deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-1392
Published: 2015-05-28
Description: Multiple SQL injection vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allow remote administrators to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-006.txt; http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-006.txt
CVE: CVE-2015-1550
Published: 2015-05-28
Description: Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote administrators to execute arbitrary files via unspecified vectors.
CVSS Score: 9.0 (HIGH)
CWE: CWE-22
References: http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-006.txt; http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-006.txt
CVE: CVE-2015-1551
Published: 2015-05-28
Description: Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.4 allows remote administrators to read arbitrary files via unspecified vectors.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-006.txt; http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-006.txt
CVE: CVE-2015-3165
Published: 2015-05-28
Description: Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 allows remote attackers to cause a denial of service (crash) by closing an SSL session at a time when the authentication timeout will expire during the session shutdown sequence.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html; http://rhn.redhat.com/errata/RHSA-2015-1194.html; http://rhn.redhat.com/errata/RHSA-2015-1195.html
CVE: CVE-2015-4084
Published: 2015-05-28
Description: Cross-site scripting (XSS) vulnerability in the Free Counter plugin 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value_ parameter in a check_stat action to wp-admin/admin-ajax.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/132062/WordPress-Free-Counter-1.1-Cross-Site-Scripting.html; http://www.securityfocus.com/archive/1/535615/100/0/threaded; http://www.securityfocus.com/bid/74846
CVE: CVE-2015-4127
Published: 2015-05-28
Description: Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for WordPress allows remote attackers to inject arbitrary web script or HTML via the address parameter, as demonstrated by a request to index.php/2015/05/21/church_admin-registration-form/.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/132034/WordPress-Church-Admin-0.800-Cross-Site-Scripting.html; http://www.osvdb.org/121304; http://www.securityfocus.com/bid/74782
CVE: CVE-2015-4132
Published: 2015-05-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allow remote administrators to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-006.txt; http://www.securityfocus.com/bid/74852; http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-006.txt
CVE: CVE-2015-4133
Published: 2015-05-28
Description: Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in uploads/ directory.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/show/osvdb/88853; http://packetstormsecurity.com/files/130845/; http://packetstormsecurity.com/files/131515/
CVE: CVE-2015-4134
Published: 2015-05-28
Description: Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.
CVSS Score: 5.8 (MEDIUM)
References: http://packetstormsecurity.com/files/132033/phpwind-8.7-Open-Redirect.html; http://seclists.org/fulldisclosure/2015/May/107; http://tetraph.com/security/open-redirect/phpwind-v8-7-open-redirect/
CVE: CVE-2015-4135
Published: 2015-05-28
Description: Cross-site scripting (XSS) vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the url parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/132030/phpwind-8.7-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2015/May/106; http://tetraph.com/security/xss-vulnerability/phpwind-v8-7-xss/
CVE: CVE-2015-3904
Published: 2015-05-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in roomcloud.php in the Roomcloud plugin before 1.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) pin, (2) start_day, (3) start_month, (4) start_year, (5) end_day, (6) end_month, (7) end_year, (8) lang, (9) adults, or (10) children parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/131934/WordPress-Roomcloud-1.1-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2015/May/40; http://www.securityfocus.com/bid/74580
CVE: CVE-2015-4137
Published: 2015-05-29
Description: SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/131981/Milw0rm-Clone-Script-1.0-SQL-Injection.html; http://seclists.org/fulldisclosure/2015/May/76; http://www.securityfocus.com/bid/74745
CVE: CVE-2013-7441
Published: 2015-05-29
Description: The modern style negotiation in Network Block Device (nbd-server) 2.9.22 through 3.3 allows remote attackers to cause a denial of service (root process termination) by (1) closing the connection during negotiation or (2) specifying a name for a non-existent export.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-updates/2015-06/msg00003.html; http://sourceforge.net/p/nbd/mailman/message/30410146/; http://www.debian.org/security/2015/dsa-3271
CVE: CVE-2014-9727
Published: 2015-05-29
Description: AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm.
CVSS Score: 10.0 (HIGH)
CWE: CWE-78
References: http://www.exploit-db.com/exploits/33136; http://www.osvdb.org/103289; https://www.trustwave.com/Resources/SpiderLabs-Blog/-Honeypot-Alert--Fritz%21Box-%E2%80%93-Remote-Command-Execution-Exploit-Attempt/
CVE: CVE-2015-0200
Published: 2015-05-29
Description: IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x before 7.0.0.8 IF2 allows local users to obtain sensitive database information via unspecified vectors.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1JR50683; http://www-01.ibm.com/support/docview.wss?uid=swg1JR52306; http://www-01.ibm.com/support/docview.wss?uid=swg21902799
CVE: CVE-2015-0751
Published: 2015-05-29
Description: Cisco IP Phone 7861, when firmware from Cisco Unified Communications Manager 10.3(1) is used, allows remote attackers to cause a denial of service via crafted packets, aka Bug ID CSCus81800.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-399
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39011; http://www.securitytracker.com/id/1032407; http://tools.cisco.com/security/center/viewAlert.x?alertId=39011
CVE: CVE-2015-0752
Published: 2015-05-29
Description: Cross-site scripting (XSS) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27635.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39012; http://www.securitytracker.com/id/1032421; http://tools.cisco.com/security/center/viewAlert.x?alertId=39012
CVE: CVE-2015-0753
Published: 2015-05-29
Description: SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39013; http://www.securitytracker.com/id/1032422; http://tools.cisco.com/security/center/viewAlert.x?alertId=39013
CVE: CVE-2015-0754
Published: 2015-05-29
Description: Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CPU and memory consumption) via a crafted XML document, aka Bug ID CSCut95810.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39015; http://www.securitytracker.com/id/1032423; http://tools.cisco.com/security/center/viewAlert.x?alertId=39015
CVE: CVE-2015-0755
Published: 2015-05-29
Description: The Posture module for Cisco Identity Services Engine (ISE), as distributed in Cisco AnyConnect Secure Mobility Client 4.0(64), allows local users to gain privileges via unspecified commands, aka Bug ID CSCut05797.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39018; http://www.securitytracker.com/id/1032424; http://tools.cisco.com/security/center/viewAlert.x?alertId=39018
CVE: CVE-2015-0756
Published: 2015-05-29
Description: Cisco Wireless LAN Controller (WLC) devices with software 7.4(1.1) allow remote attackers to cause a denial of service (wireless-networking outage) via crafted TCP traffic on the local network, aka Bug ID CSCug67104.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20, CWE-399
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39041; http://www.securitytracker.com/id/1032419; http://tools.cisco.com/security/center/viewAlert.x?alertId=39041
CVE: CVE-2015-0757
Published: 2015-05-29
Description: The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as demonstrated by MnT reports, aka Bug ID CSCuq23140.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39042; http://www.securityfocus.com/bid/74864; http://www.securitytracker.com/id/1032420
CVE: CVE-2015-0847
Published: 2015-05-29
Description: nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service (deadlock) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-17
References: http://lists.opensuse.org/opensuse-updates/2015-06/msg00003.html; http://sourceforge.net/p/nbd/mailman/message/34091218/; http://sourceforge.net/projects/nbd/files/nbd/3.11/
CVE: CVE-2015-1833
Published: 2015-05-29
Description: XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet servers via a crafted WebDAV request.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: http://mail-archives.apache.org/mod_mbox/jackrabbit-announce/201505.mbox/%3C555DA[PII_REDACTED]%40greenbytes.de%3E; http://packetstormsecurity.com/files/132005/Jackrabbit-WebDAV-XXE-Injection.html; http://www.apache.org/dist/jackrabbit/2.10.1/RELEASE-NOTES.txt
CVE: CVE-2015-3994
Published: 2015-05-29
Description: The grant.xsfunc application in testApps/grantAccess/ in the XS Engine in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to spoof log entries via a crafted request, aka SAP Security Note 2109818.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20
References: http://packetstormsecurity.com/files/132067/SAP-HANA-Log-Injection.html; http://seclists.org/fulldisclosure/2015/May/118; http://www.onapsis.com/research/security-advisories/SAP-HANA-Log-Injection-Vulnerability-in-Extended-Application-Services
CVE: CVE-2015-3995
Published: 2015-05-29
Description: SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to read arbitrary files via an IMPORT FROM SQL statement, aka SAP Security Note 2109565.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/132066/SAP-HANA-Information-Disclosure.html; http://seclists.org/fulldisclosure/2015/May/119; http://www.onapsis.com/research/security-advisories/SAP-HANA-Information-Disclosure-via-SQL-IMPORT-FROM-statement
CVE: CVE-2015-4031
Published: 2015-05-29
Description: Directory traversal vulnerability in saveFile.jsp in the development installation in Visual Mining NetChart allows remote attackers to write to arbitrary files via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/74792; http://www.zerodayinitiative.com/advisories/ZDI-15-237/; http://www.securityfocus.com/bid/74792
CVE: CVE-2015-4032
Published: 2015-05-29
Description: projectContents.jsp in the Developer tools in Visual Mining NetCharts Server allows remote attackers to rename arbitrary files, and consequently execute them, via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/74788; http://www.zerodayinitiative.com/advisories/ZDI-15-238/; http://www.securityfocus.com/bid/74788
CVE: CVE-2015-4047
Published: 2015-05-29
Description: racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159482.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159549.html; http://packetstormsecurity.com/files/131992/IPsec-Tools-0.8.2-Denial-Of-Service.html
CVE: CVE-2015-4059
Published: 2015-05-29
Description: Heap-based buffer overflow in the License Server (LicenseServer.exe) in Wavelink Terminal Emulation (TE) allows remote attackers to execute arbitrary code via a large HTTP header.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/74860; http://www.zerodayinitiative.com/advisories/ZDI-15-245/; http://www.securityfocus.com/bid/74860
CVE: CVE-2015-4060
Published: 2015-05-29
Description: Heap-based buffer overflow in the TermProxy (WLTermProxyService.exe) service in Wavelink ConnectPro allows remote attackers to execute arbitrary code via a large HTTP header.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/74858; http://www.zerodayinitiative.com/advisories/ZDI-15-246/; http://www.securityfocus.com/bid/74858
CVE: CVE-2015-4067
Published: 2015-05-29
Description: Integer overflow in the libnv6 module in Dell NetVault Backup before 10.0.5 allows remote attackers to execute arbitrary code via crafted template string specifiers in a serialized object, which triggers a heap-based buffer overflow.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://www.securityfocus.com/bid/74841; http://www.zerodayinitiative.com/advisories/ZDI-15-240/; http://www.securityfocus.com/bid/74841
CVE: CVE-2015-4068
Published: 2015-05-29
Description: Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path to the (1) reportFileServlet or (2) exportServlet servlet.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22, CWE-22
References: http://documentation.arcserve.com/Arcserve-UDP/Available/V5/ENU/Bookshelf_Files/HTML/Update%204/UDP_Update4_ReleaseNotes.html; http://www.securityfocus.com/bid/74845; http://www.zerodayinitiative.com/advisories/ZDI-15-241/
CVE: CVE-2015-4069
Published: 2015-05-29
Description: The EdgeServiceImpl web service in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive credentials via a crafted SOAP request to the (1) getBackupPolicy or (2) getBackupPolicies method.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://documentation.arcserve.com/Arcserve-UDP/Available/V5/ENU/Bookshelf_Files/HTML/Update%204/UDP_Update4_ReleaseNotes.html; http://www.securityfocus.com/bid/74838; http://www.zerodayinitiative.com/advisories/ZDI-15-243/
CVE: CVE-2015-0733
Published: 2015-05-30
Description: CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks, via a crafted request, aka Bug ID CSCur25580.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-113
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=38863; http://www.securitytracker.com/id/1032445; http://tools.cisco.com/security/center/viewAlert.x?alertId=38863
CVE: CVE-2015-0743
Published: 2015-05-30
Description: Cisco Headend System Release allows remote attackers to cause a denial of service (DHCP and TFTP outage) via a flood of crafted UDP traffic, aka Bug ID CSCus04097.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=38938; http://www.securitytracker.com/id/1032445; http://tools.cisco.com/security/center/viewAlert.x?alertId=38938
CVE: CVE-2015-0744
Published: 2015-05-30
Description: Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service (CPU and memory consumption, and TCP service outage) via (1) a SYN flood or (2) another type of TCP traffic flood, aka Bug IDs CSCus50642, CSCus50662, CSCus50625, CSCus50657, and CSCus68315.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=38943; http://www.securityfocus.com/bid/74916; http://www.securitytracker.com/id/1032445
CVE: CVE-2015-0745
Published: 2015-05-30
Description: Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug ID CSCus44909.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=38944; http://www.securitytracker.com/id/1032445; http://tools.cisco.com/security/center/viewAlert.x?alertId=38944
CVE: CVE-2015-0747
Published: 2015-05-30
Description: Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=38945; http://www.securitytracker.com/id/1032447; http://tools.cisco.com/security/center/viewAlert.x?alertId=38945
CVE: CVE-2015-0758
Published: 2015-05-30
Description: The web-based user interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCus97452.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39130; http://www.securitytracker.com/id/1032448; http://tools.cisco.com/security/center/viewAlert.x?alertId=39130
CVE: CVE-2015-0121
Published: 2015-05-30
Description: IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS Next Generation (RDNG) 4.0 through 4.0.7 and 5.0 through 5.0.2, when LTPA single sign on is used with WebSphere Application Server, do not terminate a Requirements Management (RM) session upon LTPA token expiration, which allows remote attackers to obtain access by leveraging an unattended workstation.
CVSS Score: 3.7 (LOW)
References: http://www-01.ibm.com/support/docview.wss?uid=swg21903761; http://www.securityfocus.com/bid/74910; http://www-01.ibm.com/support/docview.wss?uid=swg21903761
CVE: CVE-2015-0191
Published: 2015-05-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-0191.  Reason: This candidate is a duplicate of CVE-2014-0191.  A typo caused the wrong ID to be used.  Notes: All CVE users should reference CVE-2014-0191 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2015-0193
Published: 2015-05-30
Description: Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2.x through 7.2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL that triggers an error condition.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1JR52626; http://www-01.ibm.com/support/docview.wss?uid=swg21697944; http://www-01.ibm.com/support/docview.wss?uid=swg1JR52626
CVE: CVE-2015-1937
Published: 2015-05-30
Description: IBM PowerVC 1.2.0.x through 1.2.0.4, 1.2.1.x through 1.2.1.2, and 1.2.2.x through 1.2.2.2 does not require authentication for the ceilometer NoSQL database, which allows remote attackers to read or write to arbitrary database records, and consequently obtain administrator privileges, via a session on port 27017.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://www-01.ibm.com/support/docview.wss?uid=nas8N1020731; http://www-01.ibm.com/support/docview.wss?uid=swg1IT08806; http://www.securityfocus.com/bid/74911
CVE: CVE-2015-2851
Published: 2015-05-30
Description: client_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary files, and consequently obtain root access, by specifying a filename.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.kb.cert.org/vuls/id/551972; http://www.kb.cert.org/vuls/id/BLUU-9VBU45; http://www.securityfocus.com/bid/74826
CVE: CVE-2015-2852
Published: 2015-05-30
Description: Cross-site request forgery (CSRF) vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 allows remote attackers to hijack the authentication of administrators.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.kb.cert.org/vuls/id/498348; http://www.securityfocus.com/bid/74921; https://bto.bluecoat.com/security-advisory/sa96
CVE: CVE-2015-2853
Published: 2015-05-30
Description: Session fixation vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 allows remote attackers to hijack web sessions by providing a session ID.
CVSS Score: 6.8 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/498348; http://www.securityfocus.com/bid/74921; https://bto.bluecoat.com/security-advisory/sa96
CVE: CVE-2015-2854
Published: 2015-05-30
Description: The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not send a restrictive X-Frame-Options HTTP header, which allows remote attackers to conduct clickjacking attacks via vectors involving an IFRAME element.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.kb.cert.org/vuls/id/498348; http://www.securityfocus.com/bid/74921; https://bto.bluecoat.com/security-advisory/sa96