deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-10967
Published: 2017-07-06
Description: In FineCMS before 2017-07-06, application\core\controller\config.php allows XSS in the (1) key_name, (2) key_value, and (3) meaning parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/andrzuk/FineCMS/pull/9; https://github.com/andrzuk/FineCMS/pull/9
CVE: CVE-2017-10973
Published: 2017-07-06
Description: In FineCMS before 2017-07-06, application/lib/ajax/get_image_data.php has SSRF, related to requests for non-image files with a modified HTTP Host header.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://github.com/andrzuk/FineCMS/pull/10; https://github.com/andrzuk/FineCMS/pull/11; https://github.com/andrzuk/FineCMS/pull/10
CVE: CVE-2017-8290
Published: 2017-07-06
Description: A potential Buffer Overflow Vulnerability (from a BB Code handling issue) has been identified in TeamSpeak Server version 3.0.13.6 (08/11/2016 09:48:33), it enables the users to Crash any WINDOWS Client that clicked into a Vulnerable Channel of a TeamSpeak Server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/143053/TeamSpeak-Client-3.1.4-Buffer-Overflow.html; http://packetstormsecurity.com/files/143053/TeamSpeak-Client-3.1.4-Buffer-Overflow.html
CVE: CVE-2017-8932
Published: 2017-07-06
Description: A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively extract the scalar input to ScalarMult by submitting crafted points and observing failures to the derive correct output. This leads to a full key recovery attack against static ECDH, as used in popular JWT libraries.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-682
References: http://lists.opensuse.org/opensuse-updates/2017-06/msg00079.html; http://lists.opensuse.org/opensuse-updates/2017-06/msg00080.html; https://access.redhat.com/errata/RHSA-2017:1859
CVE: CVE-2017-9524
Published: 2017-07-06
Description: The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows remote attackers to cause a denial of service (segmentation fault and server crash) by leveraging failure to ensure that all initialization occurs before talking to a client in the nbd_negotiate function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.debian.org/security/2017/dsa-3925; http://www.openwall.com/lists/oss-security/2017/06/12/1; http://www.securityfocus.com/bid/99011
CVE: CVE-2017-0664
Published: 2017-07-06
Description: A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36491278.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/99470; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99470
CVE: CVE-2017-0665
Published: 2017-07-06
Description: A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36991414.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99470; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99470
CVE: CVE-2017-0666
Published: 2017-07-06
Description: A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37285689.
CVSS Score: 7.8 (HIGH)
CWE: CWE-682
References: http://www.securityfocus.com/bid/99470; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99470
CVE: CVE-2017-0667
Published: 2017-07-06
Description: A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37478824.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99470; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99470
CVE: CVE-2017-0668
Published: 2017-07-06
Description: A information disclosure vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-22011579.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/99470; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99470
CVE: CVE-2017-0669
Published: 2017-07-06
Description: A information disclosure vulnerability in the Android framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34114752.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/99470; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99470
CVE: CVE-2017-0670
Published: 2017-07-06
Description: A denial of service vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36104177.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/99470; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99470
CVE: CVE-2017-0671
Published: 2017-07-06
Description: A remote code execution vulnerability in the Android libraries. Product: Android. Versions: 4.4.4. Android ID: A-34514762.
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2017-07-01
CVE: CVE-2017-0672
Published: 2017-07-06
Description: A denial of service vulnerability in the Android libraries. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-34778578.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/2017-07-01
CVE: CVE-2017-0673
Published: 2017-07-06
Description: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-33974623.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0674
Published: 2017-07-06
Description: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34231163.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0675
Published: 2017-07-06
Description: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34779227.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0676
Published: 2017-07-06
Description: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34896431.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0677
Published: 2017-07-06
Description: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36035074.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0678
Published: 2017-07-06
Description: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36576151.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0679
Published: 2017-07-06
Description: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36996978.
CVSS Score: 7.8 (HIGH)
CWE: CWE-682
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0680
Published: 2017-07-06
Description: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37008096.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0681
Published: 2017-07-06
Description: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37208566.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0682
Published: 2017-07-06
Description: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36588422.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0683
Published: 2017-07-06
Description: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36591008.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0684
Published: 2017-07-06
Description: A elevation of privilege vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35421151.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0685
Published: 2017-07-06
Description: A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34203195.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0686
Published: 2017-07-06
Description: A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34231231.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0688
Published: 2017-07-06
Description: A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35584425.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0689
Published: 2017-07-06
Description: A denial of service vulnerability in the Android media framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36215950.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-119
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0690
Published: 2017-07-06
Description: A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36592202.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0691
Published: 2017-07-06
Description: A denial of service vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36724453.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0692
Published: 2017-07-06
Description: A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36725407.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0693
Published: 2017-07-06
Description: A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36993291.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0694
Published: 2017-07-06
Description: A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37093318.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0695
Published: 2017-07-06
Description: A denial of service vulnerability in the Android media framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37094889.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0696
Published: 2017-07-06
Description: A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37207120.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0697
Published: 2017-07-06
Description: A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37239013.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0698
Published: 2017-07-06
Description: A information disclosure vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35467458.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0699
Published: 2017-07-06
Description: A information disclosure vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36490809.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/99478; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99478
CVE: CVE-2017-0700
Published: 2017-07-06
Description: A remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-35639138.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/99472; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99472
CVE: CVE-2017-0701
Published: 2017-07-06
Description: A remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-36385715.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/99472; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99472
CVE: CVE-2017-0702
Published: 2017-07-06
Description: A remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-36621442.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/99472; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99472
CVE: CVE-2017-0703
Published: 2017-07-06
Description: A elevation of privilege vulnerability in the Android system ui. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-33123882.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://www.securityfocus.com/bid/99472; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99472
CVE: CVE-2017-0704
Published: 2017-07-06
Description: A elevation of privilege vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-33059280.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/99472; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99472
CVE: CVE-2017-0705
Published: 2017-07-06
Description: A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-34973477. References: B-RB#119898.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/bid/99482; https://github.com/ScottyBauer/Android_Kernel_CVE_POCs/blob/master/CVE-2017-0705.c; https://source.android.com/security/bulletin/2017-07-01
CVE: CVE-2017-0706
Published: 2017-07-06
Description: A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-35195787. References: B-RB#120532.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99482; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99482
CVE: CVE-2017-0707
Published: 2017-07-06
Description: A elevation of privilege vulnerability in the HTC led driver. Product: Android. Versions: Android kernel. Android ID: A-36088467.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/99474; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99474
CVE: CVE-2017-0708
Published: 2017-07-06
Description: A information disclosure vulnerability in the HTC sound driver. Product: Android. Versions: Android kernel. Android ID: A-35384879.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/99474; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99474
CVE: CVE-2017-0709
Published: 2017-07-06
Description: A information disclosure vulnerability in the HTC sensor hub driver. Product: Android. Versions: Android kernel. Android ID: A-35468048.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/99474; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99474
CVE: CVE-2017-0710
Published: 2017-07-06
Description: A elevation of privilege vulnerability in the Upstream Linux tcb. Product: Android. Versions: Android kernel. Android ID: A-34951864.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/99468; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99468
CVE: CVE-2017-0711
Published: 2017-07-06
Description: A elevation of privilege vulnerability in the MediaTek networking driver. Product: Android. Versions: Android kernel. Android ID: A-36099953. References: M-ALPS03206781.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/99466; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99466
CVE: CVE-2017-6247
Published: 2017-07-06
Description: An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High due to the possibility of local arbitrary code execution in a privileged process in the kernel. Product: Android. Versions: N/A. Android ID: A-34386301. References: N-CVE-2017-6247.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/98876; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2017-6248
Published: 2017-07-06
Description: An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34372667. References: N-CVE-2017-6248.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/98876; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2017-4998
Published: 2017-07-07
Description: EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is potentially affected by a cross-site request forgery vulnerability. A remote low privileged attacker may potentially exploit the vulnerability to execute unauthorized requests on behalf of the victim, using the authenticated user's privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://seclists.org/fulldisclosure/2017/Jun/49; http://www.securityfocus.com/bid/99354; http://www.securitytracker.com/id/1038815
CVE: CVE-2017-4999
Published: 2017-07-07
Description: EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an authorization bypass through user-controlled key vulnerability in Discussion Forum Messages. A remote low privileged attacker may potentially exploit this vulnerability to elevate their privileges and view other users' discussion forum messages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2017/Jun/49; http://www.securityfocus.com/bid/99354; http://www.securitytracker.com/id/1038815
CVE: CVE-2017-5000
Published: 2017-07-07
Description: EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an information exposure through an error message vulnerability. A remote low privileged attacker may potentially exploit this vulnerability to use information disclosed in an error message to launch another more focused attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2017/Jun/49; http://www.securityfocus.com/bid/99354; http://www.securitytracker.com/id/1038815
CVE: CVE-2017-5001
Published: 2017-07-07
Description: EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an information exposure through an error message vulnerability. A remote low privileged attacker may potentially exploit this vulnerability to use information disclosed in an error message to launch another more focused attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2017/Jun/49; http://www.securityfocus.com/bid/99354; http://www.securitytracker.com/id/1038815