deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-2809
Published: 2017-09-14
Description: An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution. An attacker can insert python into the vault to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/100824; https://github.com/tomoh1r/ansible-vault/blob/v1.0.5/CHANGES.txt; https://github.com/tomoh1r/ansible-vault/commit/3f8f659ef443ab870bb19f95d[PII_REDACTED]8ae04
CVE: CVE-2017-14483
Published: 2017-09-15
Description: flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat /pathname`" command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-362
References: https://bugs.gentoo.org/631020; https://bugs.gentoo.org/631020
CVE: CVE-2017-14484
Published: 2017-09-15
Description: The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search (GIMPS) allows local users to gain privileges by creating a hard link under /var/lib/gimps, because an unsafe "chown -R" command is executed.
CVSS Score: 7.3 (HIGH)
CWE: CWE-269
References: https://bugs.gentoo.org/show_bug.cgi?id=603408; https://bugs.gentoo.org/show_bug.cgi?id=603408
CVE: CVE-2017-14489
Published: 2017-09-15
Description: The iscsi_if_rx function in drivers/scsi/scsi_transport_iscsi.c in the Linux kernel through 4.13.2 allows local users to cause a denial of service (panic) by leveraging incorrect length validation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.debian.org/security/2017/dsa-3981; http://www.securityfocus.com/bid/101011; https://bugzilla.redhat.com/show_bug.cgi?id=1490421
CVE: CVE-2017-14340
Published: 2017-09-15
Description: The XFS_IS_REALTIME_INODE macro in fs/xfs/xfs_linux.h in the Linux kernel before 4.13.2 does not verify that a filesystem has a realtime device, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via vectors related to setting an RHINHERIT flag on a directory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b31ff3cdf540110da4572e3e29bd172087af65cc; http://seclists.org/oss-sec/2017/q3/436; http://www.debian.org/security/2017/dsa-3981
CVE: CVE-2017-4924
Published: 2017-09-15
Description: VMware ESXi (ESXi 6.5 without patch ESXi[PII_REDACTED]01-SG), Workstation (12.x before 12.5.7) and Fusion (8.x before 8.5.8) contain an out-of-bounds write vulnerability in SVGA device. This issue may allow a guest to execute code on the host.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/100843; http://www.securitytracker.com/id/1039365; http://www.securitytracker.com/id/1039366
CVE: CVE-2017-4925
Published: 2017-09-15
Description: VMware ESXi 6.5 without patch ESXi[PII_REDACTED]01-SG, ESXi 6.0 without patch ESXi[PII_REDACTED]01-SG, ESXi 5.5 without patch ESXi[PII_REDACTED]01-SG, Workstation (12.x before 12.5.3), Fusion (8.x before 8.5.4) contain a NULL pointer dereference vulnerability. This issue occurs when handling guest RPC requests. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/100842; http://www.securitytracker.com/id/1039367; http://www.securitytracker.com/id/1039368
CVE: CVE-2017-4926
Published: 2017-09-15
Description: VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker with VC user privileges can inject malicious java-scripts which will get executed when other VC users access the page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/100844; http://www.securitytracker.com/id/1039364; https://www.vmware.com/security/advisories/VMSA-2017-0015.html
CVE: CVE-2015-0164
Published: 2017-09-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Notes: none
CVE: CVE-2015-0165
Published: 2017-09-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Notes: none
CVE: CVE-2015-0166
Published: 2017-09-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Notes: none
CVE: CVE-2017-10813
Published: 2017-09-15
Description: CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: http://www.corega.jp/support/security/20170908_wlr300nm.htm; https://jvn.jp/en/jp/JVN00719891/index.html; http://www.corega.jp/support/security/20170908_wlr300nm.htm
CVE: CVE-2017-10814
Published: 2017-09-15
Description: Buffer overflow in CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary code via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.corega.jp/support/security/20170908_wlr300nm.htm; https://jvn.jp/en/jp/JVN00719891/index.html; http://www.corega.jp/support/security/20170908_wlr300nm.htm
CVE: CVE-2017-10845
Published: 2017-09-15
Description: Wi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the device with administrative privileges and perform unintended operations through a backdoor account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255
References: https://jvn.jp/en//jp/JVN68922465/index.html; https://www.nttdocomo.co.jp/info/notice/page/170710_01_m.html; https://jvn.jp/en//jp/JVN68922465/index.html
CVE: CVE-2017-10846
Published: 2017-09-15
Description: Wi-Fi STATION L-02F Software version V10b and earlier allows remote attackers to bypass access restrictions to obtain information on device settings via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://jvn.jp/en/jp/JVN03044183/index.html; https://www.nttdocomo.co.jp/info/notice/page/170710_01_m.html; https://jvn.jp/en/jp/JVN03044183/index.html
CVE: CVE-2017-10855
Published: 2017-09-15
Description: Untrusted search path vulnerability in FENCE-Explorer for Windows V8.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.fujitsu.com/jp/group/bsc/services/fence/info[PII_REDACTED].html; https://jvn.jp/en/jp/JVN57205588/index.html; http://www.fujitsu.com/jp/group/bsc/services/fence/info[PII_REDACTED].html
CVE: CVE-2017-10856
Published: 2017-09-15
Description: SEIL/X 4.60 to 5.72, SEIL/B1 4.60 to 5.72, SEIL/x86 3.20 to 5.72, SEIL/BPV4 5.00 to 5.72 allows remote attackers to cause a temporary failure of the device's encrypted communications via a specially crafted packet.
CVSS Score: 3.7 (LOW)
References: http://www.seil.jp/support/security/a01811.html; https://jvn.jp/en/jp/JVN76692689/index.html; http://www.seil.jp/support/security/a01811.html
CVE: CVE-2017-10858
Published: 2017-09-15
Description: Untrusted search path vulnerability in "i-filter 6.0 install program" file version 1.0.8.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.daj.jp/cs/info/2017/0912/; https://jvn.jp/en/jp/JVN75929834/index.html; http://www.daj.jp/cs/info/2017/0912/
CVE: CVE-2017-10859
Published: 2017-09-15
Description: Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.daj.jp/cs/info/2017/0912/; https://jvn.jp/en/jp/JVN75929834/index.html; http://www.daj.jp/cs/info/2017/0912/
CVE: CVE-2017-10860
Published: 2017-09-15
Description: Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.daj.jp/cs/info/2017/0912/; http://www.securityfocus.com/bid/100916; https://jvn.jp/en/jp/JVN75929834/index.html
CVE: CVE-2017-14497
Published: 2017-09-15
Description: The tpacket_rcv function in net/packet/af_packet.c in the Linux kernel before 4.13 mishandles vnet headers, which might allow local users to cause a denial of service (buffer overflow, and disk and memory corruption) or possibly have unspecified other impact via crafted system calls.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=edbd58be15a957f6a760c4a514cd475217eb97fd; http://seclists.org/oss-sec/2017/q3/476; http://www.debian.org/security/2017/dsa-3981
CVE: CVE-2017-14498
Published: 2017-09-15
Description: SilverStripe CMS before 3.6.1 has XSS via an SVG document that is mishandled by (1) the Insert Media option in the content editor or (2) an admin/assets/add pathname, as demonstrated by the admin/pages/edit/EditorToolbar/MediaForm/field/AssetUploadField/upload URI, aka issue SS-2017-017.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.openwall.net/full-disclosure/2017/09/14/2; https://docs.silverstripe.org/en/3/changelogs/3.6.1; https://github.com/silverstripe/silverstripe-framework/commit/25b77a2ff8deabe8e8894002b9a5647eaec27b0a
CVE: CVE-2017-2299
Published: 2017-09-15
Description: Versions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to accidentally misconfigure TLS trust. If you specify the `ssl_ca` parameter but do not specify the `ssl_certs_dir` parameter, a default will be provided for the `ssl_certs_dir` that will trust certificates from any of the system-trusted certificate authorities. This did not affect FreeBSD.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://www.securityfocus.com/bid/100859; https://puppet.com/security/cve/CVE-2017-2299; http://www.securityfocus.com/bid/100859
CVE: CVE-2017-0898
Published: 2017-09-15
Description: Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a precious specifier (*) with a huge minus value. Such situation can lead to a buffer overrun, resulting in a heap memory corruption or an information disclosure from the heap.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-134, CWE-134
References: http://www.securityfocus.com/bid/100862; http://www.securitytracker.com/id/1039363; https://access.redhat.com/errata/RHSA-2017:3485
CVE: CVE-2017-9805
Published: 2017-09-15
Description: The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.
CVSS Score: 8.1 (HIGH)
CWE: CWE-502, CWE-502
References: http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9[PII_REDACTED].html; http://www.securityfocus.com/bid/100609; http://www.securitytracker.com/id/1039263
CVE: CVE-2014-7808
Published: 2017-09-15
Description: Apache Wicket before 1.5.13, 6.x before 6.19.0, and 7.x before 7.0.0-M5 make it easier for attackers to defeat a cryptographic protection mechanism and predict encrypted URLs by leveraging use of CryptoMapper as the default encryption provider.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://mail-archives.apache.org/mod_mbox/wicket-users/201502.mbox/%3CCAMomwMpLPDYezc=iFofm1R1Uq37vUFJ8VC-_ex5SU8-HAKBoRw%40mail.gmail.com%3E; https://www.smrrd.de/cve-2014-7808-apache-wicket-csrf-2014.html; http://mail-archives.apache.org/mod_mbox/wicket-users/201502.mbox/%3CCAMomwMpLPDYezc=iFofm1R1Uq37vUFJ8VC-_ex5SU8-HAKBoRw%40mail.gmail.com%3E
CVE: CVE-2014-9463
Published: 2017-09-15
Description: functions_vbseo_hook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code via the HTTP Referer header to visitormessage.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://blog.sucuri.net/2015/01/serious-vulnerability-on-vbseo.html; https://www.exploit-db.com/exploits/36232/; https://blog.sucuri.net/2015/01/serious-vulnerability-on-vbseo.html
CVE: CVE-2015-0110
Published: 2017-09-15
Description: IBM Business Process Manager (aka BPM) 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition (aka WLE) 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/73274; https://www-304.ibm.com/support/docview.wss?uid=swg21694940; http://www.securityfocus.com/bid/73274
CVE: CVE-2015-1527
Published: 2017-09-15
Description: Integer overflow in IAudioPolicyService.cpp in Android allows local users to gain privileges via a crafted application, aka Android Bug ID 19261727.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/76665; https://android.googlesource.com/platform/frameworks/av/+/6dc6c38%5E%21/; https://www.blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf
CVE: CVE-2017-9328
Published: 2017-09-15
Description: Shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before 3.0.34 leads to remote code execution as root.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://gist.github.com/hybriz/63bbe2d963e531357aca353c74dd1ad5; https://gist.github.com/hybriz/63bbe2d963e531357aca353c74dd1ad5
CVE: CVE-2017-14500
Published: 2017-09-17
Description: Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure (i.e., a podcast file) that includes shell metacharacters in its filename, related to pb_controller.cpp and queueloader.cpp, a different vulnerability than CVE-2017-12904.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://openwall.com/lists/oss-security/2017/09/16/1; http://www.debian.org/security/2017/dsa-3977; https://github.com/akrennmair/newsbeuter/commit/26f5a4350f3ab5507bb8727051c87bb04660f333
CVE: CVE-2017-14501
Published: 2017-09-17
Description: An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://bugs.debian.org/875966; https://github.com/libarchive/libarchive/issues/949; https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html
CVE: CVE-2017-14502
Published: 2017-09-17
Description: read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-193
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=573; https://bugs.debian.org/875974; https://github.com/libarchive/libarchive/commit/5562545b5562f6d12a4ef991fae158bf4ccf92b6
CVE: CVE-2017-14503
Published: 2017-09-17
Description: libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c when extracting a specially crafted lha archive, related to lha_crc16.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://access.redhat.com/errata/RHSA-2019:2298; https://access.redhat.com/errata/RHSA-2019:3698; https://bugs.debian.org/875960
CVE: CVE-2017-14243
Published: 2017-09-17
Description: An authentication bypass vulnerability on UTStar WA3002G4 ADSL Broadband Modem WA3002G4-0021.01 devices allows attackers to directly access administrative settings and obtain cleartext credentials from HTML source, as demonstrated by info.cgi, upload.cgi, backupsettings.cgi, pppoe.cgi, resetrouter.cgi, and password.cgi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.exploit-db.com/exploits/42739/; https://www.techipick.com/iball-baton-adsl2-home-router-utstar-wa3002g4-adsl-broadband-modem-authentication-bypass; https://www.exploit-db.com/exploits/42739/
CVE: CVE-2017-14244
Published: 2017-09-17
Description: An authentication bypass vulnerability on iBall Baton ADSL2+ Home Router FW_iB-LR7011A_1.0.2 devices potentially allows attackers to directly access administrative router settings by crafting URLs with a .cgi extension, as demonstrated by /info.cgi and /password.cgi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-425
References: https://www.exploit-db.com/exploits/42740/; https://www.techipick.com/iball-baton-adsl2-home-router-utstar-wa3002g4-adsl-broadband-modem-authentication-bypass; https://www.exploit-db.com/exploits/42740/
CVE: CVE-2017-14504
Published: 2017-09-17
Description: ReadPNMImage in coders/pnm.c in GraphicsMagick 1.3.26 does not ensure the correct number of colors for the XV 332 format, leading to a NULL Pointer Dereference.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=fb09ca6dd22c; http://www.securityfocus.com/bid/100877; https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html
CVE: CVE-2017-14505
Published: 2017-09-17
Description: DrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick 7.0.7-1 mishandles certain NULL arrays, which allows attackers to perform Denial of Service (NULL pointer dereference and application crash in AcquireQuantumMemory within MagickCore/memory.c) by providing a crafted Image File as input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/100882; https://github.com/ImageMagick/ImageMagick/issues/716; https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
CVE: CVE-2017-14508
Published: 2017-09-17
Description: An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 (and Sugar Community Edition 6.5.26). Several areas have been identified in the Documents and Emails module that could allow an authenticated user to perform SQL injection, as demonstrated by a backslash character at the end of a bean_id to modules/Emails/DetailView.php. An attacker could exploit these vulnerabilities by sending a crafted SQL request to the affected areas. An exploit could allow the attacker to modify the SQL database. Proper SQL escaping has been added to prevent such exploits.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://blog.ripstech.com/2017/sugarcrm-security-diet-multiple-vulnerabilities/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2017-006/; https://www.synology.com/support/security/Synology_SA_17_53_SugarCRM
CVE: CVE-2017-14509
Published: 2017-09-17
Description: An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 (and Sugar Community Edition 6.5.26). A remote file inclusion has been identified in the Connectors module allowing authenticated users to include remotely accessible system files via a module=CallRest&url= query string. Proper input validation has been added to mitigate this issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://blog.ripstech.com/2017/sugarcrm-security-diet-multiple-vulnerabilities/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2017-007/; https://www.synology.com/support/security/Synology_SA_17_53_SugarCRM
CVE: CVE-2017-14510
Published: 2017-09-17
Description: An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 (and Sugar Community Edition 6.5.26). The WebToLeadCapture functionality is found vulnerable to unauthenticated cross-site scripting (XSS) attacks. This attack vector is mitigated by proper validating the redirect URL values being passed along.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.ripstech.com/2017/sugarcrm-security-diet-multiple-vulnerabilities/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2017-008/; https://www.synology.com/support/security/Synology_SA_17_53_SugarCRM
CVE: CVE-2017-14511
Published: 2017-09-17
Description: An issue was discovered in SAP E-Recruiting (aka ERECRUIT) 605 through 617. When an external applicant registers to the E-Recruiting application, he/she receives a link by email to confirm access to the provided email address. However, this measure can be bypassed and attackers can register and confirm email addresses that they do not have access to (candidate_hrobject is predictable and corr_act_guid is improperly validated). Furthermore, since an email address can be registered only once, an attacker could prevent other legitimate users from registering. This is SAP Security Note 2507798.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/; https://launchpad.support.sap.com/#/notes/2507798; https://www.sec-consult.com/en/blog/advisories/email-verification-bypass-in-sap-e-recruiting/index.html
CVE: CVE-2017-14512
Published: 2017-09-17
Description: NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an editforum action, a different vulnerability than CVE-2017-12981.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/rezhish/NexusPHP/blob/master/nexusphp.md; https://github.com/rezhish/NexusPHP/blob/master/nexusphp.md
CVE: CVE-2017-14513
Published: 2017-09-17
Description: Directory traversal vulnerability in MetInfo 5.3.17 allows remote attackers to read information from any ini format file via the f_filename parameter in a fingerprintdo action to admin/app/physical/physical.php.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/phantom0301/vulns/blob/master/Metinfo2.md; https://github.com/phantom0301/vulns/blob/master/Metinfo2.md
CVE: CVE-2017-14514
Published: 2017-09-17
Description: Directory Traversal on Tenda W15E devices before 15.11.0.14 allows remote attackers to read unencrypted files via a crafted URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.tendacn.com/en/2018.html; http://www.tendacn.com/en/2018.html
CVE: CVE-2017-14515
Published: 2017-09-17
Description: Heap-based Buffer Overflow on Tenda W15E devices before 15.11.0.14 allows remote attackers to cause a denial of service (temporary HTTP outage and forced logout) via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.tendacn.com/en/2018.html; http://www.tendacn.com/en/2018.html
CVE: CVE-2017-14517
Published: 2017-09-17
Description: In Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry() function in XRef.cc via a crafted PDF document.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/105050; https://bugs.freedesktop.org/show_bug.cgi?id=102687; https://www.debian.org/security/2018/dsa-4079
CVE: CVE-2017-14518
Published: 2017-09-17
Description: In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired() function in Splash.cc via a crafted PDF document.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://bugs.freedesktop.org/show_bug.cgi?id=102688; https://www.debian.org/security/2018/dsa-4079; https://bugs.freedesktop.org/show_bug.cgi?id=102688
CVE: CVE-2017-14519
Published: 2017-09-17
Description: In Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opShowText, and Gfx::doShowText calls (aka a Gfx.cc infinite loop).
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://bugs.freedesktop.org/show_bug.cgi?id=102701; https://www.debian.org/security/2018/dsa-4079; https://bugs.freedesktop.org/show_bug.cgi?id=102701