deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-11743
Published: 2017-07-31
Description: MEDHOST Connex contains a hard-coded Mirth Connect admin credential that is used for customer Mirth Connect management access. An attacker with knowledge of the hard-coded credential and the ability to communicate directly with the Mirth Connect management console may be able to intercept sensitive patient information. The admin account password is hard-coded as $K8t1ng throughout the application, and is the same across all installations. Customers do not have the option to change the Mirth Connect admin account password. The Mirth Connect admin account is created during the Connex install. The plaintext account password is hard-coded multiple times in the Connex install and update scripts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://seclists.org/fulldisclosure/2017/Jul/75; http://www.securityfocus.com/bid/100086; http://seclists.org/fulldisclosure/2017/Jul/75
CVE: CVE-2017-11757
Published: 2017-07-31
Description: Heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13 allows remote attackers to execute arbitrary code via crafted traffic to TCP port 1583. The overflow occurs after Server-Client encryption-key exchange. The issue results from an integer underflow that leads to a zero-byte allocation. The _srvLnaConnectMP1 function is affected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191
References: http://supportservices.actian.com/support-services/security-center#announcements; https://blogs.securiteam.com/index.php/archives/2924; https://twitter.com/SecuriTeam_SSD/status/[PII_REDACTED]18954496
CVE: CVE-2017-11668
Published: 2017-07-31
Description: An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:134 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash the eapmd5pass process under certain circumstances by generating specially crafted network traffic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://openwall.com/lists/oss-security/2017/07/31/3; http://openwall.com/lists/oss-security/2017/07/31/3
CVE: CVE-2017-11669
Published: 2017-07-31
Description: An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:211 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash the eapmd5pass process under certain circumstances by generating specially crafted network traffic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://openwall.com/lists/oss-security/2017/07/31/3; http://openwall.com/lists/oss-security/2017/07/31/3
CVE: CVE-2017-11670
Published: 2017-07-31
Description: A length validation (leading to out-of-bounds read and write) flaw was found in the way eapmd5pass 1.4 handled network traffic in the extract_eapusername function. A remote attacker could potentially use this flaw to crash the eapmd5pass process by generating specially crafted network traffic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-787
References: http://openwall.com/lists/oss-security/2017/07/31/3; http://openwall.com/lists/oss-security/2017/07/31/3
CVE: CVE-2017-11760
Published: 2017-07-31
Description: uploadImage.php in ProjeQtOr before 6.3.2 allows remote authenticated users to execute arbitrary PHP code by uploading a .php file composed of concatenated image data and script data, as demonstrated by uploading as an image within the description text area.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://track.projeqtor.org/view/main.php?directAccess=true&objectClass=Ticket&objectId=2884; https://track.projeqtor.org/view/main.php?directAccess=true&objectClass=Ticket&objectId=2884
CVE: CVE-2016-9714
Published: 2017-07-31
Description: IBM InfoSphere Master Data Management Server 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 119727.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.ibm.com/support/docview.wss?uid=swg22006608; https://exchange.xforce.ibmcloud.com/vulnerabilities/119727; http://www.ibm.com/support/docview.wss?uid=swg22006608
CVE: CVE-2016-9715
Published: 2017-07-31
Description: IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119728.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22006611; http://www.securityfocus.com/bid/100025; https://exchange.xforce.ibmcloud.com/vulnerabilities/119728
CVE: CVE-2016-9716
Published: 2017-07-31
Description: IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 119729.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.ibm.com/support/docview.wss?uid=swg22006610; http://www.securityfocus.com/bid/100026; https://exchange.xforce.ibmcloud.com/vulnerabilities/119729
CVE: CVE-2016-9717
Published: 2017-07-31
Description: HTTP Parameter Override is identified in the IBM Infosphere Master Data Management (MDM) 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It enables attackers by exposing the presence of duplicated parameters which may produce an anomalous behavior in the application that can be potentially exploited.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=swg22006605; http://www.securityfocus.com/bid/100074; https://exchange.xforce.ibmcloud.com/vulnerabilities/119730
CVE: CVE-2016-9718
Published: 2017-07-31
Description: IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119732.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22006606; http://www.securityfocus.com/bid/100016; https://exchange.xforce.ibmcloud.com/vulnerabilities/119732
CVE: CVE-2016-9719
Published: 2017-07-31
Description: IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 119733.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=swg22006607; http://www.securityfocus.com/bid/100060; https://exchange.xforce.ibmcloud.com/vulnerabilities/119733
CVE: CVE-2017-1227
Published: 2017-07-31
Description: IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash the system. IBM X-Force ID: 123906.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: http://www.ibm.com/support/docview.wss?uid=swg22003222; https://exchange.xforce.ibmcloud.com/vulnerabilities/123906; http://www.ibm.com/support/docview.wss?uid=swg22003222
CVE: CVE-2017-1303
Published: 2017-07-31
Description: IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125457.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22004979; http://www.securityfocus.com/bid/100007; https://exchange.xforce.ibmcloud.com/vulnerabilities/125457
CVE: CVE-2017-1332
Published: 2017-07-31
Description: IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126234.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22005233; http://www.securityfocus.com/bid/100028; https://exchange.xforce.ibmcloud.com/vulnerabilities/126234
CVE: CVE-2017-1370
Published: 2017-07-31
Description: IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator configuration page. IBM X-Force ID: 126863.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-209
References: http://www.ibm.com/support/docview.wss?uid=swg22005868; http://www.securityfocus.com/bid/99954; https://exchange.xforce.ibmcloud.com/vulnerabilities/126863
CVE: CVE-2017-1386
Published: 2017-07-31
Description: IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and decrypted using man in the middle techniques. IBM X-Force ID: 127160.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-521
References: http://www.ibm.com/support/docview.wss?uid=swg22004981; http://www.securityfocus.com/bid/100008; https://exchange.xforce.ibmcloud.com/vulnerabilities/127160
CVE: CVE-2017-1460
Published: 2017-07-31
Description: IBM i OSPF 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue router spoofs its origin. Routing tables are affected by a missing LSA, which may lead to loss of connectivity. IBM X-Force ID: 128379.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=nas8N1022191; https://exchange.xforce.ibmcloud.com/vulnerabilities/128379; http://www.ibm.com/support/docview.wss?uid=nas8N1022191
CVE: CVE-2017-1496
Published: 2017-07-31
Description: IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128694.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22006175; https://exchange.xforce.ibmcloud.com/vulnerabilities/128694; http://www.ibm.com/support/docview.wss?uid=swg22006175
CVE: CVE-2017-11648
Published: 2017-07-31
Description: Techroutes TR 1803-3G Wireless Cellular Router/Modem 2.4.25 devices do not possess any protection against a CSRF vulnerability, as demonstrated by a goform/BasicSettings request to disable port filtering.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://iscouncil.blogspot.com/2017/07/cross-site-request-forgery_31.html; https://iscouncil.blogspot.com/2017/07/cross-site-request-forgery_31.html
CVE: CVE-2017-11726
Published: 2017-07-31
Description: services/system_io/actionprocessor/System.rails in ConnectWise Manage 2017.5 is vulnerable to Cross-Site Request Forgery (CSRF), as demonstrated by changing an e-mail address setting.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://becomepentester.blogspot.in/2017/07/ConnectWise-Manage-CSRF-CVE-2017-11726.html; https://becomepentester.blogspot.in/2017/07/ConnectWise-Manage-CSRF-CVE-2017-11726.html
CVE: CVE-2017-11727
Published: 2017-07-31
Description: services/system_io/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript code execution (involving a ContactCommon field) on victims who click on a crafted link, aka XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://becomepentester.blogspot.in/2017/07/ConnectWise-Manage-XSS-CVE-2017-11727.html; https://becomepentester.blogspot.in/2017/07/ConnectWise-Manage-XSS-CVE-2017-11727.html
CVE: CVE-2017-12064
Published: 2017-08-01
Description: The csv_log_html function in library/edihistory/edih_csv_inc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restrictions via a crafted name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-116
References: https://github.com/openemr/openemr/commit/b8963a5ca483211ed8de71f18227a0e66a2582ad; https://github.com/openemr/openemr/commit/b8963a5ca483211ed8de71f18227a0e66a2582ad
CVE: CVE-2017-12065
Published: 2017-08-01
Description: spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/100080; https://cacti.net/release_notes.php?version=1.1.16; https://github.com/Cacti/cacti/commit/bd0e586f6f46d814930226f1516a194e7e72293e
CVE: CVE-2017-12066
Published: 2017-08-01
Description: Cross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti before 1.1.16 allows remote authenticated users to inject arbitrary web script or HTML via specially crafted HTTP Referer headers, related to the $cancel_url variable. NOTE: this vulnerability exists because of an incomplete fix (lack of the htmlspecialchars ENT_QUOTES flag) for CVE-2017-11163.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://cacti.net/release_notes.php?version=1.1.16; https://github.com/Cacti/cacti/commit/bd0e586f6f46d814930226f1516a194e7e72293e; https://github.com/Cacti/cacti/issues/877
CVE: CVE-2017-12067
Published: 2017-08-01
Description: Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/hackerlib/hackerlib-vul/tree/master/potrace/heap-buffer-overflow-mkbitmap; https://github.com/hackerlib/hackerlib-vul/tree/master/potrace/heap-buffer-overflow-mkbitmap
CVE: CVE-2017-12068
Published: 2017-08-01
Description: The Event List plugin 0.7.9 for WordPress has XSS in the slug array parameter to wp-admin/admin.php in an el_admin_categories delete_bulk action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kevins1022/cve/blob/master/wordpress-event-list.md; https://github.com/kevins1022/cve/blob/master/wordpress-event-list.md
CVE: CVE-2017-12131
Published: 2017-08-01
Description: The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonials Width, View More Testimonials Link, and Testimonial Excerpt Options screens.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kevins1022/cve/blob/master/wordpress-Easy-Testimonials.md; https://github.com/kevins1022/cve/blob/master/wordpress-Easy-Testimonials.md
CVE: CVE-2017-11552
Published: 2017-08-01
Description: mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to cause a denial of service (memory corruption seen in a crash in the mad_decoder_run function in decoder.c in libmad) via a crafted MP3 file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2017/Jul/94; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870406; https://www.exploit-db.com/exploits/42409/
CVE: CVE-2015-5059
Published: 2017-08-01
Description: The "Project Documentation" feature in MantisBT 1.2.19 and earlier, when the threshold to access files ($g_view_proj_doc_threshold) is set to ANYBODY, allows remote authenticated users to download attachments linked to arbitrary private projects via a file id number in the file_id parameter to file_download.php.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163191.html; http://www.openwall.com/lists/oss-security/2015/06/25/3; http://www.openwall.com/lists/oss-security/2015/06/25/4
CVE: CVE-2017-11129
Published: 2017-08-01
Description: An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The keystore is locked with a hard-coded password. Therefore, everyone with access to the keystore can read the content out, for example the private key of the user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://seclists.org/fulldisclosure/2017/Jul/90; http://seclists.org/fulldisclosure/2017/Jul/90
CVE: CVE-2017-11130
Published: 2017-08-01
Description: An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The product's protocol only tries to ensure confidentiality. In the whole protocol, no integrity or authenticity checks are done. Therefore man-in-the-middle attackers can conduct replay attacks.
CVSS Score: 8.1 (HIGH)
CWE: CWE-345
References: http://seclists.org/fulldisclosure/2017/Jul/90; http://seclists.org/fulldisclosure/2017/Jul/90
CVE: CVE-2017-11131
Published: 2017-08-01
Description: An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. For authentication, the user password is hashed directly with SHA-512 without a salt or another key-derivation mechanism to enable a secure secret for authentication. Moreover, only the first 32 bytes of the hash are used. This allows for easy dictionary and rainbow-table attacks if an attacker has access to the password hash.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-916
References: http://seclists.org/fulldisclosure/2017/Jul/90; http://seclists.org/fulldisclosure/2017/Jul/90
CVE: CVE-2017-11132
Published: 2017-08-01
Description: An issue was discovered in heinekingmedia StashCat before 1.5.18 for Android. No certificate pinning is implemented; therefore the attacker could issue a certificate for the backend and the application would not notice it.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://seclists.org/fulldisclosure/2017/Jul/90; http://seclists.org/fulldisclosure/2017/Jul/90
CVE: CVE-2017-11133
Published: 2017-08-01
Description: An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. To encrypt messages, AES in CBC mode is used with a pseudo-random secret. This secret and the IV are generated with math.random() in previous versions and with CryptoJS.lib.WordArray.random() in newer versions, which uses math.random() internally. This is not cryptographically strong.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: http://seclists.org/fulldisclosure/2017/Jul/90; http://seclists.org/fulldisclosure/2017/Jul/90
CVE: CVE-2017-11134
Published: 2017-08-01
Description: An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The login credentials are written into a log file on the device. Hence, an attacker with access to the logs can read them.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532
References: http://seclists.org/fulldisclosure/2017/Jul/90; http://seclists.org/fulldisclosure/2017/Jul/90
CVE: CVE-2017-11135
Published: 2017-08-01
Description: An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The logout mechanism does not check for authorization. Therefore, an attacker only needs to know the device ID. This causes a denial of service. This might be interpreted as a vulnerability in customer-controlled software, in the sense that the StashCat client side has no secure way to signal that it is ending a session and that data should be deleted.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: http://seclists.org/fulldisclosure/2017/Jul/90; http://seclists.org/fulldisclosure/2017/Jul/90
CVE: CVE-2017-11136
Published: 2017-08-01
Description: An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. It uses RSA to exchange a secret for symmetric encryption of messages. However, the private RSA key is not only stored on the client but transmitted to the backend, too. Moreover, the key to decrypt the private key is composed of the first 32 bytes of the SHA-512 hash of the user password. But this hash is stored on the backend, too. Therefore, everyone with access to the backend database can read the transmitted secret for symmetric encryption, hence can read the communication.
CVSS Score: 6.5 (MEDIUM)
References: http://seclists.org/fulldisclosure/2017/Jul/90; http://seclists.org/fulldisclosure/2017/Jul/90
CVE: CVE-2017-11379
Published: 2017-08-01
Description: Configuration and database backup archives are not signed or validated in Trend Micro Deep Discovery Director 1.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-345
References: https://success.trendmicro.com/solution/1117663; https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities; https://success.trendmicro.com/solution/1117663
CVE: CVE-2017-11380
Published: 2017-08-01
Description: Backup archives were found to be encrypted with a static password across different installations, which suggest the same password may be used in all virtual appliance instances of Trend Micro Deep Discovery Director 1.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://success.trendmicro.com/solution/1117663; https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities; https://success.trendmicro.com/solution/1117663
CVE: CVE-2017-11381
Published: 2017-08-01
Description: A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can access the pre-configuration console.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://success.trendmicro.com/solution/1117663; https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities; https://success.trendmicro.com/solution/1117663
CVE: CVE-2017-12061
Published: 2017-08-01
Description: An XSS issue was discovered in admin/install.php in MantisBT before 1.3.12 and 2.x before 2.5.2. Some variables under user control in the MantisBT installation script are not properly sanitized before being output, allowing remote attackers to inject arbitrary JavaScript code, as demonstrated by the $f_database, $f_db_username, and $f_admin_username variables. This is mitigated by the fact that the admin/ folder should be deleted after installation, and also prevented by CSP.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2017/08/01/1; http://openwall.com/lists/oss-security/2017/08/01/2; http://www.securitytracker.com/id/1039030
CVE: CVE-2017-12062
Published: 2017-08-01
Description: An XSS issue was discovered in manage_user_page.php in MantisBT 2.x before 2.5.2. The 'filter' field is not sanitized before being rendered in the Manage User page, allowing remote attackers to execute arbitrary JavaScript code if CSP is disabled.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2017/08/01/1; http://openwall.com/lists/oss-security/2017/08/01/2; http://www.securitytracker.com/id/1039030
CVE: CVE-2017-12132
Published: 2017-08-01
Description: The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-770
References: http://www.securityfocus.com/bid/100598; https://access.redhat.com/errata/RHSA-2018:0805; https://arxiv.org/pdf/1205.4011.pdf
CVE: CVE-2017-4921
Published: 2017-08-01
Description: VMware vCenter Server (6.5 prior to 6.5 U1) contains an insecure library loading issue that occurs due to the use of LD_LIBRARY_PATH variable in an unsafe manner. Successful exploitation of this issue may allow unprivileged host users to load a shared library that may lead to privilege escalation.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/100006; http://www.securitytracker.com/id/1039013; https://www.vmware.com/security/advisories/VMSA-2017-0013.html