deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-16564
Published: 2017-11-06
Description: Stored Cross-site scripting (XSS) vulnerability in /cgi-bin/config2 on Vonage (Grandstream) HT802 devices allows remote authenticated users to inject arbitrary web script or HTML via the DHCP vendor class ID field (P148).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://distributedcompute.com/2017/11/04/vonage-ht802-multiple-vulnerabilities/; https://distributedcompute.com/2017/11/04/vonage-ht802-multiple-vulnerabilities/
CVE: CVE-2017-16565
Published: 2017-11-06
Description: Cross-Site Request Forgery (CSRF) in /cgi-bin/login on Vonage (Grandstream) HT802 devices allows attackers to authenticate a user via the login screen using the default password of 123 and submit arbitrary requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://distributedcompute.com/2017/11/04/vonage-ht802-multiple-vulnerabilities/; https://distributedcompute.com/2017/11/04/vonage-ht802-multiple-vulnerabilities/
CVE: CVE-2017-16569
Published: 2017-11-06
Description: An Open URL Redirect issue exists in Zurmo 3.2.1.57987acc3018 via an http: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-601
References: https://bitbucket.org/zurmo/zurmo/issues/431/open-url-redirects-unvalidated-redirects; https://bitbucket.org/zurmo/zurmo/issues/431/open-url-redirects-unvalidated-redirects
CVE: CVE-2017-16570
Published: 2017-11-06
Description: KeystoneJS before 4.0.0-beta.7 allows application-wide CSRF bypass by removing the CSRF parameter and value, aka SecureLayer7 issue number SL7_KEYJS_03. In other words, it fails to reject requests that lack an x-csrf-token header.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://blog.securelayer7.net/keystonejs-open-source-penetration-testing-report/; https://github.com/keystonejs/keystone/issues/4437; https://github.com/keystonejs/keystone/pull/4478
CVE: CVE-2015-7529
Published: 2017-11-06
Description: sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: http://rhn.redhat.com/errata/RHSA-2016-0152.html; http://rhn.redhat.com/errata/RHSA-2016-0188.html; http://www.securityfocus.com/bid/83162
CVE: CVE-2015-7878
Published: 2017-11-06
Description: Cross-site scripting (XSS) vulnerability in the Taxonomy Find module 6.x-2.x through 6.x-1.2 and 7.x-2.x through 7.x-1.0 in Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via taxonomy vocabulary and term names.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.drupal.org/node/2577903; https://www.drupal.org/node/2577903
CVE: CVE-2017-11177
Published: 2017-11-06
Description: TRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified directory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://support.forcepoint.com/KBArticle?id=000014490; https://support.forcepoint.com/KBArticle?id=000014490
CVE: CVE-2017-15672
Published: 2017-11-06
Description: The read_header function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=c20f4fcb74da2d0432c7b54499bb98f48236b904; http://www.openwall.com/lists/oss-security/2017/11/03/4; http://www.securityfocus.com/bid/101690
CVE: CVE-2017-16001
Published: 2017-11-06
Description: In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.1, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362
References: https://m4.rkw.io/blog/cve201716001-local-root-privesc-in-hashicorp-vagrantvmwarefusion-501.html; https://www.exploit-db.com/exploits/43220/; https://m4.rkw.io/blog/cve201716001-local-root-privesc-in-hashicorp-vagrantvmwarefusion-501.html
CVE: CVE-2017-7425
Published: 2017-11-06
Description: Multiple potential reflected XSS issues exist in NetIQ iManager versions before 2.7.7 Patch 10 HF2 and 3.0.3.2.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: https://www.netiq.com/documentation/imanager-3/imanager3032_releasenotes/data/imanager3032_releasenotes.html; https://www.netiq.com/documentation/imanager/imanager27710hf2readme/data/imanager27710hf2readme.html; https://www.novell.com/support/kb/doc.php?id=7016795
CVE: CVE-2017-15306
Published: 2017-11-06
Description: The kvm_vm_ioctl_check_extension function in arch/powerpc/kvm/powerpc.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) via a KVM_CHECK_EXTENSION KVM_CAP_PPC_HTM ioctl call to /dev/kvm.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ac64115a66c18c01745bbd3c47a36b124e5fd8c0; http://openwall.com/lists/oss-security/2017/11/06/6; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11
CVE: CVE-2017-12719
Published: 2017-11-06
Description: An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute code to dereference a pointer within the program causing the application to become unavailable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-822, CWE-476
References: http://www.securityfocus.com/bid/101685; https://ics-cert.us-cert.gov/advisories/ICSA-17-306-02; http://www.securityfocus.com/bid/101685
CVE: CVE-2017-14016
Published: 2017-11-06
Description: A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The application lacks proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, which could allow an attacker to execute arbitrary code under the context of the process.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-121, CWE-119
References: http://www.securityfocus.com/bid/101685; https://ics-cert.us-cert.gov/advisories/ICSA-17-306-02; https://www.exploit-db.com/exploits/43340/
CVE: CVE-2017-14023
Published: 2017-11-06
Description: An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators group to crash services by sending specially crafted messages to the DCOM interface.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/101680; http://www.securitytracker.com/id/1039729; https://ics-cert.us-cert.gov/advisories/ICSA-17-306-01
CVE: CVE-2017-14025
Published: 2017-11-06
Description: An Improper Input Validation issue was discovered in ABB FOX515T release 1.0. An improper input validation vulnerability has been identified, allowing a local attacker to provide a malicious parameter to the script that is not validated by the application, This could enable the attacker to retrieve any file on the server.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/101662; https://ics-cert.us-cert.gov/advisories/ICSA-17-304-01; http://www.securityfocus.com/bid/101662
CVE: CVE-2017-14029
Published: 2017-11-06
Description: An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior. The program will execute specially crafted malicious dll files placed on the target machine.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://ics-cert.us-cert.gov/advisories/ICSA-17-304-02; https://ics-cert.us-cert.gov/advisories/ICSA-17-304-02
CVE: CVE-2017-14031
Published: 2017-11-06
Description: An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local, non-administrator user has privileges to read and write to the file system of the target machine.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284, CWE-269
References: https://ics-cert.us-cert.gov/advisories/ICSA-17-304-02; https://ics-cert.us-cert.gov/advisories/ICSA-17-304-02
CVE: CVE-2017-16635
Published: 2017-11-06
Description: In TinyWebGallery v2.4, an XSS vulnerability is located in the `mkname`, `mkitem`, and `item` parameters of the `Add/Create` module. Remote attackers with low-privilege user accounts for backend access are able to inject malicious script codes into the `TWG Explorer` item listing. The request method to inject is POST and the attack vector is located on the application-side of the service. The injection point is the add/create input field and the execution point occurs in the item listing after the add or create.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.vulnerability-lab.com/get_content.php?id=1997; https://www.vulnerability-lab.com/get_content.php?id=1997
CVE: CVE-2017-16636
Published: 2017-11-06
Description: In Bludit v1.5.2 and v2.0.1, an XSS vulnerability is located in the new page, new category, and edit post function body message context. Remote attackers are able to bypass the basic editor validation to trigger cross site scripting. The XSS is persistent and the request method to inject via editor is GET. To save the editor context, the followup POST method request must be processed to perform the attack via the application side. The basic validation of the editor does not allow injecting script codes and blocks the context. Attackers can inject the code by using an editor tag that is not recognized by the basic validation. Thus allows a restricted user account to inject malicious script code to perform a persistent attack against higher privilege web-application user accounts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.vulnerability-lab.com/get_content.php?id=2000; https://www.vulnerability-lab.com/get_content.php?id=2000
CVE: CVE-2017-16637
Published: 2017-11-06
Description: In Vectura Perfect Privacy VPN Manager v1.10.10 and v1.10.11, when resetting the network data via the software client, with a running VPN connection, a critical error occurs which leads to a "FrmAdvancedProtection" crash. Although the mechanism malfunctions and an error occurs during the runtime with the stack trace being issued, the software process is not properly terminated. The software client is still attempting to maintain the connection even though the network connection information is being reset live. In that insecure mode, the "FrmAdvancedProtection" component crashes, but the process continues to run with different errors and process corruptions. This local corruption vulnerability can be exploited by local attackers.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: https://board.perfect-privacy.com/threads/reporting-a-security-bug-in-vpn-software-client-for-windows.2223/; https://www.vulnerability-lab.com/get_content.php?id=2102; https://board.perfect-privacy.com/threads/reporting-a-security-bug-in-vpn-software-client-for-windows.2223/
CVE: CVE-2017-13680
Published: 2017-11-06
Description: Prior to SEP 12.1 RU6 MP9 & SEP 14 RU1 Symantec Endpoint Protection Windows endpoint can encounter a situation whereby an attacker could use the product's UI to perform unauthorized file deletes on the resident file system.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/101503; http://www.securitytracker.com/id/1039775; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00
CVE: CVE-2017-13681
Published: 2017-11-06
Description: Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels. In the circumstances of this issue, the capability of exploit is limited by the need to perform multiple file and directory writes to the local filesystem and as such, is not feasible in a standard drive-by type attack.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/101504; http://www.securitytracker.com/id/1039775; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00
CVE: CVE-2017-16638
Published: 2017-11-06
Description: The Gentoo net-misc/vde package before version 2.3.2-r4 may allow members of the "qemu" group to gain root privileges by creating a hard link in a directory on which "chown" is called recursively by the OpenRC service script.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://bugs.gentoo.org/603382; https://security.gentoo.org/glsa/201711-11; https://bugs.gentoo.org/603382
CVE: CVE-2017-6331
Published: 2017-11-06
Description: Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that bypasses the real time protection for the application that is run on servers and clients.
CVSS Score: 7.1 (HIGH)
References: http://www.securityfocus.com/bid/101502; http://www.securitytracker.com/id/1039775; https://www.exploit-db.com/exploits/43134/
CVE: CVE-2017-15887
Published: 2017-11-07
Description: An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server before 6.0.7-0085 allows remote attackers to obtain user credentials via a brute-force attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307, CWE-307
References: https://www.synology.com/en-global/support/security/Synology_SA_17_64_CardDAV_Server; https://www.synology.com/en-global/support/security/Synology_SA_17_64_CardDAV_Server
CVE: CVE-2017-12083
Published: 2017-11-07
Description: An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware 2.0.1. A specially crafted set of packets can make the Disney Circle dump strings from an internal database into an HTTP response. An attacker needs network connectivity to the Internet to trigger this vulnerability.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-200
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0435; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0435
CVE: CVE-2017-12084
Published: 2017-11-07
Description: A backdoor vulnerability exists in remote control functionality of Circle with Disney running firmware 2.0.1. A specific set of network packets can remotely start an SSH server on the device, resulting in a persistent backdoor. An attacker can send an API call to enable the SSH server.
CVSS Score: 8.0 (HIGH)
CWE: CWE-862
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0436; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0436
CVE: CVE-2017-12085
Published: 2017-11-07
Description: An exploitable routing vulnerability exists in the Circle with Disney cloud infrastructure. A specially crafted packet can make the Circle cloud route a packet to any arbitrary Circle device. An attacker needs network connectivity to the Internet to trigger this vulnerability.
CVSS Score: 9.0 (CRITICAL)
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0437; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0437
CVE: CVE-2017-12094
Published: 2017-11-07
Description: An exploitable vulnerability exists in the WiFi Channel parsing of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause the device to execute arbitrary sed commands. An attacker needs to setup an access point reachable by the device to trigger this vulnerability.
CVSS Score: 7.4 (HIGH)
CWE: CWE-77
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0446; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0446
CVE: CVE-2017-12096
Published: 2017-11-07
Description: An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same name as the legitimate one can be used to make Circle connect to an untrusted network. An attacker needs to setup an Access Point reachable by the device and to send a series of spoofed "deauth" packets to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0448; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0448
CVE: CVE-2017-2864
Published: 2017-11-07
Description: An exploitable vulnerability exists in the generation of authentication token functionality of Circle with Disney. Specially crafted network packets can cause a valid authentication token to be returned to the attacker resulting in authentication bypass. An attacker can send a series of packets to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0370; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0370
CVE: CVE-2017-2865
Published: 2017-11-07
Description: An exploitable vulnerability exists in the firmware update functionality of Circle with Disney. Specially crafted network packets can cause the product to run an attacker-supplied shell script. An attacker can intercept and alter network traffic to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0371; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0371
CVE: CVE-2017-2866
Published: 2017-11-07
Description: An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0372; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0372
CVE: CVE-2017-2881
Published: 2017-11-07
Description: An exploitable vulnerability exists in the torlist update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the product to run an attacker-supplied shell script. An attacker can intercept and alter network traffic to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0388; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0388
CVE: CVE-2017-2882
Published: 2017-11-07
Description: An exploitable vulnerability exists in the servers update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to overwrite sensitive files, resulting in code execution. An attacker needs to impersonate a remote server in order to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0389; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0389
CVE: CVE-2017-2883
Published: 2017-11-07
Description: An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to execute arbitrary code. An attacker needs to impersonate a remote server in order to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0390; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0390
CVE: CVE-2017-2884
Published: 2017-11-07
Description: An exploitable vulnerability exists in the user photo update functionality of Circle with Disney running firmware 2.0.1. A repeated set of specially crafted API calls can cause the device to corrupt essential memory, resulting in a bricked device. An attacker needs network connectivity to the device to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0391; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0391
CVE: CVE-2017-2889
Published: 2017-11-07
Description: An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A large amount of simultaneous TCP connections causes the APID daemon to repeatedly fork, causing the daemon to run out of memory and trigger a device reboot. An attacker needs network connectivity to the device to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0396; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0396
CVE: CVE-2017-2890
Published: 2017-11-07
Description: An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0397; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0397
CVE: CVE-2017-2891
Published: 2017-11-07
Description: An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POST request with a CGI target can cause a reuse of previously freed pointer potentially resulting in remote code execution. An attacker needs to send this HTTP request over the network to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0398; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0398
CVE: CVE-2017-2892
Published: 2017-11-07
Description: An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT packet can cause an arbitrary out-of-bounds memory read and write potentially resulting in information disclosure, denial of service and remote code execution. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0399; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0399
CVE: CVE-2017-2893
Published: 2017-11-07
Description: An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. An MQTT SUBSCRIBE packet can cause a NULL pointer dereference leading to server crash and denial of service. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0400; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0400
CVE: CVE-2017-2894
Published: 2017-11-07
Description: An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause a stack buffer overflow resulting in remote code execution. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0401; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0401