deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-17681
Published: 2017-12-14
Description: In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted psd image file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: http://www.securityfocus.com/bid/102206; https://github.com/ImageMagick/ImageMagick/issues/869; https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html
CVE: CVE-2017-17682
Published: 2017-12-14
Description: In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: http://www.securityfocus.com/bid/102202; https://github.com/ImageMagick/ImageMagick/issues/870; https://lists.debian.org/debian-lts-announce/2018/01/msg00000.html
CVE: CVE-2017-17683
Published: 2017-12-14
Description: Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \\.\PSMEMDriver DeviceIoControl request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/Panda-Antivirus/Panda_Security_Antivirus_0xb3702c44; https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/Panda-Antivirus/Panda_Security_Antivirus_0xb3702c44
CVE: CVE-2017-17684
Published: 2017-12-14
Description: Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \\.\PSMEMDriver DeviceIoControl request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/Panda-Antivirus/Panda_Security_Antivirus_0xb3702c04_; https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/Panda-Antivirus/Panda_Security_Antivirus_0xb3702c04_
CVE: CVE-2017-5663
Published: 2017-12-14
Description: In Apache Fineract 0.4.0-incubating, 0.5.0-incubating, and 0.6.0-incubating, an authenticated user with client/loan/center/staff/group read permissions is able to inject malicious SQL into SELECT queries. The 'sqlSearch' parameter on a number of endpoints is not sanitized and appended directly to the query.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://lists.apache.org/thread.html/757feeffe45a75d3c0d08b551e71fabdae5d352543be2342b6ba2c93%40%3Cdev.fineract.apache.org%3E; https://lists.apache.org/thread.html/757feeffe45a75d3c0d08b551e71fabdae5d352543be2342b6ba2c93%40%3Cdev.fineract.apache.org%3E
CVE: CVE-2017-17511
Published: 2017-12-14
Description: KildClient 3.1.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, related to prefs.c and worldgui.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://lists.debian.org/debian-lts-announce/2017/12/msg00013.html; https://security-tracker.debian.org/tracker/CVE-2017-17511; https://lists.debian.org/debian-lts-announce/2017/12/msg00013.html
CVE: CVE-2017-17513
Published: 2017-12-14
Description: TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, related to linked_scripts/context/stubs/unix/mtxrun, texmf-dist/scripts/context/stubs/mswin/mtxrun.lua, and texmf-dist/tex/luatex/lualibs/lualibs-os.lua.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17513; https://security-tracker.debian.org/tracker/CVE-2017-17513
CVE: CVE-2017-17514
Published: 2017-12-14
Description: boxes.c in nip2 8.4.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that this product does not use the BROWSER environment variable
CVSS Score: 8.8 (HIGH)
CWE: CWE-74, CWE-74
References: https://github.com/jcupitt/nip2/issues/70; https://security-tracker.debian.org/tracker/CVE-2017-17514; https://github.com/jcupitt/nip2/issues/70
CVE: CVE-2017-17515
Published: 2017-12-14
Description: etc/ObjectList in Metview 4.7.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has indicated that the code to access this environment variable is not enabled in the shipped product
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17515; https://security-tracker.debian.org/tracker/CVE-2017-17515
CVE: CVE-2017-17516
Published: 2017-12-14
Description: scripts/inspect_webbrowser.py in Reddit Terminal Viewer (RTV) 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17516; https://security-tracker.debian.org/tracker/CVE-2017-17516
CVE: CVE-2017-17517
Published: 2017-12-14
Description: libsylph/utils.c in Sylpheed through 3.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17517; https://security-tracker.debian.org/tracker/CVE-2017-17517
CVE: CVE-2017-17518
Published: 2017-12-14
Description: swt/motif/browser.c in White_dune (aka whitedune) 0.30.10 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: This issue is being disputed as not being a vulnerability because “the current version of white_dune (1.369 at https://wdune.ourproject.org/) do not use a "BROWSER environment variable". Instead, the "browser" variable is read from the $HOME/.dunerc file (or from the M$Windows registry). It is configurable in the "options" menu. The default is chosen in the ./configure script, which tests various programs, first tested is "xdg-open".
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17518; https://security-tracker.debian.org/tracker/CVE-2017-17518
CVE: CVE-2017-17519
Published: 2017-12-14
Description: batteriesConfig.mlp in OCaml Batteries Included (aka ocaml-batteries) 2.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17519; https://security-tracker.debian.org/tracker/CVE-2017-17519
CVE: CVE-2017-17520
Published: 2017-12-14
Description: tools/url_handler.pl in TIN 2.4.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has reported that this is intentional behavior, because the documentation states "url_handler.pl was designed to work together with tin which only issues shell escaped absolute URLs.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74, CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17520; https://security-tracker.debian.org/tracker/CVE-2017-17520
CVE: CVE-2017-17521
Published: 2017-12-14
Description: uiutil.c in FontForge through 20170731 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, a different vulnerability than CVE-2017-17534.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17521; https://security-tracker.debian.org/tracker/CVE-2017-17521
CVE: CVE-2017-17522
Published: 2017-12-14
Description: Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is impossible because the code relies on subprocess.Popen and the default shell=False setting
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: http://www.securityfocus.com/bid/102207; https://bugs.python.org/issue32367; https://security-tracker.debian.org/tracker/CVE-2017-17522
CVE: CVE-2017-17524
Published: 2017-12-14
Description: library/www_browser.pl in SWI-Prolog 7.2.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17524; https://security-tracker.debian.org/tracker/CVE-2017-17524
CVE: CVE-2017-17525
Published: 2017-12-14
Description: guiclient/guiclient.cpp in xTuple PostBooks 4.7.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17525; https://security-tracker.debian.org/tracker/CVE-2017-17525
CVE: CVE-2017-17526
Published: 2017-12-14
Description: Input.cc in Bernard Parisse Giac 1.2.3.57 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17526; https://security-tracker.debian.org/tracker/CVE-2017-17526
CVE: CVE-2017-17527
Published: 2017-12-14
Description: delphi_gui/WWWBrowserRunnerDM.pas in PasDoc 0.14 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer has indicated that the code referencing the BROWSER environment variable is never used
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17527; https://security-tracker.debian.org/tracker/CVE-2017-17527
CVE: CVE-2017-17528
Published: 2017-12-14
Description: backends/platform/sdl/posix/posix.cpp in ScummVM 1.9.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17528; https://security-tracker.debian.org/tracker/CVE-2017-17528
CVE: CVE-2017-17529
Published: 2017-12-14
Description: af/util/xp/ut_go_file.cpp in AbiWord 3.0.2-2 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17529; https://security-tracker.debian.org/tracker/CVE-2017-17529
CVE: CVE-2017-17530
Published: 2017-12-14
Description: common/help.c in Geomview 1.9.5 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: this is disputed by a third party because no untrusted input can be used for the injection
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://bugs.gentoo.org/650894#c2; https://security-tracker.debian.org/tracker/CVE-2017-17530; https://bugs.gentoo.org/650894#c2
CVE: CVE-2017-17531
Published: 2017-12-14
Description: gozilla.c in GNU GLOBAL 4.8.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17531; https://security.gentoo.org/glsa/202008-02; https://security-tracker.debian.org/tracker/CVE-2017-17531
CVE: CVE-2017-17532
Published: 2017-12-14
Description: examples/framework/news/news3.py in Kiwi 1.9.22 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17532; https://security-tracker.debian.org/tracker/CVE-2017-17532
CVE: CVE-2017-17533
Published: 2017-12-14
Description: default.tcl in Tkabber 1.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has indicated that the attack cannot occur because of the argument-parsing behavior of the Tcl exec function
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17533; https://security-tracker.debian.org/tracker/CVE-2017-17533
CVE: CVE-2017-17534
Published: 2017-12-14
Description: uiutil.c in Mensis 0.0.080507 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, a different vulnerability than CVE-2017-17521.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17534; https://security-tracker.debian.org/tracker/CVE-2017-17534
CVE: CVE-2017-17535
Published: 2017-12-14
Description: lib/gui.py in Bob Hepple gjots2 2.4.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://security-tracker.debian.org/tracker/CVE-2017-17535; https://security-tracker.debian.org/tracker/CVE-2017-17535
CVE: CVE-2017-7344
Published: 2017-12-14
Description: A privilege escalation in Fortinet FortiClient Windows 5.4.3 and earlier as well as 5.6.0 allows attacker to gain privilege via exploiting the Windows "security alert" dialog thereby popping up when the "VPN before logon" feature is enabled and an untrusted certificate chain.
CVSS Score: 8.1 (HIGH)
References: http://www.securityfocus.com/bid/102176; https://fortiguard.com/advisory/FG-IR-17-070; https://securite.intrinsec.com/2017/12/22/cve-2017-7344-fortinet-forticlient-windows-privilege-escalation-at-logon/
CVE: CVE-2016-10703
Published: 2017-12-14
Description: A regular expression Denial of Service (DoS) vulnerability in the file lib/ecstatic.js of the ecstatic npm package, before version 2.0.0, allows a remote attacker to overload and crash a server by passing a maliciously crafted string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://advisory.checkmarx.net/advisory/CX-2016-4450; https://github.com/jfhbrook/node-ecstatic/commit/71ce93988ead4b561a8592168c[PII_REDACTED]9f01; https://www.checkmarx.com/advisories/denial-of-service-dos-vulnerability-in-ecstatic-npm-package/
CVE: CVE-2017-5264
Published: 2017-12-14
Description: Versions of Nexpose prior to 6.4.66 fail to adequately validate the source of HTTP requests intended for the Automated Actions administrative web application, and are susceptible to a cross-site request forgery (CSRF) attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://www.securityfocus.com/bid/102208; https://help.rapid7.com/nexpose/en-us/release-notes/archive/2017/12/#6.4.66; https://www.exploit-db.com/exploits/43911/
CVE: CVE-2017-16355
Published: 2017-12-14
Description: In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 (fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10), if Passenger is running as root, it is possible to list the contents of arbitrary files on a system by symlinking a file named REVISION from the application root folder to a file of choice and querying passenger-status --show=xml.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: https://blog.phusion.nl/2017/10/13/passenger-security-advisory-5-1-11/; https://github.com/phusion/passenger/commit/[PII_REDACTED]095cde6623c2cbe8c644541036d7bf; https://seclists.org/bugtraq/2019/Mar/34
CVE: CVE-2017-17405
Published: 2017-12-15
Description: Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the "|" pipe character, the command following the pipe character is executed. The default value of localfile is File.basename(remotefile), so malicious FTP servers could cause arbitrary command execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.securityfocus.com/bid/102204; http://www.securitytracker.com/id/1042004; https://access.redhat.com/errata/RHSA-2018:0378
CVE: CVE-2017-17670
Published: 2017-12-15
Description: In VideoLAN VLC media player through 2.2.8, there is a type conversion vulnerability in modules/demux/mp4/libmp4.c in the MP4 demux module leading to a invalid free, because the type of a box may be changed between a read operation and a free operation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://openwall.com/lists/oss-security/2017/12/15/1; http://www.securityfocus.com/bid/102214; http://www.securitytracker.com/id/1040938
CVE: CVE-2017-17693
Published: 2017-12-15
Description: Techno - Portfolio Management Panel through 2017-11-16 does not check authorization for panel/portfolio.php?action=delete requests that remove feedback.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Techno-Portfolio-Management-Panel.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Techno-Portfolio-Management-Panel.md
CVE: CVE-2017-17694
Published: 2017-12-15
Description: Techno - Portfolio Management Panel through 2017-11-16 allows XSS via the panel/search.php s parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Techno-Portfolio-Management-Panel.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Techno-Portfolio-Management-Panel.md
CVE: CVE-2017-17695
Published: 2017-12-15
Description: Techno - Portfolio Management Panel through 2017-11-16 allows SQL Injection via the panel/search.php s parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Techno-Portfolio-Management-Panel.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Techno-Portfolio-Management-Panel.md
CVE: CVE-2017-17696
Published: 2017-12-15
Description: Techno - Portfolio Management Panel through 2017-11-16 allows full path disclosure via an invalid s parameter to panel/search.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Techno-Portfolio-Management-Panel.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Techno-Portfolio-Management-Panel.md
CVE: CVE-2017-17697
Published: 2017-12-15
Description: The Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping.
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: https://github.com/vmware/harbor/issues/3755; https://github.com/vmware/harbor/issues/3755
CVE: CVE-2[PII_REDACTED]
Published: 2017-12-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-16355. Reason: This candidate is a reservation duplicate of CVE-2017-16355. Notes: All CVE users should reference CVE-2017-16355 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-15890
Published: 2017-12-15
Description: Cross-site scripting (XSS) vulnerability in Disclaimer in Synology MailPlus Server before 1.4.0-0415 allows remote authenticated users to inject arbitrary web script or HTML via the NAME parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.synology.com/en-global/support/security/Synology_SA_17_75; https://www.synology.com/en-global/support/security/Synology_SA_17_75
CVE: CVE-2017-14101
Published: 2017-12-15
Description: A security researcher found an XML External Entity (XXE) vulnerability on the Conserus Image Repository archive solution version 2.1.1.105 by McKesson Medical Imaging Company, which is now a Change Healthcare company. An unauthenticated user supplying a modified HTTP SOAP request to the vulnerable service allows for arbitrary file read access to the local file system as well as the transmittal of the application service's account hashed credentials to a remote attacker.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://technical.nttsecurity.com/post/102emjg/conserus-image-repository-xml-external-entity-vulnerability; https://technical.nttsecurity.com/post/102emjg/conserus-image-repository-xml-external-entity-vulnerability
CVE: CVE-2017-16776
Published: 2017-12-15
Description: Security researchers discovered an authentication bypass vulnerability in version 2.0.2 of the Conserus Workflow Intelligence application by McKesson Medical Imaging Company, which is now a Change Healthcare company. The attacker must send a malicious HTTP GET request to exploit the vulnerability. The vulnerability allows an attacker to bypass authentication and escalate privileges of valid users. An unauthenticated attacker can exploit the vulnerability and be granted limited access to other accounts. An authenticated attacker can exploit the vulnerability and be granted access reserved for higher privilege users.
CVSS Score: 8.1 (HIGH)
References: https://technical.nttsecurity.com/post/102emjm/conserus-workflow-intelligence-authentication-bypass-vulnerability; https://technical.nttsecurity.com/post/102emjm/conserus-workflow-intelligence-authentication-bypass-vulnerability
CVE: CVE-2017-16787
Published: 2017-12-15
Description: The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote attackers to read arbitrary files by leveraging failure to restrict URL access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2017/Dec/33; https://www.exploit-db.com/exploits/43332/; http://seclists.org/fulldisclosure/2017/Dec/33
CVE: CVE-2017-16788
Published: 2017-12-15
Description: Directory traversal vulnerability in the "Upload Groupkey" functionality in the Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with Admin-User access to write to arbitrary files and consequently gain root privileges by uploading a file, as demonstrated by storing a file in the cron.d directory.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2017/Dec/32; http://seclists.org/fulldisclosure/2017/Dec/32
CVE: CVE-2017-17556
Published: 2017-12-15
Description: A debug tool in Synaptics TouchPad drivers allows local users with administrative access to obtain sensitive information about keyboard scan codes by modifying registry keys.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-200
References: https://support.hp.com/us-en/document/c05827409; https://www.synaptics.com/company/blog/touchpad-security-brief; https://zwclose.github.io/HP-keylogger/