deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-1689
Published: 2017-11-27
Description: IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134064.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22010329; http://www.securityfocus.com/bid/101904; https://exchange.xforce.ibmcloud.com/vulnerabilities/134064
CVE: CVE-2015-7267
Published: 2017-11-27
Description: Samsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk drives, when in sleep mode and operating in Opal or eDrive mode on Lenovo ThinkPad T440s laptops with BIOS 2.32; ThinkPad W541 laptops with BIOS 2.21; Dell Latitude E6410 laptops with BIOS A16; or Latitude E6430 laptops with BIOS A16, allow physically proximate attackers to bypass self-encrypting drive (SED) protection by leveraging failure to detect when SATA drives are unplugged in Sleep Mode, aka a "Hot Plug attack."
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-254
References: https://www.blackhat.com/docs/eu-15/materials/eu-15-Boteanu-Bypassing-Self-Encrypting-Drives-SED-In-Enterprise-Environments-wp.pdf; https://www.infoworld.com/article/3004913/encryption/self-encrypting-drives-are-hardly-any-better-than-software-based-encryption.html; https://www.blackhat.com/docs/eu-15/materials/eu-15-Boteanu-Bypassing-Self-Encrypting-Drives-SED-In-Enterprise-Environments-wp.pdf
CVE: CVE-2015-7268
Published: 2017-11-27
Description: Samsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk drives, when used on Windows and operating in Opal mode on Lenovo ThinkPad T440s laptops with BIOS 2.32 or ThinkPad W541 laptops with BIOS 2.21, or in Opal or eDrive mode on Dell Latitude E6410 laptops with BIOS A16 or Latitude E6430 laptops with BIOS A16, allow physically proximate attackers to bypass self-encrypting drive (SED) protection by triggering a soft reset and booting from an alternative OS, aka a "Forced Restart Attack."
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-254
References: https://www.blackhat.com/docs/eu-15/materials/eu-15-Boteanu-Bypassing-Self-Encrypting-Drives-SED-In-Enterprise-Environments-wp.pdf; https://www.infoworld.com/article/3004913/encryption/self-encrypting-drives-are-hardly-any-better-than-software-based-encryption.html; https://www.blackhat.com/docs/eu-15/materials/eu-15-Boteanu-Bypassing-Self-Encrypting-Drives-SED-In-Enterprise-Environments-wp.pdf
CVE: CVE-2015-7269
Published: 2017-11-27
Description: Seagate ST500LT015 hard disk drives, when operating in eDrive mode on Lenovo ThinkPad W541 laptops with BIOS 2.21, allow physically proximate attackers to bypass self-encrypting drive (SED) protection by attaching a second SATA connector to exposed pins, maintaining an alternate power source, and attaching the data cable to another machine, aka a "Hot Unplug Attack."
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-254
References: https://www.blackhat.com/docs/eu-15/materials/eu-15-Boteanu-Bypassing-Self-Encrypting-Drives-SED-In-Enterprise-Environments-wp.pdf; https://www.infoworld.com/article/3004913/encryption/self-encrypting-drives-are-hardly-any-better-than-software-based-encryption.html; https://www.blackhat.com/docs/eu-15/materials/eu-15-Boteanu-Bypassing-Self-Encrypting-Drives-SED-In-Enterprise-Environments-wp.pdf
CVE: CVE-2017-14746
Published: 2017-11-27
Description: Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/101907; http://www.securitytracker.com/id/1039856; http://www.ubuntu.com/usn/USN-3486-1
CVE: CVE-2017-15275
Published: 2017-11-27
Description: Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101908; http://www.securitytracker.com/id/1039855; http://www.ubuntu.com/usn/USN-3486-1
CVE: CVE-2016-10701
Published: 2017-11-28
Description: In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://jira.pentaho.com/browse/BISERVER-13207; http://jira.pentaho.com/browse/BISERVER-3562; http://jira.pentaho.com/browse/BISERVER-6599
CVE: CVE-2016-10702
Published: 2017-11-28
Description: Pebble Smartwatch devices through 4.3 mishandle UUID storage, which allows attackers to read an arbitrary application's flash storage, and access an arbitrary application's JavaScript instance, by modifying a UUID value within the header of a crafted application binary.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-200
References: https://blog.fletchto99.com/2016/november/pebble-app-sandbox-escape/; https://blog.fletchto99.com/2016/november/pebble-app-sandbox-escape/
CVE: CVE-2017-14379
Published: 2017-11-28
Description: EMC RSA Authentication Manager before 8.2 SP1 P6 has a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2017/Nov/34; http://www.securityfocus.com/bid/101925; http://www.securitytracker.com/id/1039853
CVE: CVE-2017-14389
Published: 2017-11-28
Description: An issue was discovered in Cloud Foundry Foundation capi-release (all versions prior to 1.45.0), cf-release (all versions prior to v280), and cf-deployment (all versions prior to v1.0.0). The Cloud Controller does not prevent space developers from creating subdomains to an already existing route that belongs to a different user in a different org and space, aka an "Application Subdomain Takeover."
CVSS Score: 6.5 (MEDIUM)
References: https://www.cloudfoundry.org/cve-2017-14389/; https://www.cloudfoundry.org/cve-2017-14389/
CVE: CVE-2017-8001
Published: 2017-11-28
Description: An issue was discovered in EMC ScaleIO 2.0.1.x. In a Linux environment, one of the support scripts saves the credentials of the ScaleIO MDM user who executed the script in clear text in temporary log files. The temporary files may potentially be read by an unprivileged user with access to the server where the script was executed to recover exposed credentials.
CVSS Score: 8.4 (HIGH)
CWE: CWE-532
References: http://seclists.org/fulldisclosure/2017/Nov/35; http://www.securityfocus.com/bid/101997; http://seclists.org/fulldisclosure/2017/Nov/35
CVE: CVE-2017-8019
Published: 2017-11-28
Description: An issue was discovered in EMC ScaleIO 2.0.1.x. A vulnerability in message parsers (MDM, SDS, and LIA) could potentially allow an unauthenticated remote attacker to send specifically crafted packets to stop ScaleIO services and cause a denial of service situation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://seclists.org/fulldisclosure/2017/Nov/35; http://www.securityfocus.com/bid/101991; http://seclists.org/fulldisclosure/2017/Nov/35
CVE: CVE-2017-8020
Published: 2017-11-28
Description: An issue was discovered in EMC ScaleIO 2.0.1.x. A buffer overflow vulnerability in the SDBG service may potentially allow a remote unauthenticated attacker to execute arbitrary commands with root privileges on an affected server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2017/Nov/35; http://www.securityfocus.com/bid/101995; http://seclists.org/fulldisclosure/2017/Nov/35
CVE: CVE-2017-15673
Published: 2017-11-28
Description: The files function in the administration section in CS-Cart 4.6.2 and earlier allows attackers to execute arbitrary PHP code via vectors involving a custom page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/145096/CSC-Cart-4.6.2-Shell-Upload.html; http://packetstormsecurity.com/files/145096/CSC-Cart-4.6.2-Shell-Upload.html
CVE: CVE-2017-16951
Published: 2017-11-28
Description: Winamp Pro 5.66 Build 3512 allows remote attackers to cause a denial of service via a crafted WAV, WMV, AU, ASF, AIFF, or AIF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://www.exploit-db.com/exploits/43186/; https://www.exploit-db.com/exploits/43186/
CVE: CVE-2017-16952
Published: 2017-11-28
Description: KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://www.exploit-db.com/exploits/43185/; https://www.exploit-db.com/exploits/43185/
CVE: CVE-2017-9315
Published: 2017-11-28
Description: Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker.
CVSS Score: 9.8 (CRITICAL)
References: http://www.dahuasecurity.com/annoucementsingle/security-advisory--admin-password-recovery-mechanism-in-some-dahua-ip-camera-and-ip-ptz-could-lead-to-security-risk_14731_221.html; http://www.dahuasecurity.com/annoucementsingle/security-advisory--admin-password-recovery-mechanism-in-some-dahua-ip-camera-and-ip-ptz-could-lead-to-security-risk_14731_221.html
CVE: CVE-2017-17042
Published: 2017-11-28
Description: lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/lsegal/yard/commit/b0217b3e30dc53d057b[PII_REDACTED]35975e62b4; https://github.com/lsegal/yard/commit/b0217b3e30dc53d057b[PII_REDACTED]35975e62b4
CVE: CVE-2017-17043
Published: 2017-11-28
Description: The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter "post" to /wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php is not filtered correctly.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/145060/wpemagmc10-xss.txt; https://wordpress.org/support/topic/wordpress-emag-marketplace-connector-1-0-cross-site-scripting-vulnerability/; https://wpvulndb.com/vulnerabilities/8964
CVE: CVE-2017-17044
Published: 2017-11-28
Description: An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of service (infinite loop and host OS hang) by leveraging the mishandling of Populate on Demand (PoD) errors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-754, CWE-755, CWE-835
References: http://www.securityfocus.com/bid/102008; http://www.securityfocus.com/bid/102129; http://www.securityfocus.com/bid/105954
CVE: CVE-2017-17045
Published: 2017-11-28
Description: An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and host OS crash) by leveraging the mishandling of Populate on Demand (PoD) Physical-to-Machine (P2M) errors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/102013; http://www.securityfocus.com/bid/102129; http://www.securitytracker.com/id/1039879
CVE: CVE-2017-17046
Published: 2017-11-28
Description: An issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to obtain sensitive information from DRAM after a reboot, because disjoint blocks, and physical addresses that do not start at zero, are mishandled.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html; https://security.gentoo.org/glsa/201801-14; https://xenbits.xen.org/xsa/advisory-245.html
CVE: CVE-2017-17049
Published: 2017-11-29
Description: TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730010 DeviceIoControl request to \\.\Viragtlt.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: https://github.com/k0keoyo/Vir.IT-explorer-Anti-Virus-Null-Pointer-Reference-PoC/tree/master/VirIT_NullPointerReference_0x82730010; https://github.com/k0keoyo/Vir.IT-explorer-Anti-Virus-Null-Pointer-Reference-PoC/tree/master/VirIT_NullPointerReference_0x82730010
CVE: CVE-2017-17050
Published: 2017-11-29
Description: TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730020 DeviceIoControl request to \\.\Viragtlt.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: https://github.com/k0keoyo/Vir.IT-explorer-Anti-Virus-Null-Pointer-Reference-PoC/tree/master/VirIT_NullPointerDereference_0x82730020; https://github.com/k0keoyo/Vir.IT-explorer-Anti-Virus-Null-Pointer-Reference-PoC/tree/master/VirIT_NullPointerDereference_0x82730020
CVE: CVE-2017-17052
Published: 2017-11-29
Description: The mm_init function in kernel/fork.c in the Linux kernel before 4.12.10 does not clear the ->exe_file member of a new process's mm_struct, allowing a local attacker to achieve a use-after-free or possibly have unspecified other impact by running a specially crafted program.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2b7e8665b4ff51c034c55df3cff76518d1a9ee3a; http://www.securityfocus.com/bid/102009; https://github.com/torvalds/linux/commit/2b7e8665b4ff51c034c55df3cff76518d1a9ee3a
CVE: CVE-2017-17053
Published: 2017-11-29
Description: The init_new_context function in arch/x86/include/asm/mmu_context.h in the Linux kernel before 4.12.10 does not correctly handle errors from LDT table allocation when forking a new process, allowing a local attacker to achieve a use-after-free or possibly have unspecified other impact by running a specially crafted program. This vulnerability only affected kernels built with CONFIG_MODIFY_LDT_SYSCALL=y.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ccd5b3235180eef3cfec337df1c8554ab151b5cc; http://www.securityfocus.com/bid/102010; https://access.redhat.com/errata/RHSA-2018:0676
CVE: CVE-2017-17054
Published: 2017-11-29
Description: In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() in source_wavread.c, which may lead to DoS when playing a crafted audio file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://github.com/aubio/aubio/issues/148; https://github.com/aubio/aubio/issues/148
CVE: CVE-2017-17058
Published: 2017-11-29
Description: The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/emails/plain/ URI, which accesses a parent directory. NOTE: a software maintainer indicates that Directory Traversal is not possible because all of the template files have "if (!defined('ABSPATH')) {exit;}" code
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/woocommerce/woocommerce/issues/17964; https://www.exploit-db.com/exploits/43196/; https://www.exploit-db.com/ghdb/4613/
CVE: CVE-2017-13872
Published: 2017-11-29
Description: An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The issue involves the "Directory Utility" component. It allows attackers to obtain administrator access without a password via certain interactions involving entry of the root user name.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/101981; http://www.securitytracker.com/id/1039875; https://arstechnica.com/information-technology/2017/11/macos-bug-lets-you-log-in-as-admin-with-no-password-required/
CVE: CVE-2017-17059
Published: 2017-11-29
Description: XSS exists in the amtyThumb amty-thumb-recent-post (aka amtyThumb posts or wp-thumb-post) plugin 8.1.3 for WordPress via the query string to amtyThumbPostsAdminPg.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/NaturalIntelligence/wp-thumb-post/issues/1; https://packetstormsecurity.com/files/145044/WordPress-amtyThumb-8.1.3-Cross-Site-Scripting.html; https://github.com/NaturalIntelligence/wp-thumb-post/issues/1
CVE: CVE-2017-14377
Published: 2017-11-29
Description: EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security vulnerability that could potentially lead to authentication bypass.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://seclists.org/fulldisclosure/2017/Nov/46; http://www.securityfocus.com/bid/101980; http://www.securitytracker.com/id/1039876
CVE: CVE-2017-14378
Published: 2017-11-29
Description: EMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C allow attackers to bypass authentication, aka an "Error Handling Vulnerability."
CVSS Score: 10.0 (CRITICAL)
References: http://seclists.org/fulldisclosure/2017/Nov/48; http://www.securityfocus.com/bid/101979; http://www.securitytracker.com/id/1039877
CVE: CVE-2017-8816
Published: 2017-11-29
Description: The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-190
References: http://security.cucumberlinux.com/security/details.php?id=161; http://www.securityfocus.com/bid/101998; http://www.securitytracker.com/id/1039896
CVE: CVE-2017-8817
Published: 2017-11-29
Description: The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an '[' character.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-125
References: http://security.cucumberlinux.com/security/details.php?id=162; http://www.securityfocus.com/bid/102057; http://www.securitytracker.com/id/1039897
CVE: CVE-2017-8818
Published: 2017-11-29
Description: curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://security.cucumberlinux.com/security/details.php?id=163; http://www.securityfocus.com/bid/102014; http://www.securitytracker.com/id/1039898
CVE: CVE-2017-14186
Published: 2017-11-29
Description: A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below versions under SSL VPN web portal allows a remote user to inject arbitrary web script or HTML in the context of the victim's browser via the login redir parameter. An URL Redirection attack may also be feasible by injecting an external URL via the affected parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/101955; http://www.securitytracker.com/id/1039891; https://fortiguard.com/advisory/FG-IR-17-242
CVE: CVE-2017-14189
Published: 2017-11-29
Description: An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webUI to successfully log-in regardless the provided password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521
References: http://www.securityfocus.com/bid/101953; http://www.securitytracker.com/id/1039892; https://fortiguard.com/advisory/FG-IR-17-248
CVE: CVE-2017-14591
Published: 2017-11-29
Description: Atlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to argument injection through filenames in Mercurial repositories, allowing attackers to execute arbitrary code on a system running the impacted software.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-88
References: http://www.securityfocus.com/bid/102194; https://confluence.atlassian.com/x/plcGO; http://www.securityfocus.com/bid/102194
CVE: CVE-2017-14196
Published: 2017-11-30
Description: An issue was discovered in Squiz Matrix from 5.3 through to 5.3.6.1 and 5.4.1.3. An information disclosure caused by a Path Traversal issue in the 'File Bridge' plugin allowed the existence of files outside of the bridged path to be confirmed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://devalias.net/devalias/2017/09/07/squiz-matrix-multiple-vulnerabilities/; http://devalias.net/devalias/2017/09/07/squiz-matrix-multiple-vulnerabilities/
CVE: CVE-2017-14197
Published: 2017-11-30
Description: An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. There are multiple reflected Cross-Site Scripting (XSS) issues in Matrix WYSIWYG plugins.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://devalias.net/devalias/2017/09/07/squiz-matrix-multiple-vulnerabilities/; http://devalias.net/devalias/2017/09/07/squiz-matrix-multiple-vulnerabilities/
CVE: CVE-2017-14198
Published: 2017-11-30
Description: An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated users with permissions to edit design assets can cause Remote Code Execution (RCE) via a maliciously crafted time_format tag.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://devalias.net/devalias/2017/09/07/squiz-matrix-multiple-vulnerabilities/; http://devalias.net/devalias/2017/09/07/squiz-matrix-multiple-vulnerabilities/
CVE: CVE-2017-17067
Published: 2017-11-30
Description: Splunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6.4.x before 6.4.9, and 6.3.x before 6.3.12, when the SAML authType is enabled, mishandles SAML, which allows remote attackers to bypass intended access restrictions or conduct impersonation attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: http://www.securityfocus.com/bid/102005; https://www.splunk.com/view/SP-CAAAP3K; http://www.securityfocus.com/bid/102005
CVE: CVE-2017-12297
Published: 2017-11-30
Description: A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts, aka a "URL Redirection Vulnerability." The vulnerability is due to insufficient access control for HTTP traffic directed to the Cisco WebEx Meeting Center. An attacker could exploit this vulnerability by sending a malicious URL to the Cisco WebEx Meeting Center. An exploit could allow the attacker to connect to arbitrary hosts. Cisco Bug IDs: CSCvf63843.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/101985; http://www.securitytracker.com/id/1039919; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-wmc
CVE: CVE-2017-12328
Published: 2017-11-30
Description: A vulnerability in Session Initiation Protocol (SIP) call handling in Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition because the SIP process unexpectedly restarts. All active phone calls are dropped as the SIP process restarts. The vulnerability is due to incomplete input validation of the SIP packet header. An attacker could exploit this vulnerability by sending a malformed SIP packet to a targeted phone. An exploit could allow the attacker to cause a DoS condition because all phone calls are dropped when the SIP process unexpectedly restarts. Cisco Bug IDs: CSCvc62590.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/102003; http://www.securitytracker.com/id/1039922; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-ipp