 4.9.1 does not properly restrict enclosures in RSS and Atom fields, which might allow attackers to conduct XSS attacks via a crafted URL.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/102024; https://codex.wordpress.org/Version_4.9.1; https://github.com/WordPress/WordPress/commit/f1de7e42df29395c3314bf85bff3d1f4f90541de