deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-17860
Published: 2018-01-18
Description: In Samsung Gear products, Bluetooth link key is updated to the different key which is same with attacker's link key. It can be attacked without user's intention only if attacker can reveal the Bluetooth address of target device and paired user's smartphone
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-20
References: https://drive.google.com/open?id=0B5L-0MoH_v7fcGljUS1SYnlkOHM; https://drive.google.com/open?id=0B5L-0MoH_v7fcGljUS1SYnlkOHM
CVE: CVE-2018-5776
Published: 2018-01-18
Description: WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement (under wp-includes/js/mediaelement).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://codex.wordpress.org/Version_4.9.2; https://github.com/WordPress/WordPress/commit/3fe9cb61ee71fcfadb5e002399296fcc1198d850; https://wordpress.org/news/2018/01/wordpress-4-9-2-security-and-maintenance-release/
CVE: CVE-2012-6708
Published: 2018-01-18
Description: jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '<' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html; http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html; http://packetstormsecurity.com/files/161972/Linksys-EA7500-2.0.8.194281-Cross-Site-Scripting.html
CVE: CVE-2015-9251
Published: 2018-01-18
Description: jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html; http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html; http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html
CVE: CVE-2016-10707
Published: 2018-01-18
Description: jQuery 3.0.0-rc.1 is vulnerable to Denial of Service (DoS) due to removing a logic that lowercased attribute names. Any attribute getter using a mixed-cased name for boolean attributes goes into an infinite recursion, exceeding the stack call limit.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://github.com/jquery/jquery/issues/3133; https://github.com/jquery/jquery/pull/3134; https://snyk.io/vuln/npm:jquery:20160529
CVE: CVE-2018-5783
Published: 2018-01-19
Description: In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://bugzilla.redhat.com/show_bug.cgi?id=1536179; https://sourceforge.net/p/podofo/tickets/27/; https://bugzilla.redhat.com/show_bug.cgi?id=1536179
CVE: CVE-2018-5784
Published: 2018-01-19
Description: In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file. This occurs because the declared number of directory entries is not validated against the actual number of directory entries.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: http://bugzilla.maptools.org/show_bug.cgi?id=2772; https://gitlab.com/libtiff/libtiff/commit/473851d211cf8805a161820337ca74cc9615d6ef; https://lists.debian.org/debian-lts-announce/2018/05/msg00022.html
CVE: CVE-2018-5785
Published: 2018-01-19
Description: In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opj_j2k_setup_encoder function (openjp2/j2k.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/uclouvain/openjpeg/issues/1057; https://usn.ubuntu.com/4109-1/; https://www.debian.org/security/2019/dsa-4405
CVE: CVE-2018-5786
Published: 2018-01-19
Description: In Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the get_fileinfo function (lrzip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://github.com/ckolivas/lrzip/issues/91; https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html; https://lists.debian.org/debian-lts-announce/2022/04/msg00012.html
CVE: CVE-2017-1693
Published: 2018-01-19
Description: IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-613
References: http://www.ibm.com/support/docview.wss?uid=swg22012642; http://www.securityfocus.com/bid/102760; https://exchange.xforce.ibmcloud.com/vulnerabilities/134164
CVE: CVE-2017-6142
Published: 2018-01-19
Description: X509 certificate verification was not correctly implemented in the early access "user id" feature in the F5 BIG-IP Advanced Firewall Manager versions 13.0.0, 12.1.0-12.1.2, and 11.6.0-11.6.2, and thus did not properly validate the remote server's identity on certain versions of BIG-IP.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-295
References: http://www.securitytracker.com/id/1040255; https://support.f5.com/csp/article/K20682450; http://www.securitytracker.com/id/1040255
CVE: CVE-2018-1362
Published: 2018-01-19
Description: IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted applications from the system and possibly obtain privileges. IBM X-Force ID: 137380.
CVSS Score: 5.0 (MEDIUM)
References: http://www.ibm.com/support/docview.wss?uid=swg22012528; https://exchange.xforce.ibmcloud.com/vulnerabilities/137380; http://www.ibm.com/support/docview.wss?uid=swg22012528
CVE: CVE-2014-4919
Published: 2018-01-19
Description: OXID eShop Professional Edition before 4.7.13 and 4.8.x before 4.8.7, Enterprise Edition before 5.0.13 and 5.1.x before 5.1.7, and Community Edition before 4.7.13 and 4.8.x before 4.8.7 allow remote attackers to assign users to arbitrary dynamical user groups.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-264
References: https://bugs.oxid-esales.com/view.php?id=5814; https://oxidforge.org/en/security-bulletin-2014-003.html; https://bugs.oxid-esales.com/view.php?id=5814
CVE: CVE-2015-6926
Published: 2018-01-19
Description: The OpenID Single Sign-On authentication functionality in OXID eShop before 4.5.0 allows remote attackers to impersonate users via the email address in a crafted authentication token.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://bugs.oxid-esales.com/view.php?id=6224; https://oxidforge.org/en/oxid-security-bulletin-2015-001.html; https://bugs.oxid-esales.com/view.php?id=6224
CVE: CVE-2017-15713
Published: 2018-01-19
Description: Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files owned by the user running the MapReduce job history server process. The malicious user can construct a configuration file containing XML directives that reference sensitive files on the MapReduce job history server host.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://lists.apache.org/thread.html/a790a251ace7213bde9f69777dedb453b1a01a6d18289c14a61d4f91%40%3Cgeneral.hadoop.apache.org%3E; https://lists.apache.org/thread.html/a790a251ace7213bde9f69777dedb453b1a01a6d18289c14a61d4f91%40%3Cgeneral.hadoop.apache.org%3E
CVE: CVE-2017-18044
Published: 2018-01-19
Description: A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6. A certain message parsing function inside the Commvault service does not properly validate the input of an incoming string before passing it to CreateProcess. As a result, a specially crafted message can inject commands that will be executed on the target operating system. Exploitation of this vulnerability does not require authentication and can lead to SYSTEM level privilege on any system running the cvd daemon. This is a different vulnerability than CVE-2017-3195.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/rapid7/metasploit-framework/pull/9340; https://github.com/rapid7/metasploit-framework/pull/9389; https://www.securifera.com/advisories/sec-2017-0001/
CVE: CVE-2017-7325
Published: 2018-01-19
Description: Yandex Browser before 16.9.0 allows remote attackers to spoof the address bar via window.open.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://browser.yandex.com/security/changelogs/fixed-in-version-16-9; https://browser.yandex.com/security/changelogs/fixed-in-version-16-9
CVE: CVE-2017-7326
Published: 2018-01-19
Description: Race condition issue in Yandex Browser for Android before 17.4.0.16 allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page
CVSS Score: 7.5 (HIGH)
CWE: CWE-362
References: https://browser.yandex.com/security/changelogs/fixed-in-version-17-4; https://browser.yandex.com/security/changelogs/fixed-in-version-17-4
CVE: CVE-2017-7327
Published: 2018-01-19
Description: Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://browser.yandex.com/security/changelogs/fixed-in-version-17-4; https://browser.yandex.com/security/changelogs/fixed-in-version-17-4
CVE: CVE-2017-11398
Published: 2018-01-19
Description: A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authenticated requests on a vulnerable system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285, CWE-534
References: http://www.securityfocus.com/bid/102275; https://success.trendmicro.com/solution/1118992; https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities
CVE: CVE-2017-12098
Published: 2018-01-19
Description: An exploitable cross site scripting (XSS) vulnerability exists in the add filter functionality of the rails_admin rails gem version 1.2.0. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the victim's browser. An attacker can phish an authenticated user to trigger this vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/102486; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0450; http://www.securityfocus.com/bid/102486
CVE: CVE-2017-14082
Published: 2018-01-19
Description: An uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security (Enterprise) versions 9.7 and below could allow an unauthenticated remote attacker to disclosure sensitive information on a vulnerable system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102216; http://www.zerodayinitiative.com/advisories/ZDI-17-972/; https://success.trendmicro.com/solution/1118993
CVE: CVE-2017-14094
Published: 2018-01-19
Description: A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-74
References: http://www.securityfocus.com/bid/102275; https://success.trendmicro.com/solution/1118992; https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities
CVE: CVE-2017-14095
Published: 2018-01-19
Description: A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command execution via a local file inclusion on a vulnerable system.
CVSS Score: 8.1 (HIGH)
CWE: CWE-98, CWE-829
References: http://www.securityfocus.com/bid/102275; https://success.trendmicro.com/solution/1118992; https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities
CVE: CVE-2017-14096
Published: 2018-01-19
Description: A stored cross site scripting (XSS) vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/102275; https://success.trendmicro.com/solution/1118992; https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities
CVE: CVE-2017-14097
Published: 2018-01-19
Description: An improper access control vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access a vulnerable system.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/102275; https://success.trendmicro.com/solution/1118992; https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities
CVE: CVE-2017-12097
Published: 2018-01-19
Description: An exploitable cross site scripting (XSS) vulnerability exists in the filter functionality of the delayed_job_web rails gem version 1.4. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the victim's browser. An attacker can phish an authenticated user to trigger this vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/102484; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0449; http://www.securityfocus.com/bid/102484
CVE: CVE-2017-12112
Published: 2018-01-19
Description: An exploitable improper authorization vulnerability exists in admin_addPeer API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863
References: http://www.securityfocus.com/bid/102475; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0464; http://www.securityfocus.com/bid/102475
CVE: CVE-2017-12114
Published: 2018-01-19
Description: An exploitable improper authorization vulnerability exists in admin_peers API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-863
References: http://www.securityfocus.com/bid/102475; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0466; http://www.securityfocus.com/bid/102475
CVE: CVE-2017-12115
Published: 2018-01-19
Description: An exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863
References: http://www.securityfocus.com/bid/102475; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0467; http://www.securityfocus.com/bid/102475
CVE: CVE-2017-12117
Published: 2018-01-19
Description: An exploitable improper authorization vulnerability exists in miner_start API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863
References: http://www.securityfocus.com/bid/102475; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0469; http://www.securityfocus.com/bid/102475
CVE: CVE-2017-12113
Published: 2018-01-19
Description: An exploitable improper authorization vulnerability exists in admin_nodeInfo API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863
References: http://www.securityfocus.com/bid/102475; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0465; http://www.securityfocus.com/bid/102475
CVE: CVE-2017-12116
Published: 2018-01-19
Description: An exploitable improper authorization vulnerability exists in miner_setGasPrice API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863
References: http://www.securityfocus.com/bid/102475; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0468; http://www.securityfocus.com/bid/102475
CVE: CVE-2017-12118
Published: 2018-01-19
Description: An exploitable improper authorization vulnerability exists in miner_stop API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). An attacker can send JSON to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863
References: http://www.securityfocus.com/bid/102475; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0470; http://www.securityfocus.com/bid/102475
CVE: CVE-2017-12119
Published: 2018-01-19
Description: An exploitable unhandled exception vulnerability exists in multiple APIs of CPP-Ethereum JSON-RPC. Specially crafted JSON requests can cause an unhandled exception resulting in denial of service. An attacker can send malicious JSON to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: http://www.securityfocus.com/bid/102475; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0471; http://www.securityfocus.com/bid/102475
CVE: CVE-2017-14457
Published: 2018-01-19
Description: An exploitable information leak/denial of service vulnerability exists in the libevm (Ethereum Virtual Machine) `create2` opcode handler of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read leading to memory disclosure or denial of service. An attacker can create/send malicious a smart contract to trigger this vulnerability.
CVSS Score: 8.2 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102475; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0503; http://www.securityfocus.com/bid/102475
CVE: CVE-2017-14460
Published: 2018-01-19
Description: An exploitable overly permissive cross-domain (CORS) whitelist vulnerability exists in JSON-RPC of Parity Ethereum client version 1.7.8. An automatically sent JSON object to JSON-RPC endpoint can trigger this vulnerability. A victim needs to visit a malicious website to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0508; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0508
CVE: CVE-2017-12130
Published: 2018-01-20
Description: An exploitable NULL pointer dereference vulnerability exists in the tinysvcmdns library version 2017-11-05. A specially crafted packet can make the library dereference a NULL pointer leading to a server crash and denial of service. An attacker needs to send a DNS query to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/102795; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0486; http://www.securityfocus.com/bid/102795
CVE: CVE-2017-14803
Published: 2018-01-20
Description: In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO connector plugins on IE11 where an attacker can execute arbitrary code on the system.
CVSS Score: 9.8 (CRITICAL)
References: https://www.novell.com/support/kb/doc.php?id=7022443; https://www.novell.com/support/kb/doc.php?id=7022443
CVE: CVE-2017-15108
Published: 2018-01-20
Description: spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://cgit.freedesktop.org/spice/linux/vd_agent/commit/?id=8ba174816d245757e743e636df357910e1d5eb61; https://lists.debian.org/debian-lts-announce/2021/01/msg00012.html; https://security.gentoo.org/glsa/201804-09
CVE: CVE-2017-15111
Published: 2018-01-20
Description: keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-377, CWE-59
References: https://access.redhat.com/errata/RHSA-2019:2137; https://github.com/jdennis/keycloak-httpd-client-install/commit/07f26e213196936fb328ea0c1d5a66a09d8b5440; https://access.redhat.com/errata/RHSA-2019:2137
CVE: CVE-2017-15112
Published: 2018-01-20
Description: keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200, CWE-200
References: https://access.redhat.com/errata/RHSA-2019:2137; https://github.com/jdennis/keycloak-httpd-client-install/commit/c3121b271abaaa1a76de2b9ae89dacde0105cd75; https://access.redhat.com/errata/RHSA-2019:2137
CVE: CVE-2017-18045
Published: 2018-01-21
Description: JBMC DirectAdmin before 1.52, when the email_ftp_password_change setting is nonzero, allows remote attackers to obtain access or cause a denial of service (segfault) via an unspecified request.
CVSS Score: 9.8 (CRITICAL)
References: https://www.directadmin.com/features.php?id=2036; https://www.directadmin.com/features.php?id=2036
CVE: CVE-2016-10708
Published: 2018-01-21
Description: sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: http://blog.swiecki.net/2018/01/fuzzing-tcp-servers.html; http://www.securityfocus.com/bid/102780; https://anongit.mindrot.org/openssh.git/commit/?id=28652bca29046f62c7045e933e6b931de1d16737
CVE: CVE-2017-18046
Published: 2018-01-21
Description: Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 and 3.03p2-1146 devices allows remote attackers to execute arbitrary code via a long POST request to the login_action function in /cgi-bin/login_action.cgi (aka cgipage.cgi).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://blogs.securiteam.com/index.php/archives/3552; https://pastebin.com/Yxd9S46A; https://twitter.com/ankit_anubhav/status/[PII_REDACTED]94249216
CVE: CVE-2018-5955
Published: 2018-01-21
Description: An issue was discovered in GitStack through 2.3.10. User controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to the server via the username and password fields to the rest/user/ URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://blogs.securiteam.com/index.php/archives/3557; https://www.exploit-db.com/exploits/44356/; https://blogs.securiteam.com/index.php/archives/3557