deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-14571
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x[PII_REDACTED]9c024c called from STDUXPSFile!DllUnregisterServer+0x[PII_REDACTED]025706."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14571; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14571
CVE: CVE-2017-14572
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV starting at Unknown Symbol @ 0x[PII_REDACTED]79049b called from Unknown Symbol @ 0x000000000d89645b."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14572; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14572
CVE: CVE-2017-14573
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x[PII_REDACTED]0c024c called from STDUXPSFile!DllUnregisterServer+0x[PII_REDACTED]02566a."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14573; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14573
CVE: CVE-2017-14574
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV starting at Unknown Symbol @ 0x[PII_REDACTED]940490."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14574; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14574
CVE: CVE-2017-14575
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x[PII_REDACTED]d8024c called from STDUXPSFile!DllUnregisterServer+0x[PII_REDACTED]02566c."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14575; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14575
CVE: CVE-2017-14576
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a "Possible Stack Corruption starting at Unknown Symbol @ 0x[PII_REDACTED]9f0281."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14576; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14576
CVE: CVE-2017-14577
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Control Flow starting at Unknown Symbol @ 0x[PII_REDACTED]aa7cef called from Unknown Symbol @ 0x[PII_REDACTED]aa024d."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14577; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14577
CVE: CVE-2017-14578
Published: 2017-09-18
Description: IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ani file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77130000!RtlpCoalesceFreeBlocks+0x[PII_REDACTED]0004b4."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.net/main_history.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14578; http://www.irfanview.net/main_history.htm
CVE: CVE-2017-14579
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "Read Access Violation on Control Flow starting at STDUJBIG2File!DllGetClassObject+0x[PII_REDACTED]005b70."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14579; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14579
CVE: CVE-2017-14580
Published: 2017-09-18
Description: XnView Classic for Windows Version 2.41 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at jbig2dec+0x[PII_REDACTED]00870f."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14580; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14580
CVE: CVE-2017-6147
Published: 2017-09-18
Description: In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when "SSL Forward Proxy" setting is enabled in both the Client and Server SSL profiles assigned to a BIG-IP Virtual Server.
CVSS Score: 5.9 (MEDIUM)
References: http://www.securityfocus.com/bid/100981; https://support.f5.com/csp/article/K43945001; http://www.securityfocus.com/bid/100981
CVE: CVE-2016-10511
Published: 2017-09-18
Description: The Twitter iOS client versions 6.62 and 6.62.1 fail to validate Twitter's server certificates for the /1.1/help/settings.json configuration endpoint, permitting man-in-the-middle attackers the ability to view an application-only OAuth client token and potentially enable unreleased Twitter iOS app features.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://www.securityfocus.com/bid/100904; https://hackerone.com/reports/168538; http://www.securityfocus.com/bid/100904
CVE: CVE-2017-9803
Published: 2017-09-18
Description: Apache Solr's Kerberos plugin can be configured to use delegation tokens, which allows an application to reuse the authentication of an end-user or another application. There are two issues with this functionality (when using SecurityAwareZkACLProvider type of ACL provider e.g. SaslZkACLProvider). Firstly, access to the security configuration can be leaked to users other than the solr super user. Secondly, malicious users can exploit this leaked configuration for privilege escalation to further expose/modify private data and/or disrupt operations in the Solr cluster. The vulnerability is fixed from Apache Solr 6.6.1 onwards.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://mail-archives.us.apache.org/mod_mbox/www-announce/201709.mbox/%3CCAOOKt53AOScg04zUh0%2BR_fcXD0C9s5mQ-OzdgYdnHz49u1KmXw%40mail.gmail.com%3E; http://www.securityfocus.com/bid/100870; http://mail-archives.us.apache.org/mod_mbox/www-announce/201709.mbox/%3CCAOOKt53AOScg04zUh0%2BR_fcXD0C9s5mQ-OzdgYdnHz49u1KmXw%40mail.gmail.com%3E
CVE: CVE-2017-14597
Published: 2017-09-19
Description: AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://auroramail.wordpress.com/2017/08/28/vulnerability-in-webmailaurora-closed/; https://auroramail.wordpress.com/2017/08/28/vulnerability-in-webmailaurora-closed/
CVE: CVE-2017-14600
Published: 2017-09-19
Description: Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $_GET['del_black'], resulting in Information Disclosure.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://github.com/delta/pragyan/issues/228; https://github.com/delta/pragyan/issues/228
CVE: CVE-2017-14601
Published: 2017-09-19
Description: Pragyan CMS v3.0 is vulnerable to a Boolean-based SQL injection in cms/admin.lib.php via $_GET['forwhat'], resulting in Information Disclosure.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://github.com/delta/pragyan/issues/228; https://github.com/delta/pragyan/issues/228
CVE: CVE-2017-12615
Published: 2017-09-19
Description: When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-434, CWE-434
References: http://breaktoprotect.blogspot.com/2017/09/the-case-of-cve-2017-12615-tomcat-7-put.html; http://www.securityfocus.com/bid/100901; http://www.securitytracker.com/id/1039392
CVE: CVE-2017-12616
Published: 2017-09-19
Description: When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100897; http://www.securitytracker.com/id/1039393; https://access.redhat.com/errata/RHSA-2018:0465
CVE: CVE-2017-10930
Published: 2017-09-19
Description: The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource from an unauthorized actor, resulting in ordinary users being able to download configuration files to steal information like administrator accounts and passwords.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-552
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008262; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008262
CVE: CVE-2017-10931
Published: 2017-09-19
Description: The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to download any files and cause information leaks such as system configuration.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008262; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008262
CVE: CVE-2014-5362
Published: 2017-09-19
Description: The admin interface in Landesk Management Suite 9.6 and earlier allows remote attackers to conduct remote file inclusion attacks involving ASPX pages from third-party sites via the d parameter to (1) ldms/sm_actionfrm.asp or (2) remote/frm_coremainfrm.aspx; or the (3) top parameter to remote/frm_splitfrm.aspx.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/131496/Landesk-Management-Suite-9.5-RFI-CSRF.html; http://www.securityfocus.com/archive/1/535286/100/1100/threaded; http://www.securityfocus.com/bid/74190
CVE: CVE-2014-6191
Published: 2017-09-19
Description: Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2, 6.0.4, and 6.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 98568.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21698430; http://www.securityfocus.com/bid/73946; http://www-01.ibm.com/support/docview.wss?uid=swg21698430
CVE: CVE-2014-8174
Published: 2017-09-19
Description: eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=1202972; https://github.com/redhat-cip/edeploy/issues/230; https://bugzilla.redhat.com/show_bug.cgi?id=1202972
CVE: CVE-2014-9610
Published: 2017-09-19
Description: Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and remove IP addresses from the quarantine via the ip parameter to webadmin/user/quarantine_disable.php.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-264
References: http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html; https://www.exploit-db.com/exploits/37929/; http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html
CVE: CVE-2014-9611
Published: 2017-09-19
Description: Netsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary accounts and policies via a request to webadmin/nslam/index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html; https://www.exploit-db.com/exploits/37931/; http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html
CVE: CVE-2014-9616
Published: 2017-09-19
Description: Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to obtain sensitive information by making a request that redirects to the deny page.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html; http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html
CVE: CVE-2014-9618
Published: 2017-09-19
Description: The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html; https://www.exploit-db.com/exploits/37933/; http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html
CVE: CVE-2014-9619
Published: 2017-09-19
Description: Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote authenticated users with admin privileges on the Cloud Manager web console to execute arbitrary PHP code by uploading a file with a double extension, then accessing it via a direct request to the file in webadmin/deny/images/, as demonstrated by secuid0.php.gif.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html; https://www.exploit-db.com/exploits/37932/; http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html
CVE: CVE-2015-0689
Published: 2017-09-19
Description: Cisco Cloud Web Security before 3.0.1.7 allows remote attackers to bypass intended filtering protection mechanisms by leveraging improper handling of HTTP methods, aka Bug ID CSCut69743.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19, CWE-119
References: https://tools.cisco.com/security/center/viewAlert.x?alertId=38221; https://tools.cisco.com/security/center/viewAlert.x?alertId=38221
CVE: CVE-2015-1854
Published: 2017-09-19
Description: 389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157069.html; http://www.securityfocus.com/bid/74392; https://access.redhat.com/errata/RHSA-2015:0895
CVE: CVE-2015-1864
Published: 2017-09-19
Description: Multiple cross-site scripting (XSS) vulnerabilities in the administration pages in Kallithea before 0.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) first name or (2) last name user details, or the (3) repository, (4) repository group, or (5) user group description.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2015/04/14/12; http://www.securityfocus.com/bid/74184; https://kallithea-scm.org/repos/kallithea/changeset/a8f2986afc18c9221bf99f88b06e60ab83c86c55
CVE: CVE-2015-3299
Published: 2017-09-19
Description: Cross-site scripting (XSS) vulnerability in the Floating Social Bar plugin before 1.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to original service order.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2015/04/13/10; http://www.securityfocus.com/bid/74053; https://plugins.trac.wordpress.org/changeset/1129648/floating-social-bar/trunk
CVE: CVE-2015-3419
Published: 2017-09-19
Description: vBulletin 5.x through 5.1.6 allows remote authenticated users to bypass authorization checks and inject private messages into conversations via vectors related to an input validation failure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2015/04/24/4; http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4319488-security-patch-released-for-vbulletin-5-1-4-5-1-6-and-vbulletin-cloud; http://www.openwall.com/lists/oss-security/2015/04/24/4
CVE: CVE-2015-3420
Published: 2017-09-19
Description: The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service (login process crash) via vectors related to handshake failures.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157030.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158236.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158261.html
CVE: CVE-2015-3431
Published: 2017-09-19
Description: Pydio (formerly AjaXplorer) before 6.0.7 allows remote attackers to execute arbitrary commands via unspecified vectors, aka "Pydio OS Command Injection Vulnerabilities."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.securityfocus.com/bid/74596; https://pydio.com/en/community/releases/pydio-core/pydio-607-security-release; http://www.securityfocus.com/bid/74596
CVE: CVE-2015-3432
Published: 2017-09-19
Description: Multiple cross-site scripting (XSS) vulnerabilities in Pydio (formerly AjaXplorer) before 6.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Pydio XSS Vulnerabilities."
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/74596; https://pydio.com/en/community/releases/pydio-core/pydio-607-security-release; http://www.securityfocus.com/bid/74596
CVE: CVE-2015-3880
Published: 2017-09-19
Description: Open redirect vulnerability in phpBB before 3.0.14 and 3.1.x before 3.1.4 allows remote attackers to redirect users of Google Chrome to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.openwall.com/lists/oss-security/2015/05/12/10; http://www.securityfocus.com/bid/74592; https://github.com/phpbb/phpbb/commit/1a3350619f428d9d69d196c52128727e27ef2f04
CVE: CVE-2015-4089
Published: 2017-09-19
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the optionsPageRequest function in admin.php in WP Fastest Cache plugin before 0.8.3.5 for WordPress allow remote attackers to hijack the authentication of unspecified victims for requests that call the (1) saveOption, (2) deleteCache, (3) deleteCssAndJsCache, or (4) addCacheTimeout method via the wpFastestCachePage parameter in the WpFastestCacheOptions/ page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2015/05/26/20; https://wordpress.org/plugins/wp-fastest-cache/#developers; https://wpvulndb.com/vulnerabilities/9756
CVE: CVE-2017-10700
Published: 2017-09-19
Description: In the medialibrary component in QNAP NAS 4.3.3.0229, an un-authenticated, remote attacker can execute arbitrary system commands as the root user of the NAS application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://www.lateralsecurity.com/downloads/Lateral_Security-Advisory-QNAP_QTS_CVE-2017-10700.pdf; https://www.qnap.com/en/support/con_show.php?cid=128; https://www.lateralsecurity.com/downloads/Lateral_Security-Advisory-QNAP_QTS_CVE-2017-10700.pdf
CVE: CVE-2017-14141
Published: 2017-09-19
Description: The wiki_decode Developer System Helper function in the admin panel in Kaltura before 13.2.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: http://www.securityfocus.com/bid/100976; https://github.com/kaltura/server/commit/6a6d14328b7a1493e8c47f9565461e5f88be20c9#diff-0770640cc76112cbf77bebc604852682; https://telekomsecurity.github.io/assets/advisories/20170912_kaltura-advisory.txt
CVE: CVE-2017-14142
Published: 2017-09-19
Description: Multiple cross-site scripting (XSS) vulnerabilities in Kaltura before 13.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) partnerId or (2) playerVersion parameter to server/admin_console/web/tools/bigRedButton.php; the (3) partnerId, (4) playerVersion, (5) secret, (6) entryId, (7) adminUiConfId, or (8) uiConfId parameter to server/admin_console/web/tools/bigRedButtonPtsPoc.php; the (9) streamUsername, (10) streamPassword, (11) streamRemoteId, (12) streamRemoteBackupId, or (13) entryId parameter to server/admin_console/web/tools/AkamaiBroadcaster.php; the (14) entryId parameter to server/admin_console/web/tools/XmlJWPlayer.php; or the (15) partnerId or (16) playerVersion parameter to server/alpha/web/lib/bigRedButtonPtsPocHlsjs.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/100976; https://github.com/kaltura/server/pull/6003/commits/7e00a578d6ba748f6d3bdc255a40a4a0a594e6f9; https://github.com/kaltura/server/pull/6003/commits/a63362aa87d668d5ebf4a89cdd5bb8b815ac7f70
CVE: CVE-2017-14143
Published: 2017-09-19
Description: The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, which allows remote attackers to bypass an intended protection mechanism and consequently conduct PHP object injection attacks and execute arbitrary PHP code via a crafted userzone cookie.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://www.securityfocus.com/bid/100976; https://github.com/kaltura/server/commit/6a6d14328b7a1493e8c47f9565461e5f88be20c9#diff-0770640cc76112cbf77bebc604852682; https://telekomsecurity.github.io/assets/advisories/20170912_kaltura-advisory.txt
CVE: CVE-2015-7837
Published: 2017-09-19
Description: The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-254
References: http://rhn.redhat.com/errata/RHSA-2015-2152.html; http://rhn.redhat.com/errata/RHSA-2015-2411.html; http://www.openwall.com/lists/oss-security/2015/10/15/6
CVE: CVE-2017-14311
Published: 2017-09-19
Description: The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C402088 IOCTL call.
CVSS Score: 7.8 (HIGH)
References: https://www.exploit-db.com/exploits/42735/; https://www.exploit-db.com/exploits/42735/
CVE: CVE-2017-14581
Published: 2017-09-19
Description: The Host Control web service in SAP NetWeaver AS JAVA 7.0 through 7.5 allows remote attackers to cause a denial of service (service crash) via a crafted request, aka SAP Security Note 2389181.
CVSS Score: 7.5 (HIGH)
References: https://erpscan.io/advisories/erpscan-17-030-sap-hostcontrol-remote-dos/; https://erpscan.io/advisories/erpscan-17-030-sap-hostcontrol-remote-dos/