Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ok only at the answer RRs which come after the CNAME, which is at least arguably correct. Additional Analyst Notes: - CVE Program Container: References: - http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00037.html - https://www.chiark.greenend.org.uk/pipermail/adns-announce/2020/000004.html - http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git%3Ba=blob%3Bf=changelog - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRVHN3GGVNQWAOL3PWC5FLAV7HUESLZR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGFZ4
C5FLAV7HUESLZR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGFZ4SPV6KFQK6ZNUZFB5Y32OYFOM5YJ/
CVE ID: CVE-2017-9110 State: PUBLISHED Published: 2017-05-21T18:00:00 Last Updated: 2024-08-05T16:55:22.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/05/12/5 - https://github.com/openexr/openexr/releases/tag/v2.2.1 - https://github.com/openexr/openexr/issues/232 - https://github.com/openexr/openexr/pull/233 - https://usn.ubuntu.com/4148-1/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html
CVE ID: CVE-2017-9111 State: PUBLISHED Published: 2017-05-21T18:00:00 Last Updated: 2024-08-05T16:55:22.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/05/12/5 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00000.html - https://github.com/openexr/openexr/releases/tag/v2.2.1 - https://github.com/openexr/openexr
unce/2019-08/msg00000.html - https://github.com/openexr/openexr/releases/tag/v2.2.1 - https://github.com/openexr/openexr/issues/232 - https://github.com/openexr/openexr/pull/233 - https://usn.ubuntu.com/4148-1/ - https://usn.ubuntu.com/4339-1/ - https://www.debian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html
CVE ID: CVE-2017-9112 State: PUBLISHED Published: 2017-05-21T18:00:00 Last Updated: 2024-08-05T16:55:22.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/05/12/5 - https://github.com/openexr/openexr/releases/tag/v2.2.1 - https://github.com/openexr/openexr/issues/232 - https://github.com/openexr/openexr/pull/233 - https://usn.ubuntu.com/4148-1/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html
CVE ID: CVE-2017-9113 State: PUBLISHED Published: 2017-05-21T18:00:00 Last Updated: 2024-08-05T16:55:22.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/05/12/5 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00000.html - https://github.com/openexr/openexr/releases/tag/v2.2.1 - https://github.com/openexr/openexr
CVE ID: CVE-2017-9114 State: PUBLISHED Published: 2017-05-21T18:00:00 Last Updated: 2024-08-05T16:55:22.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenEXR 2.2.0, an invalid read of size 1 in the refill function in ImfFastHuf.cpp could cause the application to crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/05/12/5 - https://github.com/openexr/openexr/releases/tag/v2.2.1 - https://github.com/openexr/openexr/issues/232 - https://github.com/openexr/openexr/pull/233 - https://www.debian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html
CVE ID: CVE-2017-9115 State: PUBLISHED Published: 2017-05-21T18:00:00 Last Updated: 2024-08-05T16:55:22.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/05/12/5 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00000.html - https://github.com/openexr/openexr/releases/tag/v2.2.1 - https://github.com/openexr/openexr/issues/232 - http
000.html - https://github.com/openexr/openexr/releases/tag/v2.2.1 - https://github.com/openexr/openexr/issues/232 - https://github.com/openexr/openexr/pull/233 - https://usn.ubuntu.com/4148-1/ - https://usn.ubuntu.com/4339-1/ - https://www.debian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html
CVE ID: CVE-2017-9116 State: PUBLISHED Published: 2017-05-21T18:00:00 Last Updated: 2024-08-05T16:55:22.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenEXR 2.2.0, an invalid read of size 1 in the uncompress function in ImfZip.cpp could cause the application to crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/05/12/5 - https://github.com/openexr/openexr/releases/tag/v2.2.1 - https://github.com/openexr/openexr/issues/232 - https://github.com/openexr/openexr/pull/233 - https://usn.ubuntu.com/4148-1/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html
CVE ID: CVE-2017-9117 State: PUBLISHED Published: 2017-05-21T19:00:00 Last Updated: 2025-01-07T23:52:45.377384Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: LibTIFF Products: LibTIFF Problem Types: CWE-125 Description: In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, as demonstrated by a heap-based buffer over-read in bmp2tiff. NOTE: mentioning bmp2tiff does not imply that the activation point is in the bmp2tiff.c file (which was removed before the 4.0.7 release). Additional Analyst Notes: - CVE Program Container: References: -
f.c file (which was removed before the 4.0.7 release). Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3606-1/ - http://www.securityfocus.com/bid/98581 - http://bugzilla.maptools.org/show_bug.cgi?id=2690 - https://gitlab.com/libtiff/libtiff/-/issues/89
CVE ID: CVE-2017-9118 State: PUBLISHED Published: 2018-08-02T15:00:00 Last Updated: 2024-08-05T16:55:22.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20181107-0003/ - https://bugs.php.net/bug.php?id=74604 - https://access.redhat.com/errata/RHSA-2019:2519
CVE ID: CVE-2017-9119 State: PUBLISHED Published: 2017-05-21T19:00:00 Last Updated: 2024-08-05T16:55:22.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98596 - https://security.netapp.com/advisory/ntap-20180112-0001/ - https://bugs.php.net/bug.php?id=74593
CVE ID: CVE-2017-9120 State: PUBLISHED Published: 2018-08-02T15:00:00 Last Updated: 2024-08-05T16:55:22.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string because of an Integer overflow in mysqli_real_escape_string. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20181107-0003/ - https://bugs.php.net/bug.php?id=74544 - https://access.redhat.com/errata/RHSA-2019:2519
CVE ID: CVE-2017-9122 State: PUBLISHED Published: 2017-06-12T06:00:00 Last Updated: 2024-08-05T16:55:22.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: The quicktime_read_moov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42148/ - https://usn.ubuntu.com/4545-1/
CVE ID: CVE-2017-9123 State: PUBLISHED Published: 2017-06-12T06:00:00 Last Updated: 2024-08-05T16:55:22.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42148/ - https://usn.ubuntu.com/4545-1/
CVE ID: CVE-2017-9124 State: PUBLISHED Published: 2017-06-12T06:00:00 Last Updated: 2024-08-05T16:55:22.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: The quicktime_match_32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42148/ - https://usn.ubuntu.com/4545-1/
CVE ID: CVE-2017-9125 State: PUBLISHED Published: 2017-06-12T06:00:00 Last Updated: 2024-08-05T16:55:22.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42148/ - https://usn.ubuntu.com/4545-1/
CVE ID: CVE-2017-9126 State: PUBLISHED Published: 2017-06-12T06:00:00 Last Updated: 2024-08-05T16:55:22.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: The quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42148/ - https://usn.ubuntu.com/4545-1/
CVE ID: CVE-2017-9127 State: PUBLISHED Published: 2017-06-12T06:00:00 Last Updated: 2024-08-05T16:55:22.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: The quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42148/ - https://usn.ubuntu.com/4545-1/
CVE ID: CVE-2017-9128 State: PUBLISHED Published: 2017-06-12T06:00:00 Last Updated: 2024-08-05T16:55:22.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: The quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42148/ - https://usn.ubuntu.com/4545-1/
CVE ID: CVE-2017-9129 State: PUBLISHED Published: 2017-06-21T07:00:00 Last Updated: 2024-08-05T16:55:22.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wav_open_read function in frontend/input.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cause a denial of service (large loop) via a crafted wav file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42207/
CVE ID: CVE-2017-9130 State: PUBLISHED Published: 2017-06-21T07:00:00 Last Updated: 2024-08-05T16:55:22.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted wav file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42207/
CVE ID: CVE-2017-9131 State: PUBLISHED Published: 2017-05-21T21:00:00 Last Updated: 2024-08-05T16:55:22.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3. By connecting to the Mosquitto broker on an access point and one of its clients, an attacker can gather enough information to craft a command that reboots the client remotely when sent to the client's Mosquitto broker, aka "unauthenticated remote command execution." This command can be re-sent endlessly to act as a DoS attack on the client. Additional Analyst Notes: - CVE Program Container: References: - http://blog.iancaling.
t as a DoS attack on the client. Additional Analyst Notes: - CVE Program Container: References: - http://blog.iancaling.com/post/160596244178
CVE ID: CVE-2017-9132 State: PUBLISHED Published: 2017-05-21T21:00:00 Last Updated: 2024-08-05T16:55:22.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: A hard-coded credentials issue was discovered on Mimosa Client Radios before 2.2.3, Mimosa Backhaul Radios before 2.2.3, and Mimosa Access Points before 2.2.3. These devices run Mosquitto, a lightweight message broker, to send information between devices. By using the vendor's hard-coded credentials to connect to the broker on any device (whether it be an AP, Client, or Backhaul model), an attacker can view all the messages being sent between the devices. If an attacker connects to an AP, the AP will leak information about any
ll the messages being sent between the devices. If an attacker connects to an AP, the AP will leak information about any clients connected to it, including the serial numbers, which can be used to remotely factory reset the clients via a page in their web interface. Additional Analyst Notes: - CVE Program Container: References: - http://blog.iancaling.com/post/160596244178
CVE ID: CVE-2017-9133 State: PUBLISHED Published: 2017-05-21T21:00:00 Last Updated: 2024-08-05T16:55:22.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3. In the device's web interface, after logging in, there is a page that allows you to ping other hosts from the device and view the results. The user is allowed to specify which host to ping, but this variable is not sanitized server-side, which allows an attacker to pass a specially crafted string to execute shell commands as the root user. Additional Analyst Notes: - CVE Program Container: References: - http://blog.iancaling.c
hell commands as the root user. Additional Analyst Notes: - CVE Program Container: References: - http://blog.iancaling.com/post/160596244178
CVE ID: CVE-2017-9134 State: PUBLISHED Published: 2017-05-21T21:00:00 Last Updated: 2024-08-05T16:55:22.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information-leakage issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3. There is a page in the web interface that will show you the device's serial number, regardless of whether or not you have logged in. This information-leakage issue is relevant because there is another page (accessible without any authentication) that allows you to remotely factory reset the device simply by entering the serial number. Additional Analyst Notes: - CVE Program Container: References: - http://b
e device simply by entering the serial number. Additional Analyst Notes: - CVE Program Container: References: - http://blog.iancaling.com/post/160596244178
CVE ID: CVE-2017-9135 State: PUBLISHED Published: 2017-05-21T21:00:00 Last Updated: 2024-08-05T16:55:22.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Mimosa Client Radios before 2.2.4 and Mimosa Backhaul Radios before 2.2.4. On the backend of the device's web interface, there are some diagnostic tests available that are not displayed on the webpage; these are only accessible by crafting a POST request with a program like cURL. There is one test accessible via cURL that does not properly sanitize user input, allowing an attacker to execute shell commands as the root user. Additional Analyst Notes: - CVE Program Container: References: - http://blog.
o execute shell commands as the root user. Additional Analyst Notes: - CVE Program Container: References: - http://blog.iancaling.com/post/160596244178
CVE ID: CVE-2017-9136 State: PUBLISHED Published: 2017-05-21T21:00:00 Last Updated: 2024-08-05T16:55:22.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Mimosa Client Radios before 2.2.3. In the device's web interface, there is a page that allows an attacker to use an unsanitized GET parameter to download files from the device as the root user. The attacker can download any file from the device's filesystem. This can be used to view unsalted, MD5-hashed administrator passwords, which can then be cracked, giving the attacker full admin access to the device's web interface. This vulnerability can also be used to view the plaintext pre-shared key (PSK)
in access to the device's web interface. This vulnerability can also be used to view the plaintext pre-shared key (PSK) for encrypted wireless connections, or to view the device's serial number (which allows an attacker to factory reset the device). Additional Analyst Notes: - CVE Program Container: References: - http://blog.iancaling.com/post/160596244178
CVE ID: CVE-2017-9137 State: PUBLISHED Published: 2017-05-21T21:00:00 Last Updated: 2024-08-05T16:55:22.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ceragon FibeAir IP-10 wireless radios through 7.2.0 have a default password of mateidu for the mateidu account (a hidden user account established by the vendor). This account can be accessed via both the web interface and SSH. In the web interface, this simply grants an attacker read-only access to the device's settings. However, when using SSH, this gives an attacker access to a Linux shell. NOTE: the vendor has commented "The mateidu user is a known user, which is mentioned in the FibeAir IP-10 User Guide. Customers are inst
has commented "The mateidu user is a known user, which is mentioned in the FibeAir IP-10 User Guide. Customers are instructed to change the mateidu user password. Changing the user password fully solves the vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://blog.iancaling.com/post/160817658078
CVE ID: CVE-2017-9138 State: PUBLISHED Published: 2017-05-21T22:00:00Z Last Updated: 2024-09-17T02:53:16.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a debug-interface vulnerability on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). After connecting locally to a router in a wired or wireless manner, one can bypass intended access restrictions by sending shell commands directly and reading their results, or by entering shell commands that change this router's username and password. Additional Analyst Notes: - CVE Program Container: References: - http://www.tendacn.com/en/2017.html
CVE ID: CVE-2017-9139 State: PUBLISHED Published: 2017-05-21T22:00:00Z Last Updated: 2024-09-16T19:31:40.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack-based buffer overflow on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). Crafted POST requests to an unspecified URL result in DoS, interrupting the HTTP service (used to login to the web UI of a router) for 1 to 2 seconds. Additional Analyst Notes: - CVE Program Container: References: - http://www.tendacn.com/en/2017.html
CVE ID: CVE-2017-9140 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T16:55:22.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 (11.0.17.406) allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to Telerik.ReportViewer.axd. Additional Analyst Notes: - CVE Program Container: References: - http://www.telerik.com/support/whats-new/reporting/release-history/telerik-reporting-r1-2017-sp2-%28version-11-0-17-406%29 - https://knowledgebase.progress.com/articles/Artic
ease-history/telerik-reporting-r1-2017-sp2-%28version-11-0-17-406%29 - https://knowledgebase.progress.com/articles/Article/Security-Advisory-for-Resolving-Security-vulnerabilities-September-2018 - https://www.veracode.com/blog/research/anatomy-cross-site-scripting-flaw-telerik-reporting-module