deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-11858
Published: 2017-11-15
Description: ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how Microsoft browsers handle objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101716; http://www.securitytracker.com/id/1039780; http://www.securitytracker.com/id/1039781
CVE: CVE-2017-11861
Published: 2017-11-15
Description: Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101723; http://www.securitytracker.com/id/1039780; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11861
CVE: CVE-2017-11862
Published: 2017-11-15
Description: ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101724; http://www.securitytracker.com/id/1039780; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11862
CVE: CVE-2017-11863
Published: 2017-11-15
Description: Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to trick a user into loading a page containing malicious content, due to how the Edge Content Security Policy (CSP) validates documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11872 and CVE-2017-11874.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/101748; http://www.securitytracker.com/id/1039801; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11863
CVE: CVE-2017-11866
Published: 2017-11-15
Description: ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101732; http://www.securitytracker.com/id/1039780; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11866
CVE: CVE-2017-11869
Published: 2017-11-15
Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how Microsoft browsers handle objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101742; http://www.securitytracker.com/id/1039780; http://www.securitytracker.com/id/1039781
CVE: CVE-2017-11870
Published: 2017-11-15
Description: ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11871, and CVE-2017-11873.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101731; http://www.securitytracker.com/id/1039780; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11870
CVE: CVE-2017-11871
Published: 2017-11-15
Description: ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, and CVE-2017-11873.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101730; http://www.securitytracker.com/id/1039780; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11871
CVE: CVE-2017-11872
Published: 2017-11-15
Description: Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to force the browser to send data that would otherwise be restricted to a destination website of the attacker's choice, due to how Microsoft Edge handles redirect requests, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11863 and CVE-2017-11874.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/101749; http://www.securitytracker.com/id/1039801; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11872
CVE: CVE-2017-11873
Published: 2017-11-15
Description: ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, and CVE-2017-11871.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101728; http://www.securitytracker.com/id/1039780; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11873
CVE: CVE-2017-11874
Published: 2017-11-15
Description: Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard (CFG) to run arbitrary code on a target system, due to how Microsoft Edge handles accessing memory in code compiled by the Edge Just-In-Time (JIT) compiler, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11863 and CVE-2017-11872.
CVSS Score: 3.1 (LOW)
References: http://www.securityfocus.com/bid/101750; http://www.securitytracker.com/id/1039801; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11874
CVE: CVE-2017-11876
Published: 2017-11-15
Description: Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read content that they are not authorized to read, use the victim's identity to take actions on the web application on behalf of the victim, such as change permissions and delete content, and inject malicious content in the browser of the victim, aka "Microsoft Project Server Elevation of Privilege Vulnerability".
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/101754; http://www.securitytracker.com/id/1039788; http://www.securitytracker.com/id/1039789
CVE: CVE-2017-11877
Published: 2017-11-15
Description: Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Viewer 2007 Service Pack 3, and Microsoft Excel 2016 for Mac allow a security feature bypass by not enforcing macro settings on an Excel document, aka "Microsoft Excel Security Feature Bypass Vulnerability".
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/101747; http://www.securitytracker.com/id/1039783; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11877
CVE: CVE-2017-11878
Published: 2017-11-15
Description: Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, and Microsoft Excel Viewer 2007 Service Pack 3 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Excel Memory Corruption Vulnerability".
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101756; http://www.securitytracker.com/id/1039783; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11878
CVE: CVE-2017-11879
Published: 2017-11-15
Description: ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".
CVSS Score: 8.8 (HIGH)
CWE: CWE-601
References: http://www.securityfocus.com/bid/101713; http://www.securitytracker.com/id/1039793; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11879
CVE: CVE-2017-11880
Published: 2017-11-15
Description: Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to run a specially crafted application and obtain information to further compromise the user's system due to the Windows kernel improperly initializing objects in memory, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11831.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/101755; http://www.securitytracker.com/id/1039782; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11880
CVE: CVE-2017-11882
Published: 2017-11-15
Description: Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11884.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: http://reversingminds-blog.logdown.com/posts/3907313-fileless-attack-in-word-without-macros-cve-2017-11882; http://www.securityfocus.com/bid/101757; http://www.securitytracker.com/id/1039783
CVE: CVE-2017-11883
Published: 2017-11-15
Description: .NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka ".NET CORE Denial Of Service Vulnerability".
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/101835; http://www.securitytracker.com/id/1039793; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11883
CVE: CVE-2017-11884
Published: 2017-11-15
Description: Microsoft Excel 2016 Click-to-Run (C2R) allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11882.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101766; http://www.securitytracker.com/id/1039783; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11884
CVE: CVE-2017-16821
Published: 2017-11-15
Description: b3log Symphony (aka Sym) 2.2.0 has XSS in processor/AdminProcessor.java in the admin console, as demonstrated by a crafted X-Forwarded-For HTTP header that is mishandled during display of a client IP address in /admin/user/userid.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/b3log/symphony/issues/503; https://github.com/b3log/symphony/issues/503
CVE: CVE-2017-8700
Published: 2017-11-15
Description: ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Information Disclosure Vulnerability".
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/101712; http://www.securitytracker.com/id/1039793; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8700
CVE: CVE-2017-12737
Published: 2017-11-15
Description: An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server (port 80/tcp) of the affected devices could allow unauthenticated remote attackers to obtain sensitive device information over the network.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/101884; https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-164516.pdf; http://www.securityfocus.com/bid/101884
CVE: CVE-2017-12738
Published: 2017-11-15
Description: An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server (port 80/tcp) of the affected devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into clicking on a malicious link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/101884; https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-164516.pdf; http://www.securityfocus.com/bid/101884
CVE: CVE-2017-12739
Published: 2017-11-15
Description: An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server (port 80/tcp) of the affected devices could allow unauthenticated remote attackers to execute arbitrary code on the affected device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1188
References: http://www.securityfocus.com/bid/101884; https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-164516.pdf; http://www.securityfocus.com/bid/101884
CVE: CVE-2017-16826
Published: 2017-11-15
Description: The coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted PE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://security.gentoo.org/glsa/201811-17; https://sourceware.org/bugzilla/show_bug.cgi?id=22376; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=a67d66eb97e7613a38ffe6622d837303b3ecd31d
CVE: CVE-2017-16827
Published: 2017-11-15
Description: The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (slurp_symtab invalid free and application crash) or possibly have unspecified other impact via a crafted ELF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://security.gentoo.org/glsa/201811-17; https://sourceware.org/bugzilla/show_bug.cgi?id=22306; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=0301ce1486b1450f219202677f30d0fa97335419
CVE: CVE-2017-16828
Published: 2017-11-15
Description: The display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (integer overflow and heap-based buffer over-read, and application crash) or possibly have unspecified other impact via a crafted ELF file, related to print_debug_frame.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://security.gentoo.org/glsa/201811-17; https://sourceware.org/bugzilla/show_bug.cgi?id=22386; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=bf59c5d5f4f5b8b4da1f5f605cfa546f8029b43d
CVE: CVE-2017-16829
Published: 2017-11-15
Description: The _bfd_elf_parse_gnu_properties function in elf-properties.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not prevent negative pointers, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a crafted ELF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://security.gentoo.org/glsa/201811-17; https://sourceware.org/bugzilla/show_bug.cgi?id=22307; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=cf54ebff3b[PII_REDACTED]fd9c0128a9b255578163
CVE: CVE-2017-16830
Published: 2017-11-15
Description: The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted ELF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/101941; https://security.gentoo.org/glsa/201811-17; https://sourceware.org/bugzilla/show_bug.cgi?id=22384
CVE: CVE-2017-16831
Published: 2017-11-15
Description: coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate the symbol count, which allows remote attackers to cause a denial of service (integer overflow and application crash, or excessive memory allocation) or possibly have unspecified other impact via a crafted PE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://security.gentoo.org/glsa/201811-17; https://sourceware.org/bugzilla/show_bug.cgi?id=22385; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=6cee897971d4d7cd37d2a686bb6d2aa3e759c8ca
CVE: CVE-2017-16832
Published: 2017-11-15
Description: The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate size and offset values in the data dictionary, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted PE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://security.gentoo.org/glsa/201811-17; https://sourceware.org/bugzilla/show_bug.cgi?id=22373; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=0bb6961f18b8e832d88b490d421ca56cea16c45b
CVE: CVE-2017-7851
Published: 2017-11-15
Description: D-Link DCS-936L devices with firmware before 1.05.07 have an inadequate CSRF protection mechanism that requires the device's IP address to be a substring of the HTTP Referer header.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: ftp://ftp2.dlink.com/PRODUCTS/DCS-936L/REVA/BETA/DCS-936L_REVA_RELEASE_NOTES_v1.05.07_EN.pdf; https://www.qualys.com/2017/03/26/qsa-2017-03-26/qsa-2017-03-26.pdf; ftp://ftp2.dlink.com/PRODUCTS/DCS-936L/REVA/BETA/DCS-936L_REVA_RELEASE_NOTES_v1.05.07_EN.pdf
CVE: CVE-2017-8808
Published: 2017-11-15
Description: MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has XSS when the $wgShowExceptionDetails setting is false and the browser sends non-standard URL escaping.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1039812; https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html; https://www.debian.org/security/2017/dsa-4036
CVE: CVE-2017-8809
Published: 2017-11-15
Description: api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: http://www.securitytracker.com/id/1039812; https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html; https://www.debian.org/security/2017/dsa-4036
CVE: CVE-2017-8810
Published: 2017-11-15
Description: MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2, when a private wiki is configured, provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account names and conduct brute-force attacks via a series of requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securitytracker.com/id/1039812; https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html; https://www.debian.org/security/2017/dsa-4036
CVE: CVE-2017-8811
Published: 2017-11-15
Description: The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: http://www.securitytracker.com/id/1039812; https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html; https://www.debian.org/security/2017/dsa-4036
CVE: CVE-2017-8812
Published: 2017-11-15
Description: MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject > (greater than) characters via the id attribute of a headline.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securitytracker.com/id/1039812; https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html; https://www.debian.org/security/2017/dsa-4036
CVE: CVE-2017-8814
Published: 2017-11-15
Description: The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to replace text inside tags via a rule definition followed by "a lot of junk."
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securitytracker.com/id/1039812; https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html; https://www.debian.org/security/2017/dsa-4036