deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-6391
Published: 2017-03-02
Description: An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "admin_console/web/tools/SimpleJWPlayer.php" URL, the "admin_console/web/tools/AkamaiBroadcaster.php" URL, the "admin_console/web/tools/bigRedButton.php" URL, and the "admin_console/web/tools/bigRedButtonPtsPoc.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96534; https://github.com/kaltura/server/commit/041a6d5e8336f7713985b120139c8f4b6279a337; https://github.com/kaltura/server/issues/5300
CVE: CVE-2017-6392
Published: 2017-03-02
Description: An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "server-Lynx-12.11.0/admin_console/web/tools/XmlJWPlayer.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96534; https://github.com/kaltura/server/commit/041a6d5e8336f7713985b120139c8f4b6279a337; https://github.com/kaltura/server/issues/5303
CVE: CVE-2017-6393
Published: 2017-03-02
Description: An issue was discovered in NagVis 1.9b12. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "nagvis-master/share/userfiles/gadgets/std_table.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96537; https://github.com/NagVis/nagvis/issues/91; http://www.securityfocus.com/bid/96537
CVE: CVE-2017-6394
Published: 2017-03-02
Description: Multiple Cross-Site Scripting (XSS) issues were discovered in OpenEMR 5.0.0 and 5.0.1-dev. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to the "openemr-master/gacl/admin/object_search.php" URL (section_value; src_form). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96539; http://www.securityfocus.com/bid/96576; https://github.com/openemr/openemr/issues/498
CVE: CVE-2017-6395
Published: 2017-03-02
Description: An issue was discovered in HashOver 2.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the 'hashover/scripts/widget-output.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96550; https://github.com/jacobwb/hashover-next/issues/152; http://www.securityfocus.com/bid/96550
CVE: CVE-2017-6396
Published: 2017-03-02
Description: An issue was discovered in WPO-Foundation WebPageTest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "webpagetest-master/www/compare-cf.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96553; https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2017-6396.md; https://github.com/WPO-Foundation/webpagetest/issues/820
CVE: CVE-2017-6397
Published: 2017-03-02
Description: An issue was discovered in FlightAirMap v1.0-beta.10. The vulnerability exists due to insufficient filtration of user-supplied data in multiple parameters passed to several *-sub-menu.php pages. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96551; https://github.com/Ysurac/FlightAirMap/issues/275; http://www.securityfocus.com/bid/96551
CVE: CVE-2017-6399
Published: 2017-03-02
Description: An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client (on the server or a connected client) can occur.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/96490; https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue4; http://www.securityfocus.com/bid/96490
CVE: CVE-2017-6400
Published: 2017-03-02
Description: An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged command execution on NetBackup Server and Client can occur (on the local system).
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/96484; https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue2; http://www.securityfocus.com/bid/96484
CVE: CVE-2017-6401
Published: 2017-03-02
Description: An issue was discovered in Veritas NetBackup before 8.0 and NetBackup Appliance before 3.0. Local arbitrary command execution can occur when using bpcd and bpnbat.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://www.securityfocus.com/bid/96493; https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue6; http://www.securityfocus.com/bid/96493
CVE: CVE-2017-6402
Published: 2017-03-02
Description: An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Denial of service affecting NetBackup server can occur.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/96485; https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue3; http://www.securityfocus.com/bid/96485
CVE: CVE-2017-6403
Published: 2017-03-02
Description: An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0. NetBackup Cloud Storage Service uses a hardcoded username and password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://www.securityfocus.com/bid/96500; https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue10; http://www.securityfocus.com/bid/96500
CVE: CVE-2017-6404
Published: 2017-03-02
Description: An issue was discovered in Veritas NetBackup Before 7.7 and NetBackup Appliance Before 2.7. There are world-writable log files, allowing destruction or spoofing of log data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: http://www.securityfocus.com/bid/96494; https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue9; http://www.securityfocus.com/bid/96494
CVE: CVE-2017-6405
Published: 2017-03-02
Description: An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Hostname-based security is open to DNS spoofing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-290
References: http://www.securityfocus.com/bid/96488; https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue7; http://www.securityfocus.com/bid/96488
CVE: CVE-2017-6406
Published: 2017-03-02
Description: An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Arbitrary privileged command execution, using whitelist directory escape with "../" substrings, can occur.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/96486; https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue5; http://www.securityfocus.com/bid/96486
CVE: CVE-2017-6407
Published: 2017-03-02
Description: An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client (on the server or a connected client) can occur.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/96489; http://www.securitytracker.com/id/1037950; https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue1
CVE: CVE-2017-6408
Published: 2017-03-02
Description: An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. A local-privilege-escalation race condition in pbx_exchange can occur when a local user connects to a socket before permissions are secured.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/96491; http://www.securitytracker.com/id/1037950; https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue8
CVE: CVE-2017-6409
Published: 2017-03-02
Description: An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Unauthenticated CORBA interfaces permit inappropriate access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: http://www.securityfocus.com/bid/96504; http://www.securitytracker.com/id/1037950; https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue11
CVE: CVE-2017-6410
Published: 2017-03-02
Description: kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL (potentially including Basic Authentication credentials, a query string, or PATH_INFO), which allows remote attackers to obtain sensitive information via a crafted PAC file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-319
References: http://www.debian.org/security/2017/dsa-3849; http://www.securityfocus.com/bid/96515; https://www.kde.org/info/security/advisory-20170228-1.txt
CVE: CVE-2017-6413
Published: 2017-03-02
Description: The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.6 for the Apache HTTP Server does not skip OIDC_CLAIM_ and OIDCAuthNHeader headers in an "AuthType oauth20" configuration, which allows remote attackers to bypass authentication via crafted HTTP traffic.
CVSS Score: 8.6 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/96549; https://access.redhat.com/errata/RHSA-2019:2112; https://github.com/pingidentity/mod_auth_openidc/blob/master/ChangeLog
CVE: CVE-2017-5228
Published: 2017-03-02
Description: All editions of Rapid7 Metasploit prior to version 4.13.0[PII_REDACTED] contain a directory traversal vulnerability in the Meterpreter stdapi Dir.download() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/96954; https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products; http://www.securityfocus.com/bid/96954
CVE: CVE-2017-5229
Published: 2017-03-02
Description: All editions of Rapid7 Metasploit prior to version 4.13.0[PII_REDACTED] contain a directory traversal vulnerability in the Meterpreter extapi Clipboard.parse_dump() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/96954; https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products; http://www.securityfocus.com/bid/96954
CVE: CVE-2017-5230
Published: 2017-03-02
Description: The Java keystore in all versions and editions of Rapid7 Nexpose prior to 6.4.50 is encrypted with a static password of 'r@p1d7k3y5t0r3' which is not modifiable by the user. The keystore provides storage for saved scan credentials in an otherwise secure location on disk.
CVSS Score: 7.2 (HIGH)
CWE: CWE-798
References: http://www.securityfocus.com/bid/96956; https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products; https://help.rapid7.com/nexpose/en-us/release-notes/#6.4.50
CVE: CVE-2017-5231
Published: 2017-03-02
Description: All editions of Rapid7 Metasploit prior to version 4.13.0[PII_REDACTED] contain a directory traversal vulnerability in the Meterpreter stdapi CommandDispatcher.cmd_download() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/96954; https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products; http://www.securityfocus.com/bid/96954
CVE: CVE-2017-5232
Published: 2017-03-02
Description: All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.securityfocus.com/bid/96956; https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products; http://www.securityfocus.com/bid/96956
CVE: CVE-2017-5233
Published: 2017-03-02
Description: Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.securityfocus.com/bid/96957; https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products; http://www.securityfocus.com/bid/96957
CVE: CVE-2017-5234
Published: 2017-03-02
Description: Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.securityfocus.com/bid/96545; https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products; http://www.securityfocus.com/bid/96545
CVE: CVE-2017-5235
Published: 2017-03-02
Description: Rapid7 Metasploit Pro installers prior to version 4.13.0[PII_REDACTED] contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.securityfocus.com/bid/96548; https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products; http://www.securityfocus.com/bid/96548
CVE: CVE-2016-10060
Published: 2017-03-02
Description: The ConcatenateImages function in MagickWand/magick-cli.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-252
References: http://www.openwall.com/lists/oss-security/2016/12/26/9; http://www.securityfocus.com/bid/95208; https://bugzilla.redhat.com/show_bug.cgi?id=1410470
CVE: CVE-2016-10062
Published: 2017-03-02
Description: The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of the fwrite function, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-388
References: http://www.debian.org/security/2017/dsa-3799; http://www.openwall.com/lists/oss-security/2016/12/26/9; http://www.securityfocus.com/bid/95209
CVE: CVE-2016-10063
Published: 2017-03-02
Description: Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file, related to extend validity.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/12/26/9; http://www.securityfocus.com/bid/95210; https://bugzilla.redhat.com/show_bug.cgi?id=1410476
CVE: CVE-2016-10064
Published: 2017-03-02
Description: Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html; http://www.openwall.com/lists/oss-security/2016/12/26/9; http://www.securityfocus.com/bid/95211
CVE: CVE-2016-10067
Published: 2017-03-02
Description: magick/memory.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via vectors involving "too many exceptions," which trigger a buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/12/26/9; http://www.securityfocus.com/bid/95220; https://bugzilla.redhat.com/show_bug.cgi?id=1410494
CVE: CVE-2016-10068
Published: 2017-03-02
Description: The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted XML file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html; http://lists.opensuse.org/opensuse-updates/2017-02/msg00031.html; http://www.openwall.com/lists/oss-security/2016/12/26/9
CVE: CVE-2016-10069
Published: 2017-03-02
Description: coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a mat file with an invalid number of frames.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html; http://www.openwall.com/lists/oss-security/2016/12/26/9; http://www.securityfocus.com/bid/95216
CVE: CVE-2016-10071
Published: 2017-03-02
Description: coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/12/26/9; http://www.securityfocus.com/bid/95222; https://bugzilla.redhat.com/show_bug.cgi?id=1410513
CVE: CVE-2017-6102
Published: 2017-03-02
Description: Persistent XSS in wordpress plugin rockhoist-badges v1.2.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96533; http://www.vapidlabs.com/advisory.php?v=176; https://wpvulndb.com/vulnerabilities/8763
CVE: CVE-2017-6103
Published: 2017-03-02
Description: Persistent XSS Vulnerability in Wordpress plugin AnyVar v0.1.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96532; http://www.vapidlabs.com/advisory.php?v=177; http://www.securityfocus.com/bid/96532
CVE: CVE-2017-6104
Published: 2017-03-02
Description: Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-434, CWE-732
References: http://www.securityfocus.com/bid/96547; http://www.vapidlabs.com/advisory.php?v=178; https://wpvulndb.com/vulnerabilities/8743
CVE: CVE-2016-9892
Published: 2017-03-02
Description: The esets_daemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not properly verify X.509 certificates from the edf.eset.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide crafted responses to license activation requests via a self-signed certificate.  NOTE: this issue can be combined with CVE-2016-0718 to execute arbitrary code remotely as root.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2017/Feb/68; http://support.eset.com/ca6333/
CVE: CVE-2015-2877
Published: 2017-03-03
Description: Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection (CAIN) attack.  NOTE: the vendor states "Basically if you care about this attack vector, disable deduplication." Share-until-written approaches for memory conservation among mutually untrusting tenants are inherently detectable for information disclosure, and can be classified as potentially misunderstood behaviors rather than vulnerabilities
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.antoniobarresi.com/files/cain_advisory.txt; http://www.kb.cert.org/vuls/id/935424; http://www.securityfocus.com/bid/76256
CVE: CVE-2016-10127
Published: 2017-03-03
Description: PySAML2 allows remote attackers to conduct XML external entity (XXE) attacks via a crafted SAML XML request or response.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-611
References: http://www.openwall.com/lists/oss-security/2017/01/19/5; http://www.securityfocus.com/bid/95376; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850716
CVE: CVE-2016-10193
Published: 2017-03-03
Description: The espeak-ruby gem before 1.0.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the speak, save, bytes or bytes_wav method in lib/espeak/speech.rb.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://www.openwall.com/lists/oss-security/2017/01/31/14; http://www.openwall.com/lists/oss-security/2017/02/02/5; https://github.com/dejan/espeak-ruby/issues/7
CVE: CVE-2016-10194
Published: 2017-03-03
Description: The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to_speech or (2) to_mp3 method in lib/festivaltts4r/festival4r.rb.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://www.openwall.com/lists/oss-security/2017/01/31/14; http://www.openwall.com/lists/oss-security/2017/02/02/5; https://github.com/spejman/festivaltts4r/issues/1
CVE: CVE-2016-10201
Published: 2017-03-03
Description: Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the format parameter in a download log request to index.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2017/02/05/1; https://www.foxmole.com/advisories/foxmole-2016-07-05.txt; http://www.openwall.com/lists/oss-security/2017/02/05/1
CVE: CVE-2016-10202
Published: 2017-03-03
Description: Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the path info to index.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2017/02/05/1; https://www.foxmole.com/advisories/foxmole-2016-07-05.txt; http://www.openwall.com/lists/oss-security/2017/02/05/1
CVE: CVE-2016-10203
Published: 2017-03-03
Description: Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the name when creating a new monitor.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2017/02/05/1; http://www.securityfocus.com/bid/97122; https://www.foxmole.com/advisories/foxmole-2016-07-05.txt
CVE: CVE-2016-10204
Published: 2017-03-03
Description: SQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.openwall.com/lists/oss-security/2017/02/05/1; https://www.foxmole.com/advisories/foxmole-2016-07-05.txt; http://www.openwall.com/lists/oss-security/2017/02/05/1
CVE: CVE-2016-10205
Published: 2017-03-03
Description: Session fixation vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack web sessions via the ZMSESSID cookie.
CVSS Score: 7.3 (HIGH)
CWE: CWE-384
References: http://www.openwall.com/lists/oss-security/2017/02/05/1; http://www.securityfocus.com/bid/97116; https://www.foxmole.com/advisories/foxmole-2016-07-05.txt