Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-7202 State: PUBLISHED Published: 2017-03-21T06:21:00 Last Updated: 2024-08-05T15:56:36.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) were discovered in SLiMS 7 Cendana before 2017-03-16. The vulnerabilities exist due to insufficient filtration of user-supplied data (id) passed to the 'slims7_cendana-master/template/default/detail_template.php' and 'slims7_cendana-master/template/default-rtl/detail_template.php' URLs. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slims/slims7
the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slims/slims7_cendana/issues/50 - http://www.securityfocus.com/bid/97004
CVE ID: CVE-2017-7203 State: PUBLISHED Published: 2017-03-21T06:21:00 Last Updated: 2024-08-05T15:56:35.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) was discovered in ZoneMinder before 1.30.2. The vulnerability exists due to insufficient filtration of user-supplied data (postLoginQuery) passed to the "ZoneMinder-master/web/skins/classic/views/js/postlogin.js.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZoneMinder/ZoneMinder/issues/1797 - http://www.securityfocus.com/bid/97001
CVE ID: CVE-2017-7204 State: PUBLISHED Published: 2017-03-21T06:21:00 Last Updated: 2024-08-05T15:56:36.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) was discovered in imdbphp 5.1.1. The vulnerability exists due to insufficient filtration of user-supplied data (name) passed to the "imdbphp-master/demo/search.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97002 - https://github.com/tboothman/imdbphp/issues/88
CVE ID: CVE-2017-7205 State: PUBLISHED Published: 2017-03-21T06:21:00 Last Updated: 2024-08-05T15:56:36.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) was discovered in GamePanelX-V3 3.0.12. The vulnerability exists due to insufficient filtration of user-supplied data (a) passed to the "GamePanelX-V3-master/ajax/ajax.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97003 - https://github.com/devryan/GamePanelX-V3/issues/161
CVE ID: CVE-2017-7206 State: PUBLISHED Published: 2017-03-21T06:21:00 Last Updated: 2024-08-05T15:56:36.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_h2645_extract_rbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read) or obtain sensitive information from process memory via a crafted h264 video file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97006 - https://bugzilla.libav.org/show_bug.cgi?id=1002
CVE ID: CVE-2017-7207 State: PUBLISHED Published: 2017-03-21T06:21:00 Last Updated: 2024-08-05T15:56:36.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PostScript document. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3838 - http://www.ghostscript.com/cgi-bin/findgit.cgi?309eca4e0a31ea70dcc844812691439312dad091 - https://bugs.ghostscript.com/show_bug.cgi?id=697676 - http://www.securitytracker.com/id/1039071 - http://www.securityfocus.com/bid/96995
stscript.com/show_bug.cgi?id=697676 - http://www.securitytracker.com/id/1039071 - http://www.securityfocus.com/bid/96995 - https://security.gentoo.org/glsa/201708-06 - https://access.redhat.com/errata/RHSA-2017:2180
CVE ID: CVE-2017-7208 State: PUBLISHED Published: 2017-03-21T06:21:00 Last Updated: 2024-08-05T15:56:35.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_residual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer over-read) or obtain sensitive information from process memory via a crafted h264 video file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97005 - https://bugzilla.libav.org/show_bug.cgi?id=1000 - http://www.debian.org/security/2017/dsa-4012
CVE ID: CVE-2017-7209 State: PUBLISHED Published: 2017-03-21T06:21:00 Last Updated: 2024-08-05T15:56:36.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96994 - https://security.gentoo.org/glsa/201801-01 - https://sourceware.org/bugzilla/show_bug.cgi?id=21135
CVE ID: CVE-2017-7210 State: PUBLISHED Published: 2017-03-21T06:21:00 Last Updated: 2024-08-05T15:56:36.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a crafted object file, leading to program crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96992 - https://sourceware.org/bugzilla/show_bug.cgi?id=21157 - https://security.gentoo.org/glsa/201801-01
CVE ID: CVE-2017-7213 State: PUBLISHED Published: 2017-05-15T10:00:00 Last Updated: 2024-08-05T15:56:36.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/desktop-central/cve-2017-7213-remote-control-privilege-violation.html
CVE ID: CVE-2017-7214 State: PUBLISHED Published: 2017-03-21T18:00:00 Last Updated: 2024-08-05T15:56:35.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1595 - http://www.securityfocus.com/bid/96998 - https://launchpad.net/bugs/1673569 - https://access.redhat.com/errata/RHSA-2017:1508
CVE ID: CVE-2017-7215 State: PUBLISHED Published: 2017-03-21T19:00:00 Last Updated: 2024-08-05T15:56:36.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting in some view elements in the index filter tool in app/webroot/js/misp2.4.68.js and the organisation landing page in app/View/Organisations/ajax/landingpage.ctp of MISP before 2.4.69 allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96997 - https://www.misp.software/Changelog.txt - http://www.fortiguard.com/advisory/FG-VD-17-021 - https://www.misp.software/2017/03/10/MISP.2.4.69.released.html - ht
- http://www.fortiguard.com/advisory/FG-VD-17-021 - https://www.misp.software/2017/03/10/MISP.2.4.69.released.html - https://github.com/MISP/MISP/commit/3630a8b1e1cd99862867fe72ffa1ff51e4d9c09f - https://github.com/MISP/MISP/commit/599b3638384bfe49fa527bcb060f3f608a296996
CVE ID: CVE-2017-7216 State: PUBLISHED Published: 2017-05-02T15:00:00 Last Updated: 2024-08-05T15:56:35.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to obtain sensitive information via unspecified request parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97590 - https://security.paloaltonetworks.com/CVE-2017-7216
CVE ID: CVE-2017-7217 State: PUBLISHED Published: 2017-04-14T14:00:00 Last Updated: 2024-08-05T15:56:35.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Management Web Interface in Palo Alto Networks PAN-OS before 7.0.14 and 7.1.x before 7.1.9 allows remote attackers to write to export files via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038247 - http://www.securityfocus.com/bid/97598 - https://security.paloaltonetworks.com/CVE-2017-7217
CVE ID: CVE-2017-7218 State: PUBLISHED Published: 2017-04-14T14:00:00 Last Updated: 2024-08-05T15:56:36.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privileges via unspecified request parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038248 - http://www.securityfocus.com/bid/97592 - https://security.paloaltonetworks.com/CVE-2017-7218
CVE ID: CVE-2017-7219 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-05T15:56:36.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap overflow vulnerability in Citrix NetScaler Gateway versions 10.1 before 135.8/135.12, 10.5 before 65.11, 11.0 before 70.12, and 11.1 before 52.13 allows a remote authenticated attacker to run arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX222657 - http://www.securitytracker.com/id/1038283 - http://www.securityfocus.com/bid/97626
CVE ID: CVE-2017-7220 State: PUBLISHED Published: 2017-04-21T02:11:00 Last Updated: 2024-08-05T15:56:35.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenText Documentum Content Server allows superuser access via sys_obj_save or save of a crafted object, followed by an unauthorized "UPDATE dm_dbo.dm_user_s SET user_privileges=16" command, aka an "RPC save-commands" attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4532. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2017/Apr/61 - https://gist.github.com/andreybpanfilov/e0e60ae9d525a34cca04eb4c89a21e04 - https://gist.github.com/andreybpanfilov/d879
https://gist.github.com/andreybpanfilov/e0e60ae9d525a34cca04eb4c89a21e04 - https://gist.github.com/andreybpanfilov/d8792484e13971982c0719ae59ab8c7c
CVE ID: CVE-2017-7221 State: PUBLISHED Published: 2017-04-25T14:00:00 Last Updated: 2024-08-05T15:56:36.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to execute arbitrary code with super-user privileges by leveraging the availability of the dm_bp_transition docbase method with a user-created dm_procedure object, as demonstrated by use of a backspace character in an injected string. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2513. Additional Analyst Notes: - CVE Program Container: References: - http://seclists
of an incomplete fix for CVE-2014-2513. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Apr/97 - https://www.exploit-db.com/exploits/41928/ - http://www.securityfocus.com/bid/98038
CVE ID: CVE-2017-7222 State: PUBLISHED Published: 2017-03-22T05:31:00 Last Updated: 2024-08-05T15:56:35.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in MantisBT before 2.1.1 allows remote attackers to inject arbitrary HTML or JavaScript (if MantisBT's CSP settings permit it) by modifying 'window_title' in the application configuration. This requires privileged access to MantisBT configuration management pages (i.e., administrator access rights) or altering the system configuration file (config_inc.php). Additional Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/bugs/view.php?id=22266 - http://github.com/
l Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/bugs/view.php?id=22266 - http://github.com/mantisbt/mantisbt/commit/a85b0b96c8ebe3e010d0d016cf88ab3c8bfc196a
CVE ID: CVE-2017-7223 State: PUBLISHED Published: 2017-03-22T16:00:00 Last Updated: 2024-08-05T15:56:36.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, potentially leading to a program crash. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201801-01 - https://sourceware.org/bugzilla/show_bug.cgi?id=20898
CVE ID: CVE-2017-7224 State: PUBLISHED Published: 2017-03-22T16:00:00 Last Updated: 2024-08-05T15:56:35.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt binary that contains an empty function name, leading to a program crash. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201801-01 - https://sourceware.org/bugzilla/show_bug.cgi?id=20892 - http://www.securityfocus.com/bid/97277
CVE ID: CVE-2017-7225 State: PUBLISHED Published: 2017-03-22T16:00:00 Last Updated: 2024-08-05T15:56:36.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, triggering a NULL pointer dereference and an invalid write, and leading to a program crash. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201801-01 - https://sourceware.org/bugzilla/show_bug.cgi?id=20891 - http://www.securityfocus.com/bid/97275
CVE ID: CVE-2017-7226 State: PUBLISHED Published: 2017-03-22T16:00:00Z Last Updated: 2024-09-16T22:19:38.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2line, size, and strings. It could lead to information disclosure as well. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=20905
CVE ID: CVE-2017-7227 State: PUBLISHED Published: 2017-03-22T16:00:00 Last Updated: 2024-08-05T15:56:35.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This relates to lack of '\0' termination of a name field in ldlex.l. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=20906 - https://security.gentoo.org/glsa/201801-01 - http://www.securityfocus.com/bid/97209
CVE ID: CVE-2017-7228 State: PUBLISHED Published: 2017-04-04T14:00:00 Last Updated: 2024-08-05T15:56:36.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue (known as XSA-212) was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x, 4.5.x, and 4.4.x. The earlier XSA-29 fix introduced an insufficient check on XENMEM_exchange input, allowing the caller to drive hypervisor memory accesses outside of the guest provided input/output arrays. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97375 - http://xenbits.xen.org/xsa/advisory-212.html - http://openwall.com/lists/oss-security/2017/04/04/3 - https://github.com/Qu
tp://xenbits.xen.org/xsa/advisory-212.html - http://openwall.com/lists/oss-security/2017/04/04/3 - https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-029-2017.txt - http://www.debian.org/security/2017/dsa-3847 - https://www.exploit-db.com/exploits/41870/ - https://googleprojectzero.blogspot.com/2017/04/pandavirtualization-exploiting-xen.html - http://www.securitytracker.com/id/1038223
CVE ID: CVE-2017-7229 State: PUBLISHED Published: 2017-05-03T20:00:00 Last Updated: 2024-08-05T15:56:36.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: PGP/MIME encrypted messages injected into a Vaultive O365 (before 4.5.21) frontend via IMAP or SMTP have their Content-Type changed from 'Content-Type: multipart/encrypted; protocol="application/pgp-encrypted"; boundary="abc123abc123"' to 'Content-Type: text/plain' - this results in the encrypted message being structured in such a way that most PGP/MIME-capable mail user agents are unable to decrypt it cleanly. The outcome is that encrypted mail passing through this device does not work (Denial of Service), and a common real-w
y. The outcome is that encrypted mail passing through this device does not work (Denial of Service), and a common real-world consequence is a request to resend the mail in the clear (Information Disclosure). Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/dkg/a1998c861bf2430e0d01d586905b11cb
CVE ID: CVE-2017-7230 State: PUBLISHED Published: 2017-03-22T18:00:00 Last Updated: 2024-08-05T15:56:35.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitrary code via a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97195 - https://www.exploit-db.com/exploits/41666/
CVE ID: CVE-2017-7231 State: PUBLISHED Published: 2017-03-22T18:00:00 Last Updated: 2024-08-05T15:56:35.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: pngdefry through 2017-03-22 is prone to a heap-based buffer-overflow vulnerability because it fails to properly process a specially crafted png file. This issue affects the 'process()' function of the 'pngdefry.c' source file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97037 - https://github.com/Tatsh/pngdefry/issues/1
CVE ID: CVE-2017-7233 State: PUBLISHED Published: 2017-04-04T17:00:00 Last Updated: 2024-08-05T15:56:36.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URLs "safe" when they shouldn't be, aka an open redirect vulnerability. Also, if a developer relies on ``is_safe_url()`` to provide safe redirect targets and puts such a URL into a link, they could suffer from an XSS attack. Additional Analyst Notes: - CVE Program Container:
d puts such a URL into a link, they could suffer from an XSS attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038177 - https://access.redhat.com/errata/RHSA-2017:1596 - http://www.securityfocus.com/bid/97406 - https://access.redhat.com/errata/RHSA-2017:3093 - http://www.debian.org/security/2017/dsa-3835 - https://access.redhat.com/errata/RHSA-2017:1445 - https://access.redhat.com/errata/RHSA-2017:1451 - https://access.redhat.com/errata/RHSA-2018:2927 - https://access.redhat.com/errata/RHSA-2017:1470 - https://www.djangoproject.com/weblog/2017/apr/04/security-releases/ - https://access.redhat.com/errata/RHSA-2017:1462
CVE ID: CVE-2017-7234 State: PUBLISHED Published: 2017-04-04T17:00:00 Last Updated: 2024-08-05T15:56:36.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18) site using the ``django.views.static.serve()`` view could redirect to any other domain, aka an open redirect vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038177 - http://www.securityfocus.com/bid/97401 - http://www.debian.org/security/2017/dsa-3835 - https://www.djangoproject.com/weblog/2017/apr/04/security-releases/
CVE ID: CVE-2017-7235 State: PUBLISHED Published: 2017-03-23T04:47:00 Last Updated: 2024-08-05T15:56:35.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1. A malicious website owner could craft a page that executes arbitrary Python code against any cfscrape user who scrapes that website. This is fixed in 1.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Anorov/cloudflare-scrape/releases/tag/1.8.0 - https://github.com/Anorov/cloudflare-scrape/issues/97 - http://www.securityfocus.com/bid/97191
CVE ID: CVE-2017-7236 State: PUBLISHED Published: 2017-05-25T19:00:00 Last Updated: 2024-08-05T15:56:36.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/NTAP-20170517-0001
CVE ID: CVE-2017-7237 State: PUBLISHED Published: 2017-04-06T15:00:00 Last Updated: 2024-08-05T15:56:36.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spiceworks data\configurations directory by leveraging the unauthenticated nature of the TFTP service for all clients who can reach UDP port 69, as demonstrated by a WRQ (aka Write request) operation for a configuration file or an executable file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41825/ - http://hyp3rlinx.altervista.org/advisories/SPICEWORKS-IMPROPER
eferences: - https://www.exploit-db.com/exploits/41825/ - http://hyp3rlinx.altervista.org/advisories/SPICEWORKS-IMPROPER-ACCESS-CONTROL-FILE-OVERWRITE.txt - https://community.spiceworks.com/support/inventory/docs/network-config#security
CVE ID: CVE-2017-7239 State: PUBLISHED Published: 2017-04-10T15:00:00 Last Updated: 2024-08-05T15:56:36.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service (process hang) via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dmgerman/ninka/commit/81f185261c8863c5b84344ee31192870be939faf - http://www.openwall.com/lists/oss-security/2017/04/03/3 - http://www.securityfocus.com/bid/97325