deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-7510
Published: 2017-09-25
Description: Stack-based buffer overflow in the getpwnam and getgrnam functions of the NSS module nss-mymachines in systemd.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://bugzilla.redhat.com/show_bug.cgi?id=1284642; https://github.com/keszybz/systemd/commit/cb31827d62066a04b02111df3052949fda4b6888; https://github.com/systemd/systemd/issues/2002
CVE: CVE-2015-7544
Published: 2017-09-25
Description: redhat-support-plugin-rhev in Red Hat Enterprise Virtualization Manager (aka RHEV Manager) before 3.6 allows remote authenticated users with the SuperUser role on any Entity to execute arbitrary commands on any host in the RHEV environment.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-74
References: https://bugzilla.redhat.com/show_bug.cgi?id=1269588; https://rhn.redhat.com/errata/RHSA-2016-0426.html; https://bugzilla.redhat.com/show_bug.cgi?id=1269588
CVE: CVE-2015-7785
Published: 2017-09-25
Description: GANMA! App for iOS does not verify SSL certificates.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://jvn.jp/en/jp/JVN44541100/index.html; http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000191.html; http://jvn.jp/en/jp/JVN44541100/index.html
CVE: CVE-2015-7846
Published: 2017-09-25
Description: Huawei S7700, S9700, S9300 before V200R07C00SPC500, and AR200, AR1200, AR2200, AR3200 before V200R005C20SPC200 allows attackers with physical access to the CF card to obtain sensitive information.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/76173; http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446634.htm; http://www.securityfocus.com/bid/76173
CVE: CVE-2015-8251
Published: 2017-09-25
Description: OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, OpenStage 15, 20E, 20 and 40 and OpenScape Desk Phone IP 35G SIP V3, OpenScape Desk Phone IP 35G Eco SIP V3, OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3, OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3, and OpenScape Desk Phone IP 35G Eco HFA V3 use non-unique X.509 certificates and SSH host keys.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.kb.cert.org/vuls/id/566724; https://networks.unify.com/security/advisories/OBSO-1511-02-A.pdf; https://networks.unify.com/security/advisories/OBSO-1511-02.pdf
CVE: CVE-2015-8375
Published: 2017-09-25
Description: Cross-site scripting (XSS) vulnerability in PHP-Fusion 9.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://cve.killedkenny.io/cve/CVE-2015-8375; http://www.openwall.com/lists/oss-security/2015/11/29/4; https://gist.github.com/bscarvell/57f82000bf823071404e
CVE: CVE-2016-5868
Published: 2017-09-25
Description: drivers/net/ethernet/msm/rndis_ipa.c in the Qualcomm networking driver in Android allows remote attackers to execute arbitrary code via a crafted application compromising a privileged process.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98197; https://source.android.com/security/bulletin/2017-05-01; https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=fbb765a3f813f5cc85ddab21487fd65f24bf6a8c
CVE: CVE-2017-14731
Published: 2017-09-25
Description: ofx_proc_file in ofx_preproc.cpp in LibOFX 0.9.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an ofxdump call.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/libofx/libofx/issues/10; https://lists.debian.org/debian-lts-announce/2017/11/msg00038.html; https://security.gentoo.org/glsa/201908-26
CVE: CVE-2017-14733
Published: 2017-09-25
Description: ReadRLEImage in coders/rle.c in GraphicsMagick 1.3.26 mishandles RLE headers that specify too few colors, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=5381c71724e3; https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/
CVE: CVE-2017-14734
Published: 2017-09-25
Description: The build_msps function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted BPG file, related to hevc_decode_init1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/leonzhao7/vulnerability/blob/master/A%20heap-buffer-overflow%20vulnerability%20in%20hevc_decode_init1%20of%20libbpg.md; https://github.com/leonzhao7/vulnerability/blob/master/A%20heap-buffer-overflow%20vulnerability%20in%20hevc_decode_init1%20of%20libbpg.md
CVE: CVE-2017-14735
Published: 2017-09-25
Description: OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of &colon; to construct a javascript: URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/105656; https://github.com/nahsra/antisamy/issues/10
CVE: CVE-2014-0997
Published: 2017-09-26
Description: WiFiMonitor in Android 4.4.4 as used in the Nexus 5 and 4, Android 4.2.2 as used in the LG D806, Android 4.2.2 as used in the Samsung SM-T310, Android 4.1.2 as used in the Motorola RAZR HD, and potentially other unspecified Android releases before 5.0.1 and 5.0.2 does not properly handle exceptions, which allows remote attackers to cause a denial of service (reboot) via a crafted 802.11 probe response frame.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19
References: http://packetstormsecurity.com/files/130107/Android-WiFi-Direct-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2015/Jan/104; http://www.securityfocus.com/archive/1/534544/100/0/threaded
CVE: CVE-2014-8156
Published: 2017-09-26
Description: The D-Bus security policy files in /etc/dbus-1/system.d/*.conf in fso-gsmd 0.12.0-3, fso-frameworkd 0.9.5.9+git20110512-4, and fso-usaged 0.12.0-2 as packaged in Debian, the upstream cornucopia.git (fsoaudiod, fsodatad, fsodeviced, fsogsmd, fsonetworkd, fsotdld, fsousaged) git master on 2015-01-19, the upstream framework.git 0.10.1 and git master on 2015-01-19, phonefsod 0.1+git20121018-1 as packaged in Debian, Ubuntu and potentially other packages, and potentially other fso modules do not properly filter D-Bus message paths, which might allow local users to cause a denial of service (dbus-daemon memory consumption), or execute arbitrary code as root by sending a crafted D-Bus message to any D-Bus system service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2015/01/27/25; http://www.securityfocus.com/bid/72363; https://exchange.xforce.ibmcloud.com/vulnerabilities/100488
CVE: CVE-2014-8170
Published: 2017-09-26
Description: ovirt_safe_delete_config in ovirtfunctions.py and other unspecified locations in ovirt-node 3.0.0-474-gb852fd7 as packaged in Red Hat Enterprise Virtualization 3 do not properly quote input strings, which allows remote authenticated users and physically proximate attackers to execute arbitrary commands via a ; (semicolon) in an input string.
CVSS Score: 8.8 (HIGH)
CWE: CWE-134
References: https://bugzilla.redhat.com/show_bug.cgi?id=1194745; https://gerrit.ovirt.org/gitweb?p=ovirt-node.git%3Ba=blob%3Bf=src/ovirtnode/ovirtfunctions.py%3Bh=caef7ef019ca12b49aa3c[PII_REDACTED]56fb4caad%3Bhb=e11e02cd9256c854dd[PII_REDACTED]637d6829b4f1#l1091; https://bugzilla.redhat.com/show_bug.cgi?id=1194745
CVE: CVE-2014-8889
Published: 2017-09-26
Description: Dropbox SDK for Android before 1.6.2 might allow remote attackers to obtain sensitive information via crafted malware or via a drive-by download attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/130767/Dropbox-SDK-For-Android-Remote-Exploitation.html; http://seclists.org/fulldisclosure/2015/Mar/61; http://www.securityfocus.com/archive/1/534843/100/1500/threaded
CVE: CVE-2015-0238
Published: 2017-09-26
Description: selinux-policy as packaged in Red Hat OpenShift 2 allows attackers to obtain process listing information via a privilege escalation attack.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: https://access.redhat.com/security/cve/CVE-2015-0238; https://bugzilla.redhat.com/show_bug.cgi?id=1184739; https://access.redhat.com/security/cve/CVE-2015-0238
CVE: CVE-2015-8707
Published: 2017-09-26
Description: Password reset tokens in Magento CE before 1.9.2.2, and Magento EE before 1.14.2.2 are passed via a GET request and not canceled after use, which allows remote attackers to obtain user passwords via a crafted external service with access to the referrer field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://magento.com/security/patches/supee-6788; https://magento.com/security/patches/supee-6788
CVE: CVE-2017-14737
Published: 2017-09-26
Description: A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1.11.x and 2.x before 2.3.0, allows a local attacker to recover information about RSA secret keys, as demonstrated by CacheD. This occurs because an array is indexed with bits derived from a secret key.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/randombit/botan/issues/1222; https://lists.debian.org/debian-lts-announce/2021/11/msg00006.html; https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/wang-shuai
CVE: CVE-2017-7969
Published: 2017-09-26
Description: A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 for multiple state-changing requests. This type of attack requires some level of social engineering in order to get a legitimate user to click on or access a malicious link/site containing the CSRF attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/; http://www.securityfocus.com/bid/99913; https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhere
CVE: CVE-2017-7970
Published: 2017-09-26
Description: A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to specify Arbitrary Server Target Nodes in connection requests to the Secure Gateway and Server components.
CVSS Score: 6.5 (MEDIUM)
References: http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/; http://www.securityfocus.com/bid/99913; https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhere
CVE: CVE-2017-7971
Published: 2017-09-26
Description: A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the use of outdated cipher suites and improper verification of peer SSL Certificate.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295
References: http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/; http://www.securityfocus.com/bid/99913; https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhere
CVE: CVE-2017-7972
Published: 2017-09-26
Description: A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to escape out of remote PowerSCADA Anywhere applications and launch other processes.
CVSS Score: 5.5 (MEDIUM)
References: http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/; http://www.securityfocus.com/bid/99913; https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhere
CVE: CVE-2017-7973
Published: 2017-09-26
Description: A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can use calls to various paths allowing performance of arbitrary SQL commands against the underlying database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/; http://www.securityfocus.com/bid/99344; http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/
CVE: CVE-2017-7974
Published: 2017-09-26
Description: A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can execute arbitrary code and exfiltrate files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/; http://www.securityfocus.com/bid/99344; http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/
CVE: CVE-2017-9956
Published: 2017-09-26
Description: An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system contains a hard-coded valid session. An attacker can use that session ID as part of the HTTP cookie of a web request, resulting in authentication bypass
CVSS Score: 7.3 (HIGH)
CWE: CWE-798
References: http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/; http://www.securityfocus.com/bid/99344; http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/
CVE: CVE-2017-9957
Published: 2017-09-26
Description: A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account with a hardcoded password. An attacker can use this information to log into the system with high-privilege credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/; http://www.securityfocus.com/bid/99344; http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/
CVE: CVE-2017-9958
Published: 2017-09-26
Description: An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an improper handling of the system configuration can allow an attacker to execute arbitrary code under the context of root.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/; http://www.securityfocus.com/bid/99344; http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/
CVE: CVE-2017-9959
Published: 2017-09-26
Description: A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system accepts reboot in session from unauthenticated users, supporting a denial of service condition.
CVSS Score: 5.5 (MEDIUM)
References: http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/; http://www.securityfocus.com/bid/99344; http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/
CVE: CVE-2017-9960
Published: 2017-09-26
Description: An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system response to error provides more information than should be available to an unauthenticated user.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/; http://www.securityfocus.com/bid/99344; http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/
CVE: CVE-2017-9961
Published: 2017-09-26
Description: A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code installation requires an access to the computer. By placing a specific DLL/OCX file, an attacker is able to force the process to load arbitrary DLL and execute arbitrary code in the context of the process.
CVSS Score: 7.8 (HIGH)
References: http://www.schneider-electric.com/en/download/document/SEVD-2017-195-01/; http://www.securityfocus.com/bid/100114; http://www.schneider-electric.com/en/download/document/SEVD-2017-195-01/
CVE: CVE-2017-9962
Published: 2017-09-26
Description: Schneider Electric's ClearSCADA versions released prior to August 2017 are susceptible to a memory allocation vulnerability, whereby malformed requests can be sent to ClearSCADA client applications to cause unexpected behavior. Client applications affected include ViewX and the Server Icon.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.schneider-electric.com/en/download/document/SEVD-2017-264-01/; http://www.schneider-electric.com/en/download/document/SEVD-2017-264-01/
CVE: CVE-2017-14001
Published: 2017-09-26
Description: An Improper Neutralization of Special Elements used in an OS Command issue was discovered in Digium Asterisk GUI 2.1.0 and prior. An OS command injection vulnerability has been identified that may allow the execution of arbitrary code on the system through the inclusion of OS commands in the URL request of the program.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: http://www.securityfocus.com/bid/100950; https://ics-cert.us-cert.gov/advisories/ICSA-17-264-03; http://www.securityfocus.com/bid/100950
CVE: CVE-2017-14739
Published: 2017-09-26
Description: The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash) via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/ImageMagick/ImageMagick/issues/780; https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html; https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE: CVE-2017-14741
Published: 2017-09-26
Description: The ReadCAPTIONImage function in coders/caption.c in ImageMagick 7.0.7-3 allows remote attackers to cause a denial of service (infinite loop) via a crafted font file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: https://github.com/ImageMagick/ImageMagick/issues/771; https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html; https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE: CVE-2[PII_REDACTED]
Published: 2017-09-26
Description: The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service (assertion failure, and hypervisor hang or crash) via an out-of bounds guest_irq value, related to arch/x86/kvm/vmx.c and virt/kvm/eventfd.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-617
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=36ae3c0a36b7456432fedce38ae2f7bd3e01a563; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3a8b0677fc6180a467e26cc32ce6b0c09a32f9bb; http://www.debian.org/security/2017/dsa-3981
CVE: CVE-2017-12154
Published: 2017-09-26
Description: The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the "CR8-load exiting" and "CR8-store exiting" L0 vmcs02 controls exist in cases where L1 omits the "use TPR shadow" vmcs12 control, which allows KVM L2 guest OS users to obtain read and write access to the hardware CR8 register.
CVSS Score: 7.1 (HIGH)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=51aa68e7d57e3217192d88ce90fd5b8ef29ec94f; http://www.debian.org/security/2017/dsa-3981; http://www.securityfocus.com/bid/100856
CVE: CVE-2017-14743
Published: 2017-09-26
Description: Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/device_service, as demonstrated by reading the admin password.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://medium.com/iotsploit/faleemi-fsc-880-multiple-security-vulnerabilities-ed1d132c2cce; https://medium.com/iotsploit/faleemi-fsc-880-multiple-security-vulnerabilities-ed1d132c2cce
CVE: CVE-2017-14744
Published: 2017-09-26
Description: UEditor 1.4.3.3 has XSS via the SRC attribute of an IFRAME element.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.yuag.org/2017/09/19/ueditor%E5%82%A8%E5%AD%98%E5%9E%8Bxss%E6%BC%8F%E6%B4%9E/; http://ueditor.baidu.com/website/changelog.html; http://www.yuag.org/2017/09/19/ueditor%E5%82%A8%E5%AD%98%E5%9E%8Bxss%E6%BC%8F%E6%B4%9E/
CVE: CVE-2017-14703
Published: 2017-09-26
Description: SQL injection vulnerability in Cash Back Comparison Script 1.0 allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to search/.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/42772/; https://www.exploit-db.com/exploits/42772/
CVE: CVE-2015-0874
Published: 2017-09-26
Description: Smartphone Passbook 1.0.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information from encrypted communications via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://jvn.jp/en/jp/JVN14522790/index.html; http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000015.html; http://www.securityfocus.com/bid/72597
CVE: CVE-2015-5069
Published: 2017-09-26
Description: The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth before 1.12.3 and 1.13.x before 1.13.1 allow remote attackers to obtain sensitive information via vectors related to inclusion of .pbl files from WML.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161722.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161752.html; http://www.openwall.com/lists/oss-security/2015/06/25/12
CVE: CVE-2015-5070
Published: 2017-09-26
Description: The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth before 1.12.4 and 1.13.x before 1.13.1, when a case-insensitive filesystem is used, allow remote attackers to obtain sensitive information via vectors related to inclusion of .pbl files from WML.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-5069.
CVSS Score: 3.1 (LOW)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161722.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161752.html; http://www.openwall.com/lists/oss-security/2015/06/25/12
CVE: CVE-2017-13129
Published: 2017-09-26
Description: Cross-site request forgery (CSRF) vulnerability in ZKTeco ZKTime Web 2.0.1.12280 allows remote authenticated users to hijack the authentication of administrators for requests that add administrators by leveraging lack of anti-CSRF tokens.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: http://seclists.org/bugtraq/2017/Sep/19; http://seclists.org/fulldisclosure/2017/Sep/38; http://seclists.org/bugtraq/2017/Sep/19
CVE: CVE-2017-14602
Published: 2017-09-26
Description: A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010.e, 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13 (except for build 41.24) that, if exploited, could allow an attacker with access to the NetScaler management interface to gain administrative access to the appliance.
CVSS Score: 7.2 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/100980; https://support.citrix.com/article/CTX227928; https://support.citrix.com/article/CTX228091