Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-9270 State: PUBLISHED Published: 2018-03-01T19:00:00Z Last Updated: 2024-09-17T00:36:08.565Z Severity: HIGH (CVSS 8.7 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: SUSE Products: cryptctl Problem Types: A directory traversal due to insufficient parameter checking could allow malicious servers to get a cryptctl client overwrite and corrupt files outside of the key storage directory., CWE-22 Description: In cryptctl before version 2.0 a malicious server could send RPC requests that could overwrite files outside of the cryptctl key database. Additional Analyst Notes: - CVE Program Container: References: - https://lists.opensuse.org/opensuse-security-announce/2017-07/ms
l Analyst Notes: - CVE Program Container: References: - https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00022.html - https://bugzilla.suse.com/show_bug.cgi?id=1041963 - https://www.suse.com/de-de/security/cve/CVE-2017-9270/
CVE ID: CVE-2017-9271 State: PUBLISHED Published: 2018-03-01T19:00:00Z Last Updated: 2024-09-16T23:26:26.290Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SUSE Products: zypper Problem Types: Proxy credentials are writting into logfiles, CVE-532 Description: The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used. Additional Analyst Notes: - CVE Program Container: References: - https://www.suse.com/de-de/security/cve/CVE-2017-9271/ - https://bugzilla.suse.com/show_bug.cgi?id=1050625 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject
.suse.com/show_bug.cgi?id=1050625 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VP2DNHXEQFHXBCTSREPNR7BU4EX64SQG/
CVE ID: CVE-2017-9272 State: PUBLISHED Published: 2017-10-06T17:00:00Z Last Updated: 2024-09-17T01:21:52.766Z Vendors: *** n/a *** Products: IDM 4.5 bidirectional eDir Driver Version Problem Types: Denial of Service. Description: The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://download.microfocus.com/Download?buildid=SRL-_pc5pR8
CVE ID: CVE-2017-9273 State: PUBLISHED Published: 2017-10-06T17:00:00Z Last Updated: 2024-09-16T23:10:43.162Z Vendors: *** n/a *** Products: IDM 4.5 bidirectional eDir Driver Version Problem Types: Improper Access. Description: The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to unauthorized log configuration changes. Additional Analyst Notes: - CVE Program Container: References: - https://download.microfocus.com/Download?buildid=SRL-_pc5pR8
CVE ID: CVE-2017-9274 State: PUBLISHED Published: 2018-03-01T19:00:00Z Last Updated: 2024-09-16T18:59:31.976Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: SUSE Products: obs-service-source_validator Problem Types: Shell code injection due to insufficient escaping of RPM spec file macros., CWE-78 Description: A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs. Additional Analyst Notes: - CVE Program Container: References: - https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00024.html - https://www.suse.com/de-de/secur
rences: - https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00024.html - https://www.suse.com/de-de/security/cve/CVE-2017-9274/ - https://bugzilla.suse.com/show_bug.cgi?id=938556
CVE ID: CVE-2017-9275 State: PUBLISHED Published: 2018-04-26T15:00:00 Last Updated: 2024-08-05T17:02:44.148Z Severity: LOW (CVSS 2.8 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N) Vendors: NetIQ Products: Identity Reporting Problem Types: XSS Issue Description: NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack. Additional Analyst Notes: - CVE Program Container: References: - https://download.microfocus.com/Download?buildid=iGYyq6xwjhE~&donotredirect=true
CVE ID: CVE-2017-9276 State: PUBLISHED Published: 2018-03-02T20:00:00Z Last Updated: 2024-09-17T03:48:57.392Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: NetIQ Products: Access Manager Problem Types: CWE-79 Description: Novell Access Manager iManager before 4.3.3 did not validate parameters so that cross site scripting content could be reflected back into the result page using the "a" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7022359
CVE ID: CVE-2017-9277 State: PUBLISHED Published: 2018-03-02T20:00:00Z Last Updated: 2024-09-17T00:06:48.365Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Novell Products: eDirectory Problem Types: inconsistent enabling of security feature Description: The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open connections without EBA. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7016794 - https://www.netiq.com/documentation/edirectory-9/edirectory904_releasenotes/data/edirectory904_releasenotes.html - https://bugzilla.suse.com/sho
cumentation/edirectory-9/edirectory904_releasenotes/data/edirectory904_releasenotes.html - https://bugzilla.suse.com/show_bug.cgi?id=1005473
CVE ID: CVE-2017-9278 State: PUBLISHED Published: 2018-03-02T20:00:00Z Last Updated: 2024-09-16T23:05:43.274Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: NetIQ Products: Identity Manager Oracle EBS driver Problem Types: password disclosure via logging, CWE-532 Description: The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password, potentially disclosing this to attackers able to read the EBS tables. Additional Analyst Notes: - CVE Program Container: References: - https://download.novell.com/Download?buildid=DKFkx_xPeaw~ - https://bugzilla.suse.com/show_bug.cgi?id=1053200
CVE ID: CVE-2017-9279 State: PUBLISHED Published: 2018-03-02T20:00:00Z Last Updated: 2024-09-17T00:35:46.737Z Severity: LOW (CVSS 2 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: NetIQ Products: Identity Manager Problem Types: Upload of files possible that could be misused for other purposes, CWE-434 Description: NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Administration, allowing malicious user administrators to potentially execute code or mislead users. Additional Analyst Notes: - CVE Program Container: References: - https://download.novell.com/Download?buildid=K7lbPAGJyIk~
itional Analyst Notes: - CVE Program Container: References: - https://download.novell.com/Download?buildid=K7lbPAGJyIk~ - https://bugzilla.suse.com/show_bug.cgi?id=1049129
CVE ID: CVE-2017-9280 State: PUBLISHED Published: 2018-03-02T20:00:00Z Last Updated: 2024-09-16T17:42:50.340Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: NetIQ Products: Identity Manager Applications Problem Types: information exposure due to unencrypted credentials in GET Urls, CWE-598 Description: Some NetIQ Identity Manager Applications before Identity Manager 4.5.6.1 included the session token in GET URLs, potentially allowing exposure of user sessions to untrusted third parties via proxies, referer urls or similar. Additional Analyst Notes: - CVE Program Container: References: - https://download.novell.com/Download?buildid=K7lbPAGJyIk~ - https://bug
st Notes: - CVE Program Container: References: - https://download.novell.com/Download?buildid=K7lbPAGJyIk~ - https://bugzilla.suse.com/show_bug.cgi?id=1049143
CVE ID: CVE-2017-9281 State: PUBLISHED Published: 2017-09-21T21:00:00 Last Updated: 2024-08-05T17:02:44.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow (CWE-190) potentially causing an out-of-bounds read (CWE-125) vulnerability in Micro Focus VisiBroker 8.5 can lead to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://community.microfocus.com/microfocus/corba/visibroker_-_world_class_middleware/w/knowledge_base/29171/visibroker-8-5-service-pack-4-hotfix-3-security-fixes
CVE ID: CVE-2017-9282 State: PUBLISHED Published: 2017-09-21T21:00:00Z Last Updated: 2024-09-17T01:22:00.983Z Vendors: Micro Focus Products: Micro Focus VisiBroker Problem Types: CWE-190 Description: An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed. Additional Analyst Notes: - CVE Program Container: References: - https://community.microfocus.com/microfocus/corba/visibroker_-_world_class_middleware/w/knowledge_base/29171/visibroker-8-5-service-pack-4-hotfix-3-security-fixes
CVE ID: CVE-2017-9283 State: PUBLISHED Published: 2017-09-21T21:00:00Z Last Updated: 2024-09-16T19:36:16.330Z Vendors: Micro Focus Products: Micro Focus VisiBroker Problem Types: CWE-125 Description: An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed. Additional Analyst Notes: - CVE Program Container: References: - https://community.microfocus.com/microfocus/corba/visibroker_-_world_class_middleware/w/knowledge_base/29171/visibroker-8-5-service-pack-4-hotfix-3-security-fixes
CVE ID: CVE-2017-9284 State: PUBLISHED Published: 2018-04-26T15:00:00 Last Updated: 2024-08-05T17:02:44.161Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N) Vendors: NetIQ Products: IDM - Identity Applications Problem Types: Information Leakage Description: IDM 4.6 Identity Applications prior to 4.6.2.1 may expose sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://download.microfocus.com/Download?buildid=Xg1dZMVbBzs~
CVE ID: CVE-2017-9285 State: PUBLISHED Published: 2018-03-02T20:00:00Z Last Updated: 2024-09-17T00:25:58.378Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: NetIQ Products: eDirectory Problem Types: Lack of access checks, CWE-284 Description: NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7016794 - https://bugzilla.suse.com/show_bug.cgi?id=1029077 - https://www.netiq.com/documentation/edirectory-9/edirectory904_releasenotes/data/edirectory904_releaseno
gi?id=1029077 - https://www.netiq.com/documentation/edirectory-9/edirectory904_releasenotes/data/edirectory904_releasenotes.html
CVE ID: CVE-2017-9286 State: PUBLISHED Published: 2018-03-01T19:00:00Z Last Updated: 2024-09-16T16:28:16.718Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SUSE Products: nextcloud Problem Types: Using the untrusted hierarchy under /srv/wwwroot/htdocs during update as root user could be used to overwrite root files. Description: The packaging of NextCloud in openSUSE used /srv/www/htdocs in an unsafe manner, which could have allowed scripts running as wwwrun user to escalate privileges to root during nextcloud package upgrade. Additional Analyst Notes: - CVE Program Container: References: - https://lists.opensuse.org/opensuse-updates/2017-10/msg00010.html -
alyst Notes: - CVE Program Container: References: - https://lists.opensuse.org/opensuse-updates/2017-10/msg00010.html - https://www.suse.com/de-de/security/cve/CVE-2017-9286/ - https://bugzilla.suse.com/show_bug.cgi?id=1036756
CVE ID: CVE-2017-9287 State: PUBLISHED Published: 2017-05-29T16:00:00 Last Updated: 2024-08-05T17:02:44.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98736 - http://www.debian.org/security/2017/dsa-3868 - https://access.redhat.com/errata/RHSA-2017:1852 - http://www.securitytracker.com/id/1038591 - https://www.oracle.com/security-alerts/cpuapr20
.com/errata/RHSA-2017:1852 - http://www.securitytracker.com/id/1038591 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10365 - http://www.openldap.org/its/?findid=8655 - https://bugs.debian.org/863563
CVE ID: CVE-2017-9288 State: PUBLISHED Published: 2017-05-29T16:00:00 Last Updated: 2024-08-05T17:02:44.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Raygun4WP plugin 1.8.0 for WordPress is vulnerable to a reflected XSS in sendtesterror.php (backurl parameter). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MindscapeHQ/raygun4wordpress/issues/16 - https://wpvulndb.com/vulnerabilities/8836 - https://github.com/MindscapeHQ/raygun4wordpress/pull/17 - http://jgj212.blogspot.kr/2017/05/a-reflected-xss-vulnerability-in.html
CVE ID: CVE-2017-9289 State: PUBLISHED Published: 2017-05-29T17:00:00 Last Updated: 2024-08-05T17:02:44.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bram Korsten Note through 1.2.0 is vulnerable to a reflected XSS in note-source\ui\editor.php (edit parameter). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bramkorsten/Note/issues/11
CVE ID: CVE-2017-9292 State: PUBLISHED Published: 2017-05-29T17:00:00 Last Updated: 2024-08-05T17:02:44.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lansweeper before 6.0.0.65 has XSS in an image retrieval URI, aka Bug 542782. Additional Analyst Notes: - CVE Program Container: References: - https://www.lansweeper.com/changelog.aspx - https://backbox.org/membership/lansweeper-v6-0-0-63-xss-vulnerability/
CVE ID: CVE-2017-9294 State: PUBLISHED Published: 2017-05-29T18:00:00 Last Updated: 2024-08-05T17:02:44.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: RMI vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to execute internal commands without authentication via RMI ports. Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/ - http://www.securityfocus.com/bid/98765
CVE ID: CVE-2017-9295 State: PUBLISHED Published: 2017-05-29T18:00:00 Last Updated: 2024-08-05T17:02:44.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: XXE vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/ - http://www.securityfocus.com/bid/98761
CVE ID: CVE-2017-9296 State: PUBLISHED Published: 2017-05-29T18:00:00 Last Updated: 2024-08-05T17:02:44.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Tuning Manager before 8.5.2-00 allows remote attackers to redirect authenticated users to arbitrary web sites. Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/ - http://www.securityfocus.com/bid/98774
CVE ID: CVE-2017-9297 State: PUBLISHED Published: 2017-05-29T18:00:00 Last Updated: 2024-08-05T17:02:43.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to redirect users to arbitrary web sites. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98775 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/
CVE ID: CVE-2017-9298 State: PUBLISHED Published: 2017-05-29T18:00:00Z Last Updated: 2024-09-17T03:43:27.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to execute arbitrary JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/
CVE ID: CVE-2017-9299 State: PUBLISHED Published: 2017-05-29T19:00:00 Last Updated: 2024-08-05T17:02:44.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Ticket Request System (OTRS) 3.3.9 has XSS in index.pl?Action=AgentStats requests, as demonstrated by OrderBy=[XSS] and Direction=[XSS] attacks. NOTE: this CVE may have limited relevance because it represents a 2017 discovery of an issue in software from 2014. The 3.3.20 release, for example, is not affected. Additional Analyst Notes: - CVE Program Container: References: - http://code610.blogspot.com/2017/05/turnkey-feat-otrs.html
CVE ID: CVE-2017-9300 State: PUBLISHED Published: 2017-05-29T19:00:00 Last Updated: 2024-08-05T17:02:44.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins\codec\libflac_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted FLAC file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98747 - https://www.debian.org/security/2017/dsa-4045 - http://code610.blogspot.com/2017/04/multiple-crashes-in-vlc-224.html
CVE ID: CVE-2017-9301 State: PUBLISHED Published: 2017-05-29T19:00:00 Last Updated: 2024-08-05T17:02:44.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins\audio_filter\libmpgatofixed32_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (invalid read and application crash) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98746 - http://code610.blogspot.com/2017/04/multiple-crashes-in-vlc-224.html
CVE ID: CVE-2017-9302 State: PUBLISHED Published: 2017-05-29T19:00:00 Last Updated: 2024-08-05T17:02:44.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - http://code610.blogspot.com/2017/05/divided-realplayer-160232.html - http://www.securityfocus.com/bid/98754
CVE ID: CVE-2017-9303 State: PUBLISHED Published: 2017-05-29T22:00:00 Last Updated: 2024-08-05T17:02:44.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Laravel 5.4.x before 5.4.22 does not properly constrain the host portion of a password-reset URL, which makes it easier for remote attackers to conduct phishing attacks by specifying an attacker-controlled host. Additional Analyst Notes: - CVE Program Container: References: - https://laravel-news.com/laravel-5-4-22-is-now-released-and-includes-a-security-fix - http://www.securityfocus.com/bid/98776
CVE ID: CVE-2017-9304 State: PUBLISHED Published: 2017-05-31T03:54:00 Last Updated: 2024-08-05T17:02:44.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption) via a crafted rule that is mishandled in the _yr_re_emit function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VirusTotal/yara/commit/925bcf3c3b0a28b5b78e25d9efda5c0bf27ae699 - https://github.com/VirusTotal/yara/issues/674
CVE ID: CVE-2017-9305 State: PUBLISHED Published: 2017-05-31T03:54:00 Last Updated: 2024-08-05T17:02:44.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/core/TikiFilter/PreventXss.php in Tiki Wiki CMS Groupware 16.2 allows remote attackers to bypass the XSS filter via padded zero characters, as demonstrated by an attack on tiki-batch_send_newsletter.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tikiorg/tiki/commit/6c016e8f066d2f404b18eaa1af7fa0c7a9651ccd - https://www.cdxy.me/?p=763
CVE ID: CVE-2017-9306 State: PUBLISHED Published: 2017-05-31T03:54:00 Last Updated: 2024-08-05T17:02:44.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: inc/SP/Html/Html.class.php in sysPass 2.1.9 allows remote attackers to bypass the XSS filter, as demonstrated by use of an "<svg/onload=" substring instead of an "<svg onload=" substring. Additional Analyst Notes: - CVE Program Container: References: - https://www.cdxy.me/?p=763
CVE ID: CVE-2017-9307 State: PUBLISHED Published: 2017-05-31T03:54:00 Last Updated: 2024-08-05T17:02:44.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSRF vulnerability in remotedownload.php in Allen Disk 1.6 allows remote authenticated users to conduct port scans and access intranet servers via a crafted file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/s3131212/allendisk/issues/20
CVE ID: CVE-2017-9310 State: PUBLISHED Published: 2017-06-08T16:00:00 Last Updated: 2024-08-05T17:02:44.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to cause a denial of service (infinite loop) via vectors related to setting the initial receive / transmit descriptor head (TDH/RDH) outside the allocated descriptor buffer. Additional Analyst Notes: - CVE Program Container: References: - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=4154c7e03fa55b4cf52509a83d50d6c09d743b7 - http://www.securityfocus.com/bid/98766 - http://www.debian.org/security/2017/dsa-392
e03fa55b4cf52509a83d50d6c09d743b7 - http://www.securityfocus.com/bid/98766 - http://www.debian.org/security/2017/dsa-3920 - http://www.openwall.com/lists/oss-security/2017/05/31/1 - https://security.gentoo.org/glsa/201706-03 - https://access.redhat.com/errata/RHSA-2017:2392 - https://bugzilla.redhat.com/show_bug.cgi?id=1452620 - https://access.redhat.com/errata/RHSA-2017:2408
CVE ID: CVE-2017-9312 State: PUBLISHED Published: 2018-06-25T15:00:00Z Last Updated: 2024-09-16T23:06:24.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improperly implemented option-field processing in the TCP/IP stack on Allen-Bradley L30ERMS safety devices v30 and earlier causes a denial of service. When a crafted TCP packet is received, the device reboots immediately. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-172-02 - http://www.securityfocus.com/bid/104528
CVE ID: CVE-2017-9313 State: PUBLISHED Published: 2017-07-04T02:00:00 Last Updated: 2024-08-05T17:02:44.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via the sec parameter to view_man.cgi, the referers parameter to change_referers.cgi, or the name parameter to save_user.cgi. NOTE: these issues were not fixed in 1.840. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/webmin/webmin/commit/a330e913ee099cb9c586ce1b9267647fc566c1ab - http://seclists.org/bugtraq/2017/Jul/3 - http://www.securitytracker.com/id/10