deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-14102
Published: 2017-09-01
Description: MIMEDefang 2.80 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat /pathname`" command, as demonstrated by the init-script.in and mimedefang-init.in scripts.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: http://lists.roaringpenguin.com/pipermail/mimedefang/2017-August/038077.html; http://lists.roaringpenguin.com/pipermail/mimedefang/2017-August/038085.html; http://lists.roaringpenguin.com/pipermail/mimedefang/2017-August/038077.html
CVE: CVE-2015-7746
Published: 2017-09-01
Description: NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and (1) obtain sensitive information from or (2) modify volumes via vectors related to UTF-8 in the volume language.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://kb.netapp.com/support/index?page=content&id=9010049; https://kb.netapp.com/support/index?page=content&id=9010049
CVE: CVE-2017-12868
Published: 2017-09-01
Description: The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384
References: https://github.com/simplesamlphp/simplesamlphp/commit/4bc629658e7b7d17c9ac3fe0da7dc5df71f1b85e; https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html; https://lists.debian.org/debian-lts-announce/2018/06/msg00017.html
CVE: CVE-2017-12869
Published: 2017-09-01
Description: The multiauth module in SimpleSAMLphp 1.14.13 and earlier allows remote attackers to bypass authentication context restrictions and use an authentication source defined in config/authsources.php via vectors related to improper validation of user input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html; https://simplesamlphp.org/security/201704-02; https://www.debian.org/security/2018/dsa-4127
CVE: CVE-2017-12870
Published: 2017-09-01
Description: SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle attackers to obtain sensitive information by leveraging use of the aesEncrypt and aesDecrypt methods in the SimpleSAML/Utils/Crypto class to protect session identifiers in replies to non-HTTPS service providers.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://simplesamlphp.org/security/201704-01; https://simplesamlphp.org/security/201704-01
CVE: CVE-2017-13672
Published: 2017-09-01
Description: QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html; http://www.debian.org/security/2017/dsa-3991; http://www.openwall.com/lists/oss-security/2017/08/30/3
CVE: CVE-2017-13674
Published: 2017-09-01
Description: Symantec ProxyClient 3.4 for Windows is susceptible to a privilege escalation vulnerability. A malicious local Windows user can, under certain circumstances, exploit this vulnerability to escalate their privileges on the system and execute arbitrary code with LocalSystem privileges.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/100554; https://www.symantec.com/security-center/network-protection-security-advisories/SA152; http://www.securityfocus.com/bid/100554
CVE: CVE-2017-13711
Published: 2017-09-01
Description: Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to cause a denial of service (QEMU instance crash) by leveraging failure to properly clear ifq_so from pending packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://www.debian.org/security/2017/dsa-3991; http://www.openwall.com/lists/oss-security/2017/08/29/6; http://www.securityfocus.com/bid/100534
CVE: CVE-2017-14103
Published: 2017-09-01
Description: The ReadJNGImage and ReadOneJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 do not properly manage image pointers after certain error conditions, which allows remote attackers to conduct use-after-free attacks via a crafted file, related to a ReadMNGImage out-of-order CloseBlob call. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-11403.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://hg.code.sf.net/p/graphicsmagick/code/rev/98721124e51f; https://blogs.gentoo.org/ago/2017/09/01/graphicsmagick-use-after-free-in-closeblob-blob-c-incomplete-fix-for-cve-2017-11403/; http://hg.code.sf.net/p/graphicsmagick/code/rev/98721124e51f
CVE: CVE-2017-3897
Published: 2017-09-01
Description: A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus (MSS+) versions prior to 3.11.599.3 allows network attackers to perform a malicious file execution via a HTTP backend-response.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS102723; http://www.securityfocus.com/bid/100100; http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS102723
CVE: CVE-2017-3898
Published: 2017-09-01
Description: A man-in-the-middle attack vulnerability in the non-certificate-based authentication mechanism in McAfee LiveSafe (MLS) versions prior to 16.0.3 allows network attackers to modify the Windows registry value associated with the McAfee update via the HTTP backend-response.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS102723; http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS102723
CVE: CVE-2017-10829
Published: 2017-09-01
Description: Untrusted search path vulnerability in Remote Support Tool (Enkaku Support Tool) All versions distributed through the website till 2017 August 10 allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://flets-w.com/topics/remote_support_vulnerability/; https://flets.com/osa/remote/pc_tool.html; https://jvn.jp/en/jp/JVN26115441/index.html
CVE: CVE-2017-10848
Published: 2017-09-01
Description: Untrusted search path vulnerability in Installers for DocuWorks 8.0.7 and earlier and DocuWorks Viewer Light published in Jul 2017 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html; https://jvn.jp/en/jp/JVN09769017/index.html; http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html
CVE: CVE-2017-10849
Published: 2017-09-01
Description: Untrusted search path vulnerability in Self-extracting document generated by DocuWorks 8.0.7 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html; https://jvn.jp/en/jp/JVN09769017/index.html; http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html
CVE: CVE-2017-10850
Published: 2017-09-01
Description: Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:04 UTC.), PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:10 UTC.), XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 3 Nov 2017 23:48 UTC.), ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 26 May 2017 07:44 UTC.), Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 25 Aug 2015 08:51 UTC.) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html; https://jvn.jp/en/jp/JVN09769017/index.html; http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html
CVE: CVE-2017-10851
Published: 2017-09-01
Description: Untrusted search path vulnerability in Installer for ContentsBridge Utility for Windows 7.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html; https://jvn.jp/en/jp/JVN09769017/index.html; http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html
CVE: CVE-2017-14106
Published: 2017-09-01
Description: The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service (__tcp_select_window divide-by-zero error and system crash) by triggering a disconnect within a certain tcp_recvmsg code path.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=499350a5a6e7512d9ed369ed63a4244b6536f4f8; http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html; http://www.debian.org/security/2017/dsa-3981
CVE: CVE-2017-14105
Published: 2017-09-01
Description: HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker - even restricted as a tenant - can add a jsp at HiveManager/tomcat/webapps/hm/domains/$yourtenant/maps (it will be exposed at the web interface).
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/theguly/CVE-2017-14105; https://github.com/theguly/CVE-2017-14105
CVE: CVE-2017-14107
Published: 2017-09-01
Description: The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://blogs.gentoo.org/ago/2017/09/01/libzip-memory-allocation-failure-in-_zip_cdir_grow-zip_dirent-c/; https://github.com/nih-at/libzip/commit/9b46957ec98d85a572e9ef98301247f39338a3b5; https://lists.debian.org/debian-lts-announce/2021/12/msg00022.html
CVE: CVE-2016-1895
Published: 2017-09-01
Description: NetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to cause a denial of service via vectors related to unsafe user input string handling.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-134
References: https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]; https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]
CVE: CVE-2017-12421
Published: 2017-09-01
Description: NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to execute arbitrary code on the storage controller via unspecified vectors.
CVSS Score: 8.8 (HIGH)
References: https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]; https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]
CVE: CVE-2017-12423
Published: 2017-09-01
Description: NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data on other Storage Virtual Machines (SVMs) via unspecified vectors.
CVSS Score: 7.7 (HIGH)
References: https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]; https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]
CVE: CVE-2017-12691
Published: 2017-09-01
Description: The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/ImageMagick/ImageMagick/issues/656; https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html; https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE: CVE-2017-12692
Published: 2017-09-01
Description: The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted VIFF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/ImageMagick/ImageMagick/issues/653; https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html; https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE: CVE-2017-12693
Published: 2017-09-01
Description: The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted BMP file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/ImageMagick/ImageMagick/issues/652; https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html; https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE: CVE-2017-12871
Published: 2017-09-01
Description: The aesEncrypt method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.x through 1.14.11 makes it easier for context-dependent attackers to bypass the encryption protection mechanism by leveraging use of the first 16 bytes of the secret key as the initialization vector (IV).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-326
References: https://github.com/simplesamlphp/simplesamlphp/commit/77df6a932d46daa35e364925eb73a175010dc904; https://simplesamlphp.org/security/201703-02; https://github.com/simplesamlphp/simplesamlphp/commit/77df6a932d46daa35e364925eb73a175010dc904
CVE: CVE-2017-12872
Published: 2017-09-01
Description: The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to conduct timing side-channel attacks by leveraging use of the standard comparison operator to compare secret material against user input.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html; https://lists.debian.org/debian-lts-announce/2018/06/msg00017.html; https://simplesamlphp.org/security/201703-01
CVE: CVE-2017-12873
Published: 2017-09-01
Description: SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider (IdP) is misconfigured.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384
References: https://github.com/simplesamlphp/simplesamlphp/commit/90dca835158495b173808273e7df127303b8b953; https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html; https://simplesamlphp.org/security/201612-04
CVE: CVE-2017-12874
Published: 2017-09-01
Description: The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html; https://simplesamlphp.org/security/201612-03; https://www.debian.org/security/2018/dsa-4127
CVE: CVE-2017-14053
Published: 2017-09-01
Description: NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]; https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]
CVE: CVE-2017-14098
Published: 2017-09-02
Description: In the pjsip channel driver (res_pjsip) in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a carefully crafted tel URI in a From, To, or Contact header could cause Asterisk to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://downloads.asterisk.org/pub/security/AST-2017-007.html; http://www.securityfocus.com/bid/100583; http://www.securitytracker.com/id/1039253
CVE: CVE-2017-14099
Published: 2017-09-02
Description: In res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5, unauthorized data disclosure (media takeover in the RTP stack) is possible with careful timing by an attacker. The "strictrtp" option in rtp.conf enables a feature of the RTP stack that learns the source address of media for a session and drops any packets that do not originate from the expected address. This option is enabled by default in Asterisk 11 and above. The "nat" and "rtp_symmetric" options (for chan_sip and chan_pjsip, respectively) enable symmetric RTP support in the RTP stack. This uses the source address of incoming media as the target address of any sent media. This option is not enabled by default, but is commonly enabled to handle devices behind NAT. A change was made to the strict RTP support in the RTP stack to better tolerate late media when a reinvite occurs. When combined with the symmetric RTP support, this introduced an avenue where media could be hijacked. Instead of only learning a new address when expected, the new code allowed a new source address to be learned at all times. If a flood of RTP traffic was received, the strict RTP support would allow the new address to provide media, and (with symmetric RTP enabled) outgoing traffic would be sent to this new address, allowing the media to be hijacked. Provided the attacker continued to send traffic, they would continue to receive traffic as well.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://downloads.asterisk.org/pub/security/AST-2017-005.html; http://www.debian.org/security/2017/dsa-3964; http://www.securitytracker.com/id/1039251
CVE: CVE-2017-14100
Published: 2017-09-02
Description: In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5, unauthorized command execution is possible. The app_minivm module has an "externnotify" program configuration option that is executed by the MinivmNotify dialplan application. The application uses the caller-id name and number as part of a built string passed to the OS shell for interpretation and execution. Since the caller-id name and number can come from an untrusted source, a crafted caller-id name or number allows an arbitrary shell command injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://downloads.asterisk.org/pub/security/AST-2017-006.html; http://www.debian.org/security/2017/dsa-3964; http://www.securitytracker.com/id/1039252
CVE: CVE-2017-14114
Published: 2017-09-02
Description: RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining the IP address and port number of the legitimate recipient of RTP traffic, which allows remote attackers to obtain sensitive information or cause a denial of service (communication outage) via crafted RTP packets.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://rtpbleed.com; https://rtpbleed.com
CVE: CVE-2017-10793
Published: 2017-09-03
Description: The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589, NVG599, and unspecified other devices, when IP Passthrough mode is not used, configures an sbdc.ha WAN TCP service on port 61001 with the bdctest account and the bdctest password, which allows remote attackers to obtain sensitive information (such as the Wi-Fi password) by leveraging knowledge of a hardware identifier, related to the Bulk Data Collection (BDC) mechanism defined in Broadband Forum technical reports.
CVSS Score: 8.1 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100585; https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/; https://www.nomotion.net/blog/sharknatto/
CVE: CVE-2017-14115
Published: 2017-09-03
Description: The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures ssh-permanent-enable WAN SSH logins to the remotessh account with the 5SaP9I26 password, which allows remote attackers to access a "Terminal shell v1.0" service, and subsequently obtain unrestricted root privileges, by establishing an SSH session and then entering certain shell metacharacters and BusyBox commands.
CVSS Score: 8.1 (HIGH)
CWE: CWE-798
References: http://www.securityfocus.com/bid/100585; https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/; https://www.nomotion.net/blog/sharknatto/
CVE: CVE-2017-14116
Published: 2017-09-03
Description: The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not used, configures WAN access to a caserver https service with the tech account and an empty password, which allows remote attackers to obtain root privileges by establishing a session on port 49955 and then installing new software, such as BusyBox with "nc -l" support.
CVSS Score: 8.1 (HIGH)
CWE: CWE-798
References: http://www.securityfocus.com/bid/100585; https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/; https://www.nomotion.net/blog/sharknatto/
CVE: CVE-2017-14117
Published: 2017-09-03
Description: The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port 49152, which allows remote attackers to establish arbitrary TCP connections to intranet hosts by sending \x2a\xce\x01 followed by other predictable values.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287
References: http://www.securityfocus.com/bid/100585; https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/; https://www.nomotion.net/blog/sharknatto/
CVE: CVE-2017-14118
Published: 2017-09-03
Description: In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in the host_list parameter to module/tool_all/select_tool.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://kk.whitecell-club.org/index.php/archives/220/; http://kk.whitecell-club.org/index.php/archives/220/
CVE: CVE-2017-14119
Published: 2017-09-03
Description: In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\snmpwalk.php does not properly restrict popen calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in a parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://kk.whitecell-club.org/index.php/archives/220/; http://kk.whitecell-club.org/index.php/archives/220/
CVE: CVE-2017-14120
Published: 2017-09-03
Description: unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a directory traversal vulnerability for RAR v2 archives: pathnames of the form ../[filename] are unpacked into the upper directory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2017/08/20/1; https://bugs.debian.org/874059; https://lists.debian.org/debian-lts-announce/2021/02/msg00026.html