Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-0855 State: PUBLISHED Published: 2018-01-12T23:00:00Z Last Updated: 2024-09-17T00:00:53.386Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: In MPEG4Extractor.cpp, there are several places where functions return early without cleaning up internal buffers which could lead to memory leaks. This could lead to remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64452857. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/
.0. Android ID: A-64452857. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-01-01 - http://www.securitytracker.com/id/1040106 - http://www.securityfocus.com/bid/102414
CVE ID: CVE-2017-0857 State: PUBLISHED Published: 2017-11-16T23:00:00Z Last Updated: 2024-09-16T18:39:29.277Z Vendors: Google Inc. Products: Android Problem Types: Other Description: Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65122447. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-11-01
CVE ID: CVE-2017-0858 State: PUBLISHED Published: 2017-11-16T23:00:00Z Last Updated: 2024-09-16T19:05:42.079Z Vendors: Google Inc. Products: Android Problem Types: Other Description: Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64836894. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-11-01
CVE ID: CVE-2017-0859 State: PUBLISHED Published: 2017-11-16T23:00:00Z Last Updated: 2024-09-16T23:20:38.785Z Vendors: Google Inc. Products: Android Problem Types: Other Description: Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36075131. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-11-01
CVE ID: CVE-2017-0860 State: PUBLISHED Published: 2017-11-16T23:00:00Z Last Updated: 2024-09-16T21:08:52.545Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Android system (inputdispatcher). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-31097064. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-11-01
CVE ID: CVE-2017-0861 State: PUBLISHED Published: 2017-11-16T23:00:00Z Last Updated: 2024-09-16T19:09:26.250Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3083 - https://www.debian.org/security/2018/dsa-4187 - https://usn.ubuntu.com/3617-1/ - https://usn.ubuntu.com/3619-2/ - https://usn.ubuntu.com/3617-3/ - https://usn.ubuntu.com/3583-2/ - https://usn.ubuntu.com/3632-1/ - https://acc
3619-2/ - https://usn.ubuntu.com/3617-3/ - https://usn.ubuntu.com/3583-2/ - https://usn.ubuntu.com/3632-1/ - https://access.redhat.com/errata/RHSA-2018:2390 - https://usn.ubuntu.com/3583-1/ - http://lists.alioth.debian.org/pipermail/secure-testing-commits/2017-December/059967.html - https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html - https://usn.ubuntu.com/3617-2/ - https://access.redhat.com/errata/RHSA-2018:3096 - https://usn.ubuntu.com/3619-1/ - http://www.securityfocus.com/bid/102329 - https://access.redhat.com/errata/RHSA-2020:0036 - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - htt
com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 - https://source.android.com/security/bulletin/pixel/2017-11-01 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=362bca57f5d78220f8b5907b875961af9436e229 - https://security-tracker.debian.org/tracker/CVE-2017-0861
CVE ID: CVE-2017-0862 State: PUBLISHED Published: 2017-11-16T23:00:00Z Last Updated: 2024-09-17T00:35:42.522Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Android ID: A-36006779. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-11-01
CVE ID: CVE-2017-0863 State: PUBLISHED Published: 2017-11-16T23:00:00Z Last Updated: 2024-09-16T16:27:45.140Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Upstream kernel video driver. Product: Android. Versions: Android kernel. Android ID: A-37950620. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-11-01
CVE ID: CVE-2017-0864 State: PUBLISHED Published: 2017-11-16T23:00:00Z Last Updated: 2024-09-17T01:26:41.841Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the MediaTek ioctl (flashlight). Product: Android. Versions: Android kernel. Android ID: A-37277147. References: M-ALPS03394571. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-11-01
CVE ID: CVE-2017-0865 State: PUBLISHED Published: 2017-11-16T23:00:00Z Last Updated: 2024-09-16T19:40:26.533Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions: Android kernel. Android ID: A-65025090. References: M-ALPS02973195. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-11-01
CVE ID: CVE-2017-0866 State: PUBLISHED Published: 2017-11-16T22:00:00Z Last Updated: 2024-09-16T18:49:08.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a pointer to kfree. This could lead to kernel memory corruption and possible code execution. This issue is rated as moderate. Product: Pixel. Version: N/A. Android ID: A-38415808. References: N-CVE-2017-0866. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-11-01#announcements
CVE ID: CVE-2017-0869 State: PUBLISHED Published: 2018-01-12T15:00:00Z Last Updated: 2024-09-16T18:43:29.085Z Vendors: Google Inc. Products: Android Problem Types: Elevation of Privilege Description: NVIDIA driver contains an integer overflow vulnerability which could cause a use after free and possibly lead to an elevation of privilege enabling code execution as a privileged process. This issue is rated as high. Version: N/A. Android ID: A-37776156. References: N-CVE-2017-0869. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-01-01 - http://www.securityfocus.com/bid/102374 - http://www.securitytracker.com/id/1040106
CVE ID: CVE-2017-0870 State: PUBLISHED Published: 2017-12-06T14:00:00Z Last Updated: 2024-09-17T03:53:50.091Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Android framework (libminikin). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-62134807. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102131 - https://source.android.com/security/bulletin/2017-12-01
CVE ID: CVE-2017-0871 State: PUBLISHED Published: 2017-12-06T14:00:00Z Last Updated: 2024-09-16T23:06:32.507Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Android framework (framework base). Product: Android. Versions: 8.0. Android ID A-65281159. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102131 - https://source.android.com/security/bulletin/2017-12-01
CVE ID: CVE-2017-0872 State: PUBLISHED Published: 2017-12-06T14:00:00Z Last Updated: 2024-09-16T19:25:50.452Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: A remote code execution vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65290323. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-12-01 - http://www.securityfocus.com/bid/102126
CVE ID: CVE-2017-0873 State: PUBLISHED Published: 2017-12-06T14:00:00Z Last Updated: 2024-09-16T22:25:13.494Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63316255. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-12-01 - http://www.securityfocus.com/bid/102126
CVE ID: CVE-2017-0874 State: PUBLISHED Published: 2017-12-06T14:00:00Z Last Updated: 2024-09-16T20:27:59.503Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63315932. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-12-01 - http://www.securityfocus.com/bid/102126
CVE ID: CVE-2017-0876 State: PUBLISHED Published: 2017-12-06T14:00:00Z Last Updated: 2024-09-16T17:37:36.636Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ID A-64964675. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-12-01 - http://www.securityfocus.com/bid/102126
CVE ID: CVE-2017-0877 State: PUBLISHED Published: 2017-12-06T14:00:00Z Last Updated: 2024-09-16T18:03:31.744Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ID A-66372937. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-12-01 - http://www.securityfocus.com/bid/102126
CVE ID: CVE-2017-0878 State: PUBLISHED Published: 2017-12-06T14:00:00Z Last Updated: 2024-09-16T23:22:04.358Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 8.0. Android ID A-65186291. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-12-01 - http://www.securityfocus.com/bid/102126
CVE ID: CVE-2017-0879 State: PUBLISHED Published: 2017-12-06T14:00:00Z Last Updated: 2024-09-17T02:52:31.536Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65025028. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-12-01
CVE ID: CVE-2017-0880 State: PUBLISHED Published: 2017-12-06T14:00:00Z Last Updated: 2024-09-16T18:49:34.912Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID A-65646012. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-12-01 - http://www.securityfocus.com/bid/102126
CVE ID: CVE-2017-0881 State: PUBLISHED Published: 2017-03-28T02:46:00 Last Updated: 2024-08-05T13:18:06.509Z Vendors: n/a Products: Zulip Server Versions 1.4.2 and below Problem Types: CWE-200 Description: An error in the implementation of an autosubscribe feature in the check_stream_exists route of the Zulip group chat application server before 1.4.3 allowed an authenticated user to subscribe to a private stream that should have required an invitation from an existing member to join. The issue affects all previously released versions of the Zulip server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97159 - https://groups.google.com/d/msg/
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97159 - https://groups.google.com/d/msg/zulip-announce/VyawgRuoY34/NTBwnTArGwAJ - https://github.com/zulip/zulip/commit/7ecda1ac8e26d8fb3725e954b2dc4723dda2255f
CVE ID: CVE-2017-0882 State: PUBLISHED Published: 2017-03-28T02:46:00 Last Updated: 2024-08-05T13:18:06.474Z Vendors: n/a Products: GitLab Community Edition and GitLab Enterprise Edition 8.7.0 through 8.15.7, 8.16.0 through 8.16.7, 8.17.0 through 8.17.3 Problem Types: CWE-639 Description: Multiple versions of GitLab expose sensitive user credentials when assigning a user to an issue or merge request. A fix was included in versions 8.15.8, 8.16.7, and 8.17.4, which were released on March 20th 2017 at 23:59 UTC. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ce/commit/cdf396f456472ef8decd9598daa8dc0097cd30c5 - https://gitlab.com/gitlab-org
https://gitlab.com/gitlab-org/gitlab-ce/commit/cdf396f456472ef8decd9598daa8dc0097cd30c5 - https://gitlab.com/gitlab-org/gitlab-ce/commit/a70346fc6530aa28a98e4aa4cf0f40e2c3bcef6b - http://www.securityfocus.com/bid/97157 - https://gitlab.com/gitlab-org/gitlab-ce/commit/43f5a2739dbf8f5c4c16a79f98e2630888f6b5d1 - https://gitlab.com/gitlab-org/gitlab-ce/issues/29661 - https://about.gitlab.com/2017/03/20/gitlab-8-dot-17-dot-4-security-release/
CVE ID: CVE-2017-0883 State: PUBLISHED Published: 2017-04-05T20:00:00 Last Updated: 2024-08-05T13:18:06.386Z Vendors: Nextcloud Products: Nextcloud Server Problem Types: CWE-275 Description: Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. This may allow an attacker to edit files in a share despite having only a 'read' permission set. Note that this only affects folders and files that the adversary has at least read-only permissions for. Additional Analyst Notes: - CVE Program Container
s and files that the adversary has at least read-only permissions for. Additional Analyst Notes: - CVE Program Container: References: - https://nextcloud.com/security/advisory/?id=nc-sa-2017-001 - https://hackerone.com/reports/169680
CVE ID: CVE-2017-0884 State: PUBLISHED Published: 2017-04-05T20:00:00 Last Updated: 2024-08-05T13:18:06.462Z Vendors: Nextcloud Products: Nextcloud Server Problem Types: CWE-275 Description: Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders despite lacking permissions issue. Due to a logical error in the file caching layer an authenticated adversary is able to create empty folders inside a shared folder. Note that this only affects folders and files that the adversary has at least read-only permissions for. Additional Analyst Notes: - CVE Program Container: References: - https://nextcloud.com/security/advisory/?id=nc-sa-2017-002 - https://hacke
Notes: - CVE Program Container: References: - https://nextcloud.com/security/advisory/?id=nc-sa-2017-002 - https://hackerone.com/reports/169680
CVE ID: CVE-2017-0885 State: PUBLISHED Published: 2017-04-05T20:00:00 Last Updated: 2024-08-05T13:18:06.507Z Vendors: Nextcloud Products: Nextcloud Server Problem Types: CWE-209 Description: Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share. Due to an error in the application logic an adversary with access to a write-only share may enumerate the names of existing files and subfolders by comparing the exception messages. Additional Analyst Notes: - CVE Program Container: References: - https://nextcloud.com/security/advisory/?id=nc-sa-2017-003 - https://hackerone.com/reports/174524
CVE ID: CVE-2017-0886 State: PUBLISHED Published: 2017-04-05T20:00:00 Last Updated: 2024-08-05T13:18:06.533Z Vendors: Nextcloud Products: Nextcloud Server Problem Types: CWE-674 Description: Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://nextcloud.com/security/advisory/?id=nc-sa-2017-004 - https://hackerone.com/reports/174524
CVE ID: CVE-2017-0887 State: PUBLISHED Published: 2017-04-05T20:00:00 Last Updated: 2024-08-05T13:18:06.509Z Vendors: Nextcloud Products: Nextcloud Server Problem Types: CWE-807 Description: Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing values provided by the `OC-Total-Length` HTTP header an authenticated adversary may be able to exceed their configured user quota. Thus using more space than allowed by the administrator. Additional Analyst Notes: - CVE Program Container: References: - https://nextcloud.com/security/advisory/?id=nc-sa-2017-005 - https://hackerone.com/reports/173622
CVE ID: CVE-2017-0888 State: PUBLISHED Published: 2017-04-05T20:00:00 Last Updated: 2024-08-05T13:18:06.471Z Vendors: Nextcloud Products: Nextcloud Server Problem Types: CWE-451 Description: Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navigation bar displayed in the files list contained partially user-controllable input leading to a potential misrepresentation of information. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/179073 - https://nextcloud.com/security/advisory/?id=nc-sa-2017-006 - http://www.securityfocus.com/bid/97491
CVE ID: CVE-2017-0889 State: PUBLISHED Published: 2017-11-13T17:00:00Z Last Updated: 2024-09-16T19:21:11.237Z Vendors: thoughtbot Products: paperclip ruby gem Problem Types: CWE-918 Description: Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class. Attackers may be able to access information about internal network resources. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/209430 - https://github.com/thoughtbot/paperclip/pull/2435 - https://hackerone.com/reports/713
CVE ID: CVE-2017-0890 State: PUBLISHED Published: 2017-05-08T20:00:00 Last Updated: 2024-08-05T13:18:06.510Z Vendors: Nextcloud Products: Nextcloud Server Problem Types: CWE-79 Description: Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/213227 - https://nextcloud.com/security/advisory/?id=nc-sa-2017-007
CVE ID: CVE-2017-0891 State: PUBLISHED Published: 2017-05-08T20:00:00 Last Updated: 2024-08-05T13:18:06.396Z Vendors: Nextcloud Products: Nextcloud Server Problem Types: CWE-79 Description: Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilities in multiple components. Additional Analyst Notes: - CVE Program Container: References: - https://nextcloud.com/security/advisory/?id=nc-sa-2017-008 - https://hackerone.com/reports/216812
CVE ID: CVE-2017-0892 State: PUBLISHED Published: 2017-05-08T20:00:00 Last Updated: 2024-08-05T13:18:06.453Z Vendors: Nextcloud Products: Nextcloud Server Problem Types: CWE-285 Description: Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password without permission to the files access to the users file. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/191979 - https://nextcloud.com/security/advisory/?id=nc-sa-2017-009
CVE ID: CVE-2017-0893 State: PUBLISHED Published: 2017-05-08T20:00:00 Last Updated: 2024-08-05T13:18:06.510Z Vendors: Nextcloud Products: Nextcloud Server Problem Types: CWE-79 Description: Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are shipping a vulnerable JavaScript library for sanitizing untrusted user-input which suffered from a XSS vulnerability caused by a behaviour change in Safari 10.1 and 10.2. Note that Nextcloud employs a strict Content-Security-Policy preventing exploitation of this XSS issue on modern web browsers. Additional Analyst Notes: - CVE Program Container: References: - https://nextcloud.com/security/advisory/?id=nc-sa-2017-010 - https://hackerone.com/reports
gram Container: References: - https://nextcloud.com/security/advisory/?id=nc-sa-2017-010 - https://hackerone.com/reports/222838
CVE ID: CVE-2017-0894 State: PUBLISHED Published: 2017-05-08T20:00:00 Last Updated: 2024-08-05T13:18:06.452Z Vendors: Nextcloud Products: Nextcloud Server Problem Types: CWE-285 Description: Nextcloud Server before 11.0.3 is vulnerable to disclosure of valid share tokens for public calendars due to a logical error. Thus granting an attacker potentially access to publicly shared calendars without knowing the share token. Additional Analyst Notes: - CVE Program Container: References: - https://nextcloud.com/security/advisory/?id=nc-sa-2017-011 - https://hackerone.com/reports/218876
CVE ID: CVE-2017-0895 State: PUBLISHED Published: 2017-05-08T20:00:00 Last Updated: 2024-08-05T13:25:17.074Z Vendors: Nextcloud Products: Nextcloud Server Problem Types: CWE-285 Description: Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged-in users. Note that no actual content of the calendar and addressbook has been disclosed. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/203594 - https://nextcloud.com/security/advisory/?id=nc-sa-2017-012
CVE ID: CVE-2017-0896 State: PUBLISHED Published: 2017-06-02T17:00:00 Last Updated: 2024-08-05T13:25:16.624Z Vendors: Zulip Products: Zulip Server Problem Types: CWE-285 Description: Zulip Server 1.5.1 and below suffer from an error in the implementation of the invite_by_admins_only setting in the Zulip group chat application server that allowed an authenticated user to invite other users to join a Zulip organization even if the organization was configured to prevent this. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21msg/zulip-announce/sUYeJv-fFmg/2TU2TLmNAwAJ - https://hackerone.com/reports/224210 - https://github.com/zulip/zulip/commi