deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-7177
Published: 2015-09-24
Description: The InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
CVE: CVE-2015-7178
Published: 2015-09-24
Description: The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles shader access, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted (1) OpenGL or (2) WebGL content.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
CVE: CVE-2015-7179
Published: 2015-09-24
Description: The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, incorrectly allocates memory for shader attribute arrays, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via crafted (1) OpenGL or (2) WebGL content.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
CVE: CVE-2015-7180
Published: 2015-09-24
Description: The ReadbackResultWriterD3D11::Run function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 misinterprets the return value of a function call, which might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
CVE: CVE-2015-7327
Published: 2015-09-24
Description: Mozilla Firefox before 41.0 does not properly restrict the availability of High Resolution Time API times, which allows remote attackers to track last-level cache access, and consequently obtain sensitive information, via crafted JavaScript code that makes performance.now calls.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://arxiv.org/abs/1502.07373; http://www.mozilla.org/security/announce/2015/mfsa2015-114.html; http://www.securitytracker.com/id/1033640
CVE: CVE-2015-6303
Published: 2015-09-24
Description: The Cisco Spark application 2015-07-04 for mobile operating systems does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, aka Bug IDs CSCut36742 and CSCut36844.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=41127; http://tools.cisco.com/security/center/viewAlert.x?alertId=41127
CVE: CVE-2015-6304
Published: 2015-09-24
Description: Cross-site request forgery (CSRF) vulnerability in Cisco TelePresence Server software 3.0(2.24) allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCut63718, CSCut63724, and CSCut63760.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=41128; http://www.securitytracker.com/id/1033644; http://tools.cisco.com/security/center/viewAlert.x?alertId=41128
CVE: CVE-2015-7374
Published: 2015-09-25
Description: The Remote Agent component in Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-2649.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-251-01; http://www.zerodayinitiative.com/advisories/ZDI-15-451; http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-251-01
CVE: CVE-2015-7375
Published: 2015-09-25
Description: Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code or cause a denial of service (unhandled runtime exception and application crash) via a crafted Indusoft Project file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-251-01; http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-251-01
CVE: CVE-2015-4539
Published: 2015-09-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Identity Management & Governance (IMG) before 7.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/bugtraq/2015/Sep/36; http://www.securitytracker.com/id/1033520; http://seclists.org/bugtraq/2015/Sep/36
CVE: CVE-2015-4540
Published: 2015-09-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Identity Management & Governance (IMG) before 6.8.1 P18 and 6.9.x before 6.9.1 P6 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://seclists.org/bugtraq/2015/Sep/36; http://www.securitytracker.com/id/1033520; http://seclists.org/bugtraq/2015/Sep/36
CVE: CVE-2015-4541
Published: 2015-09-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer GRC 5.x before 5.5.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html; http://seclists.org/bugtraq/2015/Sep/105; http://www.securitytracker.com/id/1033649
CVE: CVE-2015-4542
Published: 2015-09-26
Description: EMC RSA Archer GRC 5.x before 5.5.3 allows remote authenticated users to bypass intended access restrictions, and read or modify Discussion Forum Fields messages, via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html; http://seclists.org/bugtraq/2015/Sep/105; http://www.securitytracker.com/id/1033649
CVE: CVE-2015-4543
Published: 2015-09-26
Description: EMC RSA Archer GRC 5.x before 5.5.3 uses cleartext for stored passwords in unspecified circumstances, which allows remote authenticated users to obtain sensitive information by reading database fields.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html; http://seclists.org/bugtraq/2015/Sep/105; http://www.securitytracker.com/id/1033649
CVE: CVE-2015-6282
Published: 2015-09-26
Description: Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S allows remote attackers to cause a denial of service (device reload) via IPv4 packets that require NAT and MPLS actions, aka Bug ID CSCut96933.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-iosxe; http://www.securitytracker.com/id/1033645; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-iosxe
CVE: CVE-2015-6302
Published: 2015-09-26
Description: The RADIUS functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.0(250.0) and 7.0(252.0) allows remote attackers to disconnect arbitrary sessions via crafted Disconnect-Request UDP packets, aka Bug ID CSCuw29419.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=41102; http://www.securitytracker.com/id/1033624; http://tools.cisco.com/security/center/viewAlert.x?alertId=41102
CVE: CVE-2015-6305
Published: 2015-09-26
Description: Untrusted search path vulnerability in the CMainThread::launchDownloader function in vpndownloader.exe in Cisco AnyConnect Secure Mobility Client 2.0 through 4.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by dbghelp.dll, aka Bug ID CSCuv01279.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4211.
CVSS Score: 7.2 (HIGH)
CWE: CWE-426
References: http://packetstormsecurity.com/files/133876/Cisco-AnyConnect-Secure-Mobility-Client-3.1.08009-Privilege-Elevation.html; http://seclists.org/fulldisclosure/2015/Sep/80; http://tools.cisco.com/security/center/viewAlert.x?alertId=41136
CVE: CVE-2015-6306
Published: 2015-09-26
Description: Cisco AnyConnect Secure Mobility Client 4.1(8) on OS X and Linux does not verify pathnames before installation actions, which allows local users to obtain root privileges via a crafted installation file, aka Bug ID CSCuv11947.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/133685/Cisco-AnyConnect-DMG-Install-Script-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2015/Sep/86; http://tools.cisco.com/security/center/viewAlert.x?alertId=41135
CVE: CVE-2015-6454
Published: 2015-09-26
Description: Everest PeakHMI before 8.7.0.2, when the video server is used, allows remote attackers to cause a denial of service (incorrect pointer dereference and daemon crash) via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-232-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-232-01
CVE: CVE-2015-6468
Published: 2015-09-26
Description: Cross-site request forgery (CSRF) vulnerability in Resource Data Management Data Manager before 2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-265-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-265-01
CVE: CVE-2015-6469
Published: 2015-09-26
Description: The interpreter in IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allows remote attackers to discover script source code via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-265-02; https://ics-cert.us-cert.gov/advisories/ICSA-15-265-02
CVE: CVE-2015-6470
Published: 2015-09-26
Description: Resource Data Management Data Manager before 2.2 allows remote authenticated users to modify arbitrary passwords via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-265-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-265-01
CVE: CVE-2015-6474
Published: 2015-09-26
Description: IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allow remote attackers to discover cleartext passwords by reading HTML source code.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-265-02; https://ics-cert.us-cert.gov/advisories/ICSA-15-265-02
CVE: CVE-2015-6475
Published: 2015-09-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-265-02; https://ics-cert.us-cert.gov/advisories/ICSA-15-265-02
CVE: CVE-2014-9202
Published: 2015-09-28
Description: Multiple stack-based buffer overflows in an unspecified DLL file in Advantech WebAccess before 8.0_20150816 allow remote attackers to execute arbitrary code via a crafted file that triggers long string arguments to functions.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-119
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-258-04; https://ics-cert.us-cert.gov/advisories/ICSA-15-258-04
CVE: CVE-2015-3974
Published: 2015-09-28
Description: EasyIO EasyIO-30P-SF controllers with firmware before 0.5.21 and 2.x before 2.0.5.21, as used in Accutrol, Bar-Tech Automation, Infocon/EasyIO, Honeywell Automation India, Johnson Controls, SyxthSENSE, Transformative Wave Technologies, Tridium Asia Pacific, and Tridium Europe products, have a hardcoded password, which makes it easier for remote attackers to obtain access via unspecified vectors.
CVSS Score: 9.0 (HIGH)
CWE: CWE-255
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-237-02; https://ics-cert.us-cert.gov/advisories/ICSA-15-237-02
CVE: CVE-2015-6007
Published: 2015-09-28
Description: Cross-site request forgery (CSRF) vulnerability in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to hijack the authentication of arbitrary users.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.kb.cert.org/vuls/id/374092; http://www.kb.cert.org/vuls/id/374092
CVE: CVE-2015-6008
Published: 2015-09-28
Description: install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary commands via the adminPassword parameter, a different issue than CVE-2015-7381.
CVSS Score: 7.5 (HIGH)
CWE: CWE-78
References: http://www.kb.cert.org/vuls/id/374092; https://www.exploit-db.com/exploits/38292/; http://www.kb.cert.org/vuls/id/374092
CVE: CVE-2015-6009
Published: 2015-09-28
Description: Multiple SQL injection vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to execute arbitrary SQL commands via (1) the where parameter to rss.php or (2) the sqlQuery parameter to search.php, a different issue than CVE-2015-7382.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.kb.cert.org/vuls/id/374092; https://www.exploit-db.com/exploits/38292/; http://www.kb.cert.org/vuls/id/374092
CVE: CVE-2015-6010
Published: 2015-09-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allow remote attackers to inject arbitrary web script or HTML via the (1) errorNo or (2) errorMsg parameter to error.php; the (3) viewType parameter to duplicate_manager.php; the (4) queryAction, (5) displayType, (6) citeOrder, (7) sqlQuery, (8) showQuery, (9) showLinks, (10) showRows, or (11) queryID parameter to query_manager.php; the (12) sourceText or (13) sourceIDs parameter to import.php; or the (14) typeName or (15) fileName parameter to modify.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.kb.cert.org/vuls/id/374092; http://www.kb.cert.org/vuls/id/374092
CVE: CVE-2015-6011
Published: 2015-09-28
Description: Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allows remote attackers to conduct XML injection attacks via (1) the id parameter to unapi.php or (2) the stylesheet parameter to sru.php.
CVSS Score: 5.0 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/374092; http://www.kb.cert.org/vuls/id/374092
CVE: CVE-2015-6012
Published: 2015-09-28
Description: Multiple open redirect vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the referrer parameter.
CVSS Score: 5.8 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/374092; http://www.kb.cert.org/vuls/id/374092
CVE: CVE-2015-6278
Published: 2015-09-28
Description: The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S does not properly implement the Control Plane Protection (aka CPPr) feature, which allows remote attackers to cause a denial of service (device reload) via a flood of ND packets, aka Bug ID CSCus19794.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs/cvrf/cisco-sa-20150923-fhs_cvrf.xml; http://www.securitytracker.com/id/1033647
CVE: CVE-2015-6279
Published: 2015-09-28
Description: The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S allows remote attackers to cause a denial of service (device reload) via a malformed ND packet with the Cryptographically Generated Address (CGA) option, aka Bug ID CSCuo04400.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs/cvrf/cisco-sa-20150923-fhs_cvrf.xml; http://www.securitytracker.com/id/1033647
CVE: CVE-2015-6280
Published: 2015-09-28
Description: The SSHv2 functionality in Cisco IOS 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.6E before 3.6.3E, 3.7E before 3.7.1E, 3.10S before 3.10.6S, 3.11S before 3.11.4S, 3.12S before 3.12.3S, 3.13S before 3.13.3S, and 3.14S before 3.14.1S does not properly implement RSA authentication, which allows remote attackers to obtain login access by leveraging knowledge of a username and the associated public key, aka Bug ID CSCus73013.
CVSS Score: 9.3 (HIGH)
CWE: CWE-287
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-sshpk; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-sshpk/cvrf/cisco-sa-20150923-sshpk_cvrf.xml; http://www.securitytracker.com/id/1033646
CVE: CVE-2015-6307
Published: 2015-09-28
Description: Cisco FirePOWER (formerly Sourcefire) 7000 and 8000 devices with software 5.4.0.1 allow remote attackers to cause a denial of service (inspection-engine outage) via crafted packets, aka Bug ID CSCuu10871.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=41131; http://tools.cisco.com/security/center/viewAlert.x?alertId=41131
CVE: CVE-2015-6463
Published: 2015-09-28
Description: CodeWrights HART Comm DTM components, as used with Endress+Hauser FieldCare, allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a longtag XML schema containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Score: 5.8 (MEDIUM)
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-267-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-267-01
CVE: CVE-2015-7381
Published: 2015-09-28
Description: Multiple PHP remote file inclusion vulnerabilities in install.php in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to execute arbitrary PHP code via the (1) pathToMYSQL or (2) databaseStructureFile parameter, a different issue than CVE-2015-6008.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.kb.cert.org/vuls/id/374092; http://www.kb.cert.org/vuls/id/374092
CVE: CVE-2015-7382
Published: 2015-09-28
Description: SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary SQL commands via the defaultCharacterSet parameter, a different issue than CVE-2015-6009.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.kb.cert.org/vuls/id/374092; http://www.kb.cert.org/vuls/id/374092
CVE: CVE-2015-7383
Published: 2015-09-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge through 2015-04-28 allow remote attackers to inject arbitrary web script or HTML via the (1) adminUserName, (2) pathToMYSQL, (3) databaseStructureFile, or (4) pathToBibutils parameter to install.php or the (5) adminUserName parameter to update.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.kb.cert.org/vuls/id/374092; http://www.kb.cert.org/vuls/id/374092
CVE: CVE-2015-5082
Published: 2015-09-28
Description: Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW_PASSWORD_1 or (2) NEW_PASSWORD_2 parameter to cgi-bin/chpasswd.cgi.
CVSS Score: 10.0 (HIGH)
CWE: CWE-77
References: http://packetstormsecurity.com/files/133469/Endian-Firewall-Proxy-Password-Change-Command-Injection.html; http://www.rapid7.com/db/modules/exploit/linux/http/efw_chpasswd_exec; https://www.exploit-db.com/exploits/37426/
CVE: CVE-2015-6928
Published: 2015-09-28
Description: classes/admin.class.php in CubeCart 5.2.12 through 5.2.16 and 6.x before 6.0.7 does not properly validate that a password reset request was made, which allows remote attackers to change the administrator password via a recovery request with a space character in the validate parameter and the administrator email in the email parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284
References: http://packetstormsecurity.com/files/133535/CubeCart-6.0.6-Administrative-Bypass.html; http://seclists.org/fulldisclosure/2015/Sep/40; http://www.securitytracker.com/id/1034015
CVE: CVE-2015-7386
Published: 2015-09-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in includes/metaboxes.php in the Gallery - Photo Albums - Portfolio plugin 1.3.47 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the (1) Media Title or (2) Media Subtitle fields.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://packetstormsecurity.com/files/133494/WordPress-Easy-Media-Gallery-1.3.47-Cross-Site-Scripting.html; https://wpvulndb.com/vulnerabilities/8181; http://packetstormsecurity.com/files/133494/WordPress-Easy-Media-Gallery-1.3.47-Cross-Site-Scripting.html
CVE: CVE-2015-7387
Published: 2015-09-28
Description: ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and earlier allows remote attackers to bypass intended restrictions and execute arbitrary SQL commands via an allowed query followed by a disallowed one in the query parameter to event/runQuery.do, as demonstrated by "SELECT 1;INSERT INTO." Fixed in Build 11200.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/133581/ManageEngine-EventLog-Analyzer-10.6-Build-10060-SQL-Query-Execution.html; http://packetstormsecurity.com/files/133747/ManageEngine-EventLog-Analyzer-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2015/Sep/59
CVE: CVE-2015-3203
Published: 2015-09-28
Description: Unrestricted file upload vulnerability in h5ai before 0.25.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified by the href parameter.
CVSS Score: 7.5 (HIGH)
References: https://larsjung.de/h5ai/cve-2015-3203.txt; https://www.exploit-db.com/exploits/38256/; https://larsjung.de/h5ai/cve-2015-3203.txt