deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-0610
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35399404. References: QC-CR#1094852.
CVSS Score: 7.0 (HIGH)
CWE: CWE-754
References: http://www.securityfocus.com/bid/98255; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98255
CVE: CVE-2017-0611
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35393841. References: QC-CR#1084210.
CVSS Score: 7.0 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/98177; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98177
CVE: CVE-2017-0612
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-34389303. References: QC-CR#1061845.
CVSS Score: 7.0 (HIGH)
CWE: CWE-770
References: http://www.securityfocus.com/bid/98231; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98231
CVE: CVE-2017-0613
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35400457. References: QC-CR#1086140.
CVSS Score: 7.0 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/98186; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98186
CVE: CVE-2017-0614
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35399405. References: QC-CR#1080290.
CVSS Score: 7.0 (HIGH)
CWE: CWE-120
References: http://www.securityfocus.com/bid/98187; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98187
CVE: CVE-2017-0615
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the MediaTek power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34259126. References: M-ALPS03150278.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/98188; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98188
CVE: CVE-2017-0616
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the MediaTek system management interrupt driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34470286. References: M-ALPS03149160.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/98189; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98189
CVE: CVE-2017-0617
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the MediaTek video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34471002. References: M-ALPS03149173.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/98190; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98190
CVE: CVE-2017-0618
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-35100728. References: M-ALPS03161536.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/98191; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98191
CVE: CVE-2017-0619
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm pin controller driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-35401152. References: QC-CR#826566.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/98192; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98192
CVE: CVE-2017-0620
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm Secure Channel Manager driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35401052. References: QC-CR#1081711.
CVSS Score: 7.0 (HIGH)
CWE: CWE-20, CWE-131
References: http://www.securityfocus.com/bid/98193; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98193
CVE: CVE-2017-0621
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-35399703. References: QC-CR#831322.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/98196; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98196
CVE: CVE-2017-0622
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Goodix touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-32749036. References: QC-CR#1098602.
CVSS Score: 7.0 (HIGH)
CWE: CWE-755
References: http://www.securityfocus.com/bid/98198; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98198
CVE: CVE-2017-0623
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the HTC bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32512358.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/98199; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98199
CVE: CVE-2017-0624
Published: 2017-05-12
Description: An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34327795. References: QC-CR#2005832.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98200; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98200
CVE: CVE-2017-0625
Published: 2017-05-12
Description: An information disclosure vulnerability in the MediaTek command queue driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: N/A. Android ID: A-35142799. References: M-ALPS03161531.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98201; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98201
CVE: CVE-2017-0626
Published: 2017-05-12
Description: An information disclosure vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35393124. References: QC-CR#1088050.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98202; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98202
CVE: CVE-2017-0627
Published: 2017-05-12
Description: An information disclosure vulnerability in the kernel UVC driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33300353.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98205; https://source.android.com/security/bulletin/2017-05-01; https://usn.ubuntu.com/3674-1/
CVE: CVE-2017-0628
Published: 2017-05-12
Description: An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34230377. References: QC-CR#1086833.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98211; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98211
CVE: CVE-2017-0629
Published: 2017-05-12
Description: An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35214296. References: QC-CR#1086833.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98212; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98212
CVE: CVE-2017-0630
Published: 2017-05-12
Description: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98213; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98213
CVE: CVE-2017-0631
Published: 2017-05-12
Description: An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35399756. References: QC-CR#1093232.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98216; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98216
CVE: CVE-2017-0632
Published: 2017-05-12
Description: An information disclosure vulnerability in the Qualcomm sound codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-35392586. References: QC-CR#832915.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98221; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98221
CVE: CVE-2017-0633
Published: 2017-05-12
Description: An information disclosure vulnerability in the Broadcom Wi-Fi driver could enable a local malicious component to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-36000515. References: B-RB#117131.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98223; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98223
CVE: CVE-2017-0634
Published: 2017-05-12
Description: An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32511682.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98224; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98224
CVE: CVE-2017-0635
Published: 2017-05-12
Description: A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Low due to details specific to the vulnerability. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-35467107.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://android.googlesource.com/platform/frameworks/av/+/523f6b49c1a2289161f40cf9fe80b92e592e9441; https://source.android.com/security/bulletin/2017-05-01; https://android.googlesource.com/platform/frameworks/av/+/523f6b49c1a2289161f40cf9fe80b92e592e9441
CVE: CVE-2016-4838
Published: 2017-05-12
Description: The Android Apps Money Forward (prior to v7.18.0), Money Forward for The Gunma Bank (prior to v1.2.0), Money Forward for SHIGA BANK (prior to v1.2.0), Money Forward for SHIZUOKA BANK (prior to v1.4.0), Money Forward for SBI Sumishin Net Bank (prior to v1.6.0), Money Forward for Tokai Tokyo Securities (prior to v1.4.0), Money Forward for THE TOHO BANK (prior to v1.3.0), Money Forward for YMFG (prior to v1.5.0) provided by Money Forward, Inc. and Money Forward for AppPass (prior to v7.18.3), Money Forward for au SMARTPASS (prior to v7.18.0), Money Forward for Chou Houdai (prior to v7.18.3) provided by SOURCENEXT CORPORATION allows an attacker to execute unintended operations via a specially crafted application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://corp.moneyforward.com/info/20160920-mf-android/; http://www.securityfocus.com/bid/93034; http://www.sourcenext.com/support/i/160725_1
CVE: CVE-2016-4839
Published: 2017-05-12
Description: The Android Apps Money Forward (prior to v7.18.0), Money Forward for The Gunma Bank (prior to v1.2.0), Money Forward for SHIGA BANK (prior to v1.2.0), Money Forward for SHIZUOKA BANK (prior to v1.4.0), Money Forward for SBI Sumishin Net Bank (prior to v1.6.0), Money Forward for Tokai Tokyo Securities (prior to v1.4.0), Money Forward for THE TOHO BANK (prior to v1.3.0), Money Forward for YMFG (prior to v1.5.0) provided by Money Forward, Inc. and Money Forward for AppPass (prior to v7.18.3), Money Forward for au SMARTPASS (prior to v7.18.0), Money Forward for Chou Houdai (prior to v7.18.3) provided by SOURCENEXT CORPORATION do not properly implement the WebView class, which allows an attacker to disclose information stored on the device via a specially crafted application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://corp.moneyforward.com/info/20160920-mf-android/; http://www.securityfocus.com/bid/93035; http://www.sourcenext.com/support/i/160725_1
CVE: CVE-2016-4855
Published: 2017-05-12
Description: Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN48237713/index.html; http://www.securityfocus.com/bid/92753; https://github.com/ADOdb/ADOdb/issues/274
CVE: CVE-2016-4856
Published: 2017-05-12
Description: Cross-site scripting vulnerability in Splunk Enterprise 6.3.x prior to 6.3.5 and Splunk Light 6.3.x prior to 6.3.5 allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/92990; https://jvn.jp/en/jp/JVN71462075/index.html; https://www.splunk.com/view/SP-CAAAPN9
CVE: CVE-2016-4857
Published: 2017-05-12
Description: Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.11 and Splunk Light prior to 6.4.2 allows to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://jvn.jp/en/jp/JVN39926655/index.html; https://www.splunk.com/view/SP-CAAAPQM; https://jvn.jp/en/jp/JVN39926655/index.html
CVE: CVE-2016-4858
Published: 2017-05-12
Description: Cross-site scripting vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.10, Splunk Enterprise 6.1.x prior to 6.1.11, Splunk Enterprise 6.0.x prior to 6.0.12, Splunk Enterprise 5.0.x prior to 5.0.16 and Splunk Light prior to 6.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN71462075/index.html; https://www.splunk.com/view/SP-CAAAPN9; https://jvn.jp/en/jp/JVN71462075/index.html
CVE: CVE-2016-4859
Published: 2017-05-12
Description: Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.3, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.10, Splunk Enterprise 6.1.x prior to 6.1.11, Splunk Enterprise 6.0.x prior to 6.0.12, Splunk Enterprise 5.0.x prior to 5.0.16 and Splunk Light prior to 6.4.3 allows to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.securityfocus.com/bid/92603; https://jvn.jp/en/jp/JVN64800312/index.html; https://www.splunk.com/view/SP-CAAAPQ6
CVE: CVE-2016-4864
Published: 2017-05-12
Description: H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial-of-service (DoS) via format string specifiers in a template file via fastcgi, mruby, proxy, redirect or reproxy.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: https://github.com/h2o/h2o/issues/1077; https://jvn.jp/en/jp/JVN94779084/index.html; https://github.com/h2o/h2o/issues/1077
CVE: CVE-2016-4876
Published: 2017-05-12
Description: Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators to execute arbitrary PHP code via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://basercms.net/security/JVN92765814; http://www.securityfocus.com/bid/93217; https://jvn.jp/en/jp/JVN92765814/index.html
CVE: CVE-2016-4877
Published: 2017-05-12
Description: Cross-site scripting vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://basercms.net/security/JVN92765814; http://www.securityfocus.com/bid/93217; https://jvn.jp/en/jp/JVN92765814/index.html
CVE: CVE-2016-4878
Published: 2017-05-12
Description: Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://basercms.net/security/JVN92765814; http://www.securityfocus.com/bid/93217; https://jvn.jp/en/jp/JVN92765814/index.html
CVE: CVE-2016-4879
Published: 2017-05-12
Description: Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://basercms.net/security/JVN92765814; http://www.securityfocus.com/bid/93217; https://jvn.jp/en/jp/JVN92765814/index.html
CVE: CVE-2016-4880
Published: 2017-05-12
Description: Cross-site scripting vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://basercms.net/security/JVN92765814; http://www.securityfocus.com/bid/93217; https://jvn.jp/en/jp/JVN92765814/index.html
CVE: CVE-2016-4881
Published: 2017-05-12
Description: Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://basercms.net/security/JVN92765814; http://www.securityfocus.com/bid/93217; https://jvn.jp/en/jp/JVN92765814/index.html
CVE: CVE-2016-4882
Published: 2017-05-12
Description: Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://basercms.net/security/JVN92765814; http://www.securityfocus.com/bid/93217; https://jvn.jp/en/jp/JVN92765814/index.html
CVE: CVE-2016-4883
Published: 2017-05-12
Description: Cross-site scripting vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://basercms.net/security/JVN92765814; http://www.securityfocus.com/bid/93217; https://jvn.jp/en/jp/JVN92765814/index.html
CVE: CVE-2016-4884
Published: 2017-05-12
Description: Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://basercms.net/security/JVN92765814; http://www.securityfocus.com/bid/93217; https://jvn.jp/en/jp/JVN92765814/index.html