deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-17925
Published: 2017-12-27
Description: PHP Scripts Mall Professional Service Script has XSS via the admin/general_settingupd.php website_title parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md
CVE: CVE-2017-17926
Published: 2017-12-27
Description: PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md
CVE: CVE-2017-17927
Published: 2017-12-27
Description: PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATH_INFO to service-list/category/.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md
CVE: CVE-2017-17928
Published: 2017-12-27
Description: PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md
CVE: CVE-2017-17929
Published: 2017-12-27
Description: PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md
CVE: CVE-2017-17930
Published: 2017-12-27
Description: PHP Scripts Mall Professional Service Script has CSRF via admin/general_settingupd.php, as demonstrated by modifying a setting in the user panel.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md
CVE: CVE-2017-17931
Published: 2017-12-27
Description: PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Resume%20Clone%20Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Resume%20Clone%20Script.md
CVE: CVE-2017-17934
Published: 2017-12-27
Description: ImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage calls.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/102314; https://github.com/ImageMagick/ImageMagick/issues/920; https://usn.ubuntu.com/3681-1/
CVE: CVE-2017-17935
Published: 2017-12-27
Description: The File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet that triggers the attempted processing of an empty line.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102311; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14295; https://code.wireshark.org/review/#/c/24997/
CVE: CVE-2017-7152
Published: 2017-12-27
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail Message Framework" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVSS Score: 4.3 (MEDIUM)
References: http://seclists.org/fulldisclosure/2019/Oct/49; http://seclists.org/fulldisclosure/2019/Oct/54; http://seclists.org/fulldisclosure/2019/Oct/56
CVE: CVE-2017-7154
Published: 2017-12-27
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. The issue involves the "Kernel" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (system crash).
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/103134; https://support.apple.com/HT208327; https://support.apple.com/HT208331
CVE: CVE-2017-7155
Published: 2017-12-27
Description: An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/HT208331; https://support.apple.com/HT208331
CVE: CVE-2017-7156
Published: 2017-12-27
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102181; http://www.securitytracker.com/id/1040012; http://www.securitytracker.com/id/1040013
CVE: CVE-2017-7157
Published: 2017-12-27
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102181; http://www.securitytracker.com/id/1040012; http://www.securitytracker.com/id/1040013
CVE: CVE-2017-7158
Published: 2017-12-27
Description: An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Screen Sharing Server" component. It allows attackers to obtain root privileges for reading files by leveraging screen-sharing access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://support.apple.com/HT208331; https://support.apple.com/HT208331
CVE: CVE-2017-7159
Published: 2017-12-27
Description: An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "IOAcceleratorFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/HT208331; https://support.apple.com/HT208331
CVE: CVE-2017-7160
Published: 2017-12-27
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/HT208324; https://support.apple.com/HT208326; https://support.apple.com/HT208327
CVE: CVE-2017-7162
Published: 2017-12-27
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/HT208325; https://support.apple.com/HT208327; https://support.apple.com/HT208331
CVE: CVE-2017-7163
Published: 2017-12-27
Description: An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/HT208331; https://support.apple.com/HT208331
CVE: CVE-2017-9944
Published: 2017-12-27
Description: A vulnerability has been identified in Siemens 7KT PAC1200 data manager (7KT1260) in all versions < V2.03. The integrated web server (port 80/tcp) of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288, CWE-269
References: http://www.securityfocus.com/bid/101184; https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-971654.pdf; http://www.securityfocus.com/bid/101184
CVE: CVE-2016-6914
Published: 2017-12-27
Description: Ubiquiti UniFi Video before 3.8.0 for Windows uses weak permissions for the installation directory, which allows local users to gain SYSTEM privileges via a Trojan horse taskkill.exe file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: http://packetstormsecurity.com/files/145533/Ubiquiti-UniFi-Video-3.7.3-Windows-Local-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2017/Dec/83; http://www.securityfocus.com/bid/102278
CVE: CVE-2017-13056
Published: 2017-12-27
Description: The launchURL function in PDF-XChange Viewer 2.5 (Build 314.0) might allow remote attackers to execute arbitrary code via a crafted PDF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/143912/PDF-XChange-Viewer-2.5-Build-314.0-Code-Execution.html; http://packetstormsecurity.com/files/143912/PDF-XChange-Viewer-2.5-Build-314.0-Code-Execution.html
CVE: CVE-2017-16768
Published: 2017-12-27
Description: Cross-site scripting (XSS) vulnerability in User Policy editor in Synology MailPlus Server before 1.4.0-0415 allows remote authenticated users to inject arbitrary HTML via the name parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.synology.com/en-global/support/security/Synology_SA_17_81; https://www.synology.com/en-global/support/security/Synology_SA_17_81
CVE: CVE-2015-6237
Published: 2017-12-27
Description: The RPC service in Tripwire (formerly nCircle) IP360 VnE Manager 7.2.2 before 7.2.6 allows remote attackers to bypass authentication and (1) enumerate users, (2) reset passwords, or (3) manipulate IP filter restrictions via crafted "privileged commands."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://seclists.org/fulldisclosure/2015/Oct/20; http://www.securityfocus.com/archive/1/536609/100/0/threaded; http://seclists.org/fulldisclosure/2015/Oct/20
CVE: CVE-2015-7324
Published: 2017-12-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in helpers/comment.php in the StackIdeas Komento (com_komento) component before 2.0.5 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) img or (2) url tag of a new comment.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2015/Oct/11; https://stackideas.com/changelog/komento?version=2.0.5; https://www.davidsopas.com/komento-joomla-component-persistent-xss/
CVE: CVE-2015-7666
Published: 2017-12-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in the (1) cp_updateMessageItem and (2) cp_deleteMessageItem functions in cp_ppp_admin_int_message_list.inc.php in the Payment Form for PayPal Pro plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the cal parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/536602/100/0/threaded; https://plugins.trac.wordpress.org/changeset/1254452/payment-form-for-paypal-pro; https://wordpress.org/plugins/payment-form-for-paypal-pro/#developers
CVE: CVE-2015-7667
Published: 2017-12-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) templates/admanagement/admanagement.php and (2) templates/adspot/adspot.php in the ResAds plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/536601/100/0/threaded; https://wordpress.org/plugins/resads/#developers; https://wpvulndb.com/vulnerabilities/8204
CVE: CVE-2015-7668
Published: 2017-12-27
Description: Cross-site scripting (XSS) vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map_id parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/536598/100/0/threaded; https://wordpress.org/plugins/easy2map/#developers; https://wpvulndb.com/vulnerabilities/8205
CVE: CVE-2015-7669
Published: 2017-12-27
Description: Multiple directory traversal vulnerabilities in (1) includes/MapImportCSV2.php and (2) includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for WordPress allow remote attackers to include and execute arbitrary files via the csvfile parameter related to "upload file functionality."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://www.securityfocus.com/archive/1/536597/100/0/threaded; https://wordpress.org/plugins/easy2map/#developers; https://wpvulndb.com/vulnerabilities/8206
CVE: CVE-2017-11695
Published: 2017-12-27
Description: Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.html; http://seclists.org/fulldisclosure/2017/Aug/17; http://www.geeknik.net/9brdqk6xu
CVE: CVE-2017-11696
Published: 2017-12-27
Description: Heap-based buffer overflow in the __hash_open function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.html; http://seclists.org/fulldisclosure/2017/Aug/17; http://www.geeknik.net/9brdqk6xu
CVE: CVE-2017-11697
Published: 2017-12-27
Description: The __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context-dependent attackers to cause a denial of service (floating point exception and crash) via a crafted cert8.db file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.html; http://seclists.org/fulldisclosure/2017/Aug/17; http://www.geeknik.net/9brdqk6xu
CVE: CVE-2017-11698
Published: 2017-12-27
Description: Heap-based buffer overflow in the __get_page function in lib/dbm/src/h_page.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.html; http://seclists.org/fulldisclosure/2017/Aug/17; http://www.geeknik.net/9brdqk6xu
CVE: CVE-2017-9608
Published: 2017-12-27
Description: The dnxhd decoder in FFmpeg before 3.2.6, and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted mov file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2017/08/14/1; http://www.openwall.com/lists/oss-security/2017/08/15/8; http://www.securityfocus.com/bid/100348
CVE: CVE-2014-8389
Published: 2017-12-28
Description: cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-3025 with firmware 1.81 21.08.2014, AirLive WL-2000CAM with firmware LM.1.6.18 14.10.2011, and AirLive POE-200CAM v2 with firmware LM.1.6.17.01 uses hard-coded credentials in the embedded Boa web server, which allows remote attackers to obtain user credentials via crafted HTTP requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/132585/AirLive-Remote-Command-Injection.html; http://seclists.org/fulldisclosure/2015/Jul/29; http://www.securityfocus.com/archive/1/535938/100/0/threaded
CVE: CVE-2015-3637
Published: 2017-12-28
Description: SQL injection vulnerability in phpMyBackupPro when run in multi-user mode before 2.5 allows remote attackers to execute arbitrary SQL commands via the username and password parameters.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: http://www.openwall.com/lists/oss-security/2015/05/04/4; http://www.securitytracker.com/id/1032250; http://www.openwall.com/lists/oss-security/2015/05/04/4
CVE: CVE-2015-7889
Published: 2017-12-28
Description: The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions for the com.samsung.android.email.intent.action.QUICK_REPLY_BACKGROUND service action, which might allow remote attackers with knowledge of the local email address to obtain sensitive information via a crafted application that sends a crafted intent.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-275
References: http://packetstormsecurity.com/files/134105/Samsung-SecEmailComposer-QUICK_REPLY_BACKGROUND-Permission-Weakness.html; http://www.securityfocus.com/bid/77339; https://bugs.chromium.org/p/project-zero/issues/detail?id=490&redir=1
CVE: CVE-2017-10910
Published: 2017-12-28
Description: MQTT.js 2.x.x prior to 2.15.0 issue in handling PUBLISH tickets may lead to an attacker causing a denial-of-service condition.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/mqttjs/MQTT.js/commit/403ba53b838f2d319a0c0505a045fe00239e9923; https://github.com/mqttjs/MQTT.js/releases/tag/v2.15.0; https://jvn.jp/en/jp/JVN45494523/index.html
CVE: CVE-2017-17932
Published: 2017-12-28
Description: A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to execute arbitrary code and/or cause denial of service on the victim machine/computer via a long string to TCP port 888.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://www.exploit-db.com/exploits/43406/; https://www.exploit-db.com/exploits/43407/; https://www.exploit-db.com/exploits/43523/
CVE: CVE-2017-17936
Published: 2017-12-28
Description: Vanguard Marketplace Digital Products PHP has CSRF via /search.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Vanguard.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Vanguard.md
CVE: CVE-2017-17937
Published: 2017-12-28
Description: Vanguard Marketplace Digital Products PHP has XSS via the phps_query parameter to /search.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Vanguard.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Vanguard.md
CVE: CVE-2017-17938
Published: 2017-12-28
Description: PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Single-Theater-Booking.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Single-Theater-Booking.md
CVE: CVE-2017-17939
Published: 2017-12-28
Description: PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Single-Theater-Booking.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Single-Theater-Booking.md
CVE: CVE-2017-17940
Published: 2017-12-28
Description: PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Single-Theater-Booking.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Single-Theater-Booking.md
CVE: CVE-2017-17941
Published: 2017-12-28
Description: PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Single-Theater-Booking.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Single-Theater-Booking.md
CVE: CVE-2017-17942
Published: 2017-12-28
Description: In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://bugzilla.maptools.org/show_bug.cgi?id=2767; http://www.securityfocus.com/bid/102312; http://bugzilla.maptools.org/show_bug.cgi?id=2767
CVE: CVE-2017-15711
Published: 2017-12-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-15886
Published: 2017-12-28
Description: Server-side request forgery (SSRF) vulnerability in Link Preview in Synology Chat before 2.0.0-1124 allows remote authenticated users to download arbitrary local files via a crafted URI.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://www.synology.com/en-global/support/security/Synology_SA_17_78; https://www.synology.com/en-global/support/security/Synology_SA_17_78
CVE: CVE-2017-15892
Published: 2017-12-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbitrary web script or HTML via (1) COMMAND, (2) COMMANDS INSTRUCTION, or (3) DESCRIPTION parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.synology.com/en-global/support/security/Synology_SA_17_78; https://www.synology.com/en-global/support/security/Synology_SA_17_78
CVE: CVE-2017-5641
Published: 2017-12-28
Description: Previous versions of Apache Flex BlazeDS (4.7.2 and earlier) did not restrict which types were allowed for AMF(X) object deserialization by default. During the deserialization process code is executed that for several known types has undesired side-effects. Other, unknown types may also exhibit such behaviors. One vector in the Java standard library exists that allows an attacker to trigger possibly further exploitable Java deserialization of untrusted data. Other known vectors in third party libraries can be used to trigger remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://mail-archives.apache.org/mod_mbox/flex-dev/201703.mbox/%3C6B86C8D0-6E36-48F5-AC81-4AB3978F6746%40c-ware.de%3E; http://www.securityfocus.com/bid/97383; http://www.securitytracker.com/id/1038273
CVE: CVE-2017-15667
Published: 2017-12-28
Description: In Flexense SysGauge Server 3.6.18, the Control Protocol suffers from a denial of service. The attack vector is a crafted SERVER_GET_INFO packet sent to control port 9221.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.exploit-db.com/exploits/43403/; https://www.exploit-db.com/exploits/43403/