deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-1915
Published: 2017-04-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to inject arbitrary web script or HTML via the locale parameter to (1) mydevice/index.jsp or (2) mydevice/loggedOut.jsp.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2016/Feb/95; http://security-assessment.com/files/documents/advisory/Blackberry%20BES12%20Self-Service%20Multiple%20Vulnerabilities.pdf; http://support.blackberry.com/kb/articleDetail?articleNumber=000038033
CVE: CVE-2016-2104
Published: 2017-04-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the label parameter to admin/BunchDetail.do; (2) the package_name, (3) search_subscribed_channels, or (4) channel_filter parameter to software/packages/NameOverview.do; or unspecified vectors related to (5) <input:hidden> or (6) <bean:message> tags.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://rhn.redhat.com/errata/RHSA-2016-0590.html; https://bugzilla.redhat.com/show_bug.cgi?id=1305677; https://bugzilla.redhat.com/show_bug.cgi?id=1313515
CVE: CVE-2016-2555
Published: 2017-04-13
Description: SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote attackers to execute arbitrary SQL commands via the searchFriends function to friends.inc.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://sourceincite.com/research/src-2016-08/; http://www.rapid7.com/db/modules/exploit/multi/http/atutor_sqli; https://github.com/atutor/ATutor/commit/629b2c992447f7670a2fecc484abfad8c4c2d298
CVE: CVE-2016-3106
Published: 2017-04-13
Description: Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-362
References: http://www.openwall.com/lists/oss-security/2016/04/18/11; http://www.openwall.com/lists/oss-security/2016/05/20/1; https://bugzilla.redhat.com/show_bug.cgi?id=1324926
CVE: CVE-2016-4068
Published: 2017-04-13
Description: Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-updates/2016-08/msg00078.html; http://lists.opensuse.org/opensuse-updates/2016-08/msg00079.html; http://lists.opensuse.org/opensuse-updates/2016-08/msg00095.html
CVE: CVE-2016-4800
Published: 2017-04-13
Description: The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00092.html; http://www.ocert.org/advisories/ocert-2016-001.html; http://www.securityfocus.com/bid/90945
CVE: CVE-2016-4970
Published: 2017-04-13
Description: handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://netty.io/news/2016/06/07/4-0-37-Final.html; http://netty.io/news/2016/06/07/4-1-1-Final.html; http://rhn.redhat.com/errata/RHSA-2017-0179.html
CVE: CVE-2016-6143
Published: 2017-04-13
Description: SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors involving the audit logs, aka SAP Security Note 2170806.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://www.securityfocus.com/bid/92062; https://layersevensecurity.com/wp-content/uploads/2015/11/Layer-Seven-Security_SAP-Security-Notes_October-2015.pdf; https://www.onapsis.com/blog/analyzing-sap-security-notes-october-2015
CVE: CVE-2017-7219
Published: 2017-04-13
Description: A heap overflow vulnerability in Citrix NetScaler Gateway versions 10.1 before 135.8/135.12, 10.5 before 65.11, 11.0 before 70.12, and 11.1 before 52.13 allows a remote authenticated attacker to run arbitrary commands via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97626; http://www.securitytracker.com/id/1038283; https://support.citrix.com/article/CTX222657
CVE: CVE-2010-1816
Published: 2017-04-13
Description: Buffer overflow in ImageIO in Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a crafted image.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/en-us/HT4188; https://support.apple.com/en-us/HT4188
CVE: CVE-2010-1821
Published: 2017-04-13
Description: Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows local users to obtain system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://support.apple.com/en-us/HT4188; https://support.apple.com/en-us/HT4188
CVE: CVE-2014-7920
Published: 2017-04-13
Description: mediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges.  NOTE: This is a different vulnerability than CVE-2014-7921.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: https://android.googlesource.com/platform/frameworks/av/+/36d1577%5E%21/; https://bits-please.blogspot.com/2016/01/android-privilege-escalation-to.html; https://android.googlesource.com/platform/frameworks/av/+/36d1577%5E%21/
CVE: CVE-2014-7921
Published: 2017-04-13
Description: mediaserver in Android 4.0.3 through 5.x before 5.1 allows attackers to gain privileges.  NOTE: This is a different vulnerability than CVE-2014-7920.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: https://android.googlesource.com/platform/frameworks/av/+/36d1577%5E%21/; https://bits-please.blogspot.com/2016/01/android-privilege-escalation-to.html; https://android.googlesource.com/platform/frameworks/av/+/36d1577%5E%21/
CVE: CVE-2015-8780
Published: 2017-04-13
Description: Samsung wssyncmlnps before 2015-10-31 allows directory traversal in a Kies restore, aka ZipFury.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2015-0001; https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2015-0001
CVE: CVE-2016-10324
Published: 2017-04-13
Description: In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3879; http://www.securityfocus.com/bid/97641; https://savannah.gnu.org/support/index.php?109133
CVE: CVE-2016-10325
Published: 2017-04-13
Description: In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the _osip_message_to_str() function defined in osipparser2/osip_message_to_str.c, resulting in a remote DoS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3879; http://www.securityfocus.com/bid/92921; https://savannah.gnu.org/support/index.php?109131
CVE: CVE-2016-10326
Published: 2017-04-13
Description: In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_body_to_str() function defined in osipparser2/osip_body.c, resulting in a remote DoS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3879; http://www.securityfocus.com/bid/92921; https://savannah.gnu.org/support/index.php?109132
CVE: CVE-2016-2036
Published: 2017-04-13
Description: The getURL function in drivers/secfilter/urlparser.c in secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to trigger a NULL pointer dereference via a "GET HTTP/1.1" request, aka SVE-2016-5036.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0001; https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0001
CVE: CVE-2016-2565
Published: 2017-04-13
Description: Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to read sent e-mail messages, aka SVE-2015-5081.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97658; https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0002; http://www.securityfocus.com/bid/97658
CVE: CVE-2016-2566
Published: 2017-04-13
Description: Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices has SQL injection, aka SVE-2015-5081.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/97654; https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0002; http://www.securityfocus.com/bid/97654
CVE: CVE-2016-2567
Published: 2017-04-13
Description: secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to bypass URL filtering by inserting an "exceptional URL" in the query string, as demonstrated by the http://should-have-been-filtered.example.com/?http://google.com URL.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0003; https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0003
CVE: CVE-2016-4030
Published: 2017-04-13
Description: Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices have unintended availability of the modem in USB configuration number 2 within the secure lockscreen state, allowing an attacker to make phone calls, send text messages, or issue commands, aka SVE-2016-5301.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/97701; https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0004; http://www.securityfocus.com/bid/97701
CVE: CVE-2016-4031
Published: 2017-04-13
Description: Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices allow attackers to send AT commands by plugging the device into a Linux host, aka SVE-2016-5301.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/97703; https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0004; http://www.securityfocus.com/bid/97703
CVE: CVE-2016-4032
Published: 2017-04-13
Description: Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices do not block AT+USBDEBUG and AT+WIFIVALUE, which allows attackers to modify Android settings by leveraging AT access, aka SVE-2016-5301.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/97650; https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0004; http://www.securityfocus.com/bid/97650
CVE: CVE-2017-7853
Published: 2017-04-13
Description: In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msg_osip_body_parse() function defined in osipparser2/osip_message_parse.c, resulting in a remote DoS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3879; http://www.securityfocus.com/bid/97644; https://savannah.gnu.org/support/index.php?109265
CVE: CVE-2017-7854
Published: 2017-04-13
Description: The consume_init_expr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Web Assembly file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97648; https://github.com/radare/radare2/commit/d2632f6483a3ceb5d8e0a5fb11142c51c43978b4; https://github.com/radare/radare2/issues/7265
CVE: CVE-2012-1301
Published: 2017-04-13
Description: The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/archive/1/522218; http://www.securityfocus.com/bid/52912; https://www.trustmatta.com/advisories/MATTA-2012-001.txt
CVE: CVE-2013-6648
Published: 2017-04-13
Description: SkRegion::setPath in Skia allows remote attackers to cause a denial of service (crash).
CVSS Score: 7.5 (HIGH)
References: https://bugs.chromium.org/p/chromium/issues/detail?id=330293; https://skia.googlesource.com/skia/+/73be1fc; https://bugs.chromium.org/p/chromium/issues/detail?id=330293
CVE: CVE-2013-6662
Published: 2017-04-13
Description: Google Chrome caches TLS sessions before certificate validation occurs.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295
References: https://bugs.chromium.org/p/chromium/issues/detail?id=305220; https://bugs.chromium.org/p/chromium/issues/detail?id=305220
CVE: CVE-2014-3887
Published: 2017-04-13
Description: Cross-site scripting (XSS) vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.  NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-4713.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ioplaza.jp/shop/contents/rdiskmanual.aspx; https://jvn.jp/en/jp/JVN74608669/index.html; http://www.ioplaza.jp/shop/contents/rdiskmanual.aspx
CVE: CVE-2015-2947
Published: 2017-04-13
Description: KanColleViewer versions 3.8.1 and earlier operates as an open proxy which allows remote attackers to trigger outbound network traffic.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-441
References: http://grabacr.net/kancolleviewer; https://jvn.jp/vu/JVNVU98282440/; http://grabacr.net/kancolleviewer
CVE: CVE-2015-4646
Published: 2017-04-13
Description: (1) unsquash-1.c, (2) unsquash-2.c, (3) unsquash-3.c, and (4) unsquash-4.c in Squashfs and sasquatch allow remote attackers to cause a denial of service (application crash) via a crafted input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://seclists.org/oss-sec/2015/q2/756; http://www.securityfocus.com/bid/75272; https://github.com/plougher/squashfs-tools/commit/f95864afe8833fe3ad782d714b41378e860977b1
CVE: CVE-2015-8345
Published: 2017-04-13
Description: The eepro100 emulator in QEMU qemu-kvm blank allows local guest users to cause a denial of service (application crash and infinite loop) via vectors involving the command block list.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: http://www.debian.org/security/2016/dsa-3469; http://www.debian.org/security/2016/dsa-3470; http://www.debian.org/security/2016/dsa-3471
CVE: CVE-2015-8567
Published: 2017-04-13
Description: Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).
CVSS Score: 7.7 (HIGH)
CWE: CWE-401
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176503.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176558.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175967.html
CVE: CVE-2015-8619
Published: 2017-04-13
Description: The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service (out-of-bounds write and application crash).
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.debian.org/security/2016/dsa-3471; http://www.openwall.com/lists/oss-security/2015/12/23/1; http://www.securityfocus.com/bid/79668
CVE: CVE-2016-1155
Published: 2017-04-13
Description: HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0 allows remote attackers to execute arbitrary scripts or set arbitrary values in cookies.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: http://www.securityfocus.com/bid/97662; https://android.googlesource.com/platform/external/okhttp/+/71b9f47b26fb57ac3e436a19519c6e3ec70e86eb; https://jvn.jp/vu/JVNVU99757346/index.html
CVE: CVE-2016-4898
Published: 2017-04-13
Description: The datamover module in the Linux version of NovaBACKUP DataCenter before 09.06.03.0353 is vulnerable to remote command execution via unspecified attack vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2016/haavoittuvuus-2016-134.html; https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2016/haavoittuvuus-2016-134.html
CVE: CVE-2016-4899
Published: 2017-04-13
Description: The datamover module in the Linux version of NovaBACKUP DataCenter before 09.06.03.0353 is vulnerable to remote command execution via unspecified attack vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2016/haavoittuvuus-2016-134.html; https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2016/haavoittuvuus-2016-134.html
CVE: CVE-2016-7834
Published: 2017-04-13
Description: SONY SNC-CH115, SNC-CH120, SNC-CH160, SNC-CH220, SNC-CH260, SNC-DH120, SNC-DH120T, SNC-DH160, SNC-DH220, SNC-DH220T, SNC-DH260, SNC-EB520, SNC-EM520, SNC-EM521, SNC-ZB550, SNC-ZM550, SNC-ZM551, SNC-EP550, SNC-EP580, SNC-ER550, SNC-ER550C, SNC-ER580, SNC-ER585, SNC-ER585H, SNC-ZP550, SNC-ZR550, SNC-EP520, SNC-EP521, SNC-ER520, SNC-ER521, SNC-ER521C network cameras with firmware before Ver.1.86.00 and SONY SNC-CX600, SNC-CX600W, SNC-EB600, SNC-EB600B, SNC-EB602R, SNC-EB630, SNC-EB630B, SNC-EB632R, SNC-EM600, SNC-EM601, SNC-EM602R, SNC-EM602RC, SNC-EM630, SNC-EM631, SNC-EM632R, SNC-EM632RC, SNC-VB600, SNC-VB600B, SNC-VB600B5, SNC-VB630, SNC-VB6305, SNC-VB6307, SNC-VB632D, SNC-VB635, SNC-VM600, SNC-VM600B, SNC-VM600B5, SNC-VM601, SNC-VM601B, SNC-VM602R, SNC-VM630, SNC-VM6305, SNC-VM6307, SNC-VM631, SNC-VM632R, SNC-WR600, SNC-WR602, SNC-WR602C, SNC-WR630, SNC-WR632, SNC-WR632C, SNC-XM631, SNC-XM632, SNC-XM636, SNC-XM637, SNC-VB600L, SNC-VM600L, SNC-XM631L, SNC-WR602CL network cameras with firmware before Ver.2.7.2 are prone to sensitive information disclosure. This may allow an attacker on the same local network segment to login to the device with administrative privileges and perform operations on the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: https://jvn.jp/en/vu/JVNVU96435227/index.html; https://www.sony.co.uk/pro/article/sony-new-firmware-for-network-cameras; https://jvn.jp/en/vu/JVNVU96435227/index.html
CVE: CVE-2017-7725
Published: 2017-04-13
Description: concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "canonical" URL on installation of concrete5 using the "Advanced Options" settings. Remote attackers can make a GET request with any domain name in the Host header; this is stored and allows for arbitrary domains to be set for certain links displayed to subsequent visitors, potentially an XSS vector.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://hyp3rlinx.altervista.org/advisories/CONCRETE5-v8.1.0-HOST-HEADER-INJECTION.txt; http://www.securityfocus.com/bid/97649; https://hackerone.com/reports/148300
CVE: CVE-2016-6818
Published: 2017-04-13
Description: SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cause a denial of service (data deletion), or launch administrative operations or possibly OS commands via a crafted SQL query. The vendor response is SAP Security Note 2361633.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/97661; https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-january-2017/; http://www.securityfocus.com/bid/97661
CVE: CVE-2016-8712
Published: 2017-04-13
Description: An exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless AP running firmware 1.1. The device uses one nonce for all session authentication requests and only changes the nonce if the web application has been idle for 300 seconds.
CVSS Score: 8.1 (HIGH)
CWE: CWE-613
References: http://www.talosintelligence.com/reports/TALOS-2016-0225/; http://www.talosintelligence.com/reports/TALOS-2016-0225/
CVE: CVE-2016-8720
Published: 2017-04-13
Description: An exploitable HTTP Header Injection vulnerability exists in the Web Application functionality of the Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted HTTP request can inject a payload in the bkpath parameter which will be copied in to Location header of the HTTP response.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-74
References: http://www.talosintelligence.com/reports/TALOS-2016-0234/; http://www.talosintelligence.com/reports/TALOS-2016-0234/
CVE: CVE-2016-8722
Published: 2017-04-13
Description: An exploitable Information Disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client. Retrieving a specific URL without authentication can reveal sensitive information to an attacker.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.talosintelligence.com/reports/TALOS-2016-0236/; http://www.talosintelligence.com/reports/TALOS-2016-0236/
CVE: CVE-2016-8723
Published: 2017-04-13
Description: An exploitable null pointer dereference exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. Any HTTP GET request not preceded by an '/' will cause a segmentation fault in the web server. An attacker can send any of a multitude of potentially unexpected HTTP get requests to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.talosintelligence.com/reports/TALOS-2016-0237/; http://www.talosintelligence.com/reports/TALOS-2016-0237/
CVE: CVE-2016-8724
Published: 2017-04-13
Description: An exploitable information disclosure vulnerability exists in the serviceAgent functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted TCP query will allow an attacker to retrieve potentially sensitive information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.talosintelligence.com/reports/TALOS-2016-0238/; http://www.talosintelligence.com/reports/TALOS-2016-0238/
CVE: CVE-2016-8725
Published: 2017-04-13
Description: An exploitable information disclosure vulnerability exists in the Web Application functionality of the Moxa AWK-3131A wireless access point running firmware 1.1. Retrieving a specific URL without authentication can reveal sensitive information to an attacker.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.talosintelligence.com/reports/TALOS-2016-0239/; http://www.talosintelligence.com/reports/TALOS-2016-0239/
CVE: CVE-2016-8726
Published: 2017-04-13
Description: An exploitable null pointer dereference vulnerability exists in the Web Application /forms/web_runScript iw_filename functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. An HTTP POST request with a blank line in the header will cause a segmentation fault in the web server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.talosintelligence.com/reports/TALOS-2016-0240/; http://www.talosintelligence.com/reports/TALOS-2016-0240/