Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-10672 State: PUBLISHED Published: 2017-06-29T08:00:00 Last Updated: 2024-08-05T17:41:55.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4042 - https://lists.debian.org/debian-lts-announce/2017/11/msg00017.html - https://rt.cpan.org/Public/Bug/Display.html?id=122246
CVE ID: CVE-2017-10673 State: PUBLISHED Published: 2017-06-29T08:00:00 Last Updated: 2024-08-05T17:41:55.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/profile.php in GetSimple CMS 3.x has XSS in a name field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1234
CVE ID: CVE-2017-10674 State: PUBLISHED Published: 2017-06-30T13:00:00 Last Updated: 2024-08-05T17:41:55.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Antiy Antivirus Engine 5.0.0.06281654 allows local users to cause a denial of service (BSOD) via a long third argument in a DeviceIoControl call. Additional Analyst Notes: - CVE Program Container: References: - http://blog.csdn.net/wdone/article/details/73958872
CVE ID: CVE-2017-10676 State: PUBLISHED Published: 2017-07-20T01:00:00 Last Updated: 2024-08-05T17:41:55.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: On D-Link DIR-600M devices before C1_v3.05ENB01_beta_20170306, XSS was found in the form2userconfig.cgi username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://iscouncil.blogspot.com/2017/07/stored-xss-in-d-link-dir-600m-router.html - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-600M/REVC/DIR-600M_REVC_FIRMWARE_PATCH_NOTES_3.05B01_EN.pdf
CVE ID: CVE-2017-10677 State: PUBLISHED Published: 2017-08-06T18:00:00 Last Updated: 2024-08-05T17:41:55.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Request Forgery (CSRF) exists on Linksys EA4500 devices with Firmware Version before 2.1.41.164606, as demonstrated by a request to apply.cgi to disable SIP. Additional Analyst Notes: - CVE Program Container: References: - https://iscouncil.blogspot.com/2017/08/cross-site-request-forgery.html
CVE ID: CVE-2017-10678 State: PUBLISHED Published: 2017-06-29T21:00:00 Last Updated: 2024-08-05T17:41:55.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to delete permalinks via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99383 - https://github.com/Piwigo/Piwigo/issues/721 - https://github.com/Piwigo/Piwigo/commit/03a8329b89c0d196ecdb54227a8113f24555ffc0
CVE ID: CVE-2017-10679 State: PUBLISHED Published: 2017-06-29T21:00:00 Last Updated: 2024-08-05T17:41:55.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Piwigo through 2.9.1 allows remote attackers to obtain sensitive information about the descriptive name of a permalink by examining the redirect URL that is returned in a request for the permalink ID number of a private album. The permalink ID numbers are easily guessed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99380 - https://github.com/Piwigo/Piwigo/issues/721 - https://github.com/Piwigo/Piwigo/issues/723
CVE ID: CVE-2017-10680 State: PUBLISHED Published: 2017-06-29T21:00:00 Last Updated: 2024-08-05T17:41:55.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to change a private album to public via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99349 - https://github.com/Piwigo/Piwigo/issues/721 - https://github.com/Piwigo/Piwigo/commit/03a8329b89c0d196ecdb54227a8113f24555ffc0
CVE ID: CVE-2017-10681 State: PUBLISHED Published: 2017-06-29T21:00:00 Last Updated: 2024-08-05T17:41:55.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to unlock albums via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99362 - https://github.com/Piwigo/Piwigo/issues/721 - https://github.com/Piwigo/Piwigo/commit/03a8329b89c0d196ecdb54227a8113f24555ffc0
CVE ID: CVE-2017-10682 State: PUBLISHED Published: 2017-06-29T21:00:00 Last Updated: 2024-08-05T17:41:55.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the administrative backend in Piwigo through 2.9.1 allows remote users to execute arbitrary SQL commands via the cat_false or cat_true parameter in the comments or status page to cat_options.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Piwigo/Piwigo/issues/724 - http://www.securityfocus.com/bid/99357 - https://www.exploit-db.com/exploits/43337/ - https://github.com/Piwigo/Piwigo/commit/3dd6812412289a199564e63fffd0a9754010b9e0
CVE ID: CVE-2017-10683 State: PUBLISHED Published: 2017-06-29T23:00:00Z Last Updated: 2024-09-16T21:57:55.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: In mpg123 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in libmpg123/id3.c. A crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1465819
CVE ID: CVE-2017-10684 State: PUBLISHED Published: 2017-06-29T23:00:00 Last Updated: 2024-08-05T17:41:55.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201804-13 - https://bugzilla.redhat.com/show_bug.cgi?id=1464687 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e3
%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2017-10685 State: PUBLISHED Published: 2017-06-29T23:00:00 Last Updated: 2024-08-05T17:41:55.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201804-13 - https://bugzilla.redhat.com/show_bug.cgi?id=1464692
CVE ID: CVE-2017-10686 State: PUBLISHED Published: 2017-06-29T23:00:00 Last Updated: 2024-08-05T17:41:55.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token() function and freed in the detoken() function (called by pp_getline()) - it is used again at multiple positions later that could cause multiple damages. For example, it causes a corrupted double-linked list in detoken(), a double free or corruption in delete_Token(), and an out-of-bounds write in detoken(). It has a high possibility to lead to a remote code execution attack.
e_Token(), and an out-of-bounds write in detoken(). It has a high possibility to lead to a remote code execution attack. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3694-1/ - https://bugzilla.nasm.us/show_bug.cgi?id=3392414 - https://security.gentoo.org/glsa/201903-19
CVE ID: CVE-2017-10687 State: PUBLISHED Published: 2017-06-29T23:00:00Z Last Updated: 2024-09-16T16:13:14.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp. A crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1466411
CVE ID: CVE-2017-10688 State: PUBLISHED Published: 2017-06-29T23:00:00 Last Updated: 2024-08-05T17:41:55.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: In LibTIFF 4.0.8, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c. A crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99359 - https://www.exploit-db.com/exploits/42299/ - https://usn.ubuntu.com/3602-1/ - http://bugzilla.maptools.org/show_bug.cgi?id=2712 - http://www.debian.org/security/2017/dsa-3903
CVE ID: CVE-2017-10689 State: PUBLISHED Published: 2018-02-09T20:00:00Z Last Updated: 2024-09-17T00:20:43.149Z Vendors: Puppet Products: Puppet Enterprise, Puppet Agent Problem Types: Incorrect Permission Handling Description: In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3567-1/ - https://puppet.com/security/cve/CVE-2017-10689 - https://access.redhat.com/errata/RHSA-2018:2927
CVE ID: CVE-2017-10690 State: PUBLISHED Published: 2018-02-09T20:00:00Z Last Updated: 2024-09-16T17:49:12.591Z Vendors: Puppet Products: Puppet Enterprise, Puppet Agent Problem Types: Privilege Escalation Description: In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environment that it was not classified to retrieve from. This was resolved in Puppet Agent 5.3.4, included in Puppet Enterprise 2017.3.4 Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2927 - https://puppet.com/security/cve/CVE-2017-10690
CVE ID: CVE-2017-10699 State: PUBLISHED Published: 2017-06-30T13:00:00 Last Updated: 2024-08-05T17:41:55.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy() with a wrong size, leading to a denial of service (application crash) or possibly code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038816 - https://www.debian.org/security/2017/dsa-4045 - https://trac.videolan.org/vlc/ticket/18467
CVE ID: CVE-2017-10700 State: PUBLISHED Published: 2017-09-19T15:00:00 Last Updated: 2024-08-05T17:41:55.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the medialibrary component in QNAP NAS 4.3.3.0229, an un-authenticated, remote attacker can execute arbitrary system commands as the root user of the NAS application. Additional Analyst Notes: - CVE Program Container: References: - https://www.lateralsecurity.com/downloads/Lateral_Security-Advisory-QNAP_QTS_CVE-2017-10700.pdf - https://www.qnap.com/en/support/con_show.php?cid=128
CVE ID: CVE-2017-10701 State: PUBLISHED Published: 2017-09-28T19:00:00 Last Updated: 2024-08-05T17:41:55.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerability in SAP Enterprise Portal 7.50 allows remote attackers to inject arbitrary web script or HTML, aka SAP Security Notes 2469860, 2471209, and 2488516. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100786 - https://cxsecurity.com/issue/WLB-2017090219 - http://www.securityfocus.com/bid/100788 - http://www.securityfocus.com/bid/100805 - http://www.securityfocus.com/bid/101068
CVE ID: CVE-2017-10706 State: PUBLISHED Published: 2017-07-02T13:00:00 Last Updated: 2024-08-05T17:41:55.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: When Antiy Antivirus Engine before 5.0.0.05171547 scans a special ZIP archive, it crashes with a stack-based buffer overflow because a fixed path length is used. Additional Analyst Notes: - CVE Program Container: References: - http://www.lofter.com/lpost/1d52afc9_105e13e5
CVE ID: CVE-2017-10708 State: PUBLISHED Published: 2017-07-18T20:00:00 Last Updated: 2024-08-05T17:41:55.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the ExecutablePath field and it then uses the path to run package specific hooks without protecting against path traversal. This allows remote attackers to execute arbitrary code via a crafted .crash file. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/ubuntu/+source/apport/+changelog - https://launchpad.net/bugs/1700573
CVE ID: CVE-2017-10709 State: PUBLISHED Published: 2017-06-30T16:00:00Z Last Updated: 2024-09-16T20:22:42.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lockscreen on Elephone P9000 devices (running Android 6.0) allows physically proximate attackers to bypass a wrong-PIN lockout feature by pressing backspace after each PIN guess. Additional Analyst Notes: - CVE Program Container: References: - https://www.reddit.com/r/netsec/comments/6kajkc/elephone_p9000_lock_screen_lockout_bypass_with/ - https://www.security.nl/posting/522081/Schermvergrendeling+Elephone+P9000+door+lek+te+omzeilen - https://www.trustwave.com/Resources/SpiderLabs-Blog/Elephone-P9000-Lock-Screen-Lockout-
one+P9000+door+lek+te+omzeilen - https://www.trustwave.com/Resources/SpiderLabs-Blog/Elephone-P9000-Lock-Screen-Lockout-Bypass/?page=1&year=0&month=0 - https://www.youtube.com/watch?v=dwyzonP2eZw - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-011/?fid=9707
CVE ID: CVE-2017-10711 State: PUBLISHED Published: 2017-07-24T13:00:00 Last Updated: 2024-08-05T17:41:55.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SimpleRisk 20170614-001, a CSRF attack on reset.php (aka the Send Password Reset Email form) can insert XSS sequences via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.seekurity.com/blog/general/reflected-xss-vulnerability-in-simplerisk/ - https://www.youtube.com/watch?v=jOUKEYW0RQw
CVE ID: CVE-2017-10718 State: PUBLISHED Published: 2019-06-17T21:28:39 Last Updated: 2024-08-05T17:41:55.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that any malicious user connecting to the device can change the default SSID and password thereby denying the owner an access to his/her own device. This device acts as an Endoscope camera that allows its users to use it in various industrial systems and settings, car garages, and also in some cases in the medical clinics to get access to areas that are difficult for a human being to reach. Any breach of this s
cases in the medical clinics to get access to areas that are difficult for a human being to reach. Any breach of this system can allow an attacker to get access to video feed and pictures viewed by that user and might allow them to get a foot hold in air gapped networks especially in case of nation critical infrastructure/industries. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf
CVE ID: CVE-2017-10719 State: PUBLISHED Published: 2019-06-17T21:24:10 Last Updated: 2024-08-05T17:41:55.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the device has default Wi-Fi credentials that are exactly the same for every device. This device acts as an Endoscope camera that allows its users to use it in various industrial systems and settings, car garages, and also in some cases in the medical clinics to get access to areas that are difficult for a human being to reach. Any breach of this system can allow an attacker to get access to video feed and
re difficult for a human being to reach. Any breach of this system can allow an attacker to get access to video feed and pictures viewed by that user and might allow them to get a foot hold in air gapped networks especially in case of nation critical infrastructure/industries. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf
CVE ID: CVE-2017-10720 State: PUBLISHED Published: 2019-06-17T21:41:30 Last Updated: 2024-08-05T17:41:55.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop application used to connect to the device suffers from a stack overflow if more than 26 characters are passed to it as the Wi-Fi name. This application is installed on the device and an attacker who can provide the right payload can execute code on the user's system directly. Any breach of this system can allow an attacker to get access to all the data that the user has access too. The applicat
Any breach of this system can allow an attacker to get access to all the data that the user has access too. The application uses a dynamic link library(DLL) called "avilib.dll" which is used by the application to send binary packets to the device that allow to control the device. One such action that the DLL provides is change password in the function "sendchangename" which allows a user to change the Wi-Fi name on the device. This function calls a sub function "sub_75876EA0" at address 0x758784F8. The function determines which action to execute based on the parameters sent to it. The "sendchangename" passes the datastring as the second argument which is the name we enter in the textbox and
to it. The "sendchangename" passes the datastring as the second argument which is the name we enter in the textbox and integer 1 as first argument. The rest of the 3 arguments are set to 0. The function "sub_75876EA0" at address 0x75876F19 uses the first argument received and to determine which block to jump to. Since the argument passed is 1, it jumps to 0x75876F20 and proceeds from there to address 0x75876F56 which calculates the length of the data string passed as the first parameter. This length and the first argument are then passed to the address 0x75877001 which calls the memmove function which uses a stack address as the destination where the password typed by us is passed as the so
ls the memmove function which uses a stack address as the destination where the password typed by us is passed as the source and length calculated above is passed as the number of bytes to copy which leads to a stack overflow. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf
CVE ID: CVE-2017-10721 State: PUBLISHED Published: 2019-06-17T21:19:47 Last Updated: 2024-08-05T17:41:55.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the device has Telnet functionality enabled by default. This device acts as an Endoscope camera that allows its users to use it in various industrial systems and settings, car garages, and also in some cases in the medical clinics to get access to areas that are difficult for a human being to reach. Any breach of this system can allow an attacker to get access to video feed and pictures viewed by that user
g to reach. Any breach of this system can allow an attacker to get access to video feed and pictures viewed by that user and might allow them to get a foot hold in air gapped networks especially in case of nation critical infrastructure/industries. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf
CVE ID: CVE-2017-10722 State: PUBLISHED Published: 2019-06-17T21:39:51 Last Updated: 2024-08-05T17:41:55.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop application used to connect to the device suffers from a stack overflow if more than 26 characters are passed to it as the Wi-Fi password. This application is installed on the device and an attacker who can provide the right payload can execute code on the user's system directly. Any breach of this system can allow an attacker to get access to all the data that the user has access too. The appl
ly. Any breach of this system can allow an attacker to get access to all the data that the user has access too. The application uses a dynamic link library(DLL) called "avilib.dll" which is used by the application to send binary packets to the device that allow to control the device. One such action that the DLL provides is change password in the function "sendchangepass" which allows a user to change the Wi-Fi password on the device. This function calls a sub function "sub_75876EA0" at address 0x7587857C. The function determines which action to execute based on the parameters sent to it. The "sendchangepass" passes the datastring as the second argument which is the password we enter in the
ers sent to it. The "sendchangepass" passes the datastring as the second argument which is the password we enter in the textbox and integer 2 as first argument. The rest of the 3 arguments are set to 0. The function "sub_75876EA0" at address 0x75876F19 uses the first argument received and to determine which block to jump to. Since the argument passed is 2, it jumps to 0x7587718C and proceeds from there to address 0x758771C2 which calculates the length of the data string passed as the first parameter.This length and the first argument are then passed to the address 0x7587726F which calls a memmove function which uses a stack address as the destination where the password typed by us is passed
F which calls a memmove function which uses a stack address as the destination where the password typed by us is passed as the source and length calculated above is passed as the number of bytes to copy which leads to a stack overflow. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf