Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-18235 State: PUBLISHED Published: 2018-03-15T19:00:00Z Last Updated: 2024-09-17T00:56:54.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Exempi before 2.4.3. The VPXChunk class in XMPFiles/source/FormatSupport/WEBP_Support.cpp does not ensure nonzero widths and heights, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted .webp file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.freedesktop.org/show_bug.cgi?id=101913 - https://cgit.freedesktop.org/exempi/commit/?id=9e76a7782a54a242f18d609e7ba32bf1c430a5e4
CVE ID: CVE-2017-18236 State: PUBLISHED Published: 2018-03-15T19:00:00 Last Updated: 2024-08-05T21:13:49.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Exempi before 2.4.4. The ASF_Support::ReadHeaderObject function in XMPFiles/source/FormatSupport/ASF_Support.cpp allows remote attackers to cause a denial of service (infinite loop) via a crafted .asf file. Additional Analyst Notes: - CVE Program Container: References: - https://cgit.freedesktop.org/exempi/commit/?id=fe59605d3520bf2ca4e0a963d194f10e9fee5806 - https://bugs.freedesktop.org/show_bug.cgi?id=102484 - https://lists.debian.org/debian-lts-announce/2018/03/msg00013.html - https://usn.ubuntu.
op.org/show_bug.cgi?id=102484 - https://lists.debian.org/debian-lts-announce/2018/03/msg00013.html - https://usn.ubuntu.com/3668-1/ - https://access.redhat.com/errata/RHSA-2019:2048
CVE ID: CVE-2017-18237 State: PUBLISHED Published: 2018-03-15T19:00:00Z Last Updated: 2024-09-17T02:21:40.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Exempi before 2.4.3. The PostScript_Support::ConvertToDate function in XMPFiles/source/FormatSupport/PostScript_Support.cpp allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via a crafted .ps file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.freedesktop.org/show_bug.cgi?id=101914 - https://cgit.freedesktop.org/exempi/commit/?id=f19d0107fbae1fb41836cd110d4425e407e64048
CVE ID: CVE-2017-18238 State: PUBLISHED Published: 2018-03-15T19:00:00 Last Updated: 2024-08-05T21:13:49.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Exempi before 2.4.4. The TradQT_Manager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTime_Support.cpp allows remote attackers to cause a denial of service (infinite loop) via crafted XMP data in a .qt file. Additional Analyst Notes: - CVE Program Container: References: - https://cgit.freedesktop.org/exempi/commit/?id=886cd1d2314755adb1f4cdb99c16ff00830f0331 - https://bugs.freedesktop.org/show_bug.cgi?id=102483 - https://lists.debian.org/debian-lts-announce/2018/03/msg00013.html -
tps://bugs.freedesktop.org/show_bug.cgi?id=102483 - https://lists.debian.org/debian-lts-announce/2018/03/msg00013.html - https://usn.ubuntu.com/3668-1/ - https://access.redhat.com/errata/RHSA-2019:2048
CVE ID: CVE-2017-18239 State: PUBLISHED Published: 2018-03-18T03:00:00 Last Updated: 2024-08-05T21:13:49.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: A time-sensitive equality check on the JWT signature in the JsonWebToken.validate method in main/scala/authentikat/jwt/JsonWebToken.scala in authentikat-jwt (aka com.jason-goodwin/authentikat-jwt) version 0.4.5 and earlier allows the supplier of a JWT token to guess bit after bit of the signature by repeating validation requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jasongoodwin/authentikat-jwt/commit/2d2fa0d40ac8f2f7aa7e9b070fa1a25eee082cb0 - https://github.com/jasongoodwin/auth
.com/jasongoodwin/authentikat-jwt/commit/2d2fa0d40ac8f2f7aa7e9b070fa1a25eee082cb0 - https://github.com/jasongoodwin/authentikat-jwt/issues/12 - https://github.com/jasongoodwin/authentikat-jwt/pull/36
CVE ID: CVE-2017-18240 State: PUBLISHED Published: 2018-03-19T02:00:00 Last Updated: 2024-08-05T21:13:49.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL (when the service is stopped). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201803-10 - http://www.securityfocus.com/bid/103469 - https://bugs.gentoo.org/628540
CVE ID: CVE-2017-18241 State: PUBLISHED Published: 2018-03-21T16:00:00 Last Updated: 2024-08-05T21:13:49.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/f2fs/segment.c in the Linux kernel before 4.13 allows local users to cause a denial of service (NULL pointer dereference and panic) by using a noflush_merge option that triggers a NULL value for a flush_cmd_control data structure. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4187 - https://github.com/torvalds/linux/commit/d4fdf8ba0e5808ba9ad6b44337783bd9935e0982 - https://usn.ubuntu.com/3910-1/ - https://www.debian.org/security/2018/dsa-4188 - https://usn.ubuntu.
337783bd9935e0982 - https://usn.ubuntu.com/3910-1/ - https://www.debian.org/security/2018/dsa-4188 - https://usn.ubuntu.com/3910-2/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d4fdf8ba0e5808ba9ad6b44337783bd9935e0982
CVE ID: CVE-2017-18242 State: PUBLISHED Published: 2018-03-22T21:00:00Z Last Updated: 2024-09-17T02:16:46.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: The apply_dependent_coupling function in libavcodec/aacdec.c in Libav 12.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted aac file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1093
CVE ID: CVE-2017-18243 State: PUBLISHED Published: 2018-03-22T21:00:00Z Last Updated: 2024-09-17T03:33:57.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unpack_parse_unit function in libavcodec/dirac_parser.c in Libav 12.2 allows remote attackers to cause a denial of service (segmentation fault) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1088
CVE ID: CVE-2017-18244 State: PUBLISHED Published: 2018-03-22T21:00:00Z Last Updated: 2024-09-17T00:25:59.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: The stereo_processing function in libavcodec/aacps.c in Libav 12.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted aac file, related to ff_ps_apply. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1105
CVE ID: CVE-2017-18245 State: PUBLISHED Published: 2018-03-23T19:00:00 Last Updated: 2024-08-05T21:13:49.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mpc8_probe function in libavformat/mpc8.c in Libav 12.2 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1094 - https://lists.debian.org/debian-lts-announce/2019/12/msg00003.html
CVE ID: CVE-2017-18246 State: PUBLISHED Published: 2018-03-23T19:00:00Z Last Updated: 2024-09-17T01:56:34.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pcm_encode_frame function in libavcodec/pcm.c in Libav 12.2 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted media file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1095
CVE ID: CVE-2017-18247 State: PUBLISHED Published: 2018-03-23T19:00:00Z Last Updated: 2024-09-17T04:29:27.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: The av_audio_fifo_size function in libavutil/audio_fifo.c in Libav 12.2 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted media file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1089
CVE ID: CVE-2017-18248 State: PUBLISHED Published: 2018-03-26T17:00:00 Last Updated: 2024-08-05T21:13:49.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/05/msg00018.html - https://github.com/apple/cups/issues/5143 - https://lists.debian.org/debian-lts-announce/2018/07/msg00003.html - https://usn.ubuntu.com/3713-1/ - https://security.cucumberlinux.com/securit
/debian-lts-announce/2018/07/msg00003.html - https://usn.ubuntu.com/3713-1/ - https://security.cucumberlinux.com/security/details.php?id=346 - https://github.com/apple/cups/releases/tag/v2.2.6 - https://github.com/apple/cups/commit/49fa4983f25b64ec29d548ffa3b9782426007df3
CVE ID: CVE-2017-18249 State: PUBLISHED Published: 2018-03-26T20:00:00 Last Updated: 2024-08-05T21:13:49.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: The add_free_nid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly track an allocated nid, which allows local users to cause a denial of service (race condition) or possibly have unspecified other impact via concurrent threads. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041432 - https://github.com/torvalds/linux/commit/30a61ddf8117c26ac5b295e1233eaa9629a94ca3 - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - http://git.ker
df8117c26ac5b295e1233eaa9629a94ca3 - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=30a61ddf8117c26ac5b295e1233eaa9629a94ca3 - https://usn.ubuntu.com/3932-1/ - https://usn.ubuntu.com/3932-2/
CVE ID: CVE-2017-18250 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T21:13:49.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ImageMagick 7.0.7. A NULL pointer dereference vulnerability was found in the function LogOpenCLBuildFailure in MagickCore/opencl.c, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/793
CVE ID: CVE-2017-18251 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T21:13:49.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, which allow remote attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/809
CVE ID: CVE-2017-18252 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T21:13:49.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service (assertion failure and application exit in ReplaceImageInList) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/802 - https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html
CVE ID: CVE-2017-18253 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T21:13:49.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ImageMagick 7.0.7. A NULL pointer dereference vulnerability was found in the function LoadOpenCLDevices in MagickCore/opencl.c, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/794
CVE ID: CVE-2017-18254 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T21:13:49.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which allow remote attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/808
CVE ID: CVE-2017-18255 State: PUBLISHED Published: 2018-03-31T17:00:00 Last Updated: 2024-08-05T21:13:49.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: The perf_cpu_time_max_percent_handler function in kernel/events/core.c in the Linux kernel before 4.11 allows local users to cause a denial of service (integer overflow) or possibly have unspecified other impact via a large value, as demonstrated by an incorrect sample-rate calculation. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3696-1/ - https://usn.ubuntu.com/3754-1/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html - http://git.kernel.org/cgit/linux/kernel/git
54-1/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1572e45a924f254d9570093abde46430c3172e3d - http://www.securityfocus.com/bid/103607 - https://usn.ubuntu.com/3696-2/ - https://github.com/torvalds/linux/commit/1572e45a924f254d9570093abde46430c3172e3d
CVE ID: CVE-2017-18256 State: PUBLISHED Published: 2018-04-04T02:00:00 Last Updated: 2024-08-05T21:13:49.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brave Browser before 0.13.0 allows remote attackers to cause a denial of service (resource consumption) via a long alert() argument in JavaScript code, because window dialogs are mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/176066 - https://www.exploit-db.com/exploits/44474/
CVE ID: CVE-2017-18257 State: PUBLISHED Published: 2018-04-04T17:00:00 Last Updated: 2024-08-05T21:13:49.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __get_data_block function in fs/f2fs/data.c in the Linux kernel before 4.11 allows local users to cause a denial of service (integer overflow and loop) via crafted use of the open and fallocate system calls with an FS_IOC_FIEMAP ioctl. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3696-1/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b86e33075ed1909d8002745b56ecf73b833db143 - https://github.com/torvalds/linux/commit/b86e33075ed1909d8002745b56ecf73b833
=b86e33075ed1909d8002745b56ecf73b833db143 - https://github.com/torvalds/linux/commit/b86e33075ed1909d8002745b56ecf73b833db143 - https://www.debian.org/security/2018/dsa-4188 - https://usn.ubuntu.com/3696-2/
CVE ID: CVE-2017-18258 State: PUBLISHED Published: 2018-04-08T17:00:00 Last Updated: 2024-08-05T21:13:49.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, because the decoder functionality does not restrict memory usage to what is required for a legitimate file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00035.html - https://usn.ubuntu.com/3739-1/ - https://git.gnome.org/browse/libxml2/commit/?id=e2a9122b8dde53d320750451e9907a7dcb2ca8bb - https://kc
untu.com/3739-1/ - https://git.gnome.org/browse/libxml2/commit/?id=e2a9122b8dde53d320750451e9907a7dcb2ca8bb - https://kc.mcafee.com/corporate/index?page=content&id=SB10284 - https://security.netapp.com/advisory/ntap-20190719-0001/ - https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html
CVE ID: CVE-2017-18259 State: PUBLISHED Published: 2018-04-11T03:00:00 Last Updated: 2024-08-05T21:13:49.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr ERP/CRM is affected by stored Cross-Site Scripting (XSS) in versions through 7.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-008
CVE ID: CVE-2017-18260 State: PUBLISHED Published: 2018-04-11T03:00:00 Last Updated: 2024-08-05T21:13:49.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr ERP/CRM is affected by multiple SQL injection vulnerabilities in versions through 7.0.0 via comm/propal/list.php (viewstatut parameter) or comm/propal/list.php (propal_statut parameter, aka search_statut parameter). Additional Analyst Notes: - CVE Program Container: References: - https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-010
CVE ID: CVE-2017-18261 State: PUBLISHED Published: 2018-04-19T08:00:00 Last Updated: 2024-08-05T21:13:49.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: The arch_timer_reg_read_stable macro in arch/arm64/include/asm/arch_timer.h in the Linux kernel before 4.13 allows local users to cause a denial of service (infinite recursion) by writing to a file under /sys/kernel/debug in certain circumstances, as demonstrated by a scenario involving debugfs, ftrace, PREEMPT_TRACER, and FUNCTION_GRAPH_TRACER. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=adb4f11e0a8f4e29900adb2b7af28b6bbd5c1fa4 - h
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=adb4f11e0a8f4e29900adb2b7af28b6bbd5c1fa4 - https://github.com/torvalds/linux/commit/adb4f11e0a8f4e29900adb2b7af28b6bbd5c1fa4
CVE ID: CVE-2017-18262 State: PUBLISHED Published: 2018-04-30T13:00:00 Last Updated: 2024-08-05T21:13:49.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blackboard Learn (Since at least 17th of October 2017) has allowed Unvalidated Redirects on any signed-in user through its endpoints for handling Shibboleth logins, as demonstrated by a webapps/bb-auth-provider-shibboleth-BBLEARN/execute/shibbolethLogin?returnUrl= URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040767 - http://seclists.org/fulldisclosure/2018/Apr/57 - https://ethan.pm/blackboard.txt
CVE ID: CVE-2017-18263 State: PUBLISHED Published: 2018-04-28T01:00:00Z Last Updated: 2024-09-16T20:07:40.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Seagate Media Server in Seagate Personal Cloud before 4.3.18.4 has directory traversal in getPhotoPlaylistPhotos.psp via a parameter named url. Additional Analyst Notes: - CVE Program Container: References: - https://sumofpwn.nl/advisory/2017/seagate-media-server-path-traversal-vulnerability.html - https://packetstormsecurity.com/files/147274/Seagate-Media-Server-Path-Traversal.html
CVE ID: CVE-2017-18264 State: PUBLISHED Published: 2018-05-01T17:00:00 Last Updated: 2024-08-05T21:13:49.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases. The restrictions caused by $cfg['Servers'][$i]['AllowNoPassword'] = false are bypassed under certain PHP versions (e.g., version 5). This can allow the login of users who have no password set even if the administrator has set $cfg['Servers'][$i]['AllowNoPassword'] to false (which is also the default). This occurs because some implementations of the PHP substr function return false when given '' as the f
so the default). This occurs because some implementations of the PHP substr function return false when given '' as the first argument. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2017-8/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00006.html - http://www.securityfocus.com/bid/97211
CVE ID: CVE-2017-18265 State: PUBLISHED Published: 2018-05-09T17:00:00 Last Updated: 2024-08-05T21:13:49.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in, for example, the c2s module. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4198 - https://hg.prosody.im/0.9/rev/176b7f4e4ac9 - https://hg.prosody.im/0.9/rev/adfffc5b4e2a -
n.org/security/2018/dsa-4198 - https://hg.prosody.im/0.9/rev/176b7f4e4ac9 - https://hg.prosody.im/0.9/rev/adfffc5b4e2a - https://prosody.im/issues/issue/987 - https://bugs.debian.org/875829
CVE ID: CVE-2017-18266 State: PUBLISHED Published: 2018-05-10T14:00:00 Last Updated: 2024-08-05T21:13:49.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by %s in this environment variable. Additional Analyst Notes: - CVE Program Container: References: - https://cgit.freedesktop.org/xdg/xdg-utils/commit/?id=ce802d71c3466d1dbb24f2fe9b6db82a1f899bcb - https://cgit.freedesktop.org/xdg/xdg-utils/tree/ChangeLog -
utils/commit/?id=ce802d71c3466d1dbb24f2fe9b6db82a1f899bcb - https://cgit.freedesktop.org/xdg/xdg-utils/tree/ChangeLog - https://usn.ubuntu.com/3650-1/ - https://lists.debian.org/debian-lts-announce/2018/05/msg00014.html - https://www.debian.org/security/2018/dsa-4211 - https://bugs.freedesktop.org/show_bug.cgi?id=103807 - https://cgit.freedesktop.org/xdg/xdg-utils/commit/?id=5647afb35e4bcba2060148e1a2a47bc43cc240f2
CVE ID: CVE-2017-18267 State: PUBLISHED Published: 2018-05-10T15:00:00 Last Updated: 2024-08-05T21:13:49.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service (infinite recursion) via a crafted PDF file, as demonstrated by pdftops. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.freedesktop.org/show_bug.cgi?id=103238 - https://lists.debian.org/debian-lts-announce/2018/10/msg00024.html - https://access.redhat.com/errata/RHSA-2018:3505 - https://usn.ubuntu.com/3647-1/ - https://access.redhat.com/errata/RHSA-2018:3140
ess.redhat.com/errata/RHSA-2018:3505 - https://usn.ubuntu.com/3647-1/ - https://access.redhat.com/errata/RHSA-2018:3140 - https://access.redhat.com/errata/RHBA-2019:0327 - https://lists.debian.org/debian-lts-announce/2020/07/msg00018.html
CVE ID: CVE-2017-18268 State: PUBLISHED Published: 2018-05-17T13:00:00Z Last Updated: 2024-09-16T17:47:49.551Z Vendors: Symantec Corporation Products: IntelligenceCenter Problem Types: Information disclosure Description: Symantec IntelligenceCenter 3.3 is vulnerable to the Return of the Bleichenbacher Oracle Threat (ROBOT) attack. A remote attacker, who has captured a pre-recorded SSL session inspected by SSLV, can establish large numbers of crafted SSL connections to the target and obtain the session keys required to decrypt the pre-recorded SSL session. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security-center/network-protection-security-advi