deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-5548
Published: 2017-02-06
Description: drivers/net/ieee802154/atusb.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=05a974efa4bdf6e2a150e3f27dc6fcf0a9ad5655; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6; http://www.openwall.com/lists/oss-security/2017/01/21/3
CVE: CVE-2017-5549
Published: 2017-02-06
Description: The klsi_105_get_line_state function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitialized heap-memory contents into a log entry upon a failure to read the line status, which allows local users to obtain sensitive information by reading the log.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=146cc8a17a3b4996f6805ee5c080e7101277c410; http://www.debian.org/security/2017/dsa-3791; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5
CVE: CVE-2017-5550
Published: 2017-02-06
Description: Off-by-one error in the pipe_advance function in lib/iov_iter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized heap-memory locations in opportunistic circumstances by reading from a pipe after an incorrect buffer-release decision.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9dc6f65bc5e232d1c05fe34b5daadc7e8bbf1fb; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5; http://www.openwall.com/lists/oss-security/2017/01/21/3
CVE: CVE-2017-5551
Published: 2017-02-06
Description: The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7097.
CVSS Score: 4.4 (MEDIUM)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=497de07d89c1410d76a15bec2bb41f24a2a89f31; http://www.debian.org/security/2017/dsa-3791; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6
CVE: CVE-2017-5576
Published: 2017-02-06
Description: Integer overflow in the vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 allows local users to cause a denial of service or possibly have unspecified other impact via a crafted size value in a VC4_SUBMIT_CL ioctl call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f2ff82e11c86c05d051cae32b58226392d33bbf; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7; http://www.openwall.com/lists/oss-security/2017/01/21/7
CVE: CVE-2017-5577
Published: 2017-02-06
Description: The vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 does not set an errno value upon certain overflow detections, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) via inconsistent size values in a VC4_SUBMIT_CL ioctl call.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-388
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6b8ac63847bc2f958dd93c09edc941a0118992d9; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7; http://www.openwall.com/lists/oss-security/2017/01/21/7
CVE: CVE-2015-2794
Published: 2017-02-06
Description: The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.dnnsoftware.com/community-blog/cid/155198/workaround-for-potential-security-issue; http://www.dnnsoftware.com/community/security/security-center; http://www.securityfocus.com/bid/96373
CVE: CVE-2017-5875
Published: 2017-02-06
Description: XSS was discovered in dotCMS 3.7.0, with an authenticated attack against the /myAccount addressID parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96115; https://github.com/dotCMS/core/issues/10643; http://www.securityfocus.com/bid/96115
CVE: CVE-2017-5876
Published: 2017-02-06
Description: XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /news-events/events date parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96115; https://github.com/dotCMS/core/issues/10643; http://www.securityfocus.com/bid/96115
CVE: CVE-2017-5877
Published: 2017-02-06
Description: XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /about-us/locations/index direction parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96115; https://github.com/dotCMS/core/issues/10643; http://www.securityfocus.com/bid/96115
CVE: CVE-2017-5879
Published: 2017-02-06
Description: An issue was discovered in Exponent CMS 2.4.1. This is a blind SQL injection that can be exploited by un-authenticated users via an HTTP GET request and which can be used to dump database data out to a malicious server, using an out-of-band technique, such as select_loadfile(). The vulnerability affects source_selector.php and the following parameter: src.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/96039; https://github.com/exponentcms/exponent-cms/issues/73; http://www.securityfocus.com/bid/96039
CVE: CVE-2016-5102
Published: 2017-02-06
Description: Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (segmentation fault) via a crafted gif file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://bugzilla.maptools.org/show_bug.cgi?id=2552; http://www.securityfocus.com/bid/96049; https://bugzilla.redhat.com/show_bug.cgi?id=1343407
CVE: CVE-2016-7446
Published: 2017-02-06
Description: Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown vectors. Note: This vulnerability exists due to an incomplete patch for CVE-2016-2317.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2016-10/msg00094.html; http://lists.opensuse.org/opensuse-updates/2016-10/msg00097.html; http://www.openwall.com/lists/oss-security/2016/09/18/8
CVE: CVE-2016-7447
Published: 2017-02-06
Description: Heap-based buffer overflow in the EscapeParenthesis function in GraphicsMagick before 1.3.25 allows remote attackers to have unspecified impact via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2016-10/msg00094.html; http://lists.opensuse.org/opensuse-updates/2016-10/msg00097.html; http://www.openwall.com/lists/oss-security/2016/09/18/8
CVE: CVE-2016-7448
Published: 2017-02-06
Description: The Utah RLE reader in GraphicsMagick before 1.3.25 allows remote attackers to cause a denial of service (CPU consumption or large memory allocations) via vectors involving the header information and the file size.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-updates/2016-10/msg00094.html; http://lists.opensuse.org/opensuse-updates/2016-10/msg00097.html; http://www.openwall.com/lists/oss-security/2016/09/18/8
CVE: CVE-2016-7449
Published: 2017-02-06
Description: The TIFFGetField function in coders/tiff.c in GraphicsMagick 1.3.24 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a file containing an "unterminated" string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-updates/2016-10/msg00094.html; http://lists.opensuse.org/opensuse-updates/2016-10/msg00097.html; http://www.openwall.com/lists/oss-security/2016/09/18/8
CVE: CVE-2016-7800
Published: 2017-02-06
Description: Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM chunk, which triggers a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-191
References: http://lists.opensuse.org/opensuse-updates/2016-10/msg00094.html; http://lists.opensuse.org/opensuse-updates/2016-10/msg00097.html; http://www.debian.org/security/2016/dsa-3746
CVE: CVE-2016-9532
Published: 2017-02-06
Description: Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tif file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://bugzilla.maptools.org/show_bug.cgi?id=2592; http://www.debian.org/security/2017/dsa-3762; http://www.openwall.com/lists/oss-security/2016/11/11/14
CVE: CVE-2016-9772
Published: 2017-02-06
Description: OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC responses.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2016/12/02/9; http://www.securityfocus.com/bid/94651; https://www.openafs.org/pages/security/OPENAFS-SA-2016-003.txt
CVE: CVE-2017-5367
Published: 2017-02-06
Description: Multiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, which allows a remote attacker to execute malicious scripts within an authenticated client's browser. The URL is /zm/index.php and sample parameters could include action=login&view=postlogin[XSS] view=console[XSS] view=groups[XSS] view=events&filter[terms][1][cnj]=and[XSS] view=events&filter%5Bterms%5D%5B1%5D%5Bcnj%5D=and[XSS] view=events&filter%5Bterms%5D%5B1%5D%5Bcnj%5D=[XSS]and view=events&limit=1%22%3E%3C/a%3E[XSS] (among others).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/bugtraq/2017/Feb/6; http://seclists.org/fulldisclosure/2017/Feb/11; http://www.securityfocus.com/bid/96120
CVE: CVE-2017-5368
Published: 2017-02-06
Description: ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, is vulnerable to CSRF (Cross Site Request Forgery) which allows a remote attack to make changes to the web application as the current logged in victim. If the victim visits a malicious web page, the attacker can silently and automatically create a new admin user within the web application for remote persistence and further attacks. The URL is /zm/index.php and sample parameters could include action=user uid=0 newUser[Username]=attacker1 newUser[Password]=Password1234 conf_[CREDENTIAL_REDACTED] newUser[System]=Edit (among others).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://seclists.org/bugtraq/2017/Feb/6; http://seclists.org/fulldisclosure/2017/Feb/11; http://www.securityfocus.com/bid/96126
CVE: CVE-2017-5595
Published: 2017-02-06
Description: A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile(), which allows an authenticated attacker to read local system files (e.g., /etc/passwd) in the context of the web server user (www-data). The attack vector is a .. (dot dot) in the path parameter within a zm/index.php?view=file&path= request.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/bugtraq/2017/Feb/6; http://seclists.org/fulldisclosure/2017/Feb/11; http://www.securityfocus.com/bid/96125
CVE: CVE-2017-5677
Published: 2017-02-06
Description: PEAR HTML_AJAX 0.3.0 through 0.5.7 has a PHP Object Injection Vulnerability in the PHP Serializer. It allows remote code execution. In one viewpoint, the root cause is an incorrect regular expression.
CVSS Score: 9.8 (CRITICAL)
References: http://blog.pear.php.net/2017/02/02/security-html_ajax-058/; http://karmainsecurity.com/KIS-2017-01; http://seclists.org/fulldisclosure/2017/Feb/12
CVE: CVE-2014-9914
Published: 2017-02-07
Description: Race condition in the ip4_datagram_release_cb function in net/ipv4/datagram.c in the Linux kernel before 3.15.2 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging incorrect expectations about locking during multithreaded access to internal data structures for IPv4 UDP sockets.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362, CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9709674e68646cee5a24e3000b3558d25412203a; http://source.android.com/security/bulletin/2017-02-01.html; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2
CVE: CVE-2016-10044
Published: 2017-02-07
Description: The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup system call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=22f6b4d34fcf039c63a94e7670e0da24f8575a5a; http://source.android.com/security/bulletin/2017-02-01.html; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.7
CVE: CVE-2015-5677
Published: 2017-02-07
Description: bsnmpd, as used in FreeBSD 9.3, 10.1, and 10.2, uses world-readable permissions on the snmpd.config file, which allows local users to obtain the secret key for USM authentication by reading the file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1034678; https://pierrekim.github.io/blog/2016-01-15-cve-2015-5677-freebsd-bsnmpd.html; https://www.freebsd.org/security/advisories/FreeBSD-SA-16:06.bsnmpd.asc
CVE: CVE-2015-8608
Published: 2017-02-07
Description: The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of service (out-of-bounds read) and possibly execute arbitrary code via a crafted (1) drive letter or (2) pInName argument.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; https://packetstormsecurity.com/files/136649/Perl-5.22-VDir-MapPathA-W-Out-Of-Bounds-Reads-Buffer-Over-Reads.html; https://rt.perl.org/Public/Bug/Display.html?id=126755
CVE: CVE-2016-1504
Published: 2017-02-07
Description: dhcpcd before 6.10.0 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to the option length.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://roy.marples.name/projects/dhcpcd/info/595883e2a431f65d8fabf33059aa4689cca17403; http://roy.marples.name/projects/dhcpcd/timeline?r=trunk&nd&c=2016-01-07+16%3A47%3A19&n=200; http://www.openwall.com/lists/oss-security/2016/01/07/3
CVE: CVE-2016-2539
Published: 2017-02-07
Description: Cross-site request forgery (CSRF) vulnerability in install_modules.php in ATutor before 2.2.2 allows remote attackers to hijack the authentication of users for requests that upload arbitrary files and execute arbitrary PHP code via vectors involving a crafted zip file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/atutor/ATutor/commit/bfc6c80c6c217c5515172f3cc949e13dfa1a92ac; https://packetstormsecurity.com/files/136109/ATutor-LMS-2.2.1-CSRF-Remote-Code-Execution.html; https://www.exploit-db.com/exploits/39524/
CVE: CVE-2016-2779
Published: 2017-02-07
Description: runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2016/02/27/1; http://www.openwall.com/lists/oss-security/2016/02/27/2; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=815922
CVE: CVE-2016-2781
Published: 2017-02-07
Description: chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.openwall.com/lists/oss-security/2016/02/28/2; http://www.openwall.com/lists/oss-security/2016/02/28/3; https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE: CVE-2016-6131
Published: 2017-02-07
Description: The demangler in GNU Libiberty allows remote attackers to cause a denial of service (infinite loop, stack overflow, and crash) via a cycle in the references of remembered mangled types.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2016/06/30/4; http://www.openwall.com/lists/oss-security/2016/06/30/7; http://www.securityfocus.com/bid/91519
CVE: CVE-2016-6175
Published: 2017-02-07
Description: Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://bugs.launchpad.net/php-gettext/+bug/1606184; https://github.com/NagVis/nagvis/commit/4fe8672a5aec3467da72b5852ca6d283c15adb53; https://kmkz-web-blog.blogspot.cz/2016/07/advisory-cve-2016-6175.html
CVE: CVE-2016-6199
Published: 2017-02-07
Description: ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a crafted serialized object.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://discuss.gradle.org/t/a-security-issue-about-gradle-rce/17726; https://philwantsfish.github.io/security/java-deserialization-github; https://discuss.gradle.org/t/a-security-issue-about-gradle-rce/17726
CVE: CVE-2016-7164
Published: 2017-02-07
Description: The construct function in puff.cpp in Libtorrent 1.1.0 allows remote torrent trackers to cause a denial of service (segmentation fault and crash) via a crafted GZIP response.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2016/09/08/1; http://www.openwall.com/lists/oss-security/2016/09/08/7; http://www.securityfocus.com/bid/92891
CVE: CVE-2016-7400
Published: 2017-02-07
Description: Multiple SQL injection vulnerabilities in Exponent CMS before 2.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an activate_address address controller action, (2) title parameter in a show blog controller action, or (3) content_id parameter in a showComments expComment controller action.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.openwall.com/lists/oss-security/2016/09/18/10; http://www.openwall.com/lists/oss-security/2016/09/18/2; http://www.securityfocus.com/bid/93041
CVE: CVE-2016-3020
Published: 2017-02-07
Description: IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security restrictions, caused by improper content validation. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to bypass validation and load a page with malicious content.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://www.ibm.com/support/docview.wss?uid=swg21996826; http://www.ibm.com/support/docview.wss?uid=swg21996826
CVE: CVE-2016-6092
Published: 2017-02-07
Description: IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by a local user.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg21997953; http://www.ibm.com/support/docview.wss?uid=swg21997953
CVE: CVE-2016-6094
Published: 2017-02-07
Description: IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 generates an error message that includes sensitive information about its environment, users, or associated data.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg21997987; http://www.securityfocus.com/bid/95984; http://www.ibm.com/support/docview.wss?uid=swg21997987
CVE: CVE-2016-6096
Published: 2017-02-07
Description: IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg21997984; http://www.securityfocus.com/bid/95983; http://www.ibm.com/support/docview.wss?uid=swg21997984
CVE: CVE-2016-6097
Published: 2017-02-07
Description: IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 allows web pages to be stored locally which can be read by another user on the system.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg21997986; http://www.securityfocus.com/bid/95977; http://www.ibm.com/support/docview.wss?uid=swg21997986
CVE: CVE-2016-6104
Published: 2017-02-07
Description: IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions, which could allow the attacker to execute arbitrary code on the vulnerable system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://www.ibm.com/support/docview.wss?uid=swg21997988; http://www.securityfocus.com/bid/95980; http://www.ibm.com/support/docview.wss?uid=swg21997988
CVE: CVE-2015-7599
Published: 2017-02-07
Description: Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enabled, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a username and password.
CVSS Score: 8.1 (HIGH)
CWE: CWE-190
References: http://blogs.windriver.com/wind_river_blog/2015/09/wind-river-vxworks-updateclarification.html; http://www.securityfocus.com/bid/79205; https://kb.netapp.com/support/s/article/cve-2015-7599-vxworks-vulnerability-impacting-netapp-e-series-products?language=en_US
CVE: CVE-2015-8322
Published: 2017-02-07
Description: NetApp OnCommand System Manager 8.3.x before 8.3.2 allows remote authenticated users to execute arbitrary code via unspecified vectors.
CVSS Score: 8.8 (HIGH)
References: https://kb.netapp.com/support/index?page=content&id=9010070; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://kb.netapp.com/support/index?page=content&id=9010070
CVE: CVE-2015-8544
Published: 2017-02-07
Description: NetApp SnapDrive for Windows before 7.0.2P4, 7.0.3, and 7.1 before 7.1.3P1 allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://kb.netapp.com/support/s/article/cve-2015-8544-sensitive-information-disclosure-in-snapdrive-for-windows; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://kb.netapp.com/support/s/article/cve-2015-8544-sensitive-information-disclosure-in-snapdrive-for-windows
CVE: CVE-2016-1502
Published: 2017-02-07
Description: NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication and then list and delete backups via unspecified vectors.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287
References: https://kb.netapp.com/support/s/article/authentication-bypass-vulnerability-in-snapcenter-server-1-0-1-0p1; https://kb.netapp.com/support/s/article/authentication-bypass-vulnerability-in-snapcenter-server-1-0-1-0p1