deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-6131
Published: 2017-05-23
Description: In some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may contain a default administrative password which could be used to remotely log into the BIG-IP system. The impacted administrative account is the Azure instance administrative user that was created at deployment. The root and admin accounts are not vulnerable. An attacker may be able to remotely access the BIG-IP host via SSH.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://www.securitytracker.com/id/1038569; https://support.f5.com/csp/article/K61757346; http://www.securitytracker.com/id/1038569
CVE: CVE-2017-2783
Published: 2017-05-23
Description: An exploitable heap corruption vulnerability exists in the FillRowFormat functionality of Antenna House DMC HTMLFilter that is shipped with MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious xls file to trigger this vulnerability.
CVSS Score: 8.3 (HIGH)
CWE: CWE-119
References: http://www.talosintelligence.com/reports/TALOS-2017-0279/; http://www.talosintelligence.com/reports/TALOS-2017-0279/
CVE: CVE-2017-2793
Published: 2017-05-23
Description: An exploitable heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this vulnerability.
CVSS Score: 8.3 (HIGH)
CWE: CWE-119
References: http://www.talosintelligence.com/reports/TALOS-2017-0285/; http://www.talosintelligence.com/reports/TALOS-2017-0285/
CVE: CVE-2017-2794
Published: 2017-05-23
Description: An exploitable stack-based buffer overflow vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted PPT file can cause a stack corruption resulting in arbitrary code execution. An attacker can send/provide malicious PPT file to trigger this vulnerability.
CVSS Score: 8.3 (HIGH)
CWE: CWE-119
References: https://talosintelligence.com/vulnerability_reports/TALOS-2017-0286; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0286
CVE: CVE-2017-2797
Published: 2017-05-23
Description: An exploitable heap overflow vulnerability exists in the ParseEnvironment functionality of AntennaHouse DMC HTMLFilter as used by MarkLogic 8.0-6.
CVSS Score: 8.3 (HIGH)
CWE: CWE-119
References: https://talosintelligence.com/vulnerability_reports/TALOS-2017-0290; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0290
CVE: CVE-2017-3128
Published: 2017-05-23
Description: A stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/98514; http://www.securitytracker.com/id/1038541; https://fortiguard.com/psirt/FG-IR-17-057
CVE: CVE-2017-9214
Published: 2017-05-23
Description: In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191
References: https://access.redhat.com/errata/RHSA-2017:2418; https://access.redhat.com/errata/RHSA-2017:2553; https://access.redhat.com/errata/RHSA-2017:2648
CVE: CVE-2017-0373
Published: 2017-05-23
Description: The gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model (aka libconfig-model-perl) before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file.
CVSS Score: 7.3 (HIGH)
CWE: CWE-20
References: http://cpansearch.perl.org/src/DDUMONT/Config-Model-2.102/Changes; https://anonscm.debian.org/cgit/pkg-perl/packages/libconfig-model-perl.git/commit/?h=stretch&id=e7e5dd1a650939a0e021d1d5b311dbb3c4884773; https://security-tracker.debian.org/tracker/CVE-2017-0373
CVE: CVE-2017-0374
Published: 2017-05-23
Description: lib/Config/Model.pm in Config-Model (aka libconfig-model-perl) before 2.102 allows local users to gain privileges via a crafted model in the current working directory, related to use of . with the INC array.
CVSS Score: 7.8 (HIGH)
References: http://cpansearch.perl.org/src/DDUMONT/Config-Model-2.102/Changes; https://anonscm.debian.org/cgit/pkg-perl/packages/libconfig-model-perl.git/commit/?h=stretch&id=0de8471e5a8958ad37446dfcd0362a269e3ec573; https://security-tracker.debian.org/tracker/CVE-2017-0374
CVE: CVE-2017-8310
Published: 2017-05-23
Description: Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process (causing a denial of service) via a crafted subtitles file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://git.videolan.org/?p=vlc/vlc-2.2.git%3Ba=blobdiff%3Bf=modules/codec/subsdec.c%3Bh=addd8c71f30d53558fffd19059b374be45cf0f8e%3Bhp=1b4276e299a2a[PII_REDACTED]d29ac705ae93076ba%3Bhb=7cac839692ab79dbfe5e4ebd4c4e37d9a8b1b328%3Bhpb=3477dba3d506de8d95bccef2c6b67861188f6c29; http://www.debian.org/security/2017/dsa-3899; http://www.securityfocus.com/bid/98638
CVE: CVE-2017-8311
Published: 2017-05-23
Description: Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=775de716add17322f24b476439f903a829446eb6; http://www.debian.org/security/2017/dsa-3899; http://www.securityfocus.com/bid/98634
CVE: CVE-2017-8312
Published: 2017-05-23
Description: Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://git.videolan.org/?p=vlc.git%3Ba=blobdiff%3Bf=modules/demux/subtitle.c%3Bh=5e4fcdb7f25b2819f5441156c7c0ea2a7d112ca3%3Bhp=2a75fbfb7c3f56b24b2e4498bbb8fe0aa2575974%3Bhb=611398fc8d32f3fe4331f60b220c52ba3557beaa%3Bhpb=075bc7169b05b004fa0250e4a4ce5516b05487a9; http://www.debian.org/security/2017/dsa-3899; http://www.securityfocus.com/bid/98631
CVE: CVE-2017-8313
Published: 2017-05-23
Description: Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via a crafted subtitles file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://git.videolan.org/?p=vlc/vlc-2.2.git%3Ba=commitdiff%3Bh=05b653355ce303ada3b5e0e645ae717fea39186c; http://www.debian.org/security/2017/dsa-3899; http://www.securityfocus.com/bid/98633
CVE: CVE-2017-8314
Published: 2017-05-23
Description: Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/98668; https://github.com/xbmc/xbmc/pull/12024; https://lists.debian.org/debian-lts-announce/2018/01/msg00019.html
CVE: CVE-2017-9216
Published: 2017-05-24
Description: libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_huffman_get function in jbig2_huffman.c. For example, the jbig2dec utility will crash (segmentation fault) when parsing an invalid file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/98680; https://bugs.ghostscript.com/show_bug.cgi?id=697934; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=3ebffb1d96ba0cacec23016eccb4047dab365853
CVE: CVE-2017-9217
Published: 2017-05-24
Description: systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/98677; https://github.com/systemd/systemd/commit/a924f43f30f9c4acaf70618dd2a055f8b0f166be; https://github.com/systemd/systemd/pull/5998
CVE: CVE-2017-2798
Published: 2017-05-24
Description: An exploitable heap corruption vulnerability exists in the GetIndexArray functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted XLS file can cause a heap corruption resulting in arbitrary code execution. An attacker can send or provide a malicious XLS file to trigger this vulnerability.
CVSS Score: 8.3 (HIGH)
CWE: CWE-119
References: https://talosintelligence.com/vulnerability_reports/TALOS-2017-0291; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0291
CVE: CVE-2017-2799
Published: 2017-05-24
Description: An exploitable heap corruption vulnerability exists in the AddSst functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted XLS file can cause a heap corruption resulting in arbitrary code execution. An attacker can send or provide a malicious XLS file to trigger this vulnerability.
CVSS Score: 8.3 (HIGH)
CWE: CWE-119
References: https://talosintelligence.com/vulnerability_reports/TALOS-2017-0292; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0292
CVE: CVE-2017-2800
Published: 2017-05-24
Description: A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting in potential certificate validation vulnerabilities, denial of service and possible remote code execution. In order to trigger this vulnerability, the attacker needs to supply a malicious x509 certificate to either a server or a client application using this library.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-295
References: https://talosintelligence.com/vulnerability_reports/TALOS-2017-0293; https://www.exploit-db.com/exploits/41984/; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0293
CVE: CVE-2017-2801
Published: 2017-05-24
Description: A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead to certificate verification issues and abuse. A specially crafted X509 certificate would need to be delivered to the client or server application in order to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://talosintelligence.com/vulnerability_reports/TALOS-2017-0294; http://www.debian.org/security/2017/dsa-3939; http://www.securityfocus.com/bid/98106
CVE: CVE-2017-2817
Published: 2017-05-24
Description: A stack buffer overflow vulnerability exists in the ISO parsing functionality of Power Software Ltd PowerISO 6.8. A specially crafted ISO file can cause a vulnerability resulting in potential code execution. An attacker can send a specific ISO file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://talosintelligence.com/vulnerability_reports/TALOS-2017-0318; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0318
CVE: CVE-2017-2819
Published: 2017-05-24
Description: An exploitable heap-based buffer overflow exists in the Hangul Word Processor component (version 9.6.1.4350) of Hancom Thinkfree Office NEO 9.6.1.4902. A specially crafted document stream can cause an integer underflow resulting in a buffer overflow which can lead to code execution under the context of the application. An attacker can entice a user to open up a document in order to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://talosintelligence.com/vulnerability_reports/TALOS-2017-0320; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0320
CVE: CVE-2017-2823
Published: 2017-05-24
Description: A use-after-free vulnerability exists in the .ISO parsing functionality of PowerISO 6.8. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can send a specific .ISO file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://talosintelligence.com/vulnerability_reports/TALOS-2017-0324; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0324
CVE: CVE-2017-2824
Published: 2017-05-24
Description: An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted set of packets can cause a command injection resulting in remote code execution. An attacker can make requests from an active Zabbix Proxy to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78
References: http://www.debian.org/security/2017/dsa-3937; http://www.securityfocus.com/bid/98083; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0325
CVE: CVE-2017-9224
Published: 2017-05-24
Description: An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in match_at() during regular expression searching. A logical error involving order of validation and access in match_at() could result in an out-of-bounds read from a stack buffer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101244; https://access.redhat.com/errata/RHSA-2018:1296; https://github.com/kkos/oniguruma/commit/690313a061f7a4fa614ec5cc8368b4f2284e059b
CVE: CVE-2017-9225
Published: 2017-05-24
Description: An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds write in onigenc_unicode_get_case_fold_codes_by_str() occurs during regular expression compilation. Code point 0xFFFFFFFF is not properly handled in unicode_unfold_key(). A malformed regular expression could result in 4 bytes being written off the end of a stack buffer of expand_case_fold_string() during the call to onigenc_unicode_get_case_fold_codes_by_str(), a typical stack buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/kkos/oniguruma/commit/166a6c3999bf06b4de0ab4ce6b088a468cc4029f; https://github.com/kkos/oniguruma/issues/56; https://github.com/kkos/oniguruma/commit/166a6c3999bf06b4de0ab4ce6b088a468cc4029f
CVE: CVE-2017-9226
Published: 2017-05-24
Description: An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write or read occurs in next_state_val() during regular expression compilation. Octal numbers larger than 0xff are not handled correctly in fetch_token() and fetch_token_in_cc(). A malformed regular expression containing an octal number in the form of '\700' would produce an invalid code point value larger than 0xff in next_state_val(), resulting in an out-of-bounds write memory corruption.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/101244; https://access.redhat.com/errata/RHSA-2018:1296; https://github.com/kkos/oniguruma/commit/b4bf968ad52afe14e60a2dc8a95d3555c543353a
CVE: CVE-2017-9227
Published: 2017-05-24
Description: An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in mbc_enc_len() during regular expression searching. Invalid handling of reg->dmin in forward_search_range() could result in an invalid pointer dereference, as an out-of-bounds read from a stack buffer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://www.securityfocus.com/bid/100538; https://access.redhat.com/errata/RHSA-2018:1296; https://github.com/kkos/oniguruma/commit/9690d3ab1f9bcd2db8cbe1fe3ee4a5da606b8814
CVE: CVE-2017-9228
Published: 2017-05-24
Description: An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://access.redhat.com/errata/RHSA-2018:1296; https://github.com/kkos/oniguruma/commit/3b63d12038c8d8fc278e81c942fa9bec7c704c8b; https://github.com/kkos/oniguruma/issues/60
CVE: CVE-2017-9229
Published: 2017-05-24
Description: An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A SIGSEGV occurs in left_adjust_char_head() during regular expression compilation. Invalid handling of reg->dmax in forward_search_range() could result in an invalid pointer dereference, normally as an immediate denial-of-service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://access.redhat.com/errata/RHSA-2018:1296; https://github.com/kkos/oniguruma/commit/b690371bbf97794b4a1d3f295d4fb9a8b05d402d; https://github.com/kkos/oniguruma/issues/59
CVE: CVE-2017-9230
Published: 2017-05-24
Description: The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers with a variety of initial 64-byte chunks followed by the same 16-byte chunk, multiple candidate root values ending with the same 4 bytes, and calculations involving sqrt numbers. This violates the security assumptions of (1) the choice of input, outside of the dedicated nonce area, fed into the Proof-of-Work function should not change its difficulty to evaluate and (2) every Proof-of-Work function execution should be independent. NOTE: a number of persons feel that this methodology is a benign mining optimization, not a vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-338, CWE-338
References: http://www.mit.edu/~jlrubin//public/pdfs/Asicboost.pdf; http://www.securityfocus.com/bid/98657; https://arxiv.org/ftp/arxiv/papers/1604/1604.00575.pdf
CVE: CVE-2014-0097
Published: 2017-05-25
Description: The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287
References: https://pivotal.io/security/cve-2014-0097; https://www.oracle.com/security-alerts/cpuapr2022.html; https://pivotal.io/security/cve-2014-0097
CVE: CVE-2014-0225
Published: 2017-05-25
Description: When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references in a DTD declaration. This enabled an XXE attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: https://pivotal.io/security/cve-2014-0225; https://pivotal.io/security/cve-2014-0225
CVE: CVE-2014-3527
Published: 2017-05-25
Description: When using the CAS Proxy ticket authentication from Spring Security 3.1 to 3.2.4 a malicious CAS Service could trick another CAS Service into authenticating a proxy ticket that was not associated. This is due to the fact that the proxy ticket authentication uses the information from the HttpServletRequest which is populated based upon untrusted information within the HTTP request. This means if there are access control restrictions on which CAS services can authenticate to one another, those restrictions can be bypassed. If users are not using CAS Proxy tickets and not basing access control decisions based upon the CAS Service, then there is no impact to users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://pivotal.io/security/cve-2014-3527; https://pivotal.io/security/cve-2014-3527
CVE: CVE-2015-1834
Published: 2017-05-25
Description: A path traversal vulnerability was identified in the Cloud Foundry component Cloud Controller that affects cf-release versions prior to v208 and Pivotal Cloud Foundry Elastic Runtime versions prior to 1.4.2. Path traversal is the 'outbreak' of a given directory structure through relative file paths in the user input. It aims at accessing files and directories that are stored outside the web root folder, for disallowed reading or even executing arbitrary system commands. An attacker could use a certain parameter of the file path for instance to inject '../' sequences in order to navigate through the file system. In this particular case a remote authenticated attacker can exploit the identified vulnerability in order to upload arbitrary files to the server running a Cloud Controller instance - outside the isolated application container.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/98691; https://pivotal.io/security/cve-2015-1834; http://www.securityfocus.com/bid/98691
CVE: CVE-2015-3189
Published: 2017-05-25
Description: With Cloud Foundry Runtime cf-release versions v208 or earlier, UAA Standalone versions 2.2.5 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier, old Password Reset Links are not expired after the user changes their current email address to a new one. This vulnerability is applicable only when using the UAA internal user store for authentication. Deployments enabled for integration via SAML or LDAP are not affected.
CVSS Score: 3.7 (LOW)
CWE: CWE-640
References: https://pivotal.io/security/cve-2015-3189; https://pivotal.io/security/cve-2015-3189
CVE: CVE-2015-3190
Published: 2017-05-25
Description: With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the UAA logout link is susceptible to an open redirect which allows an attacker to insert malicious web page as a redirect parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://pivotal.io/security/cve-2015-3190; https://pivotal.io/security/cve-2015-3190
CVE: CVE-2015-3191
Published: 2017-05-25
Description: With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the change_email form in UAA is vulnerable to a CSRF attack. This allows an attacker to trigger an e-mail change for a user logged into a cloud foundry instance via a malicious link on a attacker controlled site. This vulnerability is applicable only when using the UAA internal user store for authentication. Deployments enabled for integration via SAML or LDAP are not affected.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://pivotal.io/security/cve-2015-3191; https://pivotal.io/security/cve-2015-3191
CVE: CVE-2015-5211
Published: 2017-05-25
Description: Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported versions is vulnerable to a Reflected File Download (RFD) attack. The attack involves a malicious user crafting a URL with a batch script extension that results in the response being downloaded rather than rendered and also includes some input reflected in the response.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-552
References: https://lists.debian.org/debian-lts-announce/2019/07/msg00012.html; https://pivotal.io/security/cve-2015-5211; https://www.trustwave.com/Resources/SpiderLabs-Blog/Reflected-File-Download---A-New-Web-Attack-Vector/
CVE: CVE-2016-0761
Published: 2017-05-25
Description: Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to 1.6.17 contain a flaw in managing container files during Docker image preparation that could be used to delete, corrupt or overwrite host files and directories, including other container filesystems on the host.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-19
References: https://pivotal.io/security/cve-2016-0761; https://pivotal.io/security/cve-2016-0761