deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-17619
Published: 2017-12-13
Description: Laundry Booking Script 1.0 has SQL Injection via the /list city parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145328/Laundry-Booking-Script-1.0-SQL-Injection.html; https://packetstormsecurity.com/files/145330/Laundry-Booking-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43288/
CVE: CVE-2017-17620
Published: 2017-12-13
Description: Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145332/Lawyer-Search-Script-1.1-SQL-Injection.html; https://www.exploit-db.com/exploits/43289/; https://packetstormsecurity.com/files/145332/Lawyer-Search-Script-1.1-SQL-Injection.html
CVE: CVE-2017-17621
Published: 2017-12-13
Description: Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145331/Multivendor-Penny-Auction-Clone-Script-1.0-SQL-Injection.html; https://packetstormsecurity.com/files/145333/Multivendor-Penny-Auction-Clone-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43290/
CVE: CVE-2017-17622
Published: 2017-12-13
Description: Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145329/Online-Exam-Test-Application-Script-1.6-SQL-Injection.html; https://packetstormsecurity.com/files/145334/Online-Exam-Test-Application-Script-1.6-SQL-Injection.html; https://www.exploit-db.com/exploits/43291/
CVE: CVE-2017-17623
Published: 2017-12-13
Description: Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145335/Opensource-Classified-Ads-Script-3.2-SQL-Injection.html; https://www.exploit-db.com/exploits/43292/; https://packetstormsecurity.com/files/145335/Opensource-Classified-Ads-Script-3.2-SQL-Injection.html
CVE: CVE-2017-17624
Published: 2017-12-13
Description: PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145336/PHP-Multivendor-Ecommerce-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43293/; https://packetstormsecurity.com/files/145336/PHP-Multivendor-Ecommerce-1.0-SQL-Injection.html
CVE: CVE-2017-17625
Published: 2017-12-13
Description: Professional Service Script 1.0 has SQL Injection via the service-list city parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145337/Professional-Service-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43294/; https://packetstormsecurity.com/files/145337/Professional-Service-Script-1.0-SQL-Injection.html
CVE: CVE-2017-17626
Published: 2017-12-13
Description: Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145338/Readymade-PHP-Classified-Script-3.3-SQL-Injection.html; https://www.exploit-db.com/exploits/43295/; https://packetstormsecurity.com/files/145338/Readymade-PHP-Classified-Script-3.3-SQL-Injection.html
CVE: CVE-2017-17627
Published: 2017-12-13
Description: Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145339/Readymade-Video-Sharing-Script-3.2-SQL-Injection.html; https://www.exploit-db.com/exploits/43296/; https://packetstormsecurity.com/files/145339/Readymade-Video-Sharing-Script-3.2-SQL-Injection.html
CVE: CVE-2017-17628
Published: 2017-12-13
Description: Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145340/Responsive-Realestate-Script-3.2-SQL-Injection.html; https://www.exploit-db.com/exploits/43297/; https://packetstormsecurity.com/files/145340/Responsive-Realestate-Script-3.2-SQL-Injection.html
CVE: CVE-2017-17629
Published: 2017-12-13
Description: Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the single_detail.php sid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145327/Secure-E-commerce-Script-2.0.1-SQL-Injection.html; https://www.exploit-db.com/exploits/43287/; https://packetstormsecurity.com/files/145327/Secure-E-commerce-Script-2.0.1-SQL-Injection.html
CVE: CVE-2017-17630
Published: 2017-12-13
Description: Yoga Class Script 1.0 has SQL Injection via the /list city parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145322/Yoga-Class-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43282/; https://packetstormsecurity.com/files/145322/Yoga-Class-Script-1.0-SQL-Injection.html
CVE: CVE-2017-17631
Published: 2017-12-13
Description: Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145341/Multireligion-Responsive-Matrimonial-4.7.2-SQL-Injection.html; https://www.exploit-db.com/exploits/43299/; https://packetstormsecurity.com/files/145341/Multireligion-Responsive-Matrimonial-4.7.2-SQL-Injection.html
CVE: CVE-2017-17632
Published: 2017-12-13
Description: Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145342/Responsive-Events-And-Movie-Ticket-Booking-Script-3.2.1-SQL-Injection.html; https://www.exploit-db.com/exploits/43300/; https://packetstormsecurity.com/files/145342/Responsive-Events-And-Movie-Ticket-Booking-Script-3.2.1-SQL-Injection.html
CVE: CVE-2017-17633
Published: 2017-12-13
Description: Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145343/Multiplex-Movie-Theater-Booking-Script-3.1.5-SQL-Injection.html; https://www.exploit-db.com/exploits/43301/; https://packetstormsecurity.com/files/145343/Multiplex-Movie-Theater-Booking-Script-3.1.5-SQL-Injection.html
CVE: CVE-2017-17634
Published: 2017-12-13
Description: Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145344/Single-Theater-Booking-Script-3.2.1-SQL-Injection.html; https://www.exploit-db.com/exploits/43302/; https://packetstormsecurity.com/files/145344/Single-Theater-Booking-Script-3.2.1-SQL-Injection.html
CVE: CVE-2017-17635
Published: 2017-12-13
Description: MLM Forex Market Plan Script 2.0.4 has SQL Injection via the news_detail.php newid parameter or the event_detail.php eventid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145347/MLM-Forex-Market-Plan-Script-2.0.4-SQL-Injection.html; https://www.exploit-db.com/exploits/43306/; https://packetstormsecurity.com/files/145347/MLM-Forex-Market-Plan-Script-2.0.4-SQL-Injection.html
CVE: CVE-2017-17636
Published: 2017-12-13
Description: MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145348/MLM-Forced-Matrix-2.0.9-SQL-Injection.html; https://www.exploit-db.com/exploits/43307/; https://packetstormsecurity.com/files/145348/MLM-Forced-Matrix-2.0.9-SQL-Injection.html
CVE: CVE-2017-17637
Published: 2017-12-13
Description: Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145349/Car-Rental-Script-2.0.4-SQL-Injection.html; https://www.exploit-db.com/exploits/43308/; https://packetstormsecurity.com/files/145349/Car-Rental-Script-2.0.4-SQL-Injection.html
CVE: CVE-2017-17638
Published: 2017-12-13
Description: Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145350/Groupon-Clone-Script-3.01-SQL-Injection.html; https://www.exploit-db.com/exploits/43309/; https://packetstormsecurity.com/files/145350/Groupon-Clone-Script-3.01-SQL-Injection.html
CVE: CVE-2017-17639
Published: 2017-12-13
Description: Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145351/Muslim-Matrimonial-Script-3.02-SQL-Injection.html; https://www.exploit-db.com/exploits/43310/; https://packetstormsecurity.com/files/145351/Muslim-Matrimonial-Script-3.02-SQL-Injection.html
CVE: CVE-2017-17640
Published: 2017-12-13
Description: Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145352/Advanced-World-Database-2.0.5-SQL-Injection.html; https://www.exploit-db.com/exploits/43311/; https://packetstormsecurity.com/files/145352/Advanced-World-Database-2.0.5-SQL-Injection.html
CVE: CVE-2017-17641
Published: 2017-12-13
Description: Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145353/Resume-Clone-Script-2.0.5-SQL-Injection.html; https://www.exploit-db.com/exploits/43312/; https://packetstormsecurity.com/files/145353/Resume-Clone-Script-2.0.5-SQL-Injection.html
CVE: CVE-2017-17642
Published: 2017-12-13
Description: Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145354/Basic-Job-Site-Script-2.0.5-SQL-Injection.html; https://www.exploit-db.com/exploits/43314/; https://packetstormsecurity.com/files/145354/Basic-Job-Site-Script-2.0.5-SQL-Injection.html
CVE: CVE-2017-14589
Published: 2017-12-13
Description: It was possible for double OGNL evaluation in FreeMarker templates through Struts FreeMarker tags to occur. An attacker who has restricted administration rights to Bamboo or who hosts a website that a Bamboo administrator visits, is able to exploit this vulnerability to execute Java code of their choice on systems that run a vulnerable version of Bamboo. All versions of Bamboo before 6.1.6 (the fixed version for 6.1.x) and from 6.2.0 before 6.2.5 (the fixed version for 6.2.x) are affected by this vulnerability.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/102188; https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2017-12-13-939939816.html; https://jira.atlassian.com/browse/BAM-18842
CVE: CVE-2017-14590
Published: 2017-12-13
Description: Bamboo did not check that the name of a branch in a Mercurial repository contained argument parameters. An attacker who has permission to create a repository in Bamboo, edit an existing plan that has a non-linked Mercurialrepository, create or edit a plan when there is at least one linked Mercurial repository that the attacker has permission to use, or commit to a Mercurial repository used by a Bamboo plan which has branch detection enabled can execute code of their choice on systems that run a vulnerable version of Bamboo Server. Versions of Bamboo starting with 2.7.0 before 6.1.6 (the fixed version for 6.1.x) and from 6.2.0 before 6.2.5 (the fixed version for 6.2.x) are affected by this vulnerability.
CVSS Score: 9.1 (CRITICAL)
References: http://www.securityfocus.com/bid/102193; https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2017-12-13-939939816.html; https://jira.atlassian.com/browse/BAM-18843
CVE: CVE-2017-17382
Published: 2017-12-13
Description: Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: http://www.securityfocus.com/bid/102173; http://www.securitytracker.com/id/1039985; https://robotattack.org/
CVE: CVE-2017-17427
Published: 2017-12-13
Description: Radware Alteon devices with a firmware version between 31.0.0.0-31.0.3.0 are vulnerable to an adaptive-chosen ciphertext attack ("Bleichenbacher attack"). This allows an attacker to decrypt observed traffic that has been encrypted with the RSA cipher and to perform other private key operations.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-203
References: http://www.securityfocus.com/bid/102199; https://robotattack.org/; https://support.radware.com/app/answers/answer_view/a_id/1010361/~/cve-2017-17427-adaptive-chosen-ciphertext-attack-vulnerability
CVE: CVE-2017-17537
Published: 2017-12-13
Description: MikroTik RouterBOARD v6.39.2 and v6.40.5 allows an unauthenticated remote attacker to cause a denial of service by connecting to TCP port 53 and sending data that begins with many '\0' characters, possibly related to DNS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.exploit-db.com/exploits/43200/; https://www.exploit-db.com/exploits/43200/
CVE: CVE-2017-17549
Published: 2017-12-13
Description: Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 allow remote attackers to obtain sensitive information from the backend client TLS handshake by leveraging use of TLS with Client Certificates and a Diffie-Hellman Ephemeral (DHE) key exchange.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102177; http://www.securitytracker.com/id/1040011; https://support.citrix.com/article/ctx230612
CVE: CVE-2017-17648
Published: 2017-12-13
Description: Entrepreneur Dating Script 2.0.1 has SQL Injection via the search_result.php marital, gender, country, or profileid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/43278; https://www.exploit-db.com/exploits/43278
CVE: CVE-2017-1421
Published: 2017-12-13
Description: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22005234; http://www.securityfocus.com/bid/102153; http://www.securitytracker.com/id/1040015
CVE: CVE-2017-1546
Published: 2017-12-13
Description: IBM DOORS Next Generation (DNG/RRC) 4.07, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130915.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22010321; http://www.securityfocus.com/bid/101895; https://exchange.xforce.ibmcloud.com/vulnerabilities/130915
CVE: CVE-2017-1558
Published: 2017-12-13
Description: IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 131548.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.ibm.com/support/docview.wss?uid=swg22010595; http://www.securityfocus.com/bid/102211; https://exchange.xforce.ibmcloud.com/vulnerabilities/131548
CVE: CVE-2017-1635
Published: 2017-12-13
Description: IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free error. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 133243.
CVSS Score: 8.0 (HIGH)
CWE: CWE-416
References: http://www.ibm.com/support/docview.wss?uid=swg22010554; http://www.securityfocus.com/bid/101905; https://exchange.xforce.ibmcloud.com/vulnerabilities/133243
CVE: CVE-2017-1716
Published: 2017-12-13
Description: IBM Tivoli Workload Scheduler 8.6.0, 9.1.0, and 9.2.0 could disclose sensitive information to a local attacker due to improper permission settings. IBM X-Force ID: 134638.
CVSS Score: 3.3 (LOW)
CWE: CWE-732
References: http://www-01.ibm.com/support/docview.wss?uid=swg22010947; http://www.securityfocus.com/bid/101974; https://exchange.xforce.ibmcloud.com/vulnerabilities/134638
CVE: CVE-2017-15529
Published: 2017-12-13
Description: Prior to 4.4.1.10, the Norton Family Android App can be susceptible to a Denial of Service (DoS) exploit. A DoS attack is a type of attack whereby the perpetrator attempts to make a particular device unavailable to its intended user by temporarily or indefinitely disrupting services of a specific host within a network.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-400
References: http://www.securityfocus.com/bid/102119; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171213_00; http://www.securityfocus.com/bid/102119
CVE: CVE-2017-15530
Published: 2017-12-13
Description: Prior to 4.4.1.10, the Norton Family Android App can be susceptible to an Information Disclosure issue. Information disclosure is a very common issue that attackers will attempt to exploit as a first pass across the application. As they probe the application they will take note of anything that may seem out of place or any bit of information they can use to their advantage such as error messages, system information, user data, version numbers, component names, URL paths, or even simple typos and misspellings.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102120; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171213_00; http://www.securityfocus.com/bid/102120
CVE: CVE-2017-14380
Published: 2017-12-13
Description: In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin (compadmin) account user could exploit a vulnerability in isi_get_itrace or isi_get_profile maintenance scripts to run any shell script as system root on a cluster in compliance mode. This could potentially lead to an elevation of privilege for the compadmin user and violate compliance mode.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-269
References: http://seclists.org/fulldisclosure/2017/Dec/41; http://www.securityfocus.com/bid/102210; http://seclists.org/fulldisclosure/2017/Dec/41
CVE: CVE-2017-17664
Published: 2017-12-13
Description: A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7.4, and 15.x before 15.1.4 and Certified Asterisk before 13.13-cert9. Certain compound RTCP packets cause a crash in the RTCP Stack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-119
References: http://downloads.digium.com/pub/security/AST-2017-012.html; http://www.securityfocus.com/bid/102201; http://www.securitytracker.com/id/1040009
CVE: CVE-2017-17665
Published: 2017-12-13
Description: In Octopus Deploy before 4.1.3, the machine update process doesn't check that the user has access to all environments. This allows an access-control bypass because the set of environments to which a machine is scoped may include environments in which the user lacks access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://github.com/OctopusDeploy/Issues/issues/4073; https://github.com/OctopusDeploy/Issues/issues/4073
CVE: CVE-2017-11305
Published: 2017-12-13
Description: A regression affecting Adobe Flash Player version 27.0.0.187 (and earlier versions) causes the unintended reset of the global settings preference file when a user clears browser data.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/102139; http://www.securitytracker.com/id/1039986; https://access.redhat.com/errata/RHSA-2018:0081
CVE: CVE-2017-17669
Published: 2017-12-13
Description: There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/Exiv2/exiv2/issues/187; https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html; https://usn.ubuntu.com/3852-1/
CVE: CVE-2017-7738
Published: 2017-12-13
Description: An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, 5.2 and below versions allow an admin user with super_admin privileges to view the current SSL VPN web portal session info which may contains user credentials through the fnsysctl CLI command.
CVSS Score: 7.2 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102151; https://fortiguard.com/advisory/FG-IR-17-172; http://www.securityfocus.com/bid/102151
CVE: CVE-2017-17671
Published: 2017-12-14
Description: vBulletin through 5.3.x on Windows allows remote PHP code execution because a require_once call is reachable with an unauthenticated request that can include directory traversal sequences to specify an arbitrary pathname, and because ../ traversal is blocked but ..\ traversal is not blocked. For example, an attacker can make an invalid HTTP request containing PHP code, and then make an index.php?routestring= request with enough instances of ".." to reach an Apache HTTP Server log file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://blogs.securiteam.com/index.php/archives/3569; https://blogs.securiteam.com/index.php/archives/3569
CVE: CVE-2017-17672
Published: 2017-12-14
Description: In vBulletin through 5.3.x, there is an unauthenticated deserialization vulnerability that leads to arbitrary file deletion and, under certain circumstances, code execution, because of unsafe usage of PHP's unserialize() in vB_Library_Template's cacheTemplates() function, which is a publicly exposed API. This is exploited with the templateidlist parameter to ajax/api/template/cacheTemplates.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://blogs.securiteam.com/index.php/archives/3573; https://www.exploit-db.com/exploits/43362/; https://blogs.securiteam.com/index.php/archives/3573
CVE: CVE-2017-17680
Published: 2017-12-14
Description: In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted xpm image file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/102203; https://github.com/ImageMagick/ImageMagick/issues/873; https://usn.ubuntu.com/3681-1/