deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-14704
Published: 2017-09-26
Description: Multiple unrestricted file upload vulnerabilities in the (1) imageSubmit and (2) proof_submit functions in Claydip Laravel Airbnb Clone 1.0 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/profile.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://www.exploit-db.com/exploits/42773/; https://www.exploit-db.com/exploits/42773/
CVE: CVE-2017-5192
Published: 2017-09-26
Description: When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://docs.saltstack.com/en/2016.3/topics/releases/2015.8.13.html; https://docs.saltstack.com/en/2016.3/topics/releases/2016.3.5.html; https://docs.saltstack.com/en/latest/topics/releases/2016.11.2.html
CVE: CVE-2017-5200
Published: 2017-09-26
Description: Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.
CVSS Score: 8.8 (HIGH)
References: https://docs.saltstack.com/en/2016.3/topics/releases/2015.8.13.html; https://docs.saltstack.com/en/2016.3/topics/releases/2016.3.5.html; https://docs.saltstack.com/en/latest/topics/releases/2016.11.2.html
CVE: CVE-2015-3248
Published: 2017-09-26
Description: openhpi/Makefile.am in OpenHPI before 3.6.0 uses world-writable permissions for /var/lib/openhpi directory, which allows local users, when quotas are not properly setup, to fill the filesystem hosting /var/lib and cause a denial of service (disk consumption).
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-400
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168841.html; http://openhpi.org/Changelogs/3.6.0; https://bugzilla.redhat.com/show_bug.cgi?id=1233521
CVE: CVE-2015-7390
Published: 2017-09-26
Description: SQL injection vulnerability in TestLink before 1.9.14 allows remote attackers to execute arbitrary SQL commands via the apikey parameter to lnl.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/archive/1/536623/100/0/threaded; http://www.securityfocus.com/archive/1/536623/100/0/threaded
CVE: CVE-2015-7391
Published: 2017-09-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.9.14 allow remote attackers to inject arbitrary web script or HTML via the (1) selected_end_date or (2) selected_start_date parameter to lib/results/tcCreatedPerUserOnTestProject.php; the (3) containerType parameter to lib/testcases/containerEdit.php; the (4) filter_tc_id or (5) filter_testcase_name parameter to lib/testcases/listTestCases.php; the (6) useRecursion parameter to lib/testcases/tcImport.php; the (7) targetTestCase or (8) created_by parameter to lib/testcases/tcSearch.php; or the (9) HTTP Referer header to third_party/user_contribution/fakeRemoteExecServer/client4fakeXMLRPCTestRunner.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/536622/100/0/threaded; http://www.securityfocus.com/archive/1/536622/100/0/threaded
CVE: CVE-2015-7670
Published: 2017-09-26
Description: Multiple SQL injection vulnerabilities in includes/update.php in the Support Ticket System plugin before 1.2.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user or (2) id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/archive/1/536624/100/0/threaded; https://wordpress.org/plugins/simple-support-ticket-system/#developers; https://wpvulndb.com/vulnerabilities/8207
CVE: CVE-2017-14745
Published: 2017-09-26
Description: The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, interpret a -1 value as a sorting count instead of an error flag, which allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://sourceware.org/bugzilla/show_bug.cgi?id=22148; https://sourceware.org/bugzilla/show_bug.cgi?id=22148
CVE: CVE-2017-1425
Published: 2017-09-26
Description: IBM Business Process Manager 8.0.1.1 and 8.5.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127478.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22006265; http://www.securityfocus.com/bid/100961; https://exchange.xforce.ibmcloud.com/vulnerabilities/127478
CVE: CVE-2017-14748
Published: 2017-09-26
Description: Race condition in Blizzard Overwatch 1.15.0.2 allows remote authenticated users to cause a denial of service (season bans and SR losses for other users) by leaving a competitive match at a specific time during the initial loading of that match.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-362
References: http://www.securityfocus.com/bid/101087; https://us.battle.net/forums/en/overwatch/topic/[PII_REDACTED]4; https://www.reddit.com/r/Overwatch/comments/72euqx/theres_a_bug_out_there_that_can_instantly/
CVE: CVE-2017-1527
Published: 2017-09-26
Description: IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 130156.
CVSS Score: 8.1 (HIGH)
CWE: CWE-611
References: http://www.ibm.com/support/docview.wss?uid=swg22007346; http://www.securityfocus.com/bid/100959; https://exchange.xforce.ibmcloud.com/vulnerabilities/130156
CVE: CVE-2017-1530
Published: 2017-09-26
Description: IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130409.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22007351; http://www.securityfocus.com/bid/100960; https://exchange.xforce.ibmcloud.com/vulnerabilities/130409
CVE: CVE-2017-1531
Published: 2017-09-26
Description: IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130410.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22007354; http://www.securityfocus.com/bid/100963; https://exchange.xforce.ibmcloud.com/vulnerabilities/130410
CVE: CVE-2017-1539
Published: 2017-09-26
Description: IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to privilege escalation by not properly distinguishing internal group memberships from user registry group memberships. By manipulating LDAP group membership an attack might gain privileged access. IBM X-Force ID: 130807.
CVSS Score: 8.8 (HIGH)
References: http://www.ibm.com/support/docview.wss?uid=swg22007451; http://www.securityfocus.com/bid/100967; https://exchange.xforce.ibmcloud.com/vulnerabilities/130807
CVE: CVE-2017-14749
Published: 2017-09-26
Description: JerryScript 1.0 allows remote attackers to cause a denial of service (jmem_heap_alloc_block_internal heap memory corruption) or possibly execute arbitrary code via a crafted .js file, because unrecognized \ characters cause incorrect 0x00 characters in bytecode.literal data.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/jerryscript-project/jerryscript/issues/2008; https://github.com/jerryscript-project/jerryscript/issues/2008
CVE: CVE-2017-14751
Published: 2017-09-26
Description: The Intense WP "WP Jobs" plugin 1.5 for WordPress has XSS, related to the Job Qualification field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://bbs.microdesktop.com/2017/09/25/wordpress-4-8-wp-jobs-1-5-job-qualification-edit-box-xss/; http://www.securityfocus.com/bid/101030; https://wordpress.org/plugins/wp-jobs/#developers
CVE: CVE-2017-14753
Published: 2017-09-27
Description: Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the filter parameter to module/module_filters/index.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/101031; https://github.com/jsj730sos/Vulnerability-details/wiki/eyesofnetwork_eonweb-5.1_filter_cross-site-scripting-%28XSS%29; http://www.securityfocus.com/bid/101031
CVE: CVE-2017-14760
Published: 2017-09-27
Description: SQL Injection exists in /includes/event-management/index.php in the event-espresso-free (aka Event Espresso Lite) plugin v3.1.37.12.L for WordPress via the recurrence_id parameter to /wp-admin/admin.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.sstrunk.com/cve/wp_event-espresso-free.html; http://www.sstrunk.com/cve/wp_event-espresso-free.html
CVE: CVE-2017-14761
Published: 2017-09-27
Description: In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/; http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/
CVE: CVE-2017-14762
Published: 2017-09-27
Description: In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/; http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/
CVE: CVE-2017-14763
Published: 2017-09-27
Description: In the Install Themes page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a theme.
CVSS Score: 8.8 (HIGH)
References: http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/; http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/
CVE: CVE-2017-14764
Published: 2017-09-27
Description: In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/; http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/
CVE: CVE-2017-14765
Published: 2017-09-27
Description: In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/; http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/
CVE: CVE-2017-14766
Published: 2017-09-27
Description: The Simple Student Result plugin before 1.6.4 for WordPress has an Authentication Bypass vulnerability because the fn_ssr_add_st_submit() function and fn_ssr_del_st_submit() function in functions.php only require knowing the student id number.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://limbenjamin.com/articles/simple-student-result-auth-bypass.html; https://wordpress.org/plugins/simple-student-result/#developers; https://wpvulndb.com/vulnerabilities/8920
CVE: CVE-2017-14767
Published: 2017-09-27
Description: The sdp_parse_fmtp_config_h264 function in libavformat/rtpdec_h264.c in FFmpeg before 3.3.4 mishandles empty sprop-parameter-sets values, which allows remote attackers to cause a denial of service (heap buffer overflow) or possibly have unspecified other impact via a crafted sdp file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3996; http://www.securityfocus.com/bid/101019; https://github.com/FFmpeg/FFmpeg/commit/c42a1388a6d1bfd8001bf6a4241d8ca27e49326d
CVE: CVE-2014-8878
Published: 2017-09-28
Description: KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-310
References: http://www.openwall.com/lists/oss-security/2015/07/16/10; http://www.securityfocus.com/bid/75986; https://bugs.kde.org/show_bug.cgi?id=340312
CVE: CVE-2014-9686
Published: 2017-09-28
Description: The Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub-domain belonging to a victim domain to cause a denial of service via the 'url' parameter to plugin_googlemap3_kmlprxy.php.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7428.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-399
References: http://seclists.org/fulldisclosure/2014/Feb/53; http://websecurity.com.ua/6987/; http://www.openwall.com/lists/oss-security/2015/02/26/11
CVE: CVE-2015-1336
Published: 2017-09-28
Description: The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://packetstormsecurity.com/files/140759/Man-db-2.6.7.1-Privilege-Escalation.html; http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1336.html; http://www.halfdog.net/Security/2015/MandbSymlinkLocalRootPrivilegeEscalation/
CVE: CVE-2015-1526
Published: 2017-09-28
Description: The media_server component in Android allows remote attackers to cause a denial of service via a crafted application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: http://www.securityfocus.com/bid/76666; https://www.blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf; http://www.securityfocus.com/bid/76666
CVE: CVE-2015-1537
Published: 2017-09-28
Description: Integer overflow in IHDCP.cpp in the media_server component in Android allows remote attackers to execute arbitrary code via a crafted application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/76670; https://android.googlesource.com/platform/frameworks/av/+/c82e31a7039a03dca7b37c65b7890ba5c1e18ced%5E%21/#F0; https://www.blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf
CVE: CVE-2015-3138
Published: 2017-09-28
Description: print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html; https://bugzilla.redhat.com/show_bug.cgi?id=1212342; https://github.com/the-tcpdump-group/tcpdump/commit/3ed82f4ed[PII_REDACTED]afc22b923c8f7171fff70
CVE: CVE-2015-3643
Published: 2017-09-28
Description: usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call check_polkit for the KVMTest method.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2015/04/22/12; http://www.openwall.com/lists/oss-security/2015/05/04/3; http://www.securityfocus.com/bid/74304
CVE: CVE-2015-5613
Published: 2017-09-28
Description: Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving a file title, a different vulnerability than CVE-2015-5612.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2015/07/22/3; https://github.com/octobercms/october/commit/8a4ac533e5cd6b8f92e9ef19fbfbb2f505dc7a9a; https://github.com/octobercms/october/issues/1302
CVE: CVE-2015-7256
Published: 2017-09-28
Description: ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business gateways; GS1900-8 and GS1900-24 switches; and C1000Z, Q1000, FR1000Z, and P8702N project models use non-unique X.509 certificates and SSH host keys.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/566724; http://www.zyxel.com/support/announcement_SSH_private_key_and_certificate_vulnerability.shtml; http://www.kb.cert.org/vuls/id/566724
CVE: CVE-2015-7349
Published: 2017-09-28
Description: Cross-site scripting (XSS) vulnerability in the sample feedback.inc file in VASCO DIGIPASS authentication plug-in for Citrix Web Interface allows remote attackers to inject arbitrary web script or HTML via the failmessage parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://labs.integrity.pt/advisories/cve-2015-7349/index.html; https://www.vasco.com/images/de-de/KB_140148_tcm45-47825.pdf; https://www.vasco.com/support/knowledge-base-articles/kb-140148.html
CVE: CVE-2015-8249
Published: 2017-09-28
Description: The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary files via the ConnectionId parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://packetstormsecurity.com/files/134806/ManageEngine-Desktop-Central-9-FileUploadServlet-ConnectionId.html; http://www.rapid7.com/db/modules/exploit/windows/http/manageengine_connectionid_write; https://community.rapid7.com/community/infosec/blog/2015/12/14/r7-2015-22-manageengine-desktop-central-9-fileuploadservlet-connectionid-vulnerability-cve-2015-8249
CVE: CVE-2017-10932
Published: 2017-09-28
Description: All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the applications of C/S architecture using the Java RMI service in which the servers use the Apache Commons Collections (ACC) library that may result in Java deserialization vulnerabilities. An unauthenticated remote attacker can exploit the vulnerabilities by sending a crafted RMI request to execute arbitrary code on the target host.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008422; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008422
CVE: CVE-2017-11120
Published: 2017-09-28
Description: On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer overflow in the Wi-Fi firmware, aka B-V[PII_REDACTED].
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/144328/Broadcom-802.11k-Neighbor-Report-Response-Out-Of-Bounds-Write.html; http://www.securityfocus.com/bid/100984; https://bugs.chromium.org/p/project-zero/issues/detail?id=1289
CVE: CVE-2017-11121
Published: 2017-09-28
Description: On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, properly crafted malicious over-the-air Fast Transition frames can potentially trigger internal Wi-Fi firmware heap and/or stack overflows, leading to denial of service or other effects, aka B-V[PII_REDACTED].
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/144329/Broadcom-802.11r-FT-Reassociation-Response-Overflows.html; http://www.securityfocus.com/bid/100984; https://bugs.chromium.org/p/project-zero/issues/detail?id=1291
CVE: CVE-2017-11191
Published: 2017-09-28
Description: FreeIPA 4.x with API version 2.213 allows a remote authenticated users to bypass intended account-locking restrictions via an unlock action with an old session ID (for the same user account) that had been created for an earlier session. NOTE: Vendor states that issue does not exist in product and does not recognize this report as a valid security concern
CVSS Score: 8.8 (HIGH)
CWE: CWE-384
References: http://packetstormsecurity.com/files/143532/FreeIPA-2.213-Session-Hijacking.html; http://packetstormsecurity.com/files/143532/FreeIPA-2.213-Session-Hijacking.html
CVE: CVE-2017-12621
Published: 2017-09-28
Description: During Jelly (xml) file parsing with Apache Xerces, if a custom doctype entity is declared with a "SYSTEM" entity with a URL and that entity is used in the body of the Jelly file, during parser instantiation the parser will attempt to connect to said URL. This could lead to XML External Entity (XXE) attacks in Apache Commons Jelly before 1.0.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://www.securityfocus.com/bid/101052; http://www.securitytracker.com/id/1039444; https://issues.apache.org/jira/browse/JELLY-293
CVE: CVE-2017-12814
Published: 2017-09-28
Description: Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windows allows attackers to execute arbitrary code via a long environment variable.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101051; https://perl5.git.perl.org/perl.git/log/refs/tags/v5.24.3-RC1; https://perl5.git.perl.org/perl.git/log/refs/tags/v5.26.1-RC1
CVE: CVE-2017-13676
Published: 2017-09-28
Description: Norton Remove & Reinstall can be susceptible to a DLL preloading vulnerability. These types of issues occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will generally follow a specific search path to locate the DLL. The vulnerability can be exploited by a simple file write (or potentially an over-write) which results in a foreign DLL running under the context of the application. A Norton Remove & Reinstall update, version 4.4.0.58, has been released which addresses the aforementioned vulnerability.
CVSS Score: 7.0 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/100939; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170926_00; http://www.securityfocus.com/bid/100939
CVE: CVE-2017-1407
Published: 2017-09-28
Description: IBM Security Identity Manager Virtual Appliance 6.0 and 7.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 127394.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://www.ibm.com/support/docview.wss?uid=swg22007377; http://www.securityfocus.com/bid/101015; https://exchange.xforce.ibmcloud.com/vulnerabilities/127394
CVE: CVE-2017-14524
Published: 2017-09-28
Description: Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a (1) URL in the startat parameter to xda/help/en/default.htm or (2) /%09/ (slash encoded horizontal tab slash) followed by a domain in the redirectUrl parameter to xda/component/virtuallinkconnect.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://seclists.org/fulldisclosure/2017/Sep/57; https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774; http://seclists.org/fulldisclosure/2017/Sep/57