deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-11411
Published: 2017-07-18
Description: In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by adding length validation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9350.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13755; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a83a324acdfc07a0ca8b65e6ebaba3374ab19c76; https://www.wireshark.org/security/wnpa-sec-2017-28.html
CVE: CVE-2017-9245
Published: 2017-07-19
Description: The Google News and Weather application before 3.3.1 for Android allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2017/Jul/36; http://www.securityfocus.com/bid/99892; https://wwws.nightwatchcybersecurity.com/2017/07/18/advisory-googles-android-news-and-weather-app-doesnt-always-use-ssl-cve-2017-9245/
CVE: CVE-2017-10801
Published: 2017-07-19
Description: phpSocial (formerly phpDolphin) before 3.0.1 has XSS in the PATH_INFO to the search/tag/ URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://phpsocial.com/page/changelog; https://www.seekurity.com/blog/advisories/cross-sitescripting-vulnerability-in-phpsocial-aka-phpdolphin-social-network-script/; https://phpsocial.com/page/changelog
CVE: CVE-2017-11435
Published: 2017-07-19
Description: The Humax Wi-Fi Router model HG100R-* 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the management console. The bug is exploitable remotely when the router is configured to expose the management console. The router is not validating the session token while returning answers for some methods in url '/api'. An attacker can use this vulnerability to retrieve sensitive information such as private/public IP addresses, SSID names, and passwords.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://www.trustwave.com/Resources/Security-Advisories/Advisories/Multiple-Vulnerabilities-in-Humax-Routers/?fid=9700; https://hackertor.com/2017/07/19/na-cve-2017-11435-the-humax-wi-fi-router-model-hg100r-2-0-6-is/; https://www.trustwave.com/Resources/Security-Advisories/Advisories/Multiple-Vulnerabilities-in-Humax-Routers/?fid=9700
CVE: CVE-2017-11436
Published: 2017-07-19
Description: D-Link DIR-615 before v20.12PTb04 has a second admin account with a 0x1 BACKDOOR value, which might allow remote attackers to obtain access via a TELNET connection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-615/REVT/DIR-615_REVT_RELEASE_NOTES_20.12PTB04.pdf; http://www.rootlabs.com.br/backdoor-dlink-dir-615/; ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-615/REVT/DIR-615_REVT_RELEASE_NOTES_20.12PTB04.pdf
CVE: CVE-2017-11439
Published: 2017-07-19
Description: In Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/143357/Sitecore-CMS-8.2-Cross-Site-Scripting-File-Disclosure.html; https://xc0re.net/2017/07/03/sitecore-cms-v-8-2-multiple-vulnerabilties/; https://packetstormsecurity.com/files/143357/Sitecore-CMS-8.2-Cross-Site-Scripting-File-Disclosure.html
CVE: CVE-2017-11440
Published: 2017-07-19
Description: In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi parameter and the admin/LinqScratchPad.aspx Reference parameter.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://packetstormsecurity.com/files/143357/Sitecore-CMS-8.2-Cross-Site-Scripting-File-Disclosure.html; https://xc0re.net/2017/07/03/sitecore-cms-v-8-2-multiple-vulnerabilties/; https://packetstormsecurity.com/files/143357/Sitecore-CMS-8.2-Cross-Site-Scripting-File-Disclosure.html
CVE: CVE-2017-11441
Published: 2017-07-19
Description: The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a locale filename, aka SEC-297.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/; https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/
CVE: CVE-2017-11444
Published: 2017-07-19
Description: Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET array.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/intelliants/subrion/issues/479; https://github.com/intelliants/subrion/issues/479
CVE: CVE-2017-11445
Published: 2017-07-19
Description: Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $_POST array.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/intelliants/subrion/issues/480; https://github.com/intelliants/subrion/issues/480
CVE: CVE-2017-11446
Published: 2017-07-19
Description: The ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has an infinite loop vulnerability that can cause CPU exhaustion via a crafted PES file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: http://www.securityfocus.com/bid/99964; https://github.com/ImageMagick/ImageMagick/issues/537; https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
CVE: CVE-2017-11447
Published: 2017-07-19
Description: The ReadSCREENSHOTImage function in coders/screenshot.c in ImageMagick before 7.0.6-1 has memory leaks, causing denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/99948; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867897; https://github.com/ImageMagick/ImageMagick/commit/72a50e400d98d7a2fd610caedfeb9af043dc5582
CVE: CVE-2017-11448
Published: 2017-07-19
Description: The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867893; https://github.com/ImageMagick/ImageMagick/commit/f6463ca[PII_REDACTED]bbaed9460899d892aa3c64a; https://github.com/ImageMagick/ImageMagick/issues/556
CVE: CVE-2017-11449
Published: 2017-07-19
Description: coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an image received from stdin.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/99958; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867896; https://github.com/ImageMagick/ImageMagick/commit/529ff26b68febb2ac03062c58452ea0b4c6edbc1
CVE: CVE-2017-11450
Published: 2017-07-19
Description: coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via JPEG data that is too short.
CVSS Score: 8.8 (HIGH)
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867894; https://github.com/ImageMagick/ImageMagick/commit/948356eec65aea91995d4b7cc487d197d2c5f602; https://github.com/ImageMagick/ImageMagick/issues/556
CVE: CVE-2017-11456
Published: 2017-07-19
Description: Geneko GWR routers allow directory traversal sequences starting with a /../ substring, as demonstrated by unauthenticated read access to the configuration file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://blogs.securiteam.com/index.php/archives/3317#more-3317; https://blogs.securiteam.com/index.php/archives/3317#more-3317
CVE: CVE-2017-9764
Published: 2017-07-19
Description: Cross-site scripting (XSS) vulnerability in MetInfo 5.3.17 allows remote attackers to inject arbitrary web script or HTML via the Client-IP or X-Forwarded-For HTTP header to /include/stat/stat.php in a para action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/phantom0301/vulns/blob/master/Metinfo.md; https://github.com/phantom0301/vulns/blob/master/Metinfo.md
CVE: CVE-2016-7507
Published: 2017-07-19
Description: Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request that could lead to the creation of an admin account in the application.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: https://github.com/glpi-project/glpi/issues/2483; https://github.com/glpi-project/glpi/issues/2483
CVE: CVE-2016-7509
Published: 2017-07-19
Description: Cross-site scripting (XSS) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to inject arbitrary web script or HTML by attaching a crafted HTML file to a ticket.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/glpi-project/glpi/issues/2483; https://github.com/glpi-project/glpi/issues/2483
CVE: CVE-2016-5394
Published: 2017-07-19
Description: In the XSS Protection API module before 1.0.12 in Apache Sling, the encoding done by the XSSAPI.encodeForJSString() method is not restrictive enough and for some input patterns allows script tags to pass through unencoded, leading to potential XSS vulnerabilities.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/99870; https://lists.apache.org/thread.html/332166037a54b97cf41e2b616aaed38439de94b19b204841478e4525%40%3Cdev.sling.apache.org%3E; http://www.securityfocus.com/bid/99870
CVE: CVE-2016-6798
Published: 2017-07-19
Description: In the XSS Protection API module before 1.0.12 in Apache Sling, the method XSS.getValidXML() uses an insecure SAX parser to validate the input string, which allows for XXE attacks in all scripts which use this method to validate user input, potentially allowing an attacker to read sensitive data on the filesystem, perform same-site-request-forgery (SSRF), port-scanning behind the firewall or DoS the application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://www.securityfocus.com/bid/99873; https://lists.apache.org/thread.html/b72c3a511592ec70729b3ec2d29302b6ce87bbeab62d4745617a6bd0%40%3Cdev.sling.apache.org%3E; http://www.securityfocus.com/bid/99873
CVE: CVE-2017-7977
Published: 2017-07-19
Description: The Screensavercc component in eLux RP before 5.5.0 allows attackers to bypass intended configuration restrictions and execute arbitrary commands with root privileges by inserting commands in a local configuration dialog in the control panel.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://www.myelux.com/cvesingle.htm?cve_id=CVE-2017-7977; https://www.myelux.com/cvesingle.htm?cve_id=CVE-2017-7977
CVE: CVE-2016-6018
Published: 2017-07-19
Description: IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22005664; http://www.securityfocus.com/bid/99624; https://exchange.xforce.ibmcloud.com/vulnerabilities/116738
CVE: CVE-2017-1203
Published: 2017-07-19
Description: IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123678.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22005246; http://www.ibm.com/support/docview.wss?uid=swg22006014; http://www.securityfocus.com/bid/99916
CVE: CVE-2017-1218
Published: 2017-07-19
Description: IBM Tivoli Endpoint Manager is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 123858.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.ibm.com/support/docview.wss?uid=swg22005246; http://www.securityfocus.com/bid/101571; http://www.securityfocus.com/bid/99916
CVE: CVE-2017-1219
Published: 2017-07-19
Description: IBM Tivoli Endpoint Manager is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 123859.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: http://www.ibm.com/support/docview.wss?uid=swg22006014; https://exchange.xforce.ibmcloud.com/vulnerabilities/123859; http://www.ibm.com/support/docview.wss?uid=swg22006014
CVE: CVE-2017-1223
Published: 2017-07-19
Description: IBM Tivoli Endpoint Manager could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 123902.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.ibm.com/support/docview.wss?uid=swg22005246; http://www.securityfocus.com/bid/99916; https://exchange.xforce.ibmcloud.com/vulnerabilities/123902
CVE: CVE-2017-1224
Published: 2017-07-19
Description: IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 123903.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: http://www.ibm.com/support/docview.wss?uid=swg22005246; http://www.securityfocus.com/bid/99916; https://exchange.xforce.ibmcloud.com/vulnerabilities/123903
CVE: CVE-2017-1309
Published: 2017-07-19
Description: IBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 125463.
CVSS Score: 7.8 (HIGH)
CWE: CWE-312
References: http://www.ibm.com/support/docview.wss?uid=swg22005437; http://www.securityfocus.com/bid/99872; https://exchange.xforce.ibmcloud.com/vulnerabilities/125463
CVE: CVE-2017-11464
Published: 2017-07-19
Description: A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero.
CVSS Score: 7.8 (HIGH)
CWE: CWE-369
References: http://www.securityfocus.com/bid/99956; https://bugzilla.gnome.org/show_bug.cgi?id=783835; https://git.gnome.org/browse/librsvg/commit/?id=ecf9267a24b2c3c0cd211dbdfa9ef[PII_REDACTED]a
CVE: CVE-2017-11465
Published: 2017-07-19
Description: The parser_yyerror function in the UTF-8 parser in Ruby 2.4.1 allows attackers to cause a denial of service (invalid write or read) or possibly have unspecified other impact via a crafted Ruby script, related to the parser_tokadd_utf8 function in parse.y. NOTE: this might have security relevance as a bypass of a $SAFE protection mechanism.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-787
References: https://bugs.ruby-lang.org/issues/13742; https://bugs.ruby-lang.org/projects/ruby-trunk/repository/revisions/59344; https://bugs.ruby-lang.org/issues/13742
CVE: CVE-2017-11466
Published: 2017-07-20
Description: Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remote authenticated administrators to upload .jsp files to arbitrary locations via directory traversal sequences in the fieldName parameter to servlets/ajax_file_upload. This results in arbitrary code execution by requesting the .jsp file at a /assets URI.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://seclists.org/fulldisclosure/2017/Jul/33; https://github.com/dotCMS/core/issues/12131; https://packetstormsecurity.com/files/143383/dotcms411-shell.txt
CVE: CVE-2017-11467
Published: 2017-07-20
Description: OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: http://www.heavensec.org/?p=1703; https://github.com/orientechnologies/orientdb/wiki/OrientDB-2.2-Release-Notes#2223---july-11-2017; http://www.heavensec.org/?p=1703
CVE: CVE-2017-9765
Published: 2017-07-20
Description: Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil's Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers.
CVSS Score: 8.1 (HIGH)
CWE: CWE-190
References: http://blog.senr.io/blog/devils-ivy-flaw-in-widely-used-third-party-code-impacts-millions; http://blog.senr.io/devilsivy.html; http://www.securityfocus.com/bid/99868
CVE: CVE-2017-10676
Published: 2017-07-20
Description: On D-Link DIR-600M devices before C1_v3.05ENB01_beta_20170306, XSS was found in the form2userconfig.cgi username parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-600M/REVC/DIR-600M_REVC_FIRMWARE_PATCH_NOTES_3.05B01_EN.pdf; https://iscouncil.blogspot.com/2017/07/stored-xss-in-d-link-dir-600m-router.html; ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-600M/REVC/DIR-600M_REVC_FIRMWARE_PATCH_NOTES_3.05B01_EN.pdf
CVE: CVE-2017-11469
Published: 2017-07-20
Description: get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the file_name parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://blogs.securiteam.com/index.php/archives/3223#more-3223; https://blogs.securiteam.com/index.php/archives/3223#more-3223
CVE: CVE-2017-11470
Published: 2017-07-20
Description: IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://blogs.securiteam.com/index.php/archives/3223#more-3223; https://blogs.securiteam.com/index.php/archives/3223#more-3223
CVE: CVE-2017-11471
Published: 2017-07-20
Description: IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://blogs.securiteam.com/index.php/archives/3223#more-3223; https://blogs.securiteam.com/index.php/archives/3223#more-3223
CVE: CVE-2017-11472
Published: 2017-07-20
Description: The acpi_ns_terminate() function in drivers/acpi/acpica/nsutils.c in the Linux kernel before 4.12 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
CVSS Score: 7.1 (HIGH)
CWE: CWE-755
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3b2d69114fefa474fca542e51119036dceb4aa6f; https://github.com/acpica/acpica/commit/a23325b2e583556eae88ed3f764e457786bf4df6; https://github.com/torvalds/linux/commit/3b2d69114fefa474fca542e51119036dceb4aa6f
CVE: CVE-2017-11473
Published: 2017-07-20
Description: Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2 allows local users to gain privileges via a crafted ACPI table.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: http://www.securityfocus.com/bid/100010; https://access.redhat.com/errata/RHSA-2018:0654; https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=70ac67826602edf8c0ccb413e5ba7eacf597a60c
CVE: CVE-2017-11474
Published: 2017-07-20
Description: GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer_softwareversion.class.php, exploitable via ajax/common.tabs.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/glpi-project/glpi/issues/2475; https://github.com/glpi-project/glpi/issues/2475
CVE: CVE-2017-11475
Published: 2017-07-20
Description: GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/glpi-project/glpi/issues/2476; https://github.com/glpi-project/glpi/issues/2476
CVE: CVE-2017-6316
Published: 2017-07-20
Description: Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge (the former name of NetScaler SD-WAN) devices, the cookie name was CAKEPHP rather than CGISESSID.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/99943; http://www.securitytracker.com/id/1039019; https://support.citrix.com/article/CTX225990
CVE: CVE-2017-9785
Published: 2017-07-20
Description: Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/NancyFx/Nancy/releases/tag/v1.4.4; https://github.com/NancyFx/Nancy/releases/tag/v1.4.4
CVE: CVE-2017-9822
Published: 2017-07-20
Description: DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: http://packetstormsecurity.com/files/157080/DotNetNuke-Cookie-Deserialization-Remote-Code-Execution.html; http://www.dnnsoftware.com/community/security/security-center; http://www.securityfocus.com/bid/102213
CVE: CVE-2017-6530
Published: 2017-07-20
Description: Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20 do not check password.shtml authorization, leading to Arbitrary password change.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt; https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_es.txt; https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt
CVE: CVE-2017-6531
Published: 2017-07-20
Description: On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20, the backup/restore feature lacks access control, related to ReadFile.cgi and LoadCfgFile.
CVSS Score: 9.8 (CRITICAL)
References: https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt; https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_es.txt; https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt
CVE: CVE-2017-6532
Published: 2017-07-20
Description: Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20 have cleartext credentials in /mib.db.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt; https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_es.txt; https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt
CVE: CVE-2014-0052
Published: 2017-07-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2014-8107
Published: 2017-07-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-10022.  Reason: This candidate is a reservation duplicate of CVE-2014-10022.  Notes: All CVE users should reference CVE-2014-10022 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage