Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-8984 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T23:55:38.254Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0506P03 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102922 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03811en_us
CVE ID: CVE-2017-8985 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T19:56:46.119Z Vendors: Hewlett Packard Enterprise Products: XP Storage using HGLM Problem Types: Local Authentication Bypass Description: HPE XP Storage using Hitachi Global Link Manager (HGLM) has a local authenticated information disclosure vulnerability in HGLM version HGLM 6.3.0-00 to 8.5.2-00. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03819en_us
CVE ID: CVE-2017-8986 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-8987 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T16:55:21.295Z Vendors: Hewlett Packard Enterprise Products: HPE Integrated Lights-Out 3 (iLO 3) Problem Types: remote denial of service Description: A Unauthenticated Remote Denial of Service vulnerability was identified in HPE Integrated Lights-Out 3 (iLO 3) version v1.88 only. The vulnerability is resolved in iLO3 v1.89 or subsequent versions. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03826en_us - http://www.securitytracker.com/id/1040429
CVE ID: CVE-2017-8988 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T16:55:22.000Z Vendors: Hewlett Packard Enterprise Products: HPE Command View Advanced Edition Problem Types: remote bypass of security restrictions Description: A Remote Bypass of Security Restrictions vulnerability was identified in HPE XP Command View Advanced Edition Software Earlier than 8.5.3-00. The vulnerability impacts DevMgr Earlier than 8.5.3-00 (for Windows, Linux), RepMgr earlier than 8.5.3-00 (for Windows, Linux) and HDLM earlier than 8.5.3-00 (for Windows, Linux, Solaris, AIX). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/dis
aris, AIX). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03822en_us
CVE ID: CVE-2017-8989 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T16:55:21.924Z Vendors: Hewlett Packard Enterprise Products: HPE Icewall DFW Problem Types: remote URL redirection Description: A security vulnerability in HPE IceWall SSO Dfw 10.0 and 11.0 on RHEL, HP-UX, and Windows could be exploited remotely to allow URL Redirection. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03833en_us
CVE ID: CVE-2017-8990 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T16:55:21.498Z Vendors: Hewlett Packard Enterprise Products: HPE Intelligent Management Center (IMC) Wirelss Service Manager Problem Types: remote code execution Description: A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Service Manager (WSM) Software earlier than version WSM 7.3 (E0506). This issue was resolved in HPE IMC Wireless Services Manager Software IMC WSM 7.3 E0506P01 or subsequent version. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040988 - https://support.hpe.com/hpsc/doc/p
s: - CVE Program Container: References: - http://www.securitytracker.com/id/1040988 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03852en_us
CVE ID: CVE-2017-8991 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T16:55:21.823Z Vendors: Hewlett Packard Enterprise Products: HPE CentralView Fraud Risk Management Problem Types: cross site scripting (XSS) Description: HPE has identified a cross site scripting (XSS) vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03837en_us
CVE ID: CVE-2017-8992 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T16:55:21.609Z Vendors: Hewlett Packard Enterprise Products: HPE CentralView Fraud Risk Management Problem Types: remote privilege escalation Description: HPE has identified a remote privilege escalation vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03837en_us
CVE ID: CVE-2017-8993 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T20:17:49.746Z Vendors: Hewlett Packard Enterprise Products: Project and Portfolio Management (PPM) Problem Types: Remote Cross-Site Scripting Description: A Remote Cross-Site Scripting vulnerability in HPE Project and Portfolio Management (PPM) version v9.30, v9.31, v9.32, v9.40 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100087 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03766en_us - http://www.securitytracker.com/id/1039065
CVE ID: CVE-2017-8994 State: PUBLISHED Published: 2017-10-10T21:00:00Z Last Updated: 2024-09-16T22:03:21.024Z Vendors: Micro Focus Products: HPE Operations Orchestration Problem Types: Remote Code Execution Description: A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the execution of code remotely. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03767en_us - https://www.tenable.com/security/research/tra-2017-28 - https://www.tenable.com/security/research/tra-2017-25 - http://www.securityfocus.com/bid/100588
CVE ID: CVE-2017-8995 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-8996 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-8997 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-8998 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-8999 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-9000 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T16:55:21.324Z Vendors: Hewlett Packard Enterprise Products: ArubaOS Problem Types: unauthenticated arbitrary File access Description: ArubaOS, all versions prior to 6.3.1.25, 6.4 prior to 6.4.4.16, 6.5.x prior to 6.5.1.9, 6.5.2, 6.5.3 prior to 6.5.3.3, 6.5.4 prior to 6.5.4.2, 8.x prior to 8.1.0.4 FIPS and non-FIPS versions of software are both affected equally is vulnerable to unauthenticated arbitrary file access. An unauthenticated user with network access to an Aruba mobility controller on TCP port 8080 or 8081 may be able to access arbitrary files stored on the mobility controller. Ports 8080 a
ontroller on TCP port 8080 or 8081 may be able to access arbitrary files stored on the mobility controller. Ports 8080 and 8081 are used for captive portal functionality and are listening, by default, on all IP interfaces of the mobility controller, including captive portal interfaces. The attacker could access files which could contain passwords, keys, and other sensitive information that could lead to full system compromise. Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-006.txt - http://www.securitytracker.com/id/1039580
CVE ID: CVE-2017-9001 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T16:55:21.846Z Vendors: Hewlett Packard Enterprise Products: Aruba ClearPass Problem Types: unauthenticated remote command execution Description: Aruba ClearPass 6.6.3 and later includes a feature called "SSH Lockout", which causes ClearPass to lock accounts with too many login failures through SSH. When this feature is enabled, an unauthenticated remote command execution vulnerability is present which could allow an unauthenticated user to execute arbitrary commands on the underlying operating system with "root" privilege level. This vulnerability is only present when a specific feature has been en
ing operating system with "root" privilege level. This vulnerability is only present when a specific feature has been enabled. The SSH Lockout feature is not enabled by default, so only systems which have enabled this feature are vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-004.txt
CVE ID: CVE-2017-9002 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T16:55:21.313Z Vendors: Hewlett Packard Enterprise Products: Aruba ClearPass Problem Types: reflected cross-site scripting Description: All versions of Aruba ClearPass prior to 6.6.8 contain reflected cross-site scripting vulnerabilities. By exploiting this vulnerability, an attacker who can trick a logged-in ClearPass administrative user into clicking a link could obtain sensitive information, such as session cookies or passwords. The vulnerability requires that an administrative users click on the malicious link while currently logged into ClearPass in the same browser. Additional Analyst Notes: -
users click on the malicious link while currently logged into ClearPass in the same browser. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-004.txt
CVE ID: CVE-2017-9003 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T16:55:22.207Z Vendors: Hewlett Packard Enterprise Products: ArubaOS Problem Types: unauthenticated memory corruption leading to remote code execution Description: Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time and effort, it is possible these vulnerabilities could lead to the ability to execute arbitrary code - remote code execution has not yet been confirmed. Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-006.txt - http://www
es: - CVE Program Container: References: - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-006.txt - http://www.securitytracker.com/id/1039580
CVE ID: CVE-2017-9004 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-9005 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-9006 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-9007 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-9008 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-9009 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-9010 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-9011 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-9012 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-9013 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-9014 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-9015 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-9016 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-9017 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-9018 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2017-9021 State: REJECTED Published: 2017-05-26T20:00:00 Last Updated: 2017-05-31T12:57:01 Description: No description available.
CVE ID: CVE-2017-9022 State: PUBLISHED Published: 2017-06-08T16:00:00 Last Updated: 2024-08-05T16:55:21.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://www.strongswan.org/blog/2017/05/30/strongswan-vulnerability-%28cve-2017-9022%29.html - http://www.debian.org/security/2017/dsa-3866 - http://www.securityfocus.com/bid/98760 - http://www.ubuntu.com/usn/USN-3301-1
CVE ID: CVE-2017-9023 State: PUBLISHED Published: 2017-06-08T16:00:00 Last Updated: 2024-08-05T16:55:21.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite loop) via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98756 - https://www.strongswan.org/blog/2017/05/30/strongswan-vulnerability-%28cve-2017-9023%29.html - http://www.debian.org/security/2017/dsa-3866 - http://www.ubuntu.com/usn/USN-3301-1
CVE ID: CVE-2017-9024 State: PUBLISHED Published: 2017-05-21T14:00:00 Last Updated: 2024-08-05T16:55:21.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Bytes Cisco Configuration Manager, as bundled in Secure Bytes Secure Cisco Auditor (SCA) 3.0, has a Directory Traversal issue in its TFTP Server, allowing attackers to read arbitrary files via ../ sequences in a pathname. Additional Analyst Notes: - CVE Program Container: References: - http://hyp3rlinx.altervista.org/advisories/SECURE-AUDITOR-v3.0-DIRECTORY-TRAVERSAL.txt - https://www.exploit-db.com/exploits/42041/
CVE ID: CVE-2017-9025 State: PUBLISHED Published: 2017-05-17T10:00:00 Last Updated: 2024-08-05T16:55:21.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted HTTP Cookie header. Additional Analyst Notes: - CVE Program Container: References: - http://debugtrap.com/2017/05/09/tm06-vulnerabilities/
CVE ID: CVE-2017-9026 State: PUBLISHED Published: 2017-05-17T10:00:00 Last Updated: 2024-08-05T16:55:21.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted fname parameter of a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://debugtrap.com/2017/05/09/tm06-vulnerabilities/
CVE ID: CVE-2017-9030 State: PUBLISHED Published: 2017-05-17T14:00:00Z Last Updated: 2024-09-16T19:15:25.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a directory traversal attack that bypasses a uniqid protection mechanism, and makes it easier to read arbitrary uploaded files. Additional Analyst Notes: - CVE Program Container: References: - https://navixia.com/storage/app/media/uploaded-files/CVE/cve-2017-521415.txt
CVE ID: CVE-2017-9031 State: PUBLISHED Published: 2017-05-17T19:00:00 Last Updated: 2024-08-05T16:55:21.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not associated with any template file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99099 - http://dev.deluge-torrent.org/wiki/ReleaseNotes/1.3.15 - http://www.debian.org/security/2017/dsa-3856 - https://bugs.debian.org/862611 - http://git.deluge-torrent.org/deluge/commit/?h=1.3-stable&id=41acade01ae88f7b7bbdba308a0886771aa582fd
CVE ID: CVE-2017-9032 State: PUBLISHED Published: 2017-05-25T19:00:00 Last Updated: 2024-08-05T16:55:22.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the (1) T1 or (2) tmLastConfigFileModifiedDate parameter to log_management.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038548 - https://success.trendmicro.com/solution/1117411 - https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities - http://seclists.org/full
- https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities - http://seclists.org/fulldisclosure/2017/May/91 - http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html
CVE ID: CVE-2017-9033 State: PUBLISHED Published: 2017-05-25T19:00:00 Last Updated: 2024-08-05T16:55:21.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows remote attackers to hijack the authentication of users for requests to start an update from an arbitrary source via a crafted request to SProtectLinux/scanoption_set.cgi, related to the lack of anti-CSRF tokens. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038548 - https://success.trendmicro.com/solution/1117411 - https://www.coresecurity.com/advisories/trend-mi
cker.com/id/1038548 - https://success.trendmicro.com/solution/1117411 - https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities - http://seclists.org/fulldisclosure/2017/May/91 - http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html
CVE ID: CVE-2017-9034 State: PUBLISHED Published: 2017-05-25T19:00:00 Last Updated: 2024-08-05T16:55:22.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging failure to validate software updates. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038548 - https://success.trendmicro.com/solution/1117411 - https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities - http://seclists.org/fulldisclosure/2017/May/91 - http://packetstorm
trend-micro-serverprotect-multiple-vulnerabilities - http://seclists.org/fulldisclosure/2017/May/91 - http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html
CVE ID: CVE-2017-9035 State: PUBLISHED Published: 2017-05-25T19:00:00 Last Updated: 2024-08-05T16:55:22.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038548 - https://success.trendmicro.com/solution/1117411 - https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities - http://seclists.org/fulldisclosure/2017/May/91 - http://packetstormsecurity.com/files/142645/Trend-Micro-Serv
bilities - http://seclists.org/fulldisclosure/2017/May/91 - http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html
CVE ID: CVE-2017-9036 State: PUBLISHED Published: 2017-05-25T19:00:00 Last Updated: 2024-08-05T16:55:21.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows local users to gain privileges by leveraging an unrestricted quarantine directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038548 - https://success.trendmicro.com/solution/1117411 - https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities - http://seclists.org/fulldisclosure/2017/May/91 - http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-
.org/fulldisclosure/2017/May/91 - http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html
CVE ID: CVE-2017-9037 State: PUBLISHED Published: 2017-05-25T19:00:00 Last Updated: 2024-08-05T16:55:21.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the (1) S44, (2) S5, (3) S_action_fail, (4) S_ptn_update, (5) T113, (6) T114, (7) T115, (8) T117117, (9) T118, (10) T_action_fail, (11) T_ptn_update, (12) textarea, (13) textfield5, or (14) tmLastConfigFileModifiedDate parameter to notification.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038548
fication.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038548 - https://success.trendmicro.com/solution/1117411 - https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities - http://seclists.org/fulldisclosure/2017/May/91 - http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html
CVE ID: CVE-2017-9038 State: PUBLISHED Published: 2017-05-18T01:00:00 Last Updated: 2024-08-05T16:55:22.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to the byte_get_little_endian function in elfcomm.c, the get_unwind_section_word function in readelf.c, and ARM unwind information that contains invalid word offsets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98589 - https://security.gentoo.org/glsa/201709-02 - https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-c