Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ache.org/thread.html/re7367895ccbf64523efcd39a9181baf2eaa30b069d8d6496852fba56%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/rfd823a733b02cffbef5a69953fdcbed2d1d0afad5e1ea4e96ff6bf0a%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/r9ea5d489e004b40baf73880c4e11dd4de24b799d15e091e1f4017108%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/rbbad61e1ba5b21e234a6664963618acfee237af754eb20300d938e1e%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/r3df4b7ccc363b4850a24842138117aa4451b875bc4773a845b828fc6%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/r868875e67494a18d31e88cba2672f45c3fc6708ffdd
828fc6%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/r868875e67494a18d31e88cba2672f45c3fc6708ffdde445723004da4%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/r4ebb9596d890f3528630492bd78237b3eef06f093bac238a0da9b630%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/rbc4fbb06ccb10e26e6064f57f6bd4935eabe2d18a0cb9a7183699396%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/rc550b8955b37b40fee18db99f167337c41c930d8c3763b9631e01dda%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/r5f794dc07913c5f2ec08f540813b40e61b562d36f8b1f916e8705c56%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/t
tml/r5f794dc07913c5f2ec08f540813b40e61b562d36f8b1f916e8705c56%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/r41a0e2c36f7d1854a4d56cb1e4aa720ef501782d887ece1c9b1e2d60%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/r5b8666c4414500ff6e993bfa69cb6afa19b1b67c4585a045c0c21662%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/r0a6b6429a7558051dbb70bd06584b4b1c334a80ec9203d3d39b7045a%40%3Ccommits.tez.apache.org%3E - https://lists.apache.org/thread.html/rfe55d83e4070bcc9285bbbf6bc39635dbcbba6d14d89aab0f339c83a%40%3Ccommits.tez.apache.org%3E - https://lists.apache.org/thread.html/r5f07c30721503d4c02d5451f77a611a1a0bb2a94ddcdf071c9485ea3%4
its.tez.apache.org%3E - https://lists.apache.org/thread.html/r5f07c30721503d4c02d5451f77a611a1a0bb2a94ddcdf071c9485ea3%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/r14a74d204f285dd3a4fa203de6dbb4e741ddb7fdfff7915590e5b3db%40%3Cdev.tez.apache.org%3E - https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E
CVE ID: CVE-2017-14064 State: PUBLISHED Published: 2017-08-31T17:00:00 Last Updated: 2024-08-05T19:13:41.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate call. The issues lies in using strdup in ext/json/ext/generator/generator.c, which will stop after encountering a '\0' byte, returning a pointer to a string of length zero, which is not the length stored in space_len. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3685-1/ - https://access.redhat.com/errata/RHSA-2018:0585 - https://www.debian.org/security/2017/dsa-3966 - h
ubuntu.com/3685-1/ - https://access.redhat.com/errata/RHSA-2018:0585 - https://www.debian.org/security/2017/dsa-3966 - https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/ - https://access.redhat.com/errata/RHSA-2018:0378 - https://hackerone.com/reports/209949 - http://www.securitytracker.com/id/1042004 - https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released/ - http://www.securitytracker.com/id/1039363 - https://access.redhat.com/errata/RHSA-2017:3485 - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html - https://access.redhat.com/errata/RHSA-2018:0583 - https://bugs.ruby-lang.org/issues/13853 - https://github.com/flori/json/commit/8f782fd8e181d9cfe938
ata/RHSA-2018:0583 - https://bugs.ruby-lang.org/issues/13853 - https://github.com/flori/json/commit/8f782fd8e181d9cfe9387ded43a5ca9692266b85 - http://www.securityfocus.com/bid/100890 - https://security.gentoo.org/glsa/201710-18
CVE ID: CVE-2017-14069 State: PUBLISHED Published: 2017-08-31T18:00:00 Last Updated: 2024-08-05T19:13:41.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.sstrunk.com/cve/nowarn.html - https://raw.githubusercontent.com/zhangyuhang2017/cve/master/1.txt
CVE ID: CVE-2017-14070 State: PUBLISHED Published: 2017-08-31T18:00:00Z Last Updated: 2024-09-17T03:43:48.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to ipsearch.php, related to PHP_SELF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhangyuhang2017/cve/blob/master/4.txt
CVE ID: CVE-2017-14075 State: PUBLISHED Published: 2017-09-11T17:00:00 Last Updated: 2024-08-05T19:13:41.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x953824a7 by the windrvr1240 kernel driver. The issue lies in the failure to properly validate user-supplied data which can result in an out-of-bounds write condition. An attacker can leverage this vulnerability to execute arbitrary cod
ich can result in an out-of-bounds write condition. An attacker can leverage this vulnerability to execute arbitrary code under the context of kernel. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/144045/Jungo-DriverWizard-WinDrive-OOB-Write-Privilege-Escalation.html - https://www.exploit-db.com/exploits/42625/
CVE ID: CVE-2017-14076 State: PUBLISHED Published: 2017-08-31T19:00:00Z Last Updated: 2024-09-17T01:36:57.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action. Additional Analyst Notes: - CVE Program Container: References: - http://www.sstrunk.com/cve/linksmanage.html
CVE ID: CVE-2017-14077 State: PUBLISHED Published: 2017-11-18T01:00:00 Last Updated: 2024-08-05T19:13:41.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $_SERVER['HTTP_USER_AGENT'] parameter to example_form.ajax.php or example_form.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.checkmarx.com/advisories/html-injection-securimage/ - https://advisory.checkmarx.net/advisory/CX-2017-4223
CVE ID: CVE-2017-14078 State: PUBLISHED Published: 2017-09-22T16:00:00Z Last Updated: 2024-09-17T03:52:36.969Z Vendors: Trend Micro Products: Mobile Security (Enterprise) Problem Types: SQL Injection Description: SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-17-766 - http://www.zerodayinitiative.com/advisories/ZDI-17-769 - http://www.zerodayinitiative.com/advisories/ZDI-17-770 - http://www.zerodayinitiative.com/advisories/ZDI-17-809 - http://www.zer
ww.zerodayinitiative.com/advisories/ZDI-17-770 - http://www.zerodayinitiative.com/advisories/ZDI-17-809 - http://www.zerodayinitiative.com/advisories/ZDI-17-744 - http://www.zerodayinitiative.com/advisories/ZDI-17-742 - http://www.zerodayinitiative.com/advisories/ZDI-17-787 - http://www.zerodayinitiative.com/advisories/ZDI-17-800 - http://www.zerodayinitiative.com/advisories/ZDI-17-773 - http://www.zerodayinitiative.com/advisories/ZDI-17-778 - http://www.zerodayinitiative.com/advisories/ZDI-17-763 - http://www.zerodayinitiative.com/advisories/ZDI-17-764 - http://www.zerodayinitiative.com/advisories/ZDI-17-747 - http://www.zerodayinitiative.com/advisories/ZDI-17-771 - http://www.zerodayinitia
initiative.com/advisories/ZDI-17-747 - http://www.zerodayinitiative.com/advisories/ZDI-17-771 - http://www.zerodayinitiative.com/advisories/ZDI-17-805 - http://www.zerodayinitiative.com/advisories/ZDI-17-739 - http://www.zerodayinitiative.com/advisories/ZDI-17-806 - http://www.zerodayinitiative.com/advisories/ZDI-17-783 - http://www.zerodayinitiative.com/advisories/ZDI-17-780 - http://www.zerodayinitiative.com/advisories/ZDI-17-788 - http://www.zerodayinitiative.com/advisories/ZDI-17-749 - http://www.zerodayinitiative.com/advisories/ZDI-17-804 - http://www.zerodayinitiative.com/advisories/ZDI-17-759 - http://www.zerodayinitiative.com/advisories/ZDI-17-803 - http://www.zerodayinitiative.com/a
.com/advisories/ZDI-17-759 - http://www.zerodayinitiative.com/advisories/ZDI-17-803 - http://www.zerodayinitiative.com/advisories/ZDI-17-757 - http://www.zerodayinitiative.com/advisories/ZDI-17-777 - http://www.zerodayinitiative.com/advisories/ZDI-17-768 - http://www.zerodayinitiative.com/advisories/ZDI-17-745 - http://www.securityfocus.com/bid/100966 - http://www.zerodayinitiative.com/advisories/ZDI-17-741 - http://www.zerodayinitiative.com/advisories/ZDI-17-755 - http://www.zerodayinitiative.com/advisories/ZDI-17-740 - http://www.zerodayinitiative.com/advisories/ZDI-17-799 - http://www.zerodayinitiative.com/advisories/ZDI-17-791 - http://www.zerodayinitiative.com/advisories/ZDI-17-802 - ht
9 - http://www.zerodayinitiative.com/advisories/ZDI-17-791 - http://www.zerodayinitiative.com/advisories/ZDI-17-802 - http://www.zerodayinitiative.com/advisories/ZDI-17-760 - http://www.zerodayinitiative.com/advisories/ZDI-17-761 - http://www.zerodayinitiative.com/advisories/ZDI-17-793 - http://www.zerodayinitiative.com/advisories/ZDI-17-781 - http://www.zerodayinitiative.com/advisories/ZDI-17-756 - http://www.zerodayinitiative.com/advisories/ZDI-17-798 - https://success.trendmicro.com/solution/1118224 - http://www.zerodayinitiative.com/advisories/ZDI-17-772 - http://www.zerodayinitiative.com/advisories/ZDI-17-748 - http://www.zerodayinitiative.com/advisories/ZDI-17-792 - http://www.zerodayi
rodayinitiative.com/advisories/ZDI-17-748 - http://www.zerodayinitiative.com/advisories/ZDI-17-792 - http://www.zerodayinitiative.com/advisories/ZDI-17-795 - http://www.zerodayinitiative.com/advisories/ZDI-17-775 - http://www.zerodayinitiative.com/advisories/ZDI-17-779 - http://www.zerodayinitiative.com/advisories/ZDI-17-751 - http://www.zerodayinitiative.com/advisories/ZDI-17-801 - http://www.zerodayinitiative.com/advisories/ZDI-17-750 - http://www.zerodayinitiative.com/advisories/ZDI-17-758 - http://www.zerodayinitiative.com/advisories/ZDI-17-786 - http://www.zerodayinitiative.com/advisories/ZDI-17-765 - http://www.zerodayinitiative.com/advisories/ZDI-17-746 - http://www.zerodayinitiative.
ative.com/advisories/ZDI-17-765 - http://www.zerodayinitiative.com/advisories/ZDI-17-746 - http://www.zerodayinitiative.com/advisories/ZDI-17-794 - http://www.zerodayinitiative.com/advisories/ZDI-17-784 - http://www.zerodayinitiative.com/advisories/ZDI-17-797 - http://www.zerodayinitiative.com/advisories/ZDI-17-762 - http://www.zerodayinitiative.com/advisories/ZDI-17-796 - http://www.zerodayinitiative.com/advisories/ZDI-17-753 - http://www.zerodayinitiative.com/advisories/ZDI-17-743 - http://www.zerodayinitiative.com/advisories/ZDI-17-810 - http://www.zerodayinitiative.com/advisories/ZDI-17-782 - http://www.zerodayinitiative.com/advisories/ZDI-17-808 - http://www.zerodayinitiative.com/adviso
advisories/ZDI-17-782 - http://www.zerodayinitiative.com/advisories/ZDI-17-808 - http://www.zerodayinitiative.com/advisories/ZDI-17-776 - http://www.zerodayinitiative.com/advisories/ZDI-17-754
CVE ID: CVE-2017-14079 State: PUBLISHED Published: 2017-09-22T16:00:00Z Last Updated: 2024-09-16T17:33:10.935Z Vendors: Trend Micro Products: Mobile Security (Enterprise) Problem Types: File Uploads Description: Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-17-807 - http://www.zerodayinitiative.com/advisories/ZDI-17-789 - http://www.securityfocus.com/bid/100970 - http://www.zerodayinitiative.com/advisories/ZDI-17-790 - https://success.trendmicro.com/sol
curityfocus.com/bid/100970 - http://www.zerodayinitiative.com/advisories/ZDI-17-790 - https://success.trendmicro.com/solution/1118224 - http://www.zerodayinitiative.com/advisories/ZDI-17-785
CVE ID: CVE-2017-14080 State: PUBLISHED Published: 2017-09-22T16:00:00Z Last Updated: 2024-09-17T00:46:43.086Z Vendors: Trend Micro Products: Mobile Security (Enterprise) Problem Types: Authentication Bypass Description: Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows attackers to access a specific part of the console using a blank password. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-17-767 - https://success.trendmicro.com/solution/1118224
CVE ID: CVE-2017-14081 State: PUBLISHED Published: 2017-09-22T16:00:00 Last Updated: 2024-08-05T19:13:41.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Proxy command injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-17-752 - https://success.trendmicro.com/solution/1118224 - http://www.securityfocus.com/bid/100969 - http://www.zerodayinitiative.com/advisories/ZDI-17-774
CVE ID: CVE-2017-14082 State: PUBLISHED Published: 2018-01-19T19:00:00 Last Updated: 2024-08-05T19:13:41.696Z Vendors: Trend Micro Products: Trend Micro Mobile Security (Enterprise) Problem Types: OTHER - Information Disclosure Description: An uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security (Enterprise) versions 9.7 and below could allow an unauthenticated remote attacker to disclosure sensitive information on a vulnerable system. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-17-972/ - http://www.securityfocus.com/bid/102216 - https://success.trendmicro.com/solution/1118993
CVE ID: CVE-2017-14083 State: PUBLISHED Published: 2017-10-05T13:00:00 Last Updated: 2024-08-05T19:13:41.699Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: Unauthorized Access Control Description: A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeScan encryption file. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1118372 - http://seclists.org/fulldisclosure/2017/Sep/90 - http://www.securityfocus.com/archive/1/541273/100/0/threaded - http://hyp3rlinx.altervista.org/advisories/CVE-2017-14083-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-R
/1/541273/100/0/threaded - http://hyp3rlinx.altervista.org/advisories/CVE-2017-14083-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-REMOTE-ENCRYPTION-KEY-DISCLOSURE.txt - https://www.exploit-db.com/exploits/42889/ - http://packetstormsecurity.com/files/144398/TrendMicro-OfficeScan-11.0-XG-12.0-Encryption-Key-Disclosure.html - http://www.securitytracker.com/id/1039500 - http://www.securityfocus.com/bid/101076
CVE ID: CVE-2017-14084 State: PUBLISHED Published: 2017-10-05T13:00:00 Last Updated: 2024-08-05T19:13:41.570Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: Man-in-the-Middle (MitM) RCE Description: A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable installations. Additional Analyst Notes: - CVE Program Container: References: - http://hyp3rlinx.altervista.org/advisories/CVE-2017-14084-TRENDMICRO-OFFICESCAN-XG-CURL-MITM-REMOTE-CODE-EXECUTION.txt - https://success.trendmicro.com/solution/1118372 - http://www.securityfocus.com/archive/1/541275/100/0/threaded - http://ww
tps://success.trendmicro.com/solution/1118372 - http://www.securityfocus.com/archive/1/541275/100/0/threaded - http://www.securityfocus.com/bid/101072 - http://www.securityfocus.com/archive/1/541264/100/0/threaded - http://packetstormsecurity.com/files/144400/TrendMicro-OfficeScan-11.0-XG-12.0-Man-In-The-Middle.html - http://seclists.org/fulldisclosure/2017/Sep/87 - http://www.securitytracker.com/id/1039500 - https://www.exploit-db.com/exploits/42891/
CVE ID: CVE-2017-14085 State: PUBLISHED Published: 2017-10-05T13:00:00 Last Updated: 2024-08-05T19:13:41.709Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: Information Disclosure Description: Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to query the network's NT domain or the PHP version and modules. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1118372 - http://seclists.org/fulldisclosure/2017/Sep/85 - http://packetstormsecurity.com/files/144402/TrendMicro-OfficeScan-11.0-XG-12.0-Information-Disclosure.html - h
/Sep/85 - http://packetstormsecurity.com/files/144402/TrendMicro-OfficeScan-11.0-XG-12.0-Information-Disclosure.html - https://www.exploit-db.com/exploits/42893/ - http://www.securityfocus.com/archive/1/541281/100/0/threaded - http://hyp3rlinx.altervista.org/advisories/CVE-2017-14085-TRENDMICRO-OFFICESCAN-XG-REMOTE-NT-DOMAIN-PHP-INFO-DISCLOSURE.txt - http://www.securitytracker.com/id/1039500 - http://www.securityfocus.com/bid/101076
CVE ID: CVE-2017-14086 State: PUBLISHED Published: 2017-10-05T13:00:00 Last Updated: 2024-08-05T19:13:41.878Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: Pre-authorization Start Remote Process Description: Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potential INI corruption, which may cause the server disk space to be consumed with dump files from continuous HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1118372 - http://packetsto
Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1118372 - http://packetstormsecurity.com/files/144401/TrendMicro-OfficeScan-11.0-XG-12.0-Auth-Start-Code-Execution.html - https://www.exploit-db.com/exploits/42892/ - http://www.securityfocus.com/archive/1/541274/100/0/threaded - http://hyp3rlinx.altervista.org/advisories/CVE-2017-14086-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-START-REMOTE-PROCESS-CODE-EXECUTION-MEM-CORRUPT.txt - http://seclists.org/fulldisclosure/2017/Sep/88 - http://www.securitytracker.com/id/1039500 - http://www.securityfocus.com/bid/101076
CVE ID: CVE-2017-14087 State: PUBLISHED Published: 2017-10-05T13:00:00 Last Updated: 2024-08-05T19:13:41.655Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: Host Header Injection Description: A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Host header, allowing the attacker to render arbitrary links that point to a malicious website with poisoned Host header webpages. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1118372 - http://www.securityfocus.com/archive/1/541267/100/0/threaded - http://packetstormsecurity.com/files/144404/TrendMicro-Offi
tp://www.securityfocus.com/archive/1/541267/100/0/threaded - http://packetstormsecurity.com/files/144404/TrendMicro-OfficeScan-11.0-XG-12.0-Host-Header-Injection.html - http://hyp3rlinx.altervista.org/advisories/CVE-2017-14087-TRENDMICRO-OFFICESCAN-XG-HOST-HEADER-INJECTION.txt - http://www.securityfocus.com/bid/101074 - http://seclists.org/fulldisclosure/2017/Sep/86 - http://www.securitytracker.com/id/1039500 - https://www.exploit-db.com/exploits/42895/
CVE ID: CVE-2017-14088 State: PUBLISHED Published: 2017-10-05T13:00:00 Last Updated: 2024-08-05T19:13:41.767Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: Memory Corruption Privilege Escalation Description: Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary code and escalate privileges to resources normally reserved for the kernel on vulnerable installations by exploiting tmwfp.sys. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https:
et system in order to exploit the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1118372 - http://www.securityfocus.com/bid/101070 - http://www.zerodayinitiative.com/advisories/ZDI-17-828 - http://www.securitytracker.com/id/1039500 - http://www.zerodayinitiative.com/advisories/ZDI-17-829
CVE ID: CVE-2017-14089 State: PUBLISHED Published: 2017-10-05T13:00:00 Last Updated: 2024-08-05T19:13:41.934Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: Unauthorized Memory Corruption Description: An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption issues. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1118372 - http://hyp3rlinx.altervista.org/advisories/CVE-2017-14089-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-REMOTE-MEMORY-CORRUPTION.txt - http://pac
inx.altervista.org/advisories/CVE-2017-14089-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-REMOTE-MEMORY-CORRUPTION.txt - http://packetstormsecurity.com/files/144464/TrendMicro-OfficeScan-11.0-XG-12.0-Memory-Corruption.html - http://seclists.org/fulldisclosure/2017/Sep/91 - https://www.exploit-db.com/exploits/42920/ - http://www.securityfocus.com/archive/1/541271/100/0/threaded - http://www.securitytracker.com/id/1039500 - http://www.securityfocus.com/bid/101076
CVE ID: CVE-2017-14090 State: PUBLISHED Published: 2017-12-15T14:00:00 Last Updated: 2024-08-05T19:13:41.879Z Vendors: Trend Micro Products: Trend Micro ScanMail for Exchange Problem Types: OTHER - Insecure Communication Description: A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update servers are not encrypted. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1118486 - https://www.coresecurity.com/advisories/trend-micro-scanmail-microsoft-exchange-multiple-vulnerabilities
CVE ID: CVE-2017-14091 State: PUBLISHED Published: 2017-12-15T14:00:00 Last Updated: 2024-08-05T19:13:41.911Z Vendors: Trend Micro Products: Trend Micro ScanMail for Exchange Problem Types: Insecure Permissions Description: A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which certain specific installations that utilize a uncommon feature - Other Update Sources - could be exploited to overwrite sensitive files in the ScanMail for Exchange directory. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1118486 - https://www.coresecurity.com/advisories/trend-micro-scanmail-microsoft-exchange-multiple-vulnerabilities