deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-8036
Published: 2017-07-24
Description: An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 (only). The original fix for CVE-2017-8033 included in CAPI-release 1.33.0 introduces a regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially crafted application.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/100002; https://www.cloudfoundry.org/cve-2017-8036/; http://www.securityfocus.com/bid/100002
CVE: CVE-2017-9553
Published: 2017-07-24
Description: A design flaw in SYNO.API.Encryption in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to bypass the encryption protection mechanism via the crafted version parameter.
CVSS Score: 7.5 (HIGH)
References: https://www.2-sec.com/2017/06/2-secs-expert-team-uncovers-new-vulnerability-popular-synology-nas-device/; https://www.synology.com/en-global/support/security/Synology_SA_17_29_DSM; https://www.2-sec.com/2017/06/2-secs-expert-team-uncovers-new-vulnerability-popular-synology-nas-device/
CVE: CVE-2017-9554
Published: 2017-07-24
Description: An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.exploit-db.com/exploits/43455/; https://www.synology.com/en-global/support/security/Synology_SA_17_29_DSM; https://www.exploit-db.com/exploits/43455/
CVE: CVE-2016-6118
Published: 2017-07-24
Description: IBM Emptoris Supplier Lifecycle Management 10.1.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118356.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22005824; http://www.securityfocus.com/bid/99926; https://exchange.xforce.ibmcloud.com/vulnerabilities/118356
CVE: CVE-2016-8975
Published: 2017-07-24
Description: IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118912.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22006052; http://www.securityfocus.com/bid/100124; https://exchange.xforce.ibmcloud.com/vulnerabilities/118912
CVE: CVE-2017-1245
Published: 2017-07-24
Description: IBM Rational Software Architect Design Manager 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124580.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22006052; https://exchange.xforce.ibmcloud.com/vulnerabilities/124580; http://www.ibm.com/support/docview.wss?uid=swg22006052
CVE: CVE-2017-1249
Published: 2017-07-24
Description: IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22006052; https://exchange.xforce.ibmcloud.com/vulnerabilities/124629; http://www.ibm.com/support/docview.wss?uid=swg22006052
CVE: CVE-2017-1287
Published: 2017-07-24
Description: IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: http://www.ibm.com/support/docview.wss?uid=swg22006052; https://exchange.xforce.ibmcloud.com/vulnerabilities/125148; http://www.ibm.com/support/docview.wss?uid=swg22006052
CVE: CVE-2017-1380
Published: 2017-07-24
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127151.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22004786; http://www.securityfocus.com/bid/99961; http://www.securitytracker.com/id/1038978
CVE: CVE-2017-1382
Published: 2017-07-24
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact. IBM X-Force ID: 127153.
CVSS Score: 7.1 (HIGH)
CWE: CWE-276
References: http://www.ibm.com/support/docview.wss?uid=swg22004785; http://www.securityfocus.com/bid/99960; http://www.securitytracker.com/id/1038977
CVE: CVE-2015-1847
Published: 2017-07-25
Description: Directory traversal vulnerability in the web request/response interface in Appserver before 1.0.3 allows remote attackers to read normally inaccessible files via a .. (dot dot) in a crafted URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://appserver.io/security/2015/03/31/traversal-directory-vulnerability-in-webserver.html; http://appserver.io/security/2015/03/31/traversal-directory-vulnerability-in-webserver.html
CVE: CVE-2015-2279
Published: 2017-07-25
Description: cgi_test.cgi in AirLive BU-2015 with firmware 1.03.18, BU-3026 with firmware 1.43, and MD-3025 with firmware 1.81 allows remote attackers to execute arbitrary OS commands via shell metacharacters after an "&" (ampersand) in the write_mac write_pid, write_msn, write_tan, or write_hdv parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/132585/AirLive-Remote-Command-Injection.html; http://seclists.org/fulldisclosure/2015/Jul/29; http://www.securityfocus.com/archive/1/535938/100/0/threaded
CVE: CVE-2015-2280
Published: 2017-07-25
Description: snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html; http://seclists.org/fulldisclosure/2015/Jul/40; http://www.securityfocus.com/archive/1/535963/100/0/threaded
CVE: CVE-2017-7541
Published: 2017-07-25
Description: The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.12.3 allows local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted NL80211_CMD_FRAME Netlink packet.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f44c9a41386729fea410e688959ddaa9d51be7c; http://openwall.com/lists/oss-security/2017/07/24/2; http://www.debian.org/security/2017/dsa-3927
CVE: CVE-2017-8033
Published: 2017-07-25
Description: An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions prior to v1.35.0 and cf-release versions prior to v268. A filesystem traversal vulnerability exists in the Cloud Controller that allows a space developer to escalate privileges by pushing a specially crafted application that can write arbitrary files to the Cloud Controller VM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://www.cloudfoundry.org/cve-2017-8033/; https://www.cloudfoundry.org/cve-2017-8033/
CVE: CVE-2017-8035
Published: 2017-07-25
Description: An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.35.0 and cf-release versions after v244 and prior to v268. A carefully crafted CAPI request from a Space Developer can allow them to gain access to files on the Cloud Controller VM for that installation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.cloudfoundry.org/cve-2017-8035/; https://www.cloudfoundry.org/cve-2017-8035/
CVE: CVE-2017-11499
Published: 2017-07-25
Description: Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building with V8 snapshots enabled by default which caused the initially randomized seed to be overwritten on startup.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99959; https://access.redhat.com/errata/RHSA-2017:2908; https://access.redhat.com/errata/RHSA-2017:3002
CVE: CVE-2015-7543
Published: 2017-07-25
Description: aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the temporary directory.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://bugzilla.redhat.com/show_bug.cgi?id=1280543; https://bugzilla.redhat.com/show_bug.cgi?id=1280543
CVE: CVE-2015-8009
Published: 2017-07-25
Description: The MWOAuthDataStore::lookup_token function in Extension:OAuth for MediaWiki 1.25.x before 1.25.3, 1.24.x before 1.24.4, and before 1.23.11 does not properly validate the signature when checking the authorization signature, which allows remote registered Consumers to use another Consumer's credentials by leveraging knowledge of the credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255
References: http://www.openwall.com/lists/oss-security/2015/10/29/14; http://www.securitytracker.com/id/1034028; https://phabricator.wikimedia.org/T103023
CVE: CVE-2016-7539
Published: 2017-07-25
Description: Memory leak in AcquireVirtualMemory in ImageMagick before 7 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&t=28946; http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93232
CVE: CVE-2017-7980
Published: 2017-07-25
Description: Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC client updating its display after a VGA operation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://ubuntu.com/usn/usn-3289-1; http://www.openwall.com/lists/oss-security/2017/04/21/1; http://www.securityfocus.com/bid/102129
CVE: CVE-2017-9457
Published: 2017-07-25
Description: Intense PC Phoenix SecureCore UEFI firmware does not perform capsule signature validation before upgrading the system firmware. The absence of signature validation allows an attacker with administrator privileges to flash a modified UEFI BIOS.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20
References: http://packetstormsecurity.com/files/143481/Compulab-Intense-PC-MintBox-2-Signature-Verification.html; http://seclists.org/fulldisclosure/2017/Jul/56; https://watchmysys.com/blog/2017/07/cve-2017-9457-compulab-intense-pc-lacks-firmware-validation/
CVE: CVE-2017-11566
Published: 2017-07-25
Description: AppUse 4.0 allows shell command injection via a proxy field.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://gist.github.com/shiham101/4807e3dea54ee0f0456c47fcd1400e97; https://gist.github.com/shiham101/4807e3dea54ee0f0456c47fcd1400e97
CVE: CVE-2017-11614
Published: 2017-07-25
Description: MEDHOST Connex contains hard-coded credentials that are used for customer database access. An attacker with knowledge of the hard-coded credentials and the ability to communicate directly with the database may be able to obtain or modify sensitive patient and financial information. Connex utilizes an IBM i DB2 user account for database access. The account name is HMSCXPDN. Its password is hard-coded in multiple places in the application. Customers do not have the option to change this password. The account has elevated DB2 roles, and can access all objects or database tables on the customer DB2 database. This account can access data through ODBC, FTP, and TELNET. Customers without Connex installed are still vulnerable because the MEDHOST setup program creates this account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://seclists.org/fulldisclosure/2017/Jul/59; http://seclists.org/fulldisclosure/2017/Jul/59
CVE: CVE-2017-11617
Published: 2017-07-25
Description: Cross-site scripting (XSS) vulnerability in atmail prior to version 7.8.0.2 allows remote attackers to inject arbitrary web script or HTML within the body of an email via an IMG element with both single quotes and double quotes.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://help.atmail.com/hc/en-us/articles/[PII_REDACTED]7-Minor-Update-7-8-0-2-ActiveSync-2-3-6; https://www.bishopfox.com/blog/2017/06/how-i-built-an-xss-worm-on-atmail/; https://help.atmail.com/hc/en-us/articles/[PII_REDACTED]7-Minor-Update-7-8-0-2-ActiveSync-2-3-6
CVE: CVE-2015-0674
Published: 2017-07-25
Description: Cross-site scripting (XSS) vulnerability in the Alert Service of Cisco Cloud Web Security base revision allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://tools.cisco.com/security/center/viewAlert.x?alertId=38058; https://tools.cisco.com/security/center/viewAlert.x?alertId=38058
CVE: CVE-2015-0904
Published: 2017-07-25
Description: The Restaurant Karaoke SHIDAX app 1.3.3 and earlier on Android does not verify SSL certificates, which allows remote attackers to obtain sensitive information via a man-in-the-middle attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://jvn.jp/en/jp/JVN68819526/index.html; http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000049.html; http://jvn.jp/en/jp/JVN68819526/index.html
CVE: CVE-2015-1332
Published: 2017-07-25
Description: The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted website.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1332.html; http://www.securityfocus.com/bid/76710; http://www.ubuntu.com/usn/USN-2735-1
CVE: CVE-2015-1417
Published: 2017-07-25
Description: The inet module in FreeBSD 10.2x before 10.2-PRERELEASE, 10.2-BETA2-p2, 10.2-RC1-p1, 10.1x before 10.1-RELEASE-p16, 9.x before 9.3-STABLE, 9.3-RELEASE-p21, and 8.x before 8.4-STABLE, 8.4-RELEASE-p35 on systems with VNET enabled and at least 16 VNET instances allows remote attackers to cause a denial of service (mbuf consumption) via multiple concurrent TCP connections.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/76112; http://www.securitytracker.com/id/1033111; https://www.freebsd.org/security/advisories/FreeBSD-SA-15:15.tcp.asc
CVE: CVE-2015-1438
Published: 2017-07-25
Description: Heap-based buffer overflow in Panda Security Kernel Memory Access Driver 1.0.0.13 allows attackers to execute arbitrary code with kernel privileges via a crafted size input for allocated kernel paged pool and allocated non-paged pool buffers.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/132682/Panda-Security-1.0.0.13-Arbitrary-Code-Execution.html; http://seclists.org/fulldisclosure/2015/Jul/42; http://seclists.org/fulldisclosure/2015/Jul/61
CVE: CVE-2015-2798
Published: 2017-07-25
Description: SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/73903; https://www.exploit-db.com/exploits/36561/; http://www.securityfocus.com/bid/73903
CVE: CVE-2015-3149
Published: 2017-07-25
Description: The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local users to write to arbitrary files via a symlink attack.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: http://rhn.redhat.com/errata/RHSA-2015-1228.html; http://www.securityfocus.com/bid/75933; https://bugzilla.redhat.com/show_bug.cgi?id=1213365
CVE: CVE-2015-3171
Published: 2017-07-25
Description: sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=1218658; https://github.com/sosreport/sos/commit/d7759d3ddae5fe99a340c88a1d370d65cfa73fd6; https://bugzilla.redhat.com/show_bug.cgi?id=1218658
CVE: CVE-2015-3208
Published: 2017-07-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2015-3243
Published: 2017-07-25
Description: rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: http://www.openwall.com/lists/oss-security/2015/06/18/12; http://www.openwall.com/lists/oss-security/2015/06/20/3; http://www.securityfocus.com/bid/75298
CVE: CVE-2015-3278
Published: 2017-07-25
Description: The cipherstring parsing code in nss_compat_ossl while in multi-keyword mode does not match the expected set of ciphers for a given cipher combination, which allows attackers to have unspecified impact via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1238326; https://bugzilla.redhat.com/show_bug.cgi?id=1238326
CVE: CVE-2015-4035
Published: 2017-07-25
Description: scripts/xzgrep.in in xzgrep 5.2.x before 5.2.0, before 5.0.0 does not properly process file names containing semicolons, which allows remote attackers to execute arbitrary code by having a user run xzgrep on a crafted file name.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://seclists.org/oss-sec/2015/q2/484; http://www.openwall.com/lists/oss-security/2015/05/19/13; https://bugzilla.redhat.com/show_bug.cgi?id=1223341
CVE: CVE-2015-4462
Published: 2017-07-25
Description: Absolute path traversal vulnerability in the file_manager component of eFront CMS before 3.6.15.5 allows remote authenticated users to read arbitrary files via a full pathname in the "Upload file from url" field in the file manager for professor.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434
References: http://forum.efrontlearning.net/viewtopic.php?f=15&t=9841; http://mohankallepalli.blogspot.in/2015/05/eFront-cms-multiple-bugs.html; http://forum.efrontlearning.net/viewtopic.php?f=15&t=9841
CVE: CVE-2015-4463
Published: 2017-07-25
Description: The file_manager component in eFront CMS before 3.6.15.5 allows remote authenticated users to bypass intended file-upload restrictions by appending a crafted parameter to the file URL.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434
References: http://forum.efrontlearning.net/viewtopic.php?f=15&t=9841; http://mohankallepalli.blogspot.in/2015/05/eFront-cms-multiple-bugs.html; http://forum.efrontlearning.net/viewtopic.php?f=15&t=9841
CVE: CVE-2015-5187
Published: 2017-07-25
Description: Candlepin allows remote attackers to obtain sensitive information by obtaining Java exception statements as a result of excessive web traffic.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-399
References: https://bugzilla.redhat.com/show_bug.cgi?id=1252147; https://bugzilla.redhat.com/show_bug.cgi?id=1252147
CVE: CVE-2015-5221
Published: 2017-07-25
Description: Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html; http://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html; http://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html
CVE: CVE-2015-5594
Published: 2017-07-25
Description: The sanitize_string function in ZenPhoto before 1.4.9 utilized the html_entity_decode function after input sanitation, which might allow remote attackers to perform a cross-site scripting (XSS) via a crafted string.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://cve.killedkenny.io/cve/CVE-2015-5594; http://www.openwall.com/lists/oss-security/2015/07/18/3; http://www.zenphoto.org/news/zenphoto-1.4.9
CVE: CVE-2015-6585
Published: 2017-07-25
Description: hwpapp.dll in Hangul Word Processor allows remote attackers to execute arbitrary code via a crafted heap spray, and by leveraging a "type confusion" via an HWPX file containing a crafted para text tag.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.hancom.com/cs_center/csDownload.do; http://www.securityfocus.com/bid/76694; https://www.fireeye.com/blog/threat-research/2015/09/zero-day_hwp_exploit.html
CVE: CVE-2015-8013
Published: 2017-07-25
Description: s2k.js in OpenPGP.js will decrypt arbitrary messages regardless of passphrase for crafted PGP keys which allows remote attackers to bypass authentication if message decryption is used as an authentication mechanism via a crafted symmetrically encrypted PGP message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://www.openwall.com/lists/oss-security/2015/10/30/5; http://www.securityfocus.com/bid/77088; https://github.com/openpgpjs/openpgpjs/commit/668a9bbe7033f3f[PII_REDACTED]05eb57a54306d29
CVE: CVE-2016-10401
Published: 2017-07-25
Description: ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access if a non-root account password is known (or a non-root default account exists within an ISP's deployment of these devices).
CVSS Score: 8.8 (HIGH)
CWE: CWE-255
References: https://forum.openwrt.org/viewtopic.php?id=62266; https://www.exploit-db.com/exploits/43105/; https://forum.openwrt.org/viewtopic.php?id=62266
CVE: CVE-2017-11434
Published: 2017-07-25
Description: The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a crafted DHCP options string.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-3925; http://www.openwall.com/lists/oss-security/2017/07/19/2; http://www.securityfocus.com/bid/99923
CVE: CVE-2017-11457
Published: 2017-07-25
Description: XML external entity (XXE) vulnerability in com.sap.km.cm.ice in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request, aka SAP Security Note 2387249.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: http://www.securityfocus.com/bid/97572; https://erpscan.io/advisories/erpscan-17-018-sap-netweaver-java-7-5-xxe-com-sap-km-cm-ice/; http://www.securityfocus.com/bid/97572