Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-6345 State: PUBLISHED Published: 2017-03-01T20:00:00 Last Updated: 2024-08-05T15:25:49.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LLC subsystem in the Linux kernel before 4.9.13 does not ensure that a certain destructor exists in required circumstances, which allows local users to cause a denial of service (BUG_ON) or possibly have unspecified other impact via crafted system calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96510 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8b74d439e1697110c5e5c600643e823eb1dd0762 - http://www.kernel.org/pub/linux/kernel/v4.x/Change
valds/linux.git/commit/?id=8b74d439e1697110c5e5c600643e823eb1dd0762 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.13 - https://usn.ubuntu.com/3754-1/ - https://github.com/torvalds/linux/commit/8b74d439e1697110c5e5c600643e823eb1dd0762 - http://www.openwall.com/lists/oss-security/2017/02/28/7 - http://www.debian.org/security/2017/dsa-3804
CVE ID: CVE-2017-6346 State: PUBLISHED Published: 2017-03-01T20:00:00 Last Updated: 2024-08-05T15:25:49.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in net/packet/af_packet.c in the Linux kernel before 4.9.13 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a multithreaded application that makes PACKET_FANOUT setsockopt system calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96508 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d199fab63c11998a602205f7ee7ff7c05c97164b - https://source.android.com/security/bulletin/
t/torvalds/linux.git/commit/?id=d199fab63c11998a602205f7ee7ff7c05c97164b - https://source.android.com/security/bulletin/2017-09-01 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.13 - http://www.openwall.com/lists/oss-security/2017/02/28/6 - http://www.debian.org/security/2017/dsa-3804 - https://github.com/torvalds/linux/commit/d199fab63c11998a602205f7ee7ff7c05c97164b
CVE ID: CVE-2017-6347 State: PUBLISHED Published: 2017-03-01T20:00:00 Last Updated: 2024-08-05T15:25:49.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ip_cmsg_recv_checksum function in net/ipv4/ip_sockglue.c in the Linux kernel before 4.10.1 has incorrect expectations about skb data layout, which allows local users to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted system calls, as demonstrated by use of the MSG_MORE flag in conjunction with loopback UDP transmission. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1427984 - http://git.kernel.org/cgit/linux/ker
gram Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1427984 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ca4ef4574f1ee5252e2cd365f8f5d5bafd048f32 - http://www.openwall.com/lists/oss-security/2017/02/28/5 - https://github.com/torvalds/linux/commit/ca4ef4574f1ee5252e2cd365f8f5d5bafd048f32 - http://www.securityfocus.com/bid/96487 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.1
CVE ID: CVE-2017-6348 State: PUBLISHED Published: 2017-03-01T20:00:00 Last Updated: 2024-08-05T15:25:49.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hashbin_delete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping, which allows local users to cause a denial of service (deadlock) via crafted operations on IrDA devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.13 - http://www.securityfocus.com/bid/96483 - https://usn.ubuntu.com/3754-1/ - http://www.openwall.com/lists/oss-security/2017/02/28/4 - http://www.debian.org/security/2017/dsa-3804 - ht
om/3754-1/ - http://www.openwall.com/lists/oss-security/2017/02/28/4 - http://www.debian.org/security/2017/dsa-3804 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4c03b862b12f980456f9de92db6d508a4999b788 - https://github.com/torvalds/linux/commit/4c03b862b12f980456f9de92db6d508a4999b788
CVE ID: CVE-2017-6349 State: PUBLISHED Published: 2017-02-27T07:25:00 Last Updated: 2024-08-05T15:25:49.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201706-26 - http://www.securitytracker.com/id/1037949 - https://github.com/vim/vim/commit/3eb1637b1bba19519885dd6d377bd5596e91d22c - http://www.securityfocus.com/bid/96451 - https://groups.goog
m/vim/vim/commit/3eb1637b1bba19519885dd6d377bd5596e91d22c - http://www.securityfocus.com/bid/96451 - https://groups.google.com/forum/#%21topic/vim_dev/LAgsTcdSfNA - https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y - https://usn.ubuntu.com/4309-1/
CVE ID: CVE-2017-6350 State: PUBLISHED Published: 2017-02-27T07:25:00 Last Updated: 2024-08-05T15:25:49.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201706-26 - http://www.securitytracker.com/id/1037949 - https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75 - https://groups.google.com/forum/#%21topic/vim_dev/L_dOH
ub.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75 - https://groups.google.com/forum/#%21topic/vim_dev/L_dOHOOiQ5Q - http://www.securityfocus.com/bid/96448 - https://groups.google.com/forum/#%21topic/vim_dev/QPZc0CY9j3Y - https://usn.ubuntu.com/4309-1/
CVE ID: CVE-2017-6351 State: PUBLISHED Published: 2017-03-06T02:00:00 Last Updated: 2024-08-05T15:25:49.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / password. Once the device is set to DEBUG mode, an attacker can connect to the device using the telnet protocol and log into the device with the 'abarco' hardcoded manufacturer account. This account is not documented, nor is the DEBUG feature or the use of telnetd on port tcp/5885. Additional Analyst Notes: - CVE Program Container: References: - http://www.wepresentwifi.com/ - https://www.exploit-db.com/exploits/4148
t Notes: - CVE Program Container: References: - http://www.wepresentwifi.com/ - https://www.exploit-db.com/exploits/41480/ - http://www.securityfocus.com/bid/96588
CVE ID: CVE-2017-6353 State: PUBLISHED Published: 2017-03-01T20:00:00 Last Updated: 2024-08-05T15:25:49.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service (invalid unlock and double free) via a multithreaded application. NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-5986. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/dfcb9f4f99f1e9a49e43398a7bfbf56927544af1 - http://git.kernel.org/cgit/linux/kernel/git/
github.com/torvalds/linux/commit/dfcb9f4f99f1e9a49e43398a7bfbf56927544af1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dfcb9f4f99f1e9a49e43398a7bfbf56927544af1 - http://www.securityfocus.com/bid/96473 - http://www.openwall.com/lists/oss-security/2017/02/27/2 - http://www.debian.org/security/2017/dsa-3804
CVE ID: CVE-2017-6355 State: PUBLISHED Published: 2017-03-10T02:00:00 Last Updated: 2024-08-05T15:25:49.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (process crash) via crafted pkt_length and offlen values, which trigger an out-of-bounds access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96460 - https://security.gentoo.org/glsa/201707-06 - https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html - http://www.openwall.com/lists/oss-sec
s://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html - http://www.openwall.com/lists/oss-security/2017/02/27/3 - https://cgit.freedesktop.org/virglrenderer/commit/?id=93761787b29f37fa627dea9082cdfc1a1ec608d6
CVE ID: CVE-2017-6356 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:25:49.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Palo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak permissions for unspecified resources, which allows attackers to obtain sensitive session information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96925 - https://security.paloaltonetworks.com/CVE-2017-6356
CVE ID: CVE-2017-6359 State: PUBLISHED Published: 2017-03-23T16:00:00 Last Updated: 2024-08-05T15:25:49.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97072 - https://www.qnap.com/en/support/con_show.php?cid=113 - https://www.exploit-db.com/exploits/41842/ - http://www.securitytracker.com/id/1038091 - https://www.qnap.com/en-us/releasenotes/ - http://www.securityfocus.com/bid/97059
CVE ID: CVE-2017-6360 State: PUBLISHED Published: 2017-03-23T16:00:00 Last Updated: 2024-08-05T15:25:49.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97072 - https://www.qnap.com/en/support/con_show.php?cid=113 - https://www.exploit-db.com/exploits/41842/ - http://www.securitytracker.com/id/1038091 - https://www.qnap.com/en-us/releasenotes/ - http://www.securityfocus.com/bid/97059
CVE ID: CVE-2017-6361 State: PUBLISHED Published: 2017-03-23T16:00:00 Last Updated: 2024-08-05T15:25:49.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: QNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97072 - https://www.qnap.com/en/support/con_show.php?cid=113 - https://www.exploit-db.com/exploits/41842/ - http://www.securitytracker.com/id/1038091 - http://www.securityfocus.com/bid/97059
CVE ID: CVE-2017-6362 State: PUBLISHED Published: 2017-09-07T13:00:00 Last Updated: 2024-08-05T15:25:49.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libgd/libgd/releases/tag/gd-2.2.5 - https://github.com/libgd/libgd/issues/381 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N2BLXX7KNRE7ZVQAKGTHHWS33CUCXVUP/ - http://www.debian.org/security/2017/dsa-3961
CVE ID: CVE-2017-6363 State: PUBLISHED Published: 2020-02-27T04:06:43 Last Updated: 2024-08-05T15:25:49.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c. NOTE: the vendor says "In my opinion this issue should not have a CVE, since the GD and GD2 formats are documented to be 'obsolete, and should only be used for development and testing purposes.' Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libgd/libgd/issues/383
CVE ID: CVE-2017-6366 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:25:49.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0.20 through 10.0.0.50 allows remote attackers to hijack the authentication of users for requests that perform DNS lookups via the host_name parameter to dnslookup.cgi. NOTE: this issue can be combined with CVE-2017-6334 to execute arbitrary code remotely. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41472/
CVE ID: CVE-2017-6367 State: PUBLISHED Published: 2017-03-14T09:02:00 Last Updated: 2024-08-05T15:25:49.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an invalid Content-Length header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96887 - https://www.exploit-db.com/exploits/41596/
CVE ID: CVE-2017-6369 State: PUBLISHED Published: 2017-03-24T10:00:00 Last Updated: 2024-08-05T15:25:49.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from fbudf.so. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3824 - http://tracker.firebirdsql.org/browse/CORE-5474 - http://www.securityfocus.com/bid/97070 - https://usn.ubuntu.com/3929-1/
CVE ID: CVE-2017-6370 State: PUBLISHED Published: 2017-03-17T17:00:00 Last Updated: 2024-08-05T15:25:49.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97071 - https://github.com/faizzaidi/TYPO3-v7.6.15-Unencrypted-Login-Request
CVE ID: CVE-2017-6371 State: PUBLISHED Published: 2020-02-27T04:14:30 Last Updated: 2024-08-05T15:25:49.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Synchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service (service crash) via a long string in the HTTP Referer header. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/141396/Synchronet-BBS-3.16c-For-Windows-Denial-Of-Service.html - https://www.exploit-db.com/exploits/41475/
CVE ID: CVE-2017-6377 State: PUBLISHED Published: 2017-03-16T14:00:00 Last Updated: 2024-08-05T15:25:49.267Z Vendors: Drupal Products: Drupal Core Problem Types: Access Bypass Description: When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038058 - https://www.drupal.org/SA-2017-001 - http://www.securityfocus.com/bid/96919
CVE ID: CVE-2017-6379 State: PUBLISHED Published: 2017-03-16T14:00:00 Last Updated: 2024-08-05T15:25:49.262Z Vendors: Drupal Products: Drupal Core Problem Types: Cross Site Request Forgery Description: Some administrative paths in Drupal 8.2.x before 8.2.7 did not include protection for CSRF. This would allow an attacker to disable some blocks on a site. This issue is mitigated by the fact that users would have to know the block ID. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038058 - https://www.drupal.org/SA-2017-001 - http://www.securityfocus.com/bid/96919
CVE ID: CVE-2017-6381 State: PUBLISHED Published: 2017-03-16T14:00:00 Last Updated: 2024-08-05T15:25:49.286Z Vendors: Drupal Products: Drupal Core Problem Types: Remote code execution Description: A 3rd party development library including with Drupal 8 development dependencies is vulnerable to remote code execution. This is mitigated by the default .htaccess protection against PHP execution, and the fact that Composer development dependencies aren't normal installed. You might be vulnerable to this if you are running a version of Drupal before 8.2.2. To be sure you aren't vulnerable, you can remove the <siteroot>/vendor/phpunit directory from your production deployments Additional Analyst No
ulnerable, you can remove the <siteroot>/vendor/phpunit directory from your production deployments Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038058 - https://www.drupal.org/SA-2017-001 - http://www.securityfocus.com/bid/96919
CVE ID: CVE-2017-6383 State: REJECTED Published: 2017-06-26T13:00:00 Last Updated: 2017-06-26T12:57:01 Description: No description available.
CVE ID: CVE-2017-6384 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the login_user function in saslserv/main.c in saslserv/main.so in Atheme 7.2.7 allows a remote unauthenticated attacker to consume memory and cause a denial of service. This is fixed in 7.2.8. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96552 - https://github.com/atheme/atheme/releases/tag/v7.2.8 - https://github.com/atheme/atheme/pull/539
CVE ID: CVE-2017-6386 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:25:49.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_OBJECT_VERTEX_ELEMENTS commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/03/01/7 - https://security.gentoo.org/glsa/201707-06 - https://cgit.freedesktop.org/virglrenderer/commit/?id=737c3350850ca4dbc5633b3bdb4118176ce59920 - http://www.securityfocu
https://cgit.freedesktop.org/virglrenderer/commit/?id=737c3350850ca4dbc5633b3bdb4118176ce59920 - http://www.securityfocus.com/bid/96506 - https://bugzilla.redhat.com/show_bug.cgi?id=1427472
CVE ID: CVE-2017-6387 State: PUBLISHED Published: 2017-03-02T01:00:00 Last Updated: 2024-08-05T15:25:49.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dex_loadcode function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DEX file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96521 - https://github.com/radare/radare2/commit/ead645853a63bf83d8386702cad0cf23b31d7eeb - https://github.com/radare/radare2/issues/6857
CVE ID: CVE-2017-6390 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in whatanime.ga before c334dd8499a681587dd4199e90b0aa0eba814c1d. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "whatanime.ga-master/index.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96555 - https://github.com/soruly/whatanime.ga/commit/c334dd8499a681587dd4199e90b0aa0eba814c1d - https:/
tyfocus.com/bid/96555 - https://github.com/soruly/whatanime.ga/commit/c334dd8499a681587dd4199e90b0aa0eba814c1d - https://github.com/soruly/whatanime.ga/issues/8
CVE ID: CVE-2017-6391 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "admin_console/web/tools/SimpleJWPlayer.php" URL, the "admin_console/web/tools/AkamaiBroadcaster.php" URL, the "admin_console/web/tools/bigRedButton.php" URL, and the "admin_console/web/tools/bigRedButtonPtsPoc.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container:
d script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96534 - https://github.com/kaltura/server/issues/5300 - https://github.com/kaltura/server/commit/041a6d5e8336f7713985b120139c8f4b6279a337
CVE ID: CVE-2017-6392 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "server-Lynx-12.11.0/admin_console/web/tools/XmlJWPlayer.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96534 - https://github.com/kaltura/server/issues/5303 - https://github.com/kaltura/server/commit/041a6d5e83
ocus.com/bid/96534 - https://github.com/kaltura/server/issues/5303 - https://github.com/kaltura/server/commit/041a6d5e8336f7713985b120139c8f4b6279a337
CVE ID: CVE-2017-6393 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NagVis 1.9b12. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "nagvis-master/share/userfiles/gadgets/std_table.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NagVis/nagvis/issues/91 - http://www.securityfocus.com/bid/96537
CVE ID: CVE-2017-6394 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) issues were discovered in OpenEMR 5.0.0 and 5.0.1-dev. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to the "openemr-master/gacl/admin/object_search.php" URL (section_value; src_form). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96576 - http://www.securityfocus.com/bid/96539 - https://gith
Container: References: - http://www.securityfocus.com/bid/96576 - http://www.securityfocus.com/bid/96539 - https://github.com/openemr/openemr/issues/498