deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-17095
Published: 2017-12-02
Description: tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://bugzilla.maptools.org/show_bug.cgi?id=2750; http://www.openwall.com/lists/oss-security/2017/11/30/3; http://www.securityfocus.com/bid/102124
CVE: CVE-2017-14516
Published: 2017-12-03
Description: Cross-Site Scripting (XSS) exists in SAP Business Objects Financial Consolidation before 2017-06-13, aka SAP Security Note 2422292.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blogs.sap.com/2017/06/13/sap-security-patch-day-june2017/; https://blogs.sap.com/2017/06/13/sap-security-patch-day-june2017/
CVE: CVE-2017-17082
Published: 2017-12-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-8819
Published: 2017-12-03
Description: In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, the replay-cache protection mechanism is ineffective for v2 onion services, aka TROVE-2017-009. An attacker can send many INTRODUCE2 cells to trigger this issue.
CVSS Score: 7.5 (HIGH)
References: https://blog.torproject.org/new-stable-tor-releases-security-fixes-0319-03013-02914-02817-02516; https://bugs.torproject.org/24244; https://www.debian.org/security/2017/dsa-4054
CVE: CVE-2017-8820
Published: 2017-12-03
Description: In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, remote attackers can cause a denial of service (NULL pointer dereference and application crash) against directory authorities via a malformed descriptor, aka TROVE-2017-010.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://blog.torproject.org/new-stable-tor-releases-security-fixes-0319-03013-02914-02817-02516; https://bugs.torproject.org/24245; https://www.debian.org/security/2017/dsa-4054
CVE: CVE-2017-8821
Published: 2017-12-03
Description: In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, an attacker can cause a denial of service (application hang) via crafted PEM input that signifies a public key requiring a password, which triggers an attempt by the OpenSSL library to ask the user for the password, aka TROVE-2017-011.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://blog.torproject.org/new-stable-tor-releases-security-fixes-0319-03013-02914-02817-02516; https://bugs.torproject.org/24246; https://www.debian.org/security/2017/dsa-4054
CVE: CVE-2017-8822
Published: 2017-12-03
Description: In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, relays (that have incompletely downloaded descriptors) can pick themselves in a circuit path, leading to a degradation of anonymity, aka TROVE-2017-012.
CVSS Score: 3.7 (LOW)
CWE: CWE-417
References: https://blog.torproject.org/new-stable-tor-releases-security-fixes-0319-03013-02914-02817-02516; https://bugs.torproject.org/21534; https://bugs.torproject.org/24333
CVE: CVE-2017-8823
Published: 2017-12-03
Description: In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, there is a use-after-free in onion service v2 during intro-point expiration because the expiring list is mismanaged in certain error cases, aka TROVE-2017-013.
CVSS Score: 8.1 (HIGH)
CWE: CWE-416
References: https://blog.torproject.org/new-stable-tor-releases-security-fixes-0319-03013-02914-02817-02516; https://bugs.torproject.org/24313; https://bugs.torproject.org/24430
CVE: CVE-2017-17096
Published: 2017-12-03
Description: Cross-site scripting (XSS) vulnerability in the Content Cards plugin before 0.9.7 for WordPress allows remote attackers to inject arbitrary JavaScript via crafted OpenGraph data.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/content-cards/#developers; https://wpvulndb.com/vulnerabilities/8971; https://wordpress.org/plugins/content-cards/#developers
CVE: CVE-2017-17099
Published: 2017-12-03
Description: There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET request with an excessive length, it is possible for a malicious user to overwrite the SEH record and execute a payload that would run under the Windows SYSTEM account.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://packetstormsecurity.com/files/144586/Sync-Breeze-Enterprise-10.1.16-SEH-Overflow.html; https://www.exploit-db.com/exploits/42984/; https://packetstormsecurity.com/files/144586/Sync-Breeze-Enterprise-10.1.16-SEH-Overflow.html
CVE: CVE-2017-17102
Published: 2017-12-04
Description: Fiyo CMS 2.0.7 has SQL injection in /system/site.php via $_REQUEST['link'].
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/FiyoCMS/FiyoCMS/issues/9; https://github.com/FiyoCMS/FiyoCMS/issues/9
CVE: CVE-2017-17103
Published: 2017-12-04
Description: Fiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]. This vulnerability can lead to escalation from normal user privileges to administrator privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/FiyoCMS/FiyoCMS/issues/10; https://github.com/FiyoCMS/FiyoCMS/issues/10
CVE: CVE-2017-17104
Published: 2017-12-04
Description: Fiyo CMS 2.0.7 has an arbitrary file read vulnerability in dapur/apps/app_theme/libs/check_file.php via $_GET['src'] or $_GET['name'].
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/FiyoCMS/FiyoCMS/issues/11; https://github.com/FiyoCMS/FiyoCMS/issues/11
CVE: CVE-2017-17112
Published: 2017-12-04
Description: ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a Pool Corruption vulnerability via a 0x83000058 DeviceIoControl request.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/IKARUS-Antivirus/Pool_Corruption_1; https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/IKARUS-Antivirus/Pool_Corruption_1
CVE: CVE-2017-17113
Published: 2017-12-04
Description: ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a NULL pointer dereference via a 0x830000c4 DeviceIoControl request.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/IKARUS-Antivirus/Null_Pointer_Dereference_1; https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/IKARUS-Antivirus/Null_Pointer_Dereference_1
CVE: CVE-2017-17114
Published: 2017-12-04
Description: ntguard.sys and ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 have a Memory Corruption vulnerability via a 0x83000084 DeviceIoControl request.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/IKARUS-Antivirus/Memory_Corruption_1_0x83000084; https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/IKARUS-Antivirus/Memory_Corruption_1_0x83000084
CVE: CVE-2017-17121
Published: 2017-12-04
Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (memory access violation) or possibly have unspecified other impact via a COFF binary in which a relocation refers to a location after the end of the to-be-relocated section.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://security.gentoo.org/glsa/201811-17; https://sourceware.org/bugzilla/show_bug.cgi?id=22506; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=b23dc97fe237a1d9e850d7cbeee066183a00630b
CVE: CVE-2017-17122
Published: 2017-12-04
Description: The dump_relocs_in_section function in objdump.c in GNU Binutils 2.29.1 does not check for reloc count integer overflows, which allows remote attackers to cause a denial of service (excessive memory allocation, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://security.gentoo.org/glsa/201811-17; https://sourceware.org/bugzilla/show_bug.cgi?id=22508; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=d785b7d4b877ed465d04072e17ca19d0f47d840f
CVE: CVE-2017-17123
Published: 2017-12-04
Description: The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted COFF based file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://security.gentoo.org/glsa/201811-17; https://sourceware.org/bugzilla/show_bug.cgi?id=22509; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=4581a1c7d304ce14e714b27522ebf3d0188d6543
CVE: CVE-2017-17124
Published: 2017-12-04
Description: The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not properly validate the size of the external string table, which allows remote attackers to cause a denial of service (excessive memory consumption, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted COFF binary.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://security.gentoo.org/glsa/201811-17; https://sourceware.org/bugzilla/show_bug.cgi?id=22507; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=b0029dce6867de1a[PII_REDACTED]b0e030d2f0f03c
CVE: CVE-2017-17125
Published: 2017-12-04
Description: nm.c and objdump.c in GNU Binutils 2.29.1 mishandle certain global symbols, which allows remote attackers to cause a denial of service (_bfd_elf_get_symbol_version_string buffer over-read and application crash) or possibly have unspecified other impact via a crafted ELF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://security.gentoo.org/glsa/201811-17; https://sourceware.org/bugzilla/show_bug.cgi?id=22443; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=160b1a618ad94988410dc81fce9189fcda5b7ff4
CVE: CVE-2017-17126
Published: 2017-12-04
Description: The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via an ELF file that lacks section headers.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://security.gentoo.org/glsa/201811-17; https://sourceware.org/bugzilla/show_bug.cgi?id=22510; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=f425ec6600b69e39eb605f3128806ff688137ea8
CVE: CVE-2017-17127
Published: 2017-12-04
Description: The vc1_decode_frame function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.libav.org/show_bug.cgi?id=1099; https://deb.freexian.com/extended-lts/tracker/CVE-2017-17127; https://lists.debian.org/debian-lts-announce/2019/12/msg00003.html
CVE: CVE-2017-17128
Published: 2017-12-04
Description: The h264_slice_init function in libavcodec/h264_slice.c in Libav 12.2 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://bugzilla.libav.org/show_bug.cgi?id=1104; https://bugzilla.libav.org/show_bug.cgi?id=1104
CVE: CVE-2017-17129
Published: 2017-12-04
Description: The ff_vc1_mc_4mv_chroma4 function in libavcodec/vc1_mc.c in Libav 12.2 allows remote attackers to cause a denial of service (segmentation fault and application crash) or possibly have unspecified other impact via a crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-476
References: https://bugzilla.libav.org/show_bug.cgi?id=1101; https://bugzilla.libav.org/show_bug.cgi?id=1101
CVE: CVE-2017-17130
Published: 2017-12-04
Description: The ff_free_picture_tables function in libavcodec/mpegpicture.c in Libav 12.2 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to vc1_decode_i_blocks_adv.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://bugzilla.libav.org/show_bug.cgi?id=1100; https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html; https://bugzilla.libav.org/show_bug.cgi?id=1100
CVE: CVE-2017-17056
Published: 2017-12-04
Description: The ZKTime Web Software 2.0.1.12280 allows the Administrator to elevate the privileges of the application user using a 'password_change()' function of the Modify Password component, reachable via the old_password, new_password1, and new_password2 parameters to the /accounts/password_change/ URI. An attacker takes advantage of this scenario and creates a crafted CSRF link to add himself as an administrator to the ZKTime Web Software. He then uses social engineering methods to trick the administrator into clicking the forged HTTP request. The request is executed and the attacker becomes the Administrator of the ZKTime Web Software. If the vulnerability is successfully exploited, then an attacker (who would be a normal user of the web application) can escalate his privileges and become the administrator of ZKTime Web Software.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/145160/ZKTeco-ZKTime-Web-2.0.1.12280-Cross-Site-Request-Forgery.html; http://www.securityfocus.com/bid/102007; http://packetstormsecurity.com/files/145160/ZKTeco-ZKTime-Web-2.0.1.12280-Cross-Site-Request-Forgery.html
CVE: CVE-2017-17057
Published: 2017-12-04
Description: There is a reflected XSS vulnerability in ZKTime Web 2.0.1.12280. The vulnerability exists due to insufficient filtration of user-supplied data in the 'Range' field of the 'Department' module in a Personnel Advanced Query. A remote attacker can execute arbitrary HTML and script code in the browser in the context of the vulnerable application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/145159/ZKTeco-ZKTime-Web-2.0.1.12280-Cross-Site-Scripting.html; http://www.securityfocus.com/bid/102006; http://packetstormsecurity.com/files/145159/ZKTeco-ZKTime-Web-2.0.1.12280-Cross-Site-Scripting.html
CVE: CVE-2017-16721
Published: 2017-12-04
Description: A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated attacker to inject arbitrary code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/102031; https://ics-cert.us-cert.gov/advisories/ICSA-17-334-02; http://www.securityfocus.com/bid/102031
CVE: CVE-2017-12079
Published: 2017-12-04
Description: Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain arbitrary files via prog_id field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552, CWE-200
References: https://www.synology.com/en-global/support/security/Synology_SA_17_63_Photo_Station; https://www.synology.com/en-global/support/security/Synology_SA_17_63_Photo_Station
CVE: CVE-2017-12080
Published: 2017-12-04
Description: An information exposure vulnerability in default HTTP configuration file in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain sensitive system information via .htaccess file.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://www.synology.com/en-global/support/security/Synology_SA_17_63_Photo_Station; https://www.synology.com/en-global/support/security/Synology_SA_17_63_Photo_Station
CVE: CVE-2017-15889
Published: 2017-12-04
Description: Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-77
References: http://packetstormsecurity.com/files/157807/Synology-DiskStation-Manager-smart.cgi-Remote-Command-Execution.html; https://www.synology.com/en-global/support/security/Synology_SA_17_65_DSM; http://packetstormsecurity.com/files/157807/Synology-DiskStation-Manager-smart.cgi-Remote-Command-Execution.html
CVE: CVE-2017-16929
Published: 2017-12-05
Description: The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversal vulnerability exploited by issuing a specially crafted request, allowing a remote attacker to read/write arbitrary files. This can be exploited via ../ sequences in the pathname to miner_file or miner_getfile.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22, CWE-119
References: http://www.openwall.com/lists/oss-security/2017/12/04/3; https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-16929; https://www.exploit-db.com/exploits/43231/
CVE: CVE-2017-16930
Published: 2017-12-05
Description: The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the request handler. This can be exploited via a long API request that is mishandled during logging.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2017/12/04/3; https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-16930; https://www.exploit-db.com/exploits/43231/
CVE: CVE-2017-17066
Published: 2017-12-05
Description: The (1) i2pd before 2.17 and (2) kovri pre-alpha implementations of the I2P routing protocol do not properly handle Garlic DeliveryTypeTunnel packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading sensitive router memory, aka the GarlicRust bug.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://eyalitkin.wordpress.com/2017/12/04/cve-publication-garlicrust-cve-2017-17066/; https://hackerone.com/reports/291489; https://eyalitkin.wordpress.com/2017/12/04/cve-publication-garlicrust-cve-2017-17066/
CVE: CVE-2017-8824
Published: 2017-12-05
Description: The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html; http://lists.openwall.net/netdev/2017/12/04/224; http://www.openwall.com/lists/oss-security/2017/12/05/1
CVE: CVE-2016-1252
Published: 2017-12-05
Description: The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS before 1.2.15ubuntu0.2, and in Ubuntu 16.10 before 1.3.2ubuntu0.1 allows man-in-the-middle attackers to bypass a repository-signing protection mechanism by leveraging improper error handling when validating InRelease file signatures.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://packetstormsecurity.com/files/140145/apt-Repository-Signing-Bypass.html; http://www.ubuntu.com/usn/USN-3156-1; https://bugs.chromium.org/p/project-zero/issues/detail?id=1020
CVE: CVE-2016-1253
Published: 2017-12-05
Description: The most package in Debian wheezy before 5.0.0a-2.2, in Debian jessie before 5.0.0a-2.3+deb8u1, and in Debian unstable before 5.0.0a-3 allows remote attackers to execute arbitrary commands via shell metacharacters in the name of an LZMA-compressed file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://seclists.org/oss-sec/2016/q4/666; http://www.securityfocus.com/bid/94931; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848132
CVE: CVE-2016-1254
Published: 2017-12-05
Description: Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00154.html; http://lists.opensuse.org/opensuse-updates/2016-12/msg00155.html; https://blog.torproject.org/blog/tor-02812-released
CVE: CVE-2016-1255
Published: 2017-12-05
Description: The pg_ctlcluster script in postgresql-common package in Debian wheezy before 134wheezy5, in Debian jessie before 165+deb8u2, in Debian unstable before 178, in Ubuntu 12.04 LTS before 129ubuntu1.2, in Ubuntu 14.04 LTS before 154ubuntu1.1, in Ubuntu 16.04 LTS before 173ubuntu0.1, in Ubuntu 17.04 before 179ubuntu0.1, and in Ubuntu 17.10 before 184ubuntu1.1 allows local users to gain root privileges via a symlink attack on a logfile in /var/log/postgresql.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: http://www.ubuntu.com/usn/USN-3476-1; http://www.ubuntu.com/usn/USN-3476-2; https://anonscm.debian.org/cgit/pkg-postgresql/postgresql-common.git/commit/?id=c8989206ec360f199400c74f129f7b4cb878c1ee
CVE: CVE-2017-16856
Published: 2017-12-05
Description: The RSS Feed macro in Atlassian Confluence before version 6.5.2 allows remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS) vulnerabilities in various rss properties which were used as links without restriction on their scheme.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/102094; https://jira.atlassian.com/browse/CONFSERVER-54395; http://www.securityfocus.com/bid/102094
CVE: CVE-2017-16857
Published: 2017-12-05
Description: It is possible to bypass the bitbucket auto-unapprove plugin via minimal brute-force because it is relying on asynchronous events on the back-end. This allows an attacker to merge any code into unsuspecting repositories. This affects all versions of the auto-unapprove plugin, however since the auto-unapprove plugin is not bundled with Bitbucket Server it does not affect any particular version of Bitbucket.
CVSS Score: 8.5 (HIGH)
CWE: CWE-362
References: https://jira.atlassian.com/browse/BSERV-10439; https://jira.atlassian.com/browse/BSERV-10439
CVE: CVE-2017-11016
Published: 2017-12-05
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when memory allocation fails while creating a calibration block in create_cal_block stale pointers are left uncleared.
CVSS Score: 7.8 (HIGH)
CWE: CWE-404
References: https://source.android.com/security/bulletin/pixel/2017-12-01; https://source.android.com/security/bulletin/pixel/2017-12-01
CVE: CVE-2017-11019
Published: 2017-12-05
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the fd allocated during the get_metadata was not closed even though the buffer allocated to the fd was freed. This resulted in a failure during exit sequence.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2017-12-01; https://source.android.com/security/bulletin/pixel/2017-12-01
CVE: CVE-2017-11030
Published: 2017-12-05
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the HDMI video driver function hdmi_edid_sysfs_rda_res_info(), userspace can perform an arbitrary write into kernel memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2017-12-01; https://source.android.com/security/bulletin/pixel/2017-12-01