deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-17991
Published: 2017-12-30
Description: Biometric Shift Employee Management System has XSS via the expense_name parameter in an index.php?user=expenses request.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md
CVE: CVE-2017-17992
Published: 2017-12-30
Description: Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php form_file_name parameter in a download_form action.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md
CVE: CVE-2017-17993
Published: 2017-12-30
Description: Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=addition_deduction request.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md
CVE: CVE-2017-17994
Published: 2017-12-30
Description: Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competency_criteria request.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md
CVE: CVE-2017-17995
Published: 2017-12-30
Description: Biometric Shift Employee Management System has XSS via the Last_Name parameter in an index.php?user=ajax request.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md
CVE: CVE-2[PII_REDACTED]
Published: 2017-12-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-16227. Reason: This candidate is a reservation duplicate of CVE-2017-16227. Notes: All CVE users should reference CVE-2017-16227 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2017-12-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-14975. Reason: This candidate is a reservation duplicate of CVE-2017-14975. Notes: All CVE users should reference CVE-2017-14975 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2017-12-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-14976. Reason: This candidate is a reservation duplicate of CVE-2017-14976. Notes: All CVE users should reference CVE-2017-14976 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2017-12-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-15954. Reason: This candidate is a reservation duplicate of CVE-2017-15954. Notes: All CVE users should reference CVE-2017-15954 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2017-12-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-15955. Reason: This candidate is a reservation duplicate of CVE-2017-15955. Notes: All CVE users should reference CVE-2017-15955 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-12810
Published: 2017-12-30
Description: PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://pastebin.com/raw/QYxSkH1g; https://pastebin.com/raw/QYxSkH1g
CVE: CVE-2017-12811
Published: 2017-12-30
Description: PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://pastebin.com/raw/G1gyUSSa; https://pastebin.com/raw/G1gyUSSa
CVE: CVE-2017-12812
Published: 2017-12-30
Description: PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://pastebin.com/raw/ysWZsJHH; https://pastebin.com/raw/ysWZsJHH
CVE: CVE-2017-12813
Published: 2017-12-30
Description: PHPJabbers File Sharing Script 1.0 has stored XSS in the comments section.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://pastebin.com/raw/LTZFaL5x; https://pastebin.com/raw/LTZFaL5x
CVE: CVE-2017-17997
Published: 2017-12-30
Description: In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissectors/packet-mrdisc.c by validating an IPv4 address. This vulnerability is similar to CVE-2017-9343.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14299; https://code.wireshark.org/review/#/c/25063/; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=80a695869c9aef2fb473d9361da068022be7cb50
CVE: CVE-2017-14855
Published: 2017-12-30
Description: Red Lion HMI panels allow remote attackers to cause a denial of service (software exception) via an HTTP POST request to a long URI that does not exist, as demonstrated by version HMI 2.41 PLC 2.42.
CVSS Score: 8.6 (HIGH)
References: http://misteralfa-hack.blogspot.cl/2017/12/red-lion-guru-mode-cve-2017-14855.html; http://misteralfa-hack.blogspot.cl/2017/12/red-lion-guru-mode-cve-2017-14855.html
CVE: CVE-2017-17089
Published: 2017-12-30
Description: custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the custom command functionality.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/102339; https://github.com/webmin/webmin/commit/a9c97eea6c268fb83d93a817d58bac75e0d2599e; http://www.securityfocus.com/bid/102339
CVE: CVE-2016-10704
Published: 2017-12-30
Description: Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have XSS via e-mail templates that are mishandled during a preview, aka APPSEC-1503.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://magento.com/security/patches/magento-2010-and-212-security-update; https://magento.com/security/patches/magento-2010-and-212-security-update
CVE: CVE-2017-17704
Published: 2017-12-31
Description: A door-unlocking issue was discovered on Software House iStar Ultra devices through 6.5.2.20569 when used in conjunction with the IP-ACM Ethernet Door Module. The communications between the IP-ACM and the iStar Ultra is encrypted using a fixed AES key and IV. Each message is encrypted in CBC mode and restarts with the fixed IV, leading to replay attacks of entire messages. There is no authentication of messages beyond the use of the fixed AES key, so message forgery is also possible.
CVSS Score: 7.4 (HIGH)
CWE: CWE-330
References: https://systemoverlord.com/2017/12/18/cve-2017-17704-broken-cryptography-in-istar-ultra-ip-acm-by-software-house.html; https://systemoverlord.com/2017/12/18/cve-2017-17704-broken-cryptography-in-istar-ultra-ip-acm-by-software-house.html
CVE: CVE-2017-18001
Published: 2017-12-31
Description: Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, via the publicKey parameter to the /sendKey URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: http://seclists.org/fulldisclosure/2017/Dec/88; https://blogs.securiteam.com/index.php/archives/3550; https://www.exploit-db.com/exploits/44047/
CVE: CVE-2017-18004
Published: 2017-12-31
Description: Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://bitbucket.org/zurmo/zurmo/issues/436/to-report-a-xss-security-vulnerability-in; https://bitbucket.org/zurmo/zurmo/issues/436/to-report-a-xss-security-vulnerability-in
CVE: CVE-2017-18005
Published: 2017-12-31
Description: Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/Exiv2/exiv2/issues/168; https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html; https://github.com/Exiv2/exiv2/issues/168
CVE: CVE-2017-18006
Published: 2018-01-01
Description: netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.openbugbounty.org/reports/290447/; https://www.cvedetails.com/cve/CVE-2017-18006/; https://www.security-database.com/detail.php?alert=CVE-2017-18006
CVE: CVE-2018-3810
Published: 2018-01-01
Description: Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code (via the sgcgoogleanalytic parameter) that runs on all pages served by WordPress. The saveGoogleCode() function in smartgooglecode.php does not check if the current request is made by an authorized user, thus allowing any unauthenticated user to successfully update the inserted code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://limbenjamin.com/articles/smart-google-code-inserter-auth-bypass.html; https://wordpress.org/plugins/smart-google-code-inserter/#developers; https://wpvulndb.com/vulnerabilities/8987
CVE: CVE-2018-3811
Published: 2018-01-01
Description: SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to execute SQL queries in the context of the web server. The saveGoogleAdWords() function in smartgooglecode.php did not use prepared statements and did not sanitize the $_POST["oId"] variable before passing it as input into the SQL query.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://limbenjamin.com/articles/smart-google-code-inserter-auth-bypass.html; https://wordpress.org/plugins/smart-google-code-inserter/#developers; https://wpvulndb.com/vulnerabilities/8988
CVE: CVE-2017-18008
Published: 2018-01-01
Description: In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/102346; https://github.com/ImageMagick/ImageMagick/issues/921; https://usn.ubuntu.com/3681-1/
CVE: CVE-2017-18009
Published: 2018-01-01
Description: In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/106945; https://github.com/opencv/opencv/issues/10479; http://www.securityfocus.com/bid/106945
CVE: CVE-2017-18010
Published: 2018-01-01
Description: The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/custom/egoi-for-wp-form_egoi.php url parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/145217/WordPress-Smart-Marketing-SMS-And-Newsletters-Forms-1.1.1-XSS.html; https://wordpress.org/plugins/smart-marketing-for-wp/#developers; https://wpvulndb.com/vulnerabilities/8974
CVE: CVE-2017-18011
Published: 2018-01-01
Description: The MyCBGenie Affiliate Ads for Clickbank Products plugin through 1.6 for WordPress has XSS via the text_ads_ajax.php border_color parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/144978/WordPress-Affiliate-Ads-For-Clickbank-Products-1.3-XSS.html; https://wordpress.org/support/topic/affiliate-ads-for-clickbank-products-1-3-xss/; https://wpvulndb.com/vulnerabilities/8989
CVE: CVE-2017-18012
Published: 2018-01-01
Description: The Z-URL Preview plugin 1.6.1 for WordPress has XSS via the class.zlinkpreview.php url parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/145218/WordPress-Z-URL-Preview-1.6.1-Cross-Site-Scripting.html; https://plugins.svn.wordpress.org/z-url-preview/trunk/readme.txt; https://wordpress.org/plugins/z-url-preview/#developers
CVE: CVE-2017-18013
Published: 2018-01-01
Description: In LibTIFF 4.0.9, there is a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated by a tiffinfo crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://bugzilla.maptools.org/show_bug.cgi?id=2770; http://www.securityfocus.com/bid/102345; https://gitlab.com/libtiff/libtiff/commit/c6f41df7b581402dfba3c19a1e3df4454c551a01
CVE: CVE-2018-3813
Published: 2018-01-01
Description: getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVI_USER_ID and AVI_USER_PASSWORD fields via a direct request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: http://misteralfa-hack.blogspot.cl/2018/01/brickstream-recuento-y-seguimiento-de.html; http://misteralfa-hack.blogspot.cl/2018/01/brickstream-recuento-y-seguimiento-de.html
CVE: CVE-2018-3814
Published: 2018-01-01
Description: Craft CMS 2.6.3000 allows remote attackers to execute arbitrary PHP code by using the "Assets->Upload files" screen and then the "Replace it" option, because this allows a .jpg file to have embedded PHP code, and then be renamed to a .php extension.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/Snowty/myCVE/blob/master/CraftCMS-2.6.3000/README.md; https://github.com/Snowty/myCVE/blob/master/CraftCMS-2.6.3000/README.md
CVE: CVE-2017-18015
Published: 2018-01-02
Description: The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/145464/WordPress-Share-This-Image-1.03-Cross-Site-Scripting.html; https://wordpress.org/plugins/share-this-image/#developers; https://wordpress.org/support/topic/share-this-image-1-03-cross-site-scripting/
CVE: CVE-2017-9964
Published: 2018-01-02
Description: A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized person can execute a directory traversal attack resulting in authentication bypass or session hijack.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/102338; https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02; https://www.schneider-electric.com/en/download/document/SEVD-2017-339-01/
CVE: CVE-2017-9965
Published: 2018-01-02
Description: An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory traversal attack, an unauthorized person can view web server files.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/102338; https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02; https://www.schneider-electric.com/en/download/document/SEVD-2017-339-01/
CVE: CVE-2017-9966
Published: 2018-01-02
Description: A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges and the inserted code would execute at an elevated privilege level.
CVSS Score: 7.1 (HIGH)
References: http://www.securityfocus.com/bid/102338; https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02; https://www.schneider-electric.com/en/download/document/SEVD-2017-339-01/
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-02
Description: Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.passbolt.com/incidents/20170914_xss_on_resource_urls; https://www.passbolt.com/release/notes#September; https://www.passbolt.com/incidents/20170914_xss_on_resource_urls
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-02
Description: Eleix Openhacker version 0.1.47 is vulnerable to a XSS vulnerability in the bank transactions component resulting in arbitrary code execution in the browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Eleix/openhacker/commit/9da5c237ba5e2311f01edc83389bc5aaf0a9885c; https://github.com/Eleix/openhacker/issues/5; https://github.com/Eleix/openhacker/commit/9da5c237ba5e2311f01edc83389bc5aaf0a9885c
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-02
Description: Eleix Openhacker version 0.1.47 is vulnerable to an SQL injection in the account registration and login component resulting in information disclosure and remote code execution
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Eleix/openhacker/commit/9da5c237ba5e2311f01edc83389bc5aaf0a9885c; https://github.com/Eleix/openhacker/issues/4; https://github.com/Eleix/openhacker/commit/9da5c237ba5e2311f01edc83389bc5aaf0a9885c
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-02
Description: ImageMagick 7.0.7-1 and older version are vulnerable to null pointer dereference in the MagickCore component and might lead to denial of service
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/102368; https://github.com/ImageMagick/ImageMagick/issues/775; https://lists.debian.org/debian-lts-announce/2018/01/msg00002.html
CVE: CVE-2017-17097
Published: 2018-01-02
Description: gps-server.net GPS Tracking Software (self hosted) 2.x has a password reset procedure that immediately resets passwords upon an unauthenticated request, and then sends e-mail with a predictable (date-based) password to the admin, which makes it easier for remote attackers to obtain access by predicting this new password. This is related to the use of gmdate for password creation in fn_connect.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: https://gist.github.com/pak0s/ea7a80c2614d9cd43cfb8230c65c9fec; https://s1.gps-server.net/changelog.txt; https://www.exploit-db.com/exploits/43431/
CVE: CVE-2017-17098
Published: 2018-01-02
Description: The writeLog function in fn_common.php in gps-server.net GPS Tracking Software (self hosted) through 3.0 allows remote attackers to inject arbitrary PHP code via a crafted request that is mishandled during admin log viewing, as demonstrated by <?php system($_GET[cmd]); ?> in a login request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://gist.github.com/pak0s/ea7a80c2614d9cd43cfb8230c65c9fec; https://s1.gps-server.net/changelog.txt; https://www.exploit-db.com/exploits/43431/
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-02
Description: Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/OP-TEE/optee_os/blob/2.5.0/CHANGELOG.md; https://github.com/OP-TEE/optee_os/pull/1610; https://www.op-tee.org/security-advisories/
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-02
Description: Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://github.com/OP-TEE/optee_os/blob/2.5.0/CHANGELOG.md; https://github.com/OP-TEE/optee_os/pull/1610; https://www.op-tee.org/security-advisories/
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-02
Description: Structured Data Linter versions 2.4.1 and older are vulnerable to a directory traversal attack in the URL input field resulting in the possibility of disclosing information about the remote host.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/structured-data/linter/issues/41; https://github.com/structured-data/linter/issues/41
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA due to lack of a reference providing provenance. Notes: none
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-02
Description: In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://github.com/blendin/pocs/blob/master/opencv/0.OOB_Write_FillUniColor; https://github.com/opencv/opencv/issues/9723; https://lists.debian.org/debian-lts-announce/2018/01/msg00008.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-02
Description: fs-git is a file system like api for git repository. The fs-git version 1.0.1 module relies on child_process.exec, however, the buildCommand method used to construct exec strings does not properly sanitize data and is vulnerable to command injection across all methods that use it and call exec.
CVSS Score: 7.8 (HIGH)
References: https://nodesecurity.io/advisories/360; https://nodesecurity.io/advisories/360
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-02
Description: An XML Signature Wrapping vulnerability exists in Samlify 2.2.0 and earlier, and in predecessor Express-saml2 which could allow attackers to impersonate arbitrary users.
CVSS Score: 7.5 (HIGH)
CWE: CWE-91
References: https://github.com/tngan/samlify/releases/tag/v2.3.0; https://www.whitehats.nl/blog/xml-signature-wrapping-samlify; https://github.com/tngan/samlify/releases/tag/v2.3.0
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-02
Description: CMS Made Simple version 2.1.6 and 2.2 are vulnerable to Smarty templating injection in some core modules, resulting in unauthenticated PHP code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://www.cmsmadesimple.org/2017/06/Announcing-CMSMS-2-2-1-Hearts-Desire/; https://www.cmsmadesimple.org/2017/06/Announcing-CMSMS-2-2-1-Hearts-Desire/
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-02
Description: CMS Made Simple 2.1.6, 2.2, 2.2.1 are vulnerable to Smarty Template Injection in some core components, resulting in local file read before 2.2, and local file inclusion since 2.2.1
CVSS Score: 7.8 (HIGH)
CWE: CWE-74
References: https://www.cmsmadesimple.org/2017/07/Announcing-CMSMS-2.2.2-Hearts-Content; https://www.cmsmadesimple.org/2017/07/Announcing-CMSMS-2.2.2-Hearts-Content
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-02
Description: GuixSD prior to Git commit 5e66574a128937e7f2fcf146d146225703ccfd5d used POSIX hard links incorrectly, leading the creation of setuid executables in "the store", violating a fundamental security assumption of GNU Guix.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-346
References: https://lists.gnu.org/archive/html/guix-devel/2017-10/msg00090.html; https://lists.gnu.org/archive/html/guix-devel/2017-10/msg00090.html
CVE: CVE-2017-1557
Published: 2018-01-02
Description: IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user with authority to send a specially crafted request that could cause a channel process to cease processing further requests. IBM X-Force ID: 131547.
CVSS Score: 4.3 (MEDIUM)
References: http://www.ibm.com/support/docview.wss?uid=swg22004378; http://www.securityfocus.com/bid/102418; https://exchange.xforce.ibmcloud.com/vulnerabilities/131547