deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-17
Description: Jool 3.5.0-3.5.1 is vulnerable to a kernel crashing packet resulting in a DOS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/NICMx/Jool/issues/232; https://github.com/NICMx/Jool/issues/232
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-17
Description: Cygnux sysPass version 2.1.7 and older is vulnerable to a Local File Inclusion in the functionality of javascript files inclusion. The attacker can read the configuration files that contain the login and password from the database, private encryption key, as well as other sensitive information.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/nuxsmin/sysPass/releases/tag/2.1.8.17042901; https://github.com/nuxsmin/sysPass/releases/tag/2.1.8.17042901
CVE: CVE-2017-16819
Published: 2017-11-17
Description: A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to inject arbitrary JavaScript in the nameFirst (aka First Name) field for the employee details page (/employee.html) that is then reflected in multiple pages where that field data is utilized, resulting in session hijacking and possible elevation of privileges.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/43158/; https://www.keiththome.com/rtc-1000-vuln/; https://www.exploit-db.com/exploits/43158/
CVE: CVE-2017-16877
Published: 2017-11-17
Description: ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/vercel/next.js/commit/02fe7cf63f6265d73bdaf8bc50a4f2fb539dcd00; https://github.com/zeit/next.js/releases/tag/2.4.1; https://github.com/vercel/next.js/commit/02fe7cf63f6265d73bdaf8bc50a4f2fb539dcd00
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-17
Description: sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/dnaq/sodiumoxide/issues/154; https://github.com/dnaq/sodiumoxide/issues/154
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-17
Description: QuickerBB version <= 0.7.2 is vulnerable to arbitrary file writes which can lead to remote code execution. This can lead to the complete takeover of the server hosting QuickerBB.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/halojoy/QuickerBB/issues/10; https://github.com/halojoy/QuickerBB/issues/10
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-17
Description: jqueryFileTree 2.1.5 and older Directory Traversal
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/161900/WordPress-Delightful-Downloads-Jquery-File-Tree-1.6.6-Path-Traversal.html; https://github.com/jqueryfiletree/jqueryfiletree/issues/66; http://packetstormsecurity.com/files/161900/WordPress-Delightful-Downloads-Jquery-File-Tree-1.6.6-Path-Traversal.html
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA due to lack of a reference providing provenance. Notes: none
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11667.  Reason: This candidate is a reservation duplicate of CVE-2017-11667.  Notes: All CVE users should reference CVE-2017-11667 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-13700
Published: 2017-11-17
Description: An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. There is XSS in the administration interface.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.sentryo.net/fr/sentryo-analyse-switch-industriel/; https://www.sentryo.net/fr/sentryo-analyse-switch-industriel/
CVE: CVE-2017-13702
Published: 2017-11-17
Description: An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen, manipulated, and reused.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.sentryo.net/fr/sentryo-analyse-switch-industriel/; https://www.sentryo.net/fr/sentryo-analyse-switch-industriel/
CVE: CVE-2017-13703
Published: 2017-11-17
Description: An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. A denial of service may occur.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.sentryo.net/fr/sentryo-analyse-switch-industriel/; https://www.sentryo.net/fr/sentryo-analyse-switch-industriel/
CVE: CVE-2017-6168
Published: 2017-11-17
Description: On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (fixed in 13.0.0 HF3) a virtual server configured with a Client SSL profile may be vulnerable to an Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) against RSA, which when exploited, may result in plaintext recovery of encrypted messages and/or a Man-in-the-middle (MiTM) attack, despite the attacker not having gained access to the server's private key itself, aka a ROBOT attack.
CVSS Score: 7.4 (HIGH)
CWE: CWE-203
References: http://www.securityfocus.com/bid/101901; http://www.securitytracker.com/id/1039839; https://robotattack.org/
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-9920.  Reason: This candidate is a reservation duplicate of CVE-2016-9920.  Notes: All CVE users should reference CVE-2016-9920 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-17
Description: ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/xrootd/xrootd/blob/befa2e627a5a33a38c92db3e57c07d8246a24acf/src/XrdSecgsi/XrdSecgsiGMAPFunLDAP.cc#L85; https://github.com/xrootd/xrootd/blob/v4.6.1/docs/ReleaseNotes.txt; https://github.com/xrootd/xrootd/commit/befa2e627a5a33a38c92db3e57c07d8246a24acf
CVE: CVE-2017-14111
Published: 2017-11-17
Description: The workstation logging function in Philips IntelliSpace Cardiovascular (ISCV) 2.3.0 and earlier and Xcelera R4.1L1 and earlier records domain authentication credentials, which if accessed allows an attacker to use credentials to access the application, or other user entitlements.
CVSS Score: 7.2 (HIGH)
CWE: CWE-522
References: http://www.securityfocus.com/bid/101850; https://ics-cert.us-cert.gov/advisories/ICSMA-17-318-01; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2017-16845
Published: 2017-11-17
Description: hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/101923; https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html; https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg02982.html
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-17
Description: The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redirection, which may result in phishing or social engineering attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://elixirforum.com/t/security-releases-for-phoenix/4143; https://elixirforum.com/t/security-releases-for-phoenix/4143
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-17
Description: SimpleXML (latest version 2.7.1) is vulnerable to an XXE vulnerability resulting SSRF, information disclosure, DoS and so on.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: https://github.com/ngallagher/simplexml/issues/18; https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E; https://lists.apache.org/thread.html/8c4ef27e2c0218f29e785990dc919266855aea137c958f10d242cb36%40%3Cdev.lucene.apache.org%3E
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-17
Description: Stored XSS in Salutation Responsive WordPress + BuddyPress Theme version 3.0.15 could allow logged-in users to do almost anything an admin can
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://security.dxw.com/advisories/stored-xss-salutation-theme/; https://wpvulndb.com/vulnerabilities/9734; https://security.dxw.com/advisories/stored-xss-salutation-theme/
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-17
Description: The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar functions of the S7 protocol implementation in Snap7 are provided with unexpected input, thus resulting in denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://sourceforge.net/p/snap7/discussion/bugfix/thread/2d2d085c/; https://sourceforge.net/p/snap7/discussion/bugfix/thread/2d2d085c/
CVE: CVE-2017-16880
Published: 2017-11-17
Description: The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/filp/whoops/commit/c16791d28d1ca3139e398145f0c6565c523c291a; https://github.com/filp/whoops/commit/c16791d28d1ca3139e398145f0c6565c523c291a
CVE: CVE-2017-4939
Published: 2017-11-17
Description: VMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.securityfocus.com/bid/101890; https://www.vmware.com/security/advisories/VMSA-2017-0018.html; http://www.securityfocus.com/bid/101890
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-17
Description: exiv2 0.26 contains a Stack out of bounds read in webp parser
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html; http://www.openwall.com/lists/oss-security/2017/06/30/1; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-17
Description: Exiv2 0.26 contains a heap buffer overflow in tiff parser
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2017/06/30/1; http://www.openwall.com/lists/oss-security/2017/06/30/1
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-17
Description: Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2017/06/30/1; http://www.openwall.com/lists/oss-security/2017/06/30/1
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-17
Description: Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting in arbitrary code execution, fixed in 2.3.3 and 3.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://groups.google.com/a/opencast.org/forum/#%21topic/security-notices/sCpt0pIPEFg; https://groups.google.com/a/opencast.org/forum/#%21topic/security-notices/sCpt0pIPEFg
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-17
Description: In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will handle the access control incorrectly so that users only need to match part of the user name used for the access restriction. For example, a user with the role ROLE_USER will have access to recordings published only for ROLE_USER_X.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732
References: https://opencast.jira.com/browse/MH-11862; https://opencast.jira.com/browse/MH-11862
CVE: CVE-2017-16566
Published: 2017-11-17
Description: On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, which allows remote attackers to read or replace core system files including those used for authentication (such as passwd and shadow). This can be abused to take full root level control of the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://siggyd.github.io/Advisories/CVE-2017-16566; https://siggyd.github.io/Advisories/CVE-2017-16566
CVE: CVE-2017-14077
Published: 2017-11-18
Description: HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $_SERVER['HTTP_USER_AGENT'] parameter to example_form.ajax.php or example_form.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-94
References: https://advisory.checkmarx.net/advisory/CX-2017-4223; https://www.checkmarx.com/advisories/html-injection-securimage/; https://advisory.checkmarx.net/advisory/CX-2017-4223
CVE: CVE-2017-16881
Published: 2017-11-18
Description: b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarURL value to /settings/avatar, related to processor/AdminProcessor.java, processor/ArticleProcessor.java, processor/UserProcessor.java, service/ArticleQueryService.java, service/AvatarQueryService.java, and service/CommentQueryService.java.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/b3log/symphony/issues/504; https://github.com/b3log/symphony/issues/504
CVE: CVE-2017-16882
Published: 2017-11-18
Description: Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file is owned by a non-root account (and similarly can have etc/icinga.cfg owned by a non-root account), which allows local users to gain privileges by leveraging access to this non-root account, a related issue to CVE-2017-14312. This also affects bin/icingastats, bin/ido2db, and bin/log2ido.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://github.com/Icinga/icinga-core/issues/1601; https://security.gentoo.org/glsa/202007-31; https://github.com/Icinga/icinga-core/issues/1601
CVE: CVE-2017-16883
Published: 2017-11-18
Description: The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/libming/libming/issues/77; https://lists.debian.org/debian-lts-announce/2018/01/msg00014.html; https://github.com/libming/libming/issues/77
CVE: CVE-2017-16892
Published: 2017-11-19
Description: In Bftpd before 4.7, there is a memory leak in the file rename function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: http://bftpd.sourceforge.net/downloads/CHANGELOG; http://bftpd.sourceforge.net/news.html#032390; http://bftpd.sourceforge.net/downloads/CHANGELOG
CVE: CVE-2017-16894
Published: 2017-11-20
Description: In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwords) via a direct request for the /.env URI. NOTE: this CVE is only about Laravel framework's writeNewEnvironmentFileWith function in src/Illuminate/Foundation/Console/KeyGenerateCommand.php, which uses file_put_contents without restricting the .env permissions. The .env filename is not used exclusively by Laravel framework.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://packetstormsecurity.com/files/153641/PHP-Laravel-Framework-Token-Unserialize-Remote-Command-Execution.html; http://whiteboyz.xyz/laravel-env-file-vuln.html; https://twitter.com/finnwea/status/[PII_REDACTED]42341888
CVE: CVE-2017-15110
Published: 2017-11-20
Description: In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/101909; https://moodle.org/mod/forum/discuss.php?d=361784; http://www.securityfocus.com/bid/101909
CVE: CVE-2016-6804
Published: 2017-11-20
Description: The Apache OpenOffice installer (versions prior to 4.1.3, including some branded as OpenOffice.org) for Windows contains a defective operation that allows execution of arbitrary code with elevated privileges. This requires that the location in which the installer is run has been previously poisoned by a file that impersonates a dynamic-link library that the installer depends upon.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/93774; http://www.securitytracker.com/id/1037016; https://www.openoffice.org/security/cves/CVE-2016-6804.html
CVE: CVE-2017-11400
Published: 2017-11-20
Description: An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. An incomplete firmware signature allows a local attacker to upgrade the equipment (kernel, file system) with unsigned, attacker-controlled, data. This occurs because the appliance_config file is signed but the .tar.sec file is unsigned.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-347
References: https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt; https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf; https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt
CVE: CVE-2017-11401
Published: 2017-11-20
Description: An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt; https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf; https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt
CVE: CVE-2017-11402
Published: 2017-11-20
Description: An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OPC classic and in custom netfilter modules allow an attacker to remotely activate rules on the firewall and to connect to any TCP port of a protected asset, thus bypassing the firewall. The attack methodology is a crafted OPC dynamic port shift.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt; https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf; https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt
CVE: CVE-2017-16544
Published: 2017-11-20
Description: In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html; http://packetstormsecurity.com/files/154536/VMware-Security-Advisory-2019-0013.html; http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html
CVE: CVE-2017-16896
Published: 2017-11-20
Description: A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://discourse.tt-rss.org/t/sql-injection-in-forgotpass-fixed/669; https://git.tt-rss.org/git/tt-rss/commit/2352c320c2ed34ec7df1ad22f0c55a1b26489815; https://discourse.tt-rss.org/t/sql-injection-in-forgotpass-fixed/669
CVE: CVE-2017-16898
Published: 2017-11-20
Description: The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, which may allow attackers to cause a denial of service via a crafted file, a different vulnerability than CVE-2016-9264.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/libming/libming/issues/75; https://lists.debian.org/debian-lts-announce/2018/01/msg00014.html; https://github.com/libming/libming/issues/75
CVE: CVE-2017-9806
Published: 2017-11-20
Description: A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.openoffice.org/security/cves/CVE-2017-9806.html; http://www.securityfocus.com/bid/101585; http://www.openoffice.org/security/cves/CVE-2017-9806.html
CVE: CVE-2017-16899
Published: 2017-11-20
Description: An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the read_textobject functions in read.c and read1_3.c.
CVSS Score: 7.1 (HIGH)
CWE: CWE-129
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881143; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881143
CVE: CVE-2017-16902
Published: 2017-11-20
Description: On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://gh0s7.net/vonage2; https://www.exploit-db.com/exploits/43164/; http://gh0s7.net/vonage2
CVE: CVE-2017-12607
Published: 2017-11-20
Description: A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/101585; http://www.securitytracker.com/id/1039732; http://www.securitytracker.com/id/1039734
CVE: CVE-2017-15527
Published: 2017-11-20
Description: Prior to ITMS 8.1 RU4, the Symantec Management Console can be susceptible to a directory traversal exploit, which is a type of attack that can occur when there is insufficient security validation / sanitization of user-supplied input file names, such that characters representing "traverse to parent directory" are passed through to the file APIs.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/101743; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171120_00; http://www.securityfocus.com/bid/101743
CVE: CVE-2017-16903
Published: 2017-11-20
Description: LvyeCMS through 3.1 allows remote attackers to upload and execute arbitrary PHP code via directory traversal sequences in the dir parameter, in conjunction with PHP code in the content parameter, within a template Style add request to index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/SQYY/CVE/blob/master/Lvyecms_G.txt; https://github.com/SQYY/CVE/blob/master/Lvyecms_G.txt
CVE: CVE-2017-16904
Published: 2017-11-20
Description: The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled during later log viewing by an administrator.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/SQYY/CVE/blob/master/Lvyecms_X.txt; https://github.com/SQYY/CVE/blob/master/Lvyecms_X.txt