deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-16241
Published: 2017-12-10
Description: Incorrect access control in AMAG Symmetry Door Edge Network Controllers (EN-1DBC Boot App 23611 03.60 and STD App 23603 03.60; EN-2DBC Boot App 24451 01.00 and STD App 2461 01.00) enables remote attackers to execute door controller commands (e.g., lock, unlock, add ID card value) by sending unauthenticated requests to the affected devices via Serial over TCP/IP, as demonstrated by a Ud command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://github.com/lixmk/Concierge; https://hushcon.com/schedule.html; https://www.secureworks.com/research/advisory-2017-001
CVE: CVE-2017-17484
Published: 2017-12-10
Description: The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles ucnv_convertEx calls for UTF-8 to UTF-8 conversion, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted string, as demonstrated by ZNC.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/znc/znc/issues/1459; https://ssl.icu-project.org/trac/attachment/ticket/13490/poc.cpp; https://ssl.icu-project.org/trac/changeset/40714
CVE: CVE-2017-17496
Published: 2017-12-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-17497
Published: 2017-12-10
Description: In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because the currentNode variable in the "children of the head" processing feature is modified in the loop without validating the new value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/htacg/tidy-html5/issues/656; https://github.com/htacg/tidy-html5/issues/656
CVE: CVE-2017-16789
Published: 2017-12-11
Description: Cross-site scripting (XSS) vulnerability in Integration Matters nJAMS 3 before 3.2.0 Hotfix 7, as used in TIBCO BusinessWorks Process Monitor through 3.0.1.3 and other products, allows remote authenticated administrators to inject arbitrary web script or HTML via the users management panel of the web interface.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://pastebin.com/AxvP1v2Z; https://www.integrationmatters.com/cms/upload/Resources/nJAMS_SecurityUpdate_CVE-2017-16789.pdf; https://www.on-x.com/sites/default/files/on-x_-_security_advisory_-_njams3_-_cve-2017-16789.pdf
CVE: CVE-2017-17498
Published: 2017-12-11
Description: WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (bit_stream.c MagickBitStreamMSBWrite heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://hg.code.sf.net/p/graphicsmagick/code/rev/f1c418ef0260; http://www.securityfocus.com/bid/102158; https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html
CVE: CVE-2017-17499
Published: 2017-12-11
Description: ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/102155; https://github.com/ImageMagick/ImageMagick/commit/8c35502217c1879cb8257c617007282eee3fe1cc; https://github.com/ImageMagick/ImageMagick/commit/dd96d671e4d5ae22c6894c302e8996c13f24c45a
CVE: CVE-2017-17500
Published: 2017-12-11
Description: ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://hg.code.sf.net/p/graphicsmagick/code/rev/1366f2dd9931; http://www.securityfocus.com/bid/102164; https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html
CVE: CVE-2017-17501
Published: 2017-12-11
Description: WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://hg.code.sf.net/p/graphicsmagick/code/rev/5b8414c0d0c4; http://www.securityfocus.com/bid/102185; https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html
CVE: CVE-2017-17502
Published: 2017-12-11
Description: ReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has a magick/import.c ImportCMYKQuantumType heap-based buffer over-read via a crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://hg.code.sf.net/p/graphicsmagick/code/rev/a9c425688397; https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html; https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html
CVE: CVE-2017-17503
Published: 2017-12-11
Description: ReadGRAYImage in coders/gray.c in GraphicsMagick 1.3.26 has a magick/import.c ImportGrayQuantumType heap-based buffer over-read via a crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://hg.code.sf.net/p/graphicsmagick/code/rev/460ef5e858ad; https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html; https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html
CVE: CVE-2017-17504
Published: 2017-12-11
Description: ImageMagick before 7.0.7-12 has a coders/png.c Magick_png_read_raw_profile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/ImageMagick/ImageMagick/issues/872; https://lists.debian.org/debian-lts-announce/2018/01/msg00000.html; https://usn.ubuntu.com/3681-1/
CVE: CVE-2017-17505
Published: 2017-12-11
Description: In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md; https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md
CVE: CVE-2017-17506
Published: 2017-12-11
Description: In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Opline_pline_decode in H5Opline.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md; https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md
CVE: CVE-2017-17507
Published: 2017-12-11
Description: In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5T_conv_struct_opt in H5Tconv.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md; https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md
CVE: CVE-2017-17508
Published: 2017-12-11
Description: In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md; https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md
CVE: CVE-2017-17509
Published: 2017-12-11
Description: In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a. For example, h5dump would crash or possibly have unspecified other impact someone opens a crafted hdf5 file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md; https://github.com/xiaoqx/pocs/tree/master/hdf5/readme.md
CVE: CVE-2017-11463
Published: 2017-12-11
Description: In Ivanti Service Desk (formerly LANDESK Management Suite) versions between 2016.3 and 2017.3, an Unrestricted Direct Object Reference leads to referencing/updating objects belonging to other users. In other words, a normal user can send requests to a specific URI with the target user's username in an HTTP payload in order to retrieve a key/token and use it to access/update objects belonging to other users. Such objects could be user profiles, tickets, incidents, etc.
CVSS Score: 8.8 (HIGH)
CWE: CWE-275
References: https://community.ivanti.com/docs/DOC-66252; https://gist.github.com/lazyhack3r/439e92419c552b5dc82b2f5e832c8bfb; https://community.ivanti.com/docs/DOC-66252
CVE: CVE-2017-17512
Published: 2017-12-11
Description: sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: http://metadata.ftp-master.debian.org/changelogs/main/s/sensible-utils/sensible-utils_0.0.11_changelog; https://bugs.debian.org/881767; https://lists.debian.org/debian-lts-announce/2017/12/msg00012.html
CVE: CVE-2017-17523
Published: 2017-12-11
Description: lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://bugs.debian.org/881767; https://bugs.debian.org/884136; https://sourceforge.net/p/testlilyissues/issues/5243/
CVE: CVE-2017-17536
Published: 2017-12-11
Description: Phabricator before 2017-11-10 does not block the --config and --debugger flags to the Mercurial hg program, which allows remote attackers to execute arbitrary code by using the web UI to browse a branch whose name begins with a --config= or --debugger= substring.
CVSS Score: 8.8 (HIGH)
References: https://hackerone.com/reports/288704; https://secure.phabricator.com/T13012; https://hackerone.com/reports/288704
CVE: CVE-2016-6904
Published: 2017-12-11
Description: Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authentication. This could allow an unauthenticated attacker to obtain authentication credentials.
CVSS Score: 8.1 (HIGH)
CWE: CWE-255
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2017-15708
Published: 2017-12-11
Description: In Apache Synapse, by default no authentication is required for Java Remote Method Invocation (RMI). So Apache Synapse 3.0.1 or all previous releases (3.0.0, 2.1.0, 2.0.0, 1.2, 1.1.2, 1.1.1) allows remote code execution attacks that can be performed by injecting specially crafted serialized objects. And the presence of Apache Commons Collections 3.2.1 (commons-collections-3.2.1.jar) or previous versions in Synapse distribution makes this exploitable. To mitigate the issue, we need to limit RMI access to trusted users only. Further upgrading to 3.0.1 version will eliminate the risk of having said Commons Collection version. In Synapse 3.0.1, Commons Collection has been updated to 3.2.2 version.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: http://www.securityfocus.com/bid/102154; https://lists.apache.org/thread.html/77f2accf240d25d91b47033e2f8ebec84ffbc6e6627112b2f98b66c9%40%3Cdev.synapse.apache.org%3E; https://lists.apache.org/thread.html/r0fb289cd38c915b9a13a3376134f96222dd9100f1ef66b41631865c6%40%3Ccommits.doris.apache.org%3E
CVE: CVE-2017-11507
Published: 2017-12-11
Description: A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.2.8x prior to 1.2.8p25 and 1.4.0x prior to 1.4.0p9, allowing an unauthenticated attacker to inject arbitrary HTML or JavaScript via the output_format parameter, and the username parameter of failed HTTP basic authentication attempts, which is returned unencoded in an internal server error page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://mathias-kettner.com/check_mk_werks.php?werk_id=7661; https://www.tenable.com/security/research/tra-2017-20; http://mathias-kettner.com/check_mk_werks.php?werk_id=7661
CVE: CVE-2017-13070
Published: 2017-12-11
Description: A DLL Hijacking vulnerability in QNAP Qsync for Windows (exe) version 4.2.2.0724 and earlier could allow remote attackers to execute arbitrary code on Windows machines.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://www.qnap.com/zh-tw/security-advisory/nas-201712-08; https://www.qnap.com/zh-tw/security-advisory/nas-201712-08
CVE: CVE-2017-16723
Published: 2017-12-11
Description: A Cross-site Scripting issue was discovered in PHOENIX CONTACT FL COMSERVER BASIC 232/422/485, FL COMSERVER UNI 232/422/485, FL COMSERVER BAS 232/422/485-T, FL COMSERVER UNI 232/422/485-T, FL COM SERVER RS232, FL COM SERVER RS485, and PSI-MODEM/ETH (running firmware versions prior to 1.99, 2.20, or 2.40). The cross-site scripting vulnerability has been identified, which may allow remote code execution.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/102111; https://cert.vde.com/de-de/advisories/vde-2017-004; https://ics-cert.us-cert.gov/advisories/ICSA-17-341-03
CVE: CVE-2014-3250
Published: 2017-12-11
Description: The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information via a revoked certificate when a Puppet master runs with Apache 2.4.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295
References: https://bugzilla.redhat.com/show_bug.cgi?id=1101347; https://puppet.com/security/cve/CVE-2014-3250; https://bugzilla.redhat.com/show_bug.cgi?id=1101347
CVE: CVE-2015-6502
Published: 2017-12-11
Description: Cross-site scripting (XSS) vulnerability in the console in Puppet Enterprise before 2015.2.1 allows remote attackers to inject arbitrary web script or HTML via the string parameter, related to Login Redirect.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://puppet.com/security/cve/CVE-2015-6502; https://puppet.com/security/cve/CVE-2015-6502
CVE: CVE-2015-8470
Published: 2017-12-11
Description: The console in Puppet Enterprise 3.7.x, 3.8.x, and 2015.2.x does not set the secure flag for the JSESSIONID cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://puppet.com/security/cve/CVE-2015-8470; https://puppet.com/security/cve/CVE-2015-8470
CVE: CVE-2017-11319
Published: 2017-12-11
Description: Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and missing cross server side checking mechanisms.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: http://packetstormsecurity.com/files/145230/Perspective-ICM-Investigation-And-Case-5.1.1.16-Privilege-Escalation.html; https://www.exploit-db.com/exploits/43210/; http://packetstormsecurity.com/files/145230/Perspective-ICM-Investigation-And-Case-5.1.1.16-Privilege-Escalation.html
CVE: CVE-2017-15870
Published: 2017-12-11
Description: Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on the local station to gain SYSTEM privileges via vectors involving "image path execution hijacking."
CVSS Score: 6.7 (MEDIUM)
References: http://www.securityfocus.com/bid/102083; https://security.paloaltonetworks.com/CVE-2017-15870; http://www.securityfocus.com/bid/102083
CVE: CVE-2017-15940
Published: 2017-12-11
Description: The web interface packet capture management component in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote authenticated users to execute arbitrary code via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://www.securityfocus.com/bid/102076; http://www.securitytracker.com/id/1040006; https://security.paloaltonetworks.com/CVE-2017-15940
CVE: CVE-2017-15942
Published: 2017-12-11
Description: Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.13, and 8.0.x before 8.0.6 allows remote attackers to cause a denial of service via vectors related to the management interface.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/102075; http://www.securitytracker.com/id/1040004; https://security.paloaltonetworks.com/CVE-2017-15942
CVE: CVE-2017-15943
Published: 2017-12-11
Description: The configuration file import for applications, spyware and vulnerability objects functionality in the web interface in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, and 7.1.x before 7.1.14 allows remote attackers to conduct server-side request forgery (SSRF) attacks and consequently obtain sensitive information via vectors related to parsing of external entities.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918
References: http://www.securityfocus.com/bid/102074; http://www.securitytracker.com/id/1040005; https://security.paloaltonetworks.com/CVE-2017-15943
CVE: CVE-2017-15944
Published: 2017-12-11
Description: Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-119
References: http://www.securityfocus.com/bid/102079; http://www.securitytracker.com/id/1040007; https://security.paloaltonetworks.com/CVE-2017-15944
CVE: CVE-2017-17110
Published: 2017-12-11
Description: Techno Portfolio Management Panel 1.0 allows an attacker to inject SQL commands via a single.php?id= request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/145231/Techno-Portfolio-Management-Panel-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43211/; http://packetstormsecurity.com/files/145231/Techno-Portfolio-Management-Panel-1.0-SQL-Injection.html
CVE: CVE-2017-17111
Published: 2017-12-11
Description: Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-details.php?ID= request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/145237/Readymade-Classifieds-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43212/; http://packetstormsecurity.com/files/145237/Readymade-Classifieds-Script-1.0-SQL-Injection.html
CVE: CVE-2017-17551
Published: 2017-12-11
Description: The Backup and Restore feature in Mobotap Dolphin Browser for Android 12.0.2 suffers from an arbitrary file write vulnerability when attempting to restore browser settings from a malicious Dolphin Browser backup file. This arbitrary file write vulnerability allows an attacker to overwrite a specific executable in the Dolphin Browser's data directory with a crafted malicious executable. Every time the Dolphin Browser is launched, it will attempt to run the malicious executable from disk, thus executing the attacker's code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://github.com/VerSprite/research/blob/master/advisories/VS-2017-001.md; https://github.com/VerSprite/research/blob/master/advisories/VS-2017-001.md
CVE: CVE-2014-8358
Published: 2017-12-11
Description: Huawei EC156, EC176, and EC177 USB Modem products with software before UTPS-V200R003B015D02SP07C1014 (23.015.02.07.1014) and before V200R003B015D02SP08C1014 (23.015.02.08.1014) use a weak ACL for the "Mobile Partner" directory, which allows remote attackers to gain SYSTEM privileges by compromising a low privilege account and modifying Mobile Partner.exe.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.huawei.com/us/psirt/security-advisories/2014/hw-376152; http://www.securityfocus.com/bid/70672; https://packetstormsecurity.com/files/128767/Huawei-Mobile-Partner-DLL-Hijacking.html
CVE: CVE-2[PII_REDACTED]
Published: 2017-12-11
Description: The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exception can be triggered leading to a kernel panic.
CVSS Score: 7.4 (HIGH)
CWE: CWE-754
References: http://www.openwall.com/lists/oss-security/2017/12/04/2; http://www.securityfocus.com/bid/102038; https://access.redhat.com/errata/RHSA-2018:0676
CVE: CVE-2017-1507
Published: 2017-12-11
Description: IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to further attacks against the system. IBM X-Force ID: 129619.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22010627; https://exchange.xforce.ibmcloud.com/vulnerabilities/129619; http://www.ibm.com/support/docview.wss?uid=swg22010627
CVE: CVE-2017-1536
Published: 2017-12-11
Description: IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130733.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22008031; http://www.securityfocus.com/bid/102183; https://exchange.xforce.ibmcloud.com/vulnerabilities/130733
CVE: CVE-2017-1548
Published: 2017-12-11
Description: IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 131288.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: http://www.ibm.com/support/docview.wss?uid=swg22010738; http://www.securityfocus.com/bid/102187; https://exchange.xforce.ibmcloud.com/vulnerabilities/131288
CVE: CVE-2017-1549
Published: 2017-12-11
Description: IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131289.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22010759; http://www.securityfocus.com/bid/102037; https://exchange.xforce.ibmcloud.com/vulnerabilities/131289
CVE: CVE-2017-1550
Published: 2017-12-11
Description: IBM Sterling File Gateway 2.2 could allow an authenticated user to change other user's passwords. IBM X-Force ID: 131290.
CVSS Score: 6.5 (MEDIUM)
References: http://www.ibm.com/support/docview.wss?uid=swg22010758; http://www.securityfocus.com/bid/102184; https://exchange.xforce.ibmcloud.com/vulnerabilities/131290
CVE: CVE-2017-15896
Published: 2017-12-11
Description: Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read() due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the TLS or HTTP2 modules in a way that bypassed TLS authentication and encryption.
CVSS Score: 9.1 (CRITICAL)
References: https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/; https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/
CVE: CVE-2017-15897
Published: 2017-12-11
Description: Node.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the encoding for the fill value did not match the encoding specified. For example, 'Buffer.alloc(0x100, "This is not correctly encoded", "hex");' The buffer implementation was updated such that the buffer will be initialized to all zeros in these cases.
CVSS Score: 3.1 (LOW)
CWE: CWE-665
References: https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/; https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/