deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-3038
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability when parsing TTF (TrueType font format) stream data. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; http://www.securitytracker.com/id/1039098
CVE: CVE-2017-3039
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the PPKLite security handler. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3040
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JBIG2 image compression module. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3041
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability when parsing font data in the MakeAccessible plugin. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3042
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vulnerability in image conversion, related to parsing offsets in TIFF files. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97549; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3043
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the collaboration functionality.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97554; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3044
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JPEG 2000 engine, related to image scaling. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3045
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 parser, related to the palette box.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97554; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3046
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 parser, related to contiguous code-stream parsing.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97554; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3047
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in the JavaScript engine's annotation-related API. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/97550; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3048
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vulnerability in the image conversion engine, related to internal scan line representation in TIFF files. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97549; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3049
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vulnerability in the image conversion engine, related to internal tile manipulation in TIFF files. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97549; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3050
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of GIF files. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3051
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of JPEG files. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3052
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the image conversion engine, related to parsing of EMF - enhanced meta file format.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97554; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3053
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the image conversion engine, related to parsing of the APP13 segment in JPEG files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97554; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3054
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to manipulation of EMF files. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3055
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vulnerability in JPEG 2000 parsing of the fragment list tag. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97549; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3056
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JavaScript engine, related to string manipulation. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3057
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in the JavaScript API related to the collaboration functionality. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/97550; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3058
Published: 2017-04-12
Description: Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the sound class. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/97551; http://www.securitytracker.com/id/1038225; https://access.redhat.com/errata/RHSA-2017:0934
CVE: CVE-2017-3059
Published: 2017-04-12
Description: Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the internal script object. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/97551; http://www.securitytracker.com/id/1038225; https://access.redhat.com/errata/RHSA-2017:0934
CVE: CVE-2017-3060
Published: 2017-04-12
Description: Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the ActionScript2 code parser. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97557; http://www.securitytracker.com/id/1038225; https://access.redhat.com/errata/RHSA-2017:0934
CVE: CVE-2017-3061
Published: 2017-04-12
Description: Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97557; http://www.securitytracker.com/id/1038225; https://access.redhat.com/errata/RHSA-2017:0934
CVE: CVE-2017-3062
Published: 2017-04-12
Description: Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in ActionScript2 when creating a getter/setter property. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/97551; http://www.securitytracker.com/id/1038225; https://access.redhat.com/errata/RHSA-2017:0934
CVE: CVE-2017-3063
Published: 2017-04-12
Description: Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the ActionScript2 NetStream class. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/97551; http://www.securitytracker.com/id/1038225; https://access.redhat.com/errata/RHSA-2017:0934
CVE: CVE-2017-3064
Published: 2017-04-12
Description: Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a shape outline. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97557; http://www.securitytracker.com/id/1038225; https://access.redhat.com/errata/RHSA-2017:0934
CVE: CVE-2017-3065
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the font manipulation functionality. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3125
Published: 2017-04-12
Description: An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered into clicking an URL crafted by the attacker.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://fortiguard.com/psirt/FG-IR-17-011; http://www.securityfocus.com/bid/97474; http://fortiguard.com/psirt/FG-IR-17-011
CVE: CVE-2017-7716
Published: 2017-04-12
Description: The read_u32_leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Web Assembly file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/radare/radare2/issues/7260; https://github.com/radare/radare2/issues/7260
CVE: CVE-2017-7719
Published: 2017-04-12
Description: SQL injection in the Spider Event Calendar (aka spider-event-calendar) plugin before 1.5.52 for WordPress is exploitable with the order_by parameter to calendar_functions.php or widget_Theme_functions.php, related to front_end/frontend_functions.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://lists.openwall.net/full-disclosure/2017/04/09/1; http://www.securityfocus.com/bid/97656; http://lists.openwall.net/full-disclosure/2017/04/09/1
CVE: CVE-2017-7722
Published: 2017-04-12
Description: In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and "password" (the default username and password). By exploiting a vulnerability in the restrictssh feature of the menuing script, an attacker can escape from the restricted shell.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-77
References: https://pentest.blog/unexpected-journey-4-escaping-from-restricted-shell-and-gaining-root-access-to-solarwinds-log-event-manager-siem-product/; https://thwack.solarwinds.com/thread/111223; https://pentest.blog/unexpected-journey-4-escaping-from-restricted-shell-and-gaining-root-access-to-solarwinds-log-event-manager-siem-product/
CVE: CVE-2017-7741
Published: 2017-04-12
Description: In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with write memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://blogs.gentoo.org/ago/2017/04/11/libsndfile-invalid-memory-read-and-invalid-memory-write-in/; https://github.com/erikd/libsndfile/commit/60b234301adf258786d8b90be5c1d437fc8799e0; https://security.gentoo.org/glsa/201707-04
CVE: CVE-2017-7742
Published: 2017-04-12
Description: In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://blogs.gentoo.org/ago/2017/04/11/libsndfile-invalid-memory-read-and-invalid-memory-write-in/; https://github.com/erikd/libsndfile/commit/60b234301adf258786d8b90be5c1d437fc8799e0; https://security.gentoo.org/glsa/201707-04
CVE: CVE-2016-8716
Published: 2017-04-12
Description: An exploitable Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. The Change Password functionality of the Web Application transmits the password in cleartext. An attacker capable of intercepting this traffic is able to obtain valid credentials.
CVSS Score: 7.5 (HIGH)
CWE: CWE-640
References: http://www.talosintelligence.com/reports/TALOS-2016-0230; http://www.talosintelligence.com/reports/TALOS-2016-0230
CVE: CVE-2016-8718
Published: 2017-04-12
Description: An exploitable Cross-Site Request Forgery vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted form can trick a client into making an unintentional request to the web server which will be treated as an authentic request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.talosintelligence.com/reports/TALOS-2016-0232/; http://www.talosintelligence.com/reports/TALOS-2016-0232/
CVE: CVE-2016-8719
Published: 2017-04-12
Description: An exploitable reflected Cross-Site Scripting vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. Specially crafted input, in multiple parameters, can cause a malicious scripts to be executed by a victim.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.talosintelligence.com/reports/TALOS-2016-0233/; http://www.talosintelligence.com/reports/TALOS-2016-0233/
CVE: CVE-2016-4459
Published: 2017-04-12
Description: Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2016-2054.html; http://rhn.redhat.com/errata/RHSA-2016-2055.html; http://rhn.redhat.com/errata/RHSA-2016-2056.html
CVE: CVE-2016-6808
Published: 2017-04-12
Description: Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/139071/Apache-Tomcat-JK-ISAPI-Connector-1.2.41-Buffer-Overflow.html; http://rhn.redhat.com/errata/RHSA-2016-2957.html; http://seclists.org/fulldisclosure/2016/Oct/44
CVE: CVE-2016-9957
Published: 2017-04-12
Description: Stack-based buffer overflow in game-music-emu before 0.6.1.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html; http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html; http://www.openwall.com/lists/oss-security/2016/12/15/11
CVE: CVE-2016-9958
Published: 2017-04-12
Description: game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html; http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html; http://www.openwall.com/lists/oss-security/2016/12/15/11
CVE: CVE-2016-9959
Published: 2017-04-12
Description: game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html; http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html; http://www.openwall.com/lists/oss-security/2016/12/15/11
CVE: CVE-2017-6059
Published: 2017-04-12
Description: Mod_auth_openidc.c in the Ping Identity OpenID Connect authentication module for Apache (aka mod_auth_openidc) before 2.14 allows remote attackers to spoof page content via a malicious URL provided to the user, which triggers an invalid request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2017/02/17/6; http://www.securityfocus.com/bid/96299; https://access.redhat.com/errata/RHSA-2019:2112
CVE: CVE-2015-7562
Published: 2017-04-12
Description: Multiple cross-site scripting (XSS) vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) label value of an item or (2) name of a role.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/nilsteampassnet/TeamPass/pull/1140; https://www.exploit-db.com/exploits/39559/; https://github.com/nilsteampassnet/TeamPass/pull/1140
CVE: CVE-2015-7563
Published: 2017-04-12
Description: Cross-site request forgery (CSRF) vulnerability in TeamPass 2.1.24 and earlier allows remote attackers to hijack the authentication of an authenticated user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/nilsteampassnet/TeamPass/pull/1140; https://www.exploit-db.com/exploits/39559/; https://github.com/nilsteampassnet/TeamPass/pull/1140
CVE: CVE-2015-7564
Published: 2017-04-12
Description: Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an action_on_quick_icon action to item.query.php or the (2) order or (3) direction parameter in an (a) connections_logs, (b) errors_logs or (c) access_logs action to view.query.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nilsteampassnet/TeamPass/pull/1140; https://www.exploit-db.com/exploits/39559/; https://github.com/nilsteampassnet/TeamPass/pull/1140
CVE: CVE-2016-1178
Published: 2017-04-12
Description: The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify sensitive data via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://jvn.jp/en/jp/JVN03975805/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000047.html; https://developer.a-blogcms.jp/blog/patch/entry-2363.html
CVE: CVE-2016-1179
Published: 2017-04-12
Description: Cross-site scripting (XSS) vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN73166466/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000046.html; https://developer.a-blogcms.jp/blog/patch/entry-2363.html
CVE: CVE-2016-2803
Published: 2017-04-12
Description: Cross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/137079/Bugzilla-4.4.11-5.0.2-Summary-Cross-Site-Scripting.html; http://www.securityfocus.com/archive/1/538401/100/0/threaded; http://www.securitytracker.com/id/1035891
CVE: CVE-2016-4337
Published: 2017-04-12
Description: SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore before 4.7.5 allows remote attackers to execute arbitrary SQL commands via the email parameter in a recover_login action.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/137734/Ktools-Photostore-4.7.5-Blind-SQL-Injection.html; https://www.exploit-db.com/exploits/40046/; http://packetstormsecurity.com/files/137734/Ktools-Photostore-4.7.5-Blind-SQL-Injection.html