deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulnerable to possible cross site scripting when dragging/dropping files into a collection if the file has Javascript code in its title.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://bugs.launchpad.net/mahara/+bug/1377736; https://bugs.launchpad.net/mahara/+bug/1377736
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to server-side request forgery attacks as not all processes of curl redirects are checked against a white or black list. Employing SafeCurl will prevent issues.
CVSS Score: 8.0 (HIGH)
CWE: CWE-918
References: https://bugs.launchpad.net/mahara/+bug/1397736; https://bugs.launchpad.net/mahara/+bug/1397736
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .xml file that can have its code executed when user tries to download the file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://bugs.launchpad.net/mahara/+bug/1404117; https://bugs.launchpad.net/mahara/+bug/1404117
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users being able to delete their submitted page through URL manipulation.
CVSS Score: 6.5 (MEDIUM)
References: https://bugs.launchpad.net/mahara/+bug/1425306; https://bugs.launchpad.net/mahara/+bug/1425306
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users receiving watchlist notifications about pages they do not have access to anymore.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://bugs.launchpad.net/mahara/+bug/1429647; https://bugs.launchpad.net/mahara/+bug/1429647
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 1.9 before 1.9.6 and 1.10 before 1.10.4 and 15.04 before 15.04.1 are vulnerable to a site admin or institution admin being able to place HTML and Javascript into an institution display name, which will be displayed to other users unescaped on some Mahara system pages.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://bugs.launchpad.net/mahara/+bug/1447377; https://bugs.launchpad.net/mahara/+bug/1447377
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 1.9 before 1.9.7 and 1.10 before 1.10.5 and 15.04 before 15.04.2 are vulnerable to anonymous comments being able to be placed on artefact detail pages even when the site administrator had disallowed anonymous comments.
CVSS Score: 4.9 (MEDIUM)
References: https://bugs.launchpad.net/mahara/+bug/1460368; https://bugs.launchpad.net/mahara/+bug/1460368
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 1.9 before 1.9.7 and 1.10 before 1.10.5 and 15.04 before 15.04.2 are vulnerable to the arbitrary execution of Javascript in the browser of a logged-in user because the title of the portfolio page was not being properly escaped in the AJAX script that updates the Add/remove watchlist link on artefact detail pages.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://bugs.launchpad.net/mahara/+bug/1472439; https://bugs.launchpad.net/mahara/+bug/1472439
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 1.9 before 1.9.8 and 1.10 before 1.10.6 and 15.04 before 15.04.3 are vulnerable to perform a cross-site request forgery (CSRF) attack on the uploader contained in Mahara's filebrowser widget. This could allow an attacker to trick a Mahara user into unknowingly uploading malicious files into their Mahara account.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: https://bugs.launchpad.net/mahara/+bug/1480329; https://bugs.launchpad.net/mahara/+bug/1480329
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to PHP code execution as Mahara would pass portions of the XML through the PHP "unserialize()" function when importing a skin from an XML file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://bugs.launchpad.net/mahara/+bug/1508684; https://bugs.launchpad.net/mahara/+bug/1508684
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 1.10 before 1.10.9 and 15.04 before 15.04.6 and 15.10 before 15.10.2 are vulnerable to XSS due to window.opener (target="_blank" and window.open())
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://bugs.launchpad.net/mahara/+bug/1558361; https://bugs.launchpad.net/mahara/+bug/1558361
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 are vulnerable to prevent session IDs from being regenerated on login or logout. This makes users of the site more vulnerable to session fixation attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-384
References: https://bugs.launchpad.net/mahara/+bug/1567784; https://bugs.launchpad.net/mahara/+bug/1567784
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to passwords or other sensitive information being passed by unusual parameters to end up in an error log.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://bugs.launchpad.net/mahara/+bug/1570221; https://bugs.launchpad.net/mahara/+bug/1570221
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 running PHP 5.3 are vulnerable to one user being logged in as another user on a separate computer as the same session ID is served. This situation can occur when a user takes an action that forces another user to be logged out of Mahara, such as an admin changing another user's account settings.
CVSS Score: 9.8 (CRITICAL)
References: https://bugs.launchpad.net/mahara/+bug/1570744; https://bugs.launchpad.net/mahara/+bug/1570744
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 15.04 before 15.04.10 and 15.10 before 15.10.6 and 16.04 before 16.04.4 are vulnerable to incorrect access control after the password reset link is sent via email and then user changes default email, Mahara fails to invalidate old link.Consequently the link in email can be used to gain access to the user's account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://bugs.launchpad.net/mahara/+bug/1577251; https://bugs.launchpad.net/mahara/+bug/1577251
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to some authentication methods, which do not use Mahara's built-in login form, still allowing users to log in even if their institution was expired or suspended.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://bugs.launchpad.net/mahara/+bug/1580399; https://bugs.launchpad.net/mahara/+bug/1580399
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to profile pictures being accessed without any access control checks consequently allowing any of a user's uploaded profile pictures to be viewable by anyone, whether or not they were currently selected as the "default" or used in any pages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://bugs.launchpad.net/mahara/+bug/1600069; https://bugs.launchpad.net/mahara/+bug/1600069
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to a group's configuration page being editable by any group member even when they didn't have the admin role.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://bugs.launchpad.net/mahara/+bug/1609200; https://bugs.launchpad.net/mahara/+bug/1609200
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara 15.04 before 15.04.13 and 16.04 before 16.04.7 and 16.10 before 16.10.4 and 17.04 before 17.04.2 are vulnerable to recording plain text passwords in the event_log table during the user creation process if full event logging was turned on.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-200
References: https://bugs.launchpad.net/mahara/+bug/1692749; https://bugs.launchpad.net/mahara/+bug/1692749
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-03
Description: Mahara Mobile before 1.2.1 is vulnerable to passwords being sent to the Mahara access log in plain text.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532
References: https://github.com/MaharaProject/mahara-mobile/issues/33; https://github.com/MaharaProject/mahara-mobile/issues/33
CVE: CVE-2017-14359
Published: 2017-11-03
Description: A potential security vulnerability has been identified in HPE Performance Center versions 12.20. The vulnerability could be remotely exploited to allow cross-site scripting.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/101659; https://softwaresupport.hpe.com/document/-/facetsearch/document/KM02996754; http://www.securityfocus.com/bid/101659
CVE: CVE-2017-16525
Published: 2017-11-04
Description: The usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device, related to disconnection and failed setup.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-416
References: http://www.securityfocus.com/bid/102028; https://github.com/torvalds/linux/commit/299d7572e46f98534033a9e65973f13ad1ce9047; https://github.com/torvalds/linux/commit/bd998c2e0df[PII_REDACTED]023d50d46cf0b10c787
CVE: CVE-2017-16526
Published: 2017-11-04
Description: drivers/uwb/uwbd.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (general protection fault and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/torvalds/linux/commit/bbf26183b7a6236ba602f4d6a2f7cade35bba043; https://groups.google.com/d/msg/syzkaller/zROBxKXzHDk/5I6aZ3O2AgAJ; https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
CVE: CVE-2017-16527
Published: 2017-11-04
Description: sound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (snd_usb_mixer_interrupt use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-416
References: https://github.com/torvalds/linux/commit/124751d5e63c[PII_REDACTED]74bd0abaae61aaa9c4; https://groups.google.com/d/msg/syzkaller/jf7GTr_g2CU/iVlLhMciCQAJ; https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
CVE: CVE-2017-16528
Published: 2017-11-04
Description: sound/core/seq_device.c in the Linux kernel before 4.13.4 allows local users to cause a denial of service (snd_rawmidi_dev_seq_free use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-416
References: https://github.com/torvalds/linux/commit/fc27fe7e8deef2f37cba3f2be2d52b6ca5eb9d57; https://groups.google.com/d/msg/syzkaller/kuZzDHGkQu8/5du20rZEAAAJ; https://usn.ubuntu.com/3619-1/
CVE: CVE-2017-16529
Published: 2017-11-04
Description: The snd_usb_create_streams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/103284; https://github.com/torvalds/linux/commit/bfc81a8bc18e3c4ba0cbaa7666ff76be2f998991; https://groups.google.com/d/msg/syzkaller/rDzv5RP_f2M/M5au06qmAwAJ
CVE: CVE-2017-16530
Published: 2017-11-04
Description: The uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device, related to drivers/usb/storage/uas-detect.h and drivers/usb/storage/uas.c.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: https://github.com/torvalds/linux/commit/786de92b3cb26012d3d0f00ee37adf14527f35c4; https://groups.google.com/d/msg/syzkaller/pCswO77gRlM/VHuPOftgAwAJ; https://github.com/torvalds/linux/commit/786de92b3cb26012d3d0f00ee37adf14527f35c4
CVE: CVE-2017-16531
Published: 2017-11-04
Description: drivers/usb/core/config.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device, related to the USB_DT_INTERFACE_ASSOCIATION descriptor.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102025; https://github.com/torvalds/linux/commit/bd7a3fe770ebd8391d1c7d072ff88e9e76d063eb; https://groups.google.com/d/msg/syzkaller/hP6L-m59m_8/Co2ouWeFAwAJ
CVE: CVE-2017-16532
Published: 2017-11-04
Description: The get_endpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-476
References: https://github.com/torvalds/linux/commit/7c80f9e4a588f1925b07134bb2e3689335f6c6d8; https://groups.google.com/d/msg/syzkaller/l3870gs3LhA/y79DYQdFBAAJ; https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
CVE: CVE-2017-16533
Published: 2017-11-04
Description: The usbhid_parse function in drivers/hid/usbhid/hid-core.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102026; https://github.com/torvalds/linux/commit/f043bfc98c193c284e2cd768fefabe18ac2fed9b; https://groups.google.com/d/msg/syzkaller/CxkJ9QZgwlM/O3IOvAaGAwAJ
CVE: CVE-2017-16534
Published: 2017-11-04
Description: The cdc_parse_cdc_header function in drivers/usb/core/message.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html; https://github.com/torvalds/linux/commit/2e1c42391ff2556387b3cb6308b24f6f65619feb; https://groups.google.com/d/msg/syzkaller/nXnjqI73uPo/6sUyq6kqAgAJ
CVE: CVE-2017-16535
Published: 2017-11-04
Description: The usb_get_bos_descriptor function in drivers/usb/core/config.c in the Linux kernel before 4.13.10 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102022; https://github.com/torvalds/linux/commit/1c0edc3633b56000e18d82fc241e3995ca18a69e; https://groups.google.com/d/msg/syzkaller/tzdz2fTB1K0/OvjIgLSTAgAJ
CVE: CVE-2017-16536
Published: 2017-11-04
Description: The cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-476
References: https://groups.google.com/d/msg/syzkaller/WlUAVfDvpRk/1V1xuEA4AgAJ; https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html; https://patchwork.kernel.org/patch/9963527/
CVE: CVE-2017-16537
Published: 2017-11-04
Description: The imon_probe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-476
References: https://groups.google.com/d/msg/syzkaller/bBFN8imrjjo/-5jCl8EiCQAJ; https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html; https://patchwork.kernel.org/patch/9994017/
CVE: CVE-2017-16538
Published: 2017-11-04
Description: drivers/media/usb/dvb-usb-v2/lmedm04.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (general protection fault and system crash) or possibly have unspecified other impact via a crafted USB device, related to a missing warm-start check and incorrect attach timing (dm04_lme2510_frontend_attach versus dm04_lme2510_tuner).
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html; https://groups.google.com/d/msg/syzkaller/XwNidsl4X04/ti6I2IaRBAAJ; https://patchwork.linuxtv.org/patch/44566/
CVE: CVE-2017-16539
Published: 2017-11-04
Description: The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss (when certain older Linux kernels are used) by leveraging Docker container access to write a "scsi remove-single-device" line to /proc/scsi/scsi, aka SCSI MICDROP.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://github.com/moby/moby/pull/35399; https://github.com/moby/moby/pull/35399/commits/a21ecdf3c8a343a7c94e4c4d01b178c87ca7aaa1; https://marc.info/?l=linux-scsi&m=[PII_REDACTED]0941&w=2
CVE: CVE-2017-16541
Published: 2017-11-04
Description: Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/101665; http://www.securitytracker.com/id/1041610; https://access.redhat.com/errata/RHSA-2018:2692
CVE: CVE-2017-16540
Published: 2017-11-04
Description: OpenEMR before 5.0.0 Patch 5 allows unauthenticated remote database copying because setup.php exposes functionality for cloning an existing OpenEMR site to an arbitrary attacker-controlled MySQL server via vectors involving a crafted state parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.open-emr.org/wiki/index.php/OpenEMR_Patches; http://www.securityfocus.com/bid/101983; https://isears.github.io/jekyll/update/2017/10/28/openemr-database-disclosure.html
CVE: CVE-2017-16542
Published: 2017-11-05
Description: Zoho ManageEngine Applications Manager 13 before build 13500 allows Post-authentication SQL injection via the name parameter in a manageApplications.do?method=insert request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://code610.blogspot.com/2017/11/sql-injection-in-manageengine.html; https://www.exploit-db.com/exploits/43129/; https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16542.html
CVE: CVE-2017-16543
Published: 2017-11-05
Description: Zoho ManageEngine Applications Manager 13 before build 13500 allows SQL injection via GraphicalView.do, as demonstrated by a crafted viewProps yCanvas field or viewid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://code610.blogspot.com/2017/11/sql-injection-in-manageengine.html; https://www.exploit-db.com/exploits/43129/; https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16543.html
CVE: CVE-2017-16545
Published: 2017-11-05
Description: The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which allows remote attackers to cause a denial of service (ImportIndexQuantumType invalid write and application crash) or possibly have unspecified other impact via a malformed WPG image.
CVSS Score: 8.8 (HIGH)
CWE: CWE-476
References: http://hg.code.sf.net/p/graphicsmagick/code/rev/e8086faa52d0; https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/
CVE: CVE-2017-16546
Published: 2017-11-05
Description: The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of service (use of uninitialized data or invalid memory allocation) or possibly have unspecified other impact via a malformed WPG file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/ImageMagick/ImageMagick/commit/2130bf6f89ded32ef0c88a11694f107c52566c53; https://github.com/ImageMagick/ImageMagick/commit/e04cf3e9524f50ca336253513d977224e083b816; https://github.com/ImageMagick/ImageMagick/issues/851
CVE: CVE-2017-16547
Published: 2017-11-06
Description: The DrawImage function in magick/render.c in GraphicsMagick 1.3.26 does not properly look for pop keywords that are associated with push keywords, which allows remote attackers to cause a denial of service (negative strncpy and application crash) or possibly have unspecified other impact via a crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://hg.code.sf.net/p/graphicsmagick/code/rev/785758bbbfcc; https://lists.debian.org/debian-lts-announce/2017/11/msg00016.html; https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html
CVE: CVE-2017-16548
Published: 2017-11-06
Description: The receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact by sending crafted data to the daemon.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://bugzilla.samba.org/show_bug.cgi?id=13112; https://git.samba.org/rsync.git/?p=rsync.git%3Ba=commit%3Bh=47a63d90e71d3e19e0e96052bb8c6b9cb140ecc1; https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html
CVE: CVE-2017-15039
Published: 2017-11-06
Description: Cross-site scripting (XSS) exists in Zurmo 3.2.1.57987acc3018 via a data: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://bitbucket.org/zurmo/zurmo/issues/432/cross-site-scripting; https://bitbucket.org/zurmo/zurmo/issues/432/cross-site-scripting
CVE: CVE-2017-16524
Published: 2017-11-06
Description: Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a direct request to the file in the upload/ directory. To authenticate for this attack, one can obtain web-interface credentials in cleartext by leveraging the existing Local File Read Vulnerability referenced as CVE-2015-8279, which allows remote attackers to read the web-interface credentials via a request for the cslog_export.php?path=/root/php_modules/lighttpd/sbin/userpw URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/realistic-security/CVE-2017-16524; https://www.exploit-db.com/exploits/43138/; https://github.com/realistic-security/CVE-2017-16524
CVE: CVE-2017-16563
Published: 2017-11-06
Description: Cross-Site Request Forgery (CSRF) in the Basic Settings screen on Vonage (Grandstream) HT802 devices allows attackers to modify settings, related to cgi-bin/update.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: https://distributedcompute.com/2017/11/04/vonage-ht802-multiple-vulnerabilities/; https://distributedcompute.com/2017/11/04/vonage-ht802-multiple-vulnerabilities/