Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-9729 State: PUBLISHED Published: 2017-06-16T15:00:00Z Last Updated: 2024-09-16T17:28:49.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled recursion) in the check_dst_limits_calc_pos_1 function in misc/regex/regexec.c when processing a crafted regular expression. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/06/16/4
CVE ID: CVE-2017-9730 State: PUBLISHED Published: 2017-06-19T12:00:00 Last Updated: 2024-08-05T17:18:01.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42193/
CVE ID: CVE-2017-9731 State: PUBLISHED Published: 2017-06-16T15:00:00 Last Updated: 2024-08-05T17:18:01.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: In meta/classes/package_ipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package. Additional Analyst Notes: - CVE Program Container: References: - http://git.yoctoproject.org/cgit/cgit.cgi/poky/patch/?id=f01b909a266498853e6b3f10e6b39f2d95148129
CVE ID: CVE-2017-9732 State: PUBLISHED Published: 2018-12-20T22:00:00 Last Updated: 2024-08-05T17:18:01.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_packet function in knc (Kerberised NetCat) before 1.11-1 is vulnerable to denial of service (memory exhaustion) that can be exploited remotely without authentication, possibly affecting another services running on the targeted host. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/elric1/knc/commit/f237f3e09ecbaf59c897f5046538a7b1a3fa40c1 - http://seclists.org/fulldisclosure/2018/Nov/65 - http://packetstormsecurity.com/files/150534/knc-Kerberized-NetCat-Denial-Of-Service.html - https
isclosure/2018/Nov/65 - http://packetstormsecurity.com/files/150534/knc-Kerberized-NetCat-Denial-Of-Service.html - https://github.com/irsl/knc-memory-exhaustion/
CVE ID: CVE-2017-9735 State: PUBLISHED Published: 2017-06-16T21:00:00 Last Updated: 2024-08-05T17:18:01.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99104 - https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d
3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://lists.apache.org/thread.html/36870f6c51f5bc25e6f7bb1fcace0e57e81f1524019b11f466738559%40%3Ccommon-dev.hadoop.apache.org%3E - https://lists.apache.org/thread.html/f887a5978f5e4c62b9cfe876336628385cff429e796962649649ec8a%40%3Ccommon-issues.hadoop.apache.org%3E - https://www.or
d.html/f887a5978f5e4c62b9cfe876336628385cff429e796962649649ec8a%40%3Ccommon-issues.hadoop.apache.org%3E - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://bugs.debian.org/864631 - https://github.com/eclipse/jetty.project/issues/1556 - https://lists.debian.org/debian-lts-announce/2021/05/msg00016.html - https://www.oracle.com//security-alerts/cpujul2021.html
CVE ID: CVE-2017-9736 State: PUBLISHED Published: 2017-06-17T16:00:00 Last Updated: 2024-08-05T17:18:01.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: SPIP 3.1.x before 3.1.6 and 3.2.x before Beta 3 does not remove shell metacharacters from the host field, allowing a remote attacker to cause remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3890 - https://core.spip.net/projects/spip/repository/revisions/23593 - https://contrib.spip.net/CRITICAL-security-update-SPIP-3-1-6-and-SPIP-3-2-Beta - https://core.spip.net/projects/spip/repository/revisions/23594
CVE ID: CVE-2017-9739 State: PUBLISHED Published: 2017-07-26T19:00:00 Last Updated: 2024-08-05T17:18:01.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ins_JMPR function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-12 - https://bugs.ghostscript.com/show_bug.cgi?id=698063 - http://www.debian.org/security/2017/dsa-3986 - http://www.securityfocus.com/bid/99987 - http://git.ghostscript.com/?p=g
http://www.debian.org/security/2017/dsa-3986 - http://www.securityfocus.com/bid/99987 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=c501a58f8d5650c8ba21d447c0d6f07eafcb0f15
CVE ID: CVE-2017-9740 State: PUBLISHED Published: 2017-07-26T19:00:00 Last Updated: 2024-08-05T17:18:01.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xps_decode_font_char_imp function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-12 - http://www.securityfocus.com/bid/99983 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=961b10cdd71403072fb99401a45f3bef6ce53626 - https://bugs.ghos
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=961b10cdd71403072fb99401a45f3bef6ce53626 - https://bugs.ghostscript.com/show_bug.cgi?id=698064
CVE ID: CVE-2017-9741 State: PUBLISHED Published: 2017-06-18T21:00:00 Last Updated: 2024-08-05T17:18:01.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: install/make-config.php in ProjectSend r754 allows remote attackers to execute arbitrary PHP code via the dbprefix parameter, related to replacing TABLES_PREFIX in the configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/XiaoZhis/ProjectSend/issues/1
CVE ID: CVE-2017-9742 State: PUBLISHED Published: 2017-06-19T04:00:00 Last Updated: 2024-08-05T17:18:02.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21576 - https://security.gentoo.org/glsa/201709-02 - http://www.securityfocus.com/bid/99105 - https://www.expl
ug.cgi?id=21576 - https://security.gentoo.org/glsa/201709-02 - http://www.securityfocus.com/bid/99105 - https://www.exploit-db.com/exploits/42203/
CVE ID: CVE-2017-9743 State: PUBLISHED Published: 2017-06-19T04:00:00 Last Updated: 2024-08-05T17:18:01.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: The print_insn_score32 function in opcodes/score7-dis.c:552 in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21577 - http://www.securityfocus.com/bid/99106 - https://security.gentoo.org/glsa/201801-01
CVE ID: CVE-2017-9744 State: PUBLISHED Published: 2017-06-19T04:00:00 Last Updated: 2024-08-05T17:18:01.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sh_elf_set_mach_from_flags function in bfd/elf32-sh.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21578 - http://www.securityfo
es: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21578 - http://www.securityfocus.com/bid/99108
CVE ID: CVE-2017-9745 State: PUBLISHED Published: 2017-06-19T04:00:00 Last Updated: 2024-08-05T17:18:01.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _bfd_vms_slurp_etir function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99109 - https://sourceware.org/bugzilla/show_bug.c
CVE Program Container: References: - http://www.securityfocus.com/bid/99109 - https://sourceware.org/bugzilla/show_bug.cgi?id=21579
CVE ID: CVE-2017-9746 State: PUBLISHED Published: 2017-06-19T04:00:00 Last Updated: 2024-08-05T17:18:01.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of rae insns printing for this file during "objdump -D" execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42199/ - https://security.gentoo.org/glsa/201801-01 - http://www.securityfocus.com/bid/99117 - https://sou
.com/exploits/42199/ - https://security.gentoo.org/glsa/201801-01 - http://www.securityfocus.com/bid/99117 - https://sourceware.org/bugzilla/show_bug.cgi?id=21580
CVE ID: CVE-2017-9747 State: PUBLISHED Published: 2017-06-19T04:00:00 Last Updated: 2024-08-05T17:18:01.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. NOTE: this may be related to a compiler bug. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99114 - ht
mpiler bug. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99114 - https://sourceware.org/bugzilla/show_bug.cgi?id=21581 - https://www.exploit-db.com/exploits/42200/
CVE ID: CVE-2017-9748 State: PUBLISHED Published: 2017-06-19T04:00:00 Last Updated: 2024-08-05T17:18:01.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. NOTE: this may be related to a compiler bug. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42202/ -
piler bug. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42202/ - https://sourceware.org/bugzilla/show_bug.cgi?id=21582 - http://www.securityfocus.com/bid/99110
CVE ID: CVE-2017-9749 State: PUBLISHED Published: 2017-06-19T04:00:00 Last Updated: 2024-08-05T17:18:01.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21586 - https://security.gentoo.org/glsa/201801-01 - http://www.securityfocus.com/bid/99113 - https://www.exploit-db.com/e
586 - https://security.gentoo.org/glsa/201801-01 - http://www.securityfocus.com/bid/99113 - https://www.exploit-db.com/exploits/42201/
CVE ID: CVE-2017-9750 State: PUBLISHED Published: 2017-06-19T04:00:00 Last Updated: 2024-08-05T17:18:01.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99118 - https://security.gentoo.org/glsa/201801-01 - https://www.exploit-db.com/exploits/42198/ - http
rityfocus.com/bid/99118 - https://security.gentoo.org/glsa/201801-01 - https://www.exploit-db.com/exploits/42198/ - https://sourceware.org/bugzilla/show_bug.cgi?id=21587
CVE ID: CVE-2017-9751 State: PUBLISHED Published: 2017-06-19T04:00:00 Last Updated: 2024-08-05T17:18:01.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201801-01 - http://www.securityfocus.com/bid/99111 - https://sourceware.org/bugzilla/show_bug.cgi?id=21588
CVE ID: CVE-2017-9752 State: PUBLISHED Published: 2017-06-19T04:00:00 Last Updated: 2024-08-05T17:18:01.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file in the _bfd_vms_get_value and _bfd_vms_slurp_etir functions during "objdump -D" execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99122 - https://sourceware
tional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99122 - https://sourceware.org/bugzilla/show_bug.cgi?id=21589
CVE ID: CVE-2017-9753 State: PUBLISHED Published: 2017-06-19T04:00:00 Last Updated: 2024-08-05T17:18:01.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: The versados_mkobject function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not initialize a certain data structure, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/sh
jdump -D" execution. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21591 - http://www.securityfocus.com/bid/99116
CVE ID: CVE-2017-9754 State: PUBLISHED Published: 2017-06-19T04:00:00 Last Updated: 2024-08-05T17:18:01.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21
ion. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21591 - http://www.securityfocus.com/bid/99125
CVE ID: CVE-2017-9755 State: PUBLISHED Published: 2017-06-19T04:00:00 Last Updated: 2024-08-05T17:18:01.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99124 - https://security.gentoo.org/glsa/201801-01 - https://sourceware.org/bugzilla/show_bug.c
ww.securityfocus.com/bid/99124 - https://security.gentoo.org/glsa/201801-01 - https://sourceware.org/bugzilla/show_bug.cgi?id=21594
CVE ID: CVE-2017-9756 State: PUBLISHED Published: 2017-06-19T04:00:00 Last Updated: 2024-08-05T17:18:01.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21595 - https://www.exploit-db.com/exploits/42204/ - https://security.gentoo.org/glsa/201801-01 -
zilla/show_bug.cgi?id=21595 - https://www.exploit-db.com/exploits/42204/ - https://security.gentoo.org/glsa/201801-01 - http://www.securityfocus.com/bid/99103
CVE ID: CVE-2017-9757 State: PUBLISHED Published: 2017-06-19T13:00:00 Last Updated: 2024-08-05T17:18:01.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell. This can be exploited directly by authenticated users, or through CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42149/ - https://twitter.com/0x09AL/status/873860385652256768 - http://www.securityfocus.com/bid/99173
CVE ID: CVE-2017-9758 State: PUBLISHED Published: 2017-11-09T19:00:00 Last Updated: 2024-08-05T17:18:02.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion." Additional Analyst Notes: - CVE Program Container: References: - https://zeroday.hitcon.org/vulnerability/ZD-2017-00386 - https://www.kb.cert.org/vuls/id/446847 - https://community.rsa.com/community/products/netwitness/blog/2017/10/27/inaudible-subversion-did-your-hi-fi-just-subvert-your-pc - http://www.securityfocus.com/bid/101700
CVE ID: CVE-2017-9759 State: PUBLISHED Published: 2017-06-19T14:00:00 Last Updated: 2024-08-05T17:18:01.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99147 - https://www.vulnerability-lab.com/get_content.php?id=2073
CVE ID: CVE-2017-9761 State: PUBLISHED Published: 2017-06-19T16:00:00 Last Updated: 2024-08-05T17:18:02.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/commit/00e8f205475332d7842d0f0d1481eeab4e83017c - https://github.com/radare/radare2/issues/7727 - http://www.securityfocus.com/bid/99138
CVE ID: CVE-2017-9762 State: PUBLISHED Published: 2017-06-19T16:00:00 Last Updated: 2024-08-05T17:18:01.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted binary file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/issues/7726 - http://www.securityfocus.com/bid/99140
CVE ID: CVE-2017-9763 State: PUBLISHED Published: 2017-06-19T16:00:00 Last Updated: 2024-08-05T17:18:01.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/issues/7723 - http://git.savannah.gnu.org/cgit/grub.git/commit/grub-core/fs/ext2.c?id=ac8cac1dac50daaf1c390d701cca3b55e16ee768 - https:
ttp://git.savannah.gnu.org/cgit/grub.git/commit/grub-core/fs/ext2.c?id=ac8cac1dac50daaf1c390d701cca3b55e16ee768 - https://github.com/radare/radare2/commit/65000a7fd9eea62359e6d6714f17b94a99a82edd - http://www.securityfocus.com/bid/99141
CVE ID: CVE-2017-9764 State: PUBLISHED Published: 2017-07-19T12:00:00 Last Updated: 2024-08-05T17:18:02.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MetInfo 5.3.17 allows remote attackers to inject arbitrary web script or HTML via the Client-IP or X-Forwarded-For HTTP header to /include/stat/stat.php in a para action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phantom0301/vulns/blob/master/Metinfo.md