deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-5483
Published: 2017-01-28
Description: The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1_parse().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3775; http://www.securityfocus.com/bid/95852; http://www.securitytracker.com/id/1037755
CVE: CVE-2017-5484
Published: 2017-01-28
Description: The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_print().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3775; http://www.securityfocus.com/bid/95852; http://www.securitytracker.com/id/1037755
CVE: CVE-2017-5485
Published: 2017-01-28
Description: The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup_nsap().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3775; http://www.securityfocus.com/bid/95852; http://www.securitytracker.com/id/1037755
CVE: CVE-2017-5486
Published: 2017-01-28
Description: The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3775; http://www.securityfocus.com/bid/95852; http://www.securitytracker.com/id/1037755
CVE: CVE-2016-9553
Published: 2017-01-28
Description: The Sophos Web Appliance (version 4.2.1.3) is vulnerable to two Remote Command Injection vulnerabilities affecting its web administrative interface. These vulnerabilities occur in the MgrReport.php (/controllers/MgrReport.php) component responsible for blocking and unblocking IP addresses from accessing the device. The device doesn't properly escape the information passed in the variables 'unblockip' and 'blockip' before calling the shell_exec() function which allows for system commands to be injected into the device. The code erroneously suggests that the information handled is protected by utilizing the variable name 'escapedips' - however this was not the case. The Sophos ID is NSWA-1258.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: http://pastebin.com/DUYuN0U5; http://swa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.1.html; http://www.securityfocus.com/bid/95853
CVE: CVE-2016-9554
Published: 2017-01-28
Description: The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. These vulnerabilities occur in MgrDiagnosticTools.php (/controllers/MgrDiagnosticTools.php), in the component responsible for performing diagnostic tests with the UNIX wget utility. The application doesn't properly escape the information passed in the 'url' variable before calling the executeCommand class function ($this->dtObj->executeCommand). This function calls exec() with unsanitized user input allowing for remote command injection. The page that contains the vulnerabilities, /controllers/MgrDiagnosticTools.php, is accessed by a built-in command answered by the administrative interface. The command that calls to that vulnerable page (passed in the 'section' parameter) is: 'configuration'. Exploitation of this vulnerability yields shell access to the remote machine under the 'spiderman' user account.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: http://pastebin.com/UB8Ye6ZU; http://www.securityfocus.com/bid/95858; https://community.sophos.com/products/web-appliance/b/blog/posts/release-of-swa-version-4-3-1
CVE: CVE-2017-5608
Published: 2017-01-28
Description: Cross-site scripting (XSS) vulnerability in the image upload function in Piwigo before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via a crafted image filename.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://piwigo.org/releases/2.8.6; http://www.securityfocus.com/bid/95848; https://github.com/Piwigo/Piwigo/commit/6ec3f2d0fae0437f0c2cc8c475a26fb6aeb0d4cb
CVE: CVE-2017-5609
Published: 2017-01-28
Description: SQL injection vulnerability in include/functions_entries.inc.php in Serendipity 2.0.5 allows remote authenticated users to execute arbitrary SQL commands via the cat parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/95850; https://github.com/s9y/Serendipity/commit/c62d667287f2d76c81e03a740a581eb3c51249b6; https://github.com/s9y/Serendipity/releases/tag/2.1-rc1
CVE: CVE-2016-10174
Published: 2017-01-30
Description: The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability; http://seclists.org/fulldisclosure/2016/Dec/72; http://www.securityfocus.com/bid/95867
CVE: CVE-2016-10175
Published: 2017-01-30
Description: The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers to the password-recovery questions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability; http://seclists.org/fulldisclosure/2016/Dec/72; http://www.securityfocus.com/bid/95867
CVE: CVE-2016-10176
Published: 2017-01-30
Description: The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special URL is handled by the embedded web server (uhttpd) and processed accordingly. The web server also contains another URL, apply_noauth.cgi, that allows an unauthenticated user to perform sensitive actions on the device. This functionality can be exploited to change the router settings (such as the answers to the password-recovery questions) and achieve remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability; http://seclists.org/fulldisclosure/2016/Dec/72; http://www.securityfocus.com/bid/95867
CVE: CVE-2016-10177
Published: 2017-01-30
Description: An issue was discovered on the D-Link DWR-932B router. Undocumented TELNET and SSH services provide logins to admin with the password admin and root with the password 1234.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://www.securityfocus.com/bid/95877; https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html; http://www.securityfocus.com/bid/95877
CVE: CVE-2016-10178
Published: 2017-01-30
Description: An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 (UDP) launches the "/sbin/telnetd -l /bin/sh" command.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-254
References: http://www.securityfocus.com/bid/95877; https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html; http://www.securityfocus.com/bid/95877
CVE: CVE-2016-10179
Published: 2017-01-30
Description: An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: http://www.securityfocus.com/bid/95877; https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html; http://www.securityfocus.com/bid/95877
CVE: CVE-2016-10180
Published: 2017-01-30
Description: An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding.
CVSS Score: 7.5 (HIGH)
CWE: CWE-335, CWE-330, CWE-335, CWE-1241
References: http://www.securityfocus.com/bid/95877; https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html; http://www.securityfocus.com/bid/95877
CVE: CVE-2016-10181
Published: 2017-01-30
Description: An issue was discovered on the D-Link DWR-932B router. qmiweb provides sensitive information for CfgType=get_homeCfg requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/95877; https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html; http://www.securityfocus.com/bid/95877
CVE: CVE-2016-10182
Published: 2017-01-30
Description: An issue was discovered on the D-Link DWR-932B router. qmiweb allows command injection with ` characters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://www.securityfocus.com/bid/95877; https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html; http://www.securityfocus.com/bid/95877
CVE: CVE-2016-10183
Published: 2017-01-30
Description: An issue was discovered on the D-Link DWR-932B router. qmiweb allows directory listing with ../ traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/95877; https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html; http://www.securityfocus.com/bid/95877
CVE: CVE-2016-10184
Published: 2017-01-30
Description: An issue was discovered on the D-Link DWR-932B router. qmiweb allows file reading with ..%2f traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/95877; https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html; http://www.securityfocus.com/bid/95877
CVE: CVE-2016-10185
Published: 2017-01-30
Description: An issue was discovered on the D-Link DWR-932B router. A secure_mode=no line exists in /var/miniupnpd.conf.
CVSS Score: 7.5 (HIGH)
CWE: CWE-254
References: http://www.securityfocus.com/bid/95877; https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html; http://www.securityfocus.com/bid/95877
CVE: CVE-2016-10186
Published: 2017-01-30
Description: An issue was discovered on the D-Link DWR-932B router. /var/miniupnpd.conf has no deny rules.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/95877; https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html; http://www.securityfocus.com/bid/95877
CVE: CVE-2017-5610
Published: 2017-01-30
Description: wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface, which allows remote attackers to bypass intended access restrictions by reading terms.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.debian.org/security/2017/dsa-3779; http://www.openwall.com/lists/oss-security/2017/01/28/5; http://www.securityfocus.com/bid/95816
CVE: CVE-2017-5611
Published: 2017-01-30
Description: SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the presence of an affected plugin or theme that mishandles a crafted post type name.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.debian.org/security/2017/dsa-3779; http://www.openwall.com/lists/oss-security/2017/01/28/5; http://www.securityfocus.com/bid/95816
CVE: CVE-2017-5612
Published: 2017-01-30
Description: Cross-site scripting (XSS) vulnerability in wp-admin/includes/class-wp-posts-list-table.php in the posts list table in WordPress before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via a crafted excerpt.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.debian.org/security/2017/dsa-3779; http://www.openwall.com/lists/oss-security/2017/01/28/5; http://www.securityfocus.com/bid/95816
CVE: CVE-2017-5627
Published: 2017-01-30
Description: An issue was discovered in Artifex Software, Inc. MuJS before 4006739a28367c708dea19aeb19b8a1a9326ce08. The jsR_setproperty function in jsrun.c lacks a check for a negative array length. This leads to an integer overflow in the js_pushstring function in jsrun.c when parsing a specially crafted JS file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://git.ghostscript.com/?p=mujs.git%3Bh=4006739a28367c708dea19aeb19b8a1a9326ce08; http://www.securityfocus.com/bid/95856; https://bugs.ghostscript.com/show_bug.cgi?id=697497
CVE: CVE-2017-5628
Published: 2017-01-30
Description: An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow when parsing a specially crafted JS file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://git.ghostscript.com/?p=mujs.git%3Bh=8f62ea10a0af68e56d5c00720523ebcba13c2e6a; http://www.securityfocus.com/bid/95855; https://bugs.ghostscript.com/show_bug.cgi?id=697496
CVE: CVE-2017-5632
Published: 2017-01-30
Description: An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374_979. When executing an "nmap -O" command that specifies an IP address of an affected device, one can crash the device's WAN connection, causing disconnection from the Internet, a Denial of Service (DoS). The attack is only possible from within the local area network.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/95857; https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/; http://www.securityfocus.com/bid/95857
CVE: CVE-2017-5572
Published: 2017-01-30
Description: An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: http://www.securityfocus.com/bid/95801; http://www.securitytracker.com/id/1037716; https://support.citrix.com/article/CTX220112
CVE: CVE-2017-5573
Published: 2017-01-30
Description: An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other administrators.
CVSS Score: 4.9 (MEDIUM)
References: http://www.securityfocus.com/bid/95796; http://www.securitytracker.com/id/1037716; https://support.citrix.com/article/CTX220112
CVE: CVE-2015-7973
Published: 2017-01-30
Description: NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-254
References: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html
CVE: CVE-2015-7975
Published: 2017-01-30
Description: The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service (application crash).
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html
CVE: CVE-2015-7976
Published: 2017-01-30
Description: The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-254
References: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html
CVE: CVE-2015-7977
Published: 2017-01-30
Description: ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html
CVE: CVE-2015-7978
Published: 2017-01-30
Description: NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html
CVE: CVE-2015-7979
Published: 2017-01-30
Description: NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html
CVE: CVE-2015-8138
Published: 2017-01-30
Description: NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html
CVE: CVE-2015-8139
Published: 2017-01-30
Description: ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html
CVE: CVE-2015-8140
Published: 2017-01-30
Description: The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html
CVE: CVE-2015-8158
Published: 2017-01-30
Description: The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (infinite loop) via crafted packets with incorrect values.
CVSS Score: 5.9 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2016-2583.html; http://support.ntp.org/bin/view/Main/NtpBug2948; http://www.debian.org/security/2016/dsa-3629
CVE: CVE-2016-2516
Published: 2017-01-30
Description: NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service (ntpd abort) by using the same IP address multiple times in an unconfig directive.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://support.ntp.org/bin/view/Main/NtpBug3011; http://www.debian.org/security/2016/dsa-3629; http://www.oracle.com/technetwork/topics/security/bulletinapr2[PII_REDACTED].html
CVE: CVE-2016-2517
Published: 2017-01-30
Description: NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (prevent subsequent authentication) by leveraging knowledge of the controlkey or requestkey and sending a crafted packet to ntpd, which changes the value of trustedkey, controlkey, or requestkey.  NOTE: this vulnerability exists because of a CVE-2016-2516 regression.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://support.ntp.org/bin/view/Main/NtpBug3010; http://www.oracle.com/technetwork/topics/security/bulletinapr2[PII_REDACTED].html; http://www.securityfocus.com/bid/88189
CVE: CVE-2016-2518
Published: 2017-01-30
Description: The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183647.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184669.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html
CVE: CVE-2016-2519
Published: 2017-01-30
Description: ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (ntpd abort) by a large request data value, which triggers the ctl_getitem function to return a NULL value.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-119
References: http://support.ntp.org/bin/view/Main/NtpBug3008; http://www.oracle.com/technetwork/topics/security/bulletinapr2[PII_REDACTED].html; http://www.securityfocus.com/bid/88204
CVE: CVE-2016-7544
Published: 2017-01-30
Description: Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based _malloca and _freea functions. The library will request a block of memory to align a table in memory. If the table is later reallocated, then the wrong pointer could be freed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.openwall.com/lists/oss-security/2016/09/23/5; http://www.openwall.com/lists/oss-security/2016/09/23/9; http://www.securityfocus.com/bid/93164
CVE: CVE-2016-9939
Published: 2017-01-30
Description: Crypto++ (aka cryptopp and libcrypto++) 5.6.4 contained a bug in its ASN.1 BER decoding routine. The library will allocate a memory block based on the length field of the ASN.1 object. If there is not enough content octets in the ASN.1 object, then the function will fail and the memory block will be zeroed even if its unused. There is a noticeable delay during the wipe for a large allocation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.debian.org/security/2016/dsa-3748; http://www.openwall.com/lists/oss-security/2016/12/12/7; http://www.securityfocus.com/bid/94854
CVE: CVE-2015-2180
Published: 2017-01-30
Description: The DBMail driver in the Password plugin in Roundcube before 1.1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the password.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: http://www.securityfocus.com/bid/96387; https://github.com/roundcube/roundcubemail/issues/4757; http://www.securityfocus.com/bid/96387
CVE: CVE-2015-2181
Published: 2017-01-30
Description: Multiple buffer overflows in the DBMail driver in the Password plugin in Roundcube before 1.1.0 allow remote attackers to have unspecified impact via the (1) password or (2) username.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96391; https://github.com/roundcube/roundcubemail/issues/4757; http://www.securityfocus.com/bid/96391
CVE: CVE-2015-7331
Published: 2017-01-30
Description: The mcollective-puppet-agent plugin before 1.11.1 for Puppet allows remote attackers to execute arbitrary code via vectors involving the --server argument.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-254
References: http://www.securityfocus.com/bid/92432; https://puppet.com/security/cve/cve-2015-7331; http://www.securityfocus.com/bid/92432
CVE: CVE-2015-8034
Published: 2017-01-30
Description: The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96390; https://docs.saltstack.com/en/latest/topics/releases/2015.8.3.html; http://www.securityfocus.com/bid/96390