Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-6514 State: PUBLISHED Published: 2019-05-22T17:20:03 Last Updated: 2024-08-05T15:33:20.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Path Disclosure) via a /wp-json/oembed/1.0/embed?url= request, related to the "author_name":" substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CFSECURITE/wordpress - https://web.archive.org/web/20180612235401/https://github.com/CFSECURITE/wordpress - http://www.securityfocus.com/bid/108459
CVE ID: CVE-2017-6516 State: PUBLISHED Published: 2017-03-14T17:00:00 Last Updated: 2024-08-05T15:33:19.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow a local attacker to gain elevated privileges. Parts of SysInfo require setuid-to-root access in order to access restricted system files and make restricted kernel calls. This access could be exploited by a local attacker to gain a root shell prompt using the right combination of environment variables and command line arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.magni
variables and command line arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.magnicomp.com/support/cve/CVE-2017-6516.shtml - https://labs.mwrinfosecurity.com/advisories/multiple-vulnerabilities-in-magnicomps-sysinfo-root-setuid/ - https://labs.mwrinfosecurity.com/advisories/magnicomps-sysinfo-root-setuid-local-privilege-escalation-vulnerability/ - http://www.securityfocus.com/bid/96934 - https://www.exploit-db.com/exploits/44150/
CVE ID: CVE-2017-6517 State: PUBLISHED Published: 2017-03-23T20:00:00 Last Updated: 2024-08-05T15:33:19.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded by Skype. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code without the user's knowledge.The specific flaw exists within the handling of DLL (api-ms-win-core-winrt-string-l1-1-0.dll) loading by the Skype.exe process. Additional Analyst Notes: - CVE Program Container
ms-win-core-winrt-string-l1-1-0.dll) loading by the Skype.exe process. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Mar/44 - https://twitter.com/tiger_tigerboy/status/755332687141883904 - https://twitter.com/vysecurity/status/845013670103003138 - http://www.securityfocus.com/bid/96969 - http://www.securitytracker.com/id/1038209 - https://technet.microsoft.com/security/cc308575.aspx - http://packetstormsecurity.com/files/141650/Skype-7.16.0.102-DLL-Hijacking.html
CVE ID: CVE-2017-6518 State: PUBLISHED Published: 2017-03-08T00:00:00 Last Updated: 2024-08-05T15:33:19.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in /sanadata/seo/index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the txtFrom parameter. Additional Analyst Notes: - CVE Program Container: References: - http://daimacn.com/?id=6 - http://www.securityfocus.com/bid/97152
CVE ID: CVE-2017-6519 State: PUBLISHED Published: 2017-05-01T01:00:00 Last Updated: 2024-08-05T15:33:20.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lathiat/avahi/issues/203#issuecomment-449536790 - https:
otes: - CVE Program Container: References: - https://github.com/lathiat/avahi/issues/203#issuecomment-449536790 - https://usn.ubuntu.com/3876-1/ - https://github.com/lathiat/avahi/issues/203 - https://bugzilla.redhat.com/show_bug.cgi?id=1426712 - https://usn.ubuntu.com/3876-2/ - https://www.secfu.net/advisories - https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2017-6520 State: PUBLISHED Published: 2017-05-01T01:00:00 Last Updated: 2024-08-05T15:33:19.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.secfu.net/advisories
CVE ID: CVE-2017-6526 State: PUBLISHED Published: 2017-03-09T19:00:00 Last Updated: 2024-08-05T15:33:19.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to unauthenticated command execution through an improperly protected administrative web shell (cgi-bin/dna/sysAdmin.cgi POST requests). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96823 - https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/ - https://www.exploit-db.com/exploits/41578/
CVE ID: CVE-2017-6527 State: PUBLISHED Published: 2017-03-09T19:00:00 Last Updated: 2024-08-05T15:33:19.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to a NUL-terminated directory traversal attack allowing an unauthenticated attacker to access system files readable by the web server user (by using the viewAppletFsa.cgi seqID parameter). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96823 - https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/ - https://www.exploit-db.com/exploits/41578/
CVE ID: CVE-2017-6528 State: PUBLISHED Published: 2017-03-09T19:00:00 Last Updated: 2024-08-05T15:33:19.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is affected by plaintext password storage (the /home/dna/spool/.pfile file). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96823 - https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/ - https://www.exploit-db.com/exploits/41578/
CVE ID: CVE-2017-6529 State: PUBLISHED Published: 2017-03-09T19:00:00 Last Updated: 2024-08-05T15:33:20.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96823 - https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/ - https://www.exploit-db.com/exploits/41578/
CVE ID: CVE-2017-6530 State: PUBLISHED Published: 2017-07-20T13:00:00 Last Updated: 2024-08-05T15:33:20.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20 do not check password.shtml authorization, leading to Arbitrary password change. Additional Analyst Notes: - CVE Program Container: References: - https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_es.txt - https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt
CVE ID: CVE-2017-6531 State: PUBLISHED Published: 2017-07-20T13:00:00 Last Updated: 2024-08-05T15:33:20.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20, the backup/restore feature lacks access control, related to ReadFile.cgi and LoadCfgFile. Additional Analyst Notes: - CVE Program Container: References: - https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_es.txt - https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt
CVE ID: CVE-2017-6532 State: PUBLISHED Published: 2017-07-20T13:00:00 Last Updated: 2024-08-05T15:33:20.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20 have cleartext credentials in /mib.db. Additional Analyst Notes: - CVE Program Container: References: - https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_es.txt - https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt
CVE ID: CVE-2017-6533 State: PUBLISHED Published: 2017-03-08T08:37:00 Last Updated: 2024-08-05T15:33:20.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (benchmark) passed to the webpagetest-master/www/benchmarks/view.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96935 - https://github.com/WPO-Foundation/webpagetest/issues/833
CVE ID: CVE-2017-6534 State: PUBLISHED Published: 2017-03-08T08:37:00 Last Updated: 2024-08-05T15:33:20.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (pssid) passed to the webpagetest-master/www/pss.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96935 - https://github.com/WPO-Foundation/webpagetest/issues/835
CVE ID: CVE-2017-6535 State: PUBLISHED Published: 2017-03-08T08:37:00 Last Updated: 2024-08-05T15:33:20.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (benchmark, url) passed to the webpagetest-master/www/benchmarks/trendurl.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96935 - https://github.com/WPO-Foundation/webpagetest/issues/832
CVE ID: CVE-2017-6536 State: PUBLISHED Published: 2017-03-08T08:37:00 Last Updated: 2024-08-05T15:33:19.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (url, pssid) passed to the webpagetest-master/www/weblite.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96935 - https://github.com/WPO-Foundation/webpagetest/issues/838
CVE ID: CVE-2017-6537 State: PUBLISHED Published: 2017-03-08T08:37:00 Last Updated: 2024-08-05T15:33:20.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (bgcolor) passed to the webpagetest-master/www/video/view.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96935 - https://github.com/WPO-Foundation/webpagetest/issues/837
CVE ID: CVE-2017-6538 State: PUBLISHED Published: 2017-03-08T08:37:00 Last Updated: 2024-08-05T15:33:20.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (video) passed to the webpagetest-master/www/speedindex/index.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96935 - https://github.com/WPO-Foundation/webpagetest/issues/836
CVE ID: CVE-2017-6539 State: PUBLISHED Published: 2017-03-08T08:37:00 Last Updated: 2024-08-05T15:33:20.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (benchmark, time) passed to the webpagetest-master/www/benchmarks/delta.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96935 - https://github.com/WPO-Foundation/webpagetest/issues/831
CVE ID: CVE-2017-6540 State: PUBLISHED Published: 2017-03-08T08:37:00 Last Updated: 2024-08-05T15:33:20.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (configs) passed to the webpagetest-master/www/benchmarks/compare.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96935 - https://github.com/WPO-Foundation/webpagetest/issues/830
CVE ID: CVE-2017-6541 State: PUBLISHED Published: 2017-03-08T08:37:00 Last Updated: 2024-08-05T15:33:20.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (benchmark, time) passed to the webpagetest-master/www/benchmarks/viewtest.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96935 - https://github.com/WPO-Foundation/webpagetest/issues/834
CVE ID: CVE-2017-6542 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-05T15:33:20.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which trigger a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97156 - https://www.exploit-db.com/exploits/42137/ - https://security.gentoo.org/glsa/201703-03 - https://git.tartarus.org/?p=simo
tps://www.exploit-db.com/exploits/42137/ - https://security.gentoo.org/glsa/201703-03 - https://git.tartarus.org/?p=simon/putty.git%3Ba=commitdiff%3Bh=4ff22863d895cb7ebfced4cf923a012a614adaa8 - http://www.securitytracker.com/id/1038067 - http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-agent-fwd-overflow.html - http://lists.opensuse.org/opensuse-updates/2017-03/msg00055.html - https://security.gentoo.org/glsa/201706-09
CVE ID: CVE-2017-6543 State: PUBLISHED Published: 2017-03-08T23:00:00 Last Updated: 2024-08-05T15:33:20.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenable Nessus before 6.10.2 (as used alone or in Tenable Appliance before 4.5.0) was found to contain a flaw that allowed a remote, authenticated attacker to upload a crafted file that could be written to anywhere on the system. This could be used to subsequently gain elevated privileges on the system (e.g., after a reboot). This issue only affects installations on Windows. Additional Analyst Notes: - CVE Program Container: References: - http://www.tenable.com/security/tns-2017-06 - http://www.securityfocus.com/bid/96418
CVE ID: CVE-2017-6544 State: PUBLISHED Published: 2017-03-08T23:00:00 Last Updated: 2024-08-05T15:33:20.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gargaj/wuhu through 2017-03-08 is vulnerable to a reflected XSS in wuhu-master/www_admin/users.php (id parameter). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Gargaj/wuhu/issues/20 - http://www.securityfocus.com/bid/96751
CVE ID: CVE-2017-6547 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before 3.0.0.4.380.7378; RT-AC68W routers with firmware before 3.0.0.4.380.7266; and RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488 allows remote
11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488 allows remote attackers to inject arbitrary JavaScript by requesting filenames longer than 50 characters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41571/ - http://www.securityfocus.com/bid/96938 - https://bierbaumer.net/security/asuswrt/#cross-site-scripting-xss
CVE ID: CVE-2017-6548 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before 3.0.0.4.380.7378; RT-AC68W routers with firmware before 3.0.0.4.380.7266; and RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488; and Asuswrt-Merlin firmware bef
, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488; and Asuswrt-Merlin firmware before 380.65_2 allow remote attackers to execute arbitrary code on the router via a long host or port in crafted multicast messages. Additional Analyst Notes: - CVE Program Container: References: - https://asuswrt.lostrealm.ca/changelog - https://www.exploit-db.com/exploits/41573/ - http://www.securityfocus.com/bid/96938 - https://bierbaumer.net/security/asuswrt/#remote-code-execution
CVE ID: CVE-2017-6549 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before 3.0.0.4.380.7378; RT-AC68W routers with firmware before 3.0.0.4.380.7266; and RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488; and Asuswrt-Merlin firmw
12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488; and Asuswrt-Merlin firmware before 380.65_2 allows remote attackers to steal any active admin session by sending cgi_logout and asusrouter-Windows-IFTTT-1.0 in certain HTTP headers. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41572/ - https://asuswrt.lostrealm.ca/changelog - http://www.securityfocus.com/bid/96938 - https://bierbaumer.net/security/asuswrt/#session-stealing
CVE ID: CVE-2017-6550 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:33:20.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitrary SQL commands via the (1) TABLE parameter to esbus/servlet/GetSQLData or (2) QUERY parameter to KK_LS9ReportingPortal/GetData. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96821 - http://seclists.org/fulldisclosure/2017/Mar/31 - http://packetstormsecurity.com/files/141575/Kinseys-Infor-Lawson-SQL-Injection.html - https://www.exploit-db.com/exploits/41577/
CVE ID: CVE-2017-6551 State: PUBLISHED Published: 2017-05-02T14:00:00 Last Updated: 2024-08-05T15:33:20.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 14.2 allows remote attackers to cause a denial of service (service restart) or execute arbitrary code via vectors related to Conferencing Nodes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97954 - https://www.pexip.com/sites/pexip/files/Pexip_Security_Bulletin_2017-04-10.pdf
CVE ID: CVE-2017-6552 State: PUBLISHED Published: 2017-03-09T09:26:00 Last Updated: 2024-08-05T15:33:20.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size: it can be filled within minutes. An attacker can exploit this issue to render the affected system unresponsive, resulting in a denial-of-service condition for telephone, Internet, and TV services. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=ShCs5_8mBlM&t=37s - https://www.exploit-db.com/exploits/41565/ - http://www.securityfocus.com/bid/96827
CVE ID: CVE-2017-6553 State: PUBLISHED Published: 2017-04-29T16:00:00 Last Updated: 2024-08-05T15:33:20.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the policy server via an ACT_ALERT_EVENT request that causes memory corruption in the pmmasterd daemon. Additional Analyst Notes: - CVE Program Container: References: - https://0xdeadface.wordpress.com/2017/04/07/multiple-vulnerabilities-in-quest-privilege-manager-6-0-0-xx-cve-2017-6553-cve-2017-6554/ - https://www.exploit-db.com/exploits/42010/ - https://support.oneidentity.com/privilege-manager-f
7-6553-cve-2017-6554/ - https://www.exploit-db.com/exploits/42010/ - https://support.oneidentity.com/privilege-manager-for-unix/kb/SOL133824
CVE ID: CVE-2017-6554 State: PUBLISHED Published: 2017-04-14T18:00:00 Last Updated: 2024-08-05T15:33:20.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary files and consequently execute arbitrary code with root privileges via an ACT_NEWFILESENT action. Additional Analyst Notes: - CVE Program Container: References: - https://support.oneidentity.com/privilege-manager-for-unix/kb/SOL133824 - http://www.securityfocus.com/bid/97686 - https://0xdeadface.wordpress.com/2017/04/07/multiple-vulnerabilities-in-quest-privilege-manager-6-0-0-xx-cve-2017-655