Author: Fortify Security Team

CVE-2017-7304

Posted by Fortify Security Team | Mar 29, 2017 | CVE Notifications |

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 8) because of missing a check (in the copy_special_section_fields function) for an invalid...

CVE-2017-7300

Posted by Fortify Security Team | Mar 29, 2017 | CVE Notifications |

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that is vulnerable to a heap-based buffer over-read (off-by-one) because of an...

CVE-2017-7298

Posted by Fortify Security Team | Mar 29, 2017 | CVE Notifications |

In Moodle 3.2.2+, there is XSS in the Course summary filter of the “Add a new course” page, as demonstrated by a crafted attribute of an SVG element.

CVE-2017-7297

Posted by Fortify Security Team | Mar 28, 2017 | CVE Notifications |

Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call. This is fixed in versions rancher/server:v1.2.4, rancher/server:v1.3.5, rancher/server:v1.4.3, and...

CVE-2017-2686

Posted by Fortify Security Team | Mar 28, 2017 | CVE Notifications |

Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability that could allow an authenticated user to read arbitrary files through the web interface at port 10000/TCP and access sensitive information.