Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ll.com/lists/oss-security/2017/01/21/3 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6 - http://www.securityfocus.com/bid/95710 - https://bugzilla.redhat.com/show_bug.cgi?id=1416110 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=05a974efa4bdf6e2a150e3f27dc6fcf0a9ad5655 - https://github.com/torvalds/linux/commit/05a974efa4bdf6e2a150e3f27dc6fcf0a9ad5655
CVE ID: CVE-2017-5549 State: PUBLISHED Published: 2017-02-06T06:04:00 Last Updated: 2024-08-05T15:04:15.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: The klsi_105_get_line_state function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitialized heap-memory contents into a log entry upon a failure to read the line status, which allows local users to obtain sensitive information by reading the log. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95715 - http://www.openwall.com/lists/oss-security/2017/01/21/3 - https://usn.ubuntu.com/3754-1/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/l
ists/oss-security/2017/01/21/3 - https://usn.ubuntu.com/3754-1/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=146cc8a17a3b4996f6805ee5c080e7101277c410 - https://github.com/torvalds/linux/commit/146cc8a17a3b4996f6805ee5c080e7101277c410 - http://www.debian.org/security/2017/dsa-3791 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5 - https://bugzilla.redhat.com/show_bug.cgi?id=1416114
CVE ID: CVE-2017-5550 State: PUBLISHED Published: 2017-02-06T06:04:00 Last Updated: 2024-08-05T15:04:15.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the pipe_advance function in lib/iov_iter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized heap-memory locations in opportunistic circumstances by reading from a pipe after an incorrect buffer-release decision. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/21/3 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9dc6f65bc5e232d1c05fe34b5daadc7e8bbf1fb - https
tp://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9dc6f65bc5e232d1c05fe34b5daadc7e8bbf1fb - https://bugzilla.redhat.com/show_bug.cgi?id=1416116 - http://www.securityfocus.com/bid/95716 - https://github.com/torvalds/linux/commit/b9dc6f65bc5e232d1c05fe34b5daadc7e8bbf1fb - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5
CVE ID: CVE-2017-5551 State: PUBLISHED Published: 2017-02-06T06:04:00 Last Updated: 2024-08-05T15:04:15.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7097. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=497de07d89c1410d
gram Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=497de07d89c1410d76a15bec2bb41f24a2a89f31 - http://www.openwall.com/lists/oss-security/2017/01/21/3 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6 - http://www.securityfocus.com/bid/95717 - https://bugzilla.redhat.com/show_bug.cgi?id=1416126 - https://github.com/torvalds/linux/commit/497de07d89c1410d76a15bec2bb41f24a2a89f31 - http://www.debian.org/security/2017/dsa-3791 - http://www.securitytracker.com/id/1038053
CVE ID: CVE-2017-5552 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-05T15:04:15.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the virgl_resource_attach_backing function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-28 - http://www.securityfocus.com/bid/95773 - http://www.openwall.com/lists/oss-security/2017/01/21/5 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=33243
d/95773 - http://www.openwall.com/lists/oss-security/2017/01/21/5 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=33243031dad02d161225ba99d782616da133f689 - http://www.openwall.com/lists/oss-security/2017/01/20/17
CVE ID: CVE-2017-5553 State: PUBLISHED Published: 2017-01-23T06:49:00 Last Updated: 2024-08-05T15:04:15.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in plugins/markdown_plugin/_markdown.plugin.php in b2evolution before 6.8.5 allows remote authenticated users to inject arbitrary web script or HTML via a javascript: URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95704 - http://b2evolution.net/downloads/6-8-5 - https://github.com/b2evolution/b2evolution/commit/ce5b36e44b714b18b0bcd34c6db0187b8d13bab8
CVE ID: CVE-2017-5554 State: PUBLISHED Published: 2017-01-23T06:49:00 Last Updated: 2024-08-05T15:04:15.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ABOOT in OnePlus 3 and 3T OxygenOS before 4.0.2. The attacker can reboot the device into the fastboot mode, which could be done without any authentication. A physical attacker can press the "Volume Up" button during device boot, where an attacker with ADB access can issue the adb reboot bootloader command. Then, the attacker can put the platform's SELinux in permissive mode, which severely weakens it, by issuing: fastboot oem selinux permissive. Additional Analyst Notes: - CVE Program Container: Refe
everely weakens it, by issuing: fastboot oem selinux permissive. Additional Analyst Notes: - CVE Program Container: References: - https://securityresear.ch/2017/01/11/fastboot-oem-selinux-permissive/ - http://www.securityfocus.com/bid/95706 - https://www.xda-developers.com/oneplus-33t-bootloader-vulnerability-allows-changing-of-selinux-to-permissive-mode-in-fastboot/
CVE ID: CVE-2017-5556 State: PUBLISHED Published: 2017-01-23T06:49:00 Last Updated: 2024-08-05T15:04:15.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ConvertToPDF plugin in Foxit Reader before 8.2 and PhantomPDF before 8.2 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image. The vulnerability could lead to information disclosure; an attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/sec
rent process. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securityfocus.com/bid/95353 - http://www.zerodayinitiative.com/advisories/ZDI-17-039/
CVE ID: CVE-2017-5563 State: PUBLISHED Published: 2017-01-23T06:49:00 Last Updated: 2024-08-05T15:04:15.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tif_lzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.maptools.org/show_bug.cgi?id=2664 - https://security.gentoo.org/glsa/201709-27 - https://usn.ubuntu.com/3606-1/ - http://www.securityfocus.com/bid/95705
CVE ID: CVE-2017-5565 State: PUBLISHED Published: 2017-03-21T16:00:00 Last Updated: 2024-08-05T15:04:15.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code injection vulnerability in Trend Micro Maximum Security 11.0 (and earlier), Internet Security 11.0 (and earlier), and Antivirus+ Security 11.0 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Trend Micro process via a "DoubleAgent" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execut
sses feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97031 - http://cybellum.com/doubleagent-taking-full-control-antivirus/ - http://www.securitytracker.com/id/1038206 - http://cybellum.com/doubleagentzero-day-code
aking-full-control-antivirus/ - http://www.securitytracker.com/id/1038206 - http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/
CVE ID: CVE-2017-5566 State: PUBLISHED Published: 2017-03-21T16:00:00 Last Updated: 2024-08-05T15:04:15.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code injection vulnerability in AVG Ultimate 17.1 (and earlier), AVG Internet Security 17.1 (and earlier), and AVG AntiVirus FREE 17.1 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any AVG process via a "DoubleAgent" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the re
refore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack. Additional Analyst Notes: - CVE Program Container: References: - http://cybellum.com/doubleagent-taking-full-control-antivirus/ - http://www.securityfocus.com/bid/97022 - http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/
CVE ID: CVE-2017-5567 State: PUBLISHED Published: 2017-03-21T16:00:00 Last Updated: 2024-08-05T15:04:15.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3 (and earlier), Pro Antivirus 12.3 (and earlier), and Free Antivirus 12.3 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Avast process via a "DoubleAgent" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image Fil
ed Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack. Additional Analyst Notes: - CVE Program Container: References: - http://cybellum.com/doubleagent-taking-full-control-antivirus/ - http://www.securityfocus.com/bid/97017 - http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique
ttp://www.securityfocus.com/bid/97017 - http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/
CVE ID: CVE-2017-5569 State: PUBLISHED Published: 2017-01-23T17:00:00 Last Updated: 2024-08-05T15:04:15.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the template.jsp, which can be exploited without the need of authentication and via an HTTP POST request, and which can be used to dump database data out to a malicious server, using an out-of-band technique such as select_loadfile(). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95741 - https://gist.github.com/malerisch/d32d127a002ac1f10bce39333ca9a4dc
CVE ID: CVE-2017-5570 State: PUBLISHED Published: 2017-01-23T17:00:00 Last Updated: 2024-08-05T15:04:15.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the messageJson.jsp, which can only be exploited by authenticated users via an HTTP POST request and which can be used to dump database data out to a malicious server, using an out-of-band technique such as select_loadfile(). Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/malerisch/898c7ae46abde5da15748beb1e6e886f - http://www.securityfocus.com/bid/95742
CVE ID: CVE-2017-5571 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-05T15:04:15.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) 11.14.1 and earlier, as used in Citrix License Server for Windows and the Citrix License Server VPX, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-elec
.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager - http://www.securityfocus.com/bid/96028 - https://support.citrix.com/article/CTX219885 - https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/ - https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/ - https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01
CVE ID: CVE-2017-5572 State: PUBLISHED Published: 2017-01-30T16:00:00 Last Updated: 2024-08-05T15:04:15.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host database. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95801 - https://support.citrix.com/article/CTX220112 - http://www.securitytracker.com/id/1037716
CVE ID: CVE-2017-5573 State: PUBLISHED Published: 2017-01-30T16:00:00 Last Updated: 2024-08-05T15:04:15.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other administrators. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX220112 - http://www.securitytracker.com/id/1037716 - http://www.securityfocus.com/bid/95796
CVE ID: CVE-2017-5574 State: PUBLISHED Published: 2017-01-23T06:49:00 Last Updated: 2024-08-05T15:04:15.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activation parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95701 - https://github.com/semplon/GeniXCMS/issues/69 - https://github.com/semplon/GeniXCMS/releases/tag/v1.0.0
CVE ID: CVE-2017-5575 State: PUBLISHED Published: 2017-01-23T06:49:00 Last Updated: 2024-08-05T15:04:15.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc/lib/Options.class.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the modules parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/semplon/GeniXCMS/issues/68 - http://www.securityfocus.com/bid/95703 - https://github.com/semplon/GeniXCMS/releases/tag/v1.0.0
CVE ID: CVE-2017-5576 State: PUBLISHED Published: 2017-02-06T06:04:00 Last Updated: 2024-08-05T15:04:15.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 allows local users to cause a denial of service or possibly have unspecified other impact via a crafted size value in a VC4_SUBMIT_CL ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/21/7 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f2ff82e11c86c05d051cae32b58226392d33bbf - https:/
://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f2ff82e11c86c05d051cae32b58226392d33bbf - https://bugzilla.redhat.com/show_bug.cgi?id=1416436 - https://github.com/torvalds/linux/commit/0f2ff82e11c86c05d051cae32b58226392d33bbf - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7 - http://www.securityfocus.com/bid/95767 - https://lkml.org/lkml/2017/1/17/761
CVE ID: CVE-2017-5577 State: PUBLISHED Published: 2017-02-06T06:04:00 Last Updated: 2024-08-05T15:04:15.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 does not set an errno value upon certain overflow detections, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) via inconsistent size values in a VC4_SUBMIT_CL ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/21/7 - http://www.securityfocus.com/bid/95765 - https://github.com/torvalds/linu
openwall.com/lists/oss-security/2017/01/21/7 - http://www.securityfocus.com/bid/95765 - https://github.com/torvalds/linux/commit/6b8ac63847bc2f958dd93c09edc941a0118992d9 - https://lkml.org/lkml/2017/1/17/759 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7 - https://bugzilla.redhat.com/show_bug.cgi?id=1416437 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6b8ac63847bc2f958dd93c09edc941a0118992d9
CVE ID: CVE-2017-5578 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-05T15:04:15.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the virtio_gpu_resource_attach_backing function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands. Additional Analyst Notes: - CVE Program Container: References: - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=204f01b30975923c64006f8067f0937b91eea68b - http://www.securityfocus.com/bid/95781 - https://security.gentoo.org/glsa/201702-28 - http://www.openwal
0937b91eea68b - http://www.securityfocus.com/bid/95781 - https://security.gentoo.org/glsa/201702-28 - http://www.openwall.com/lists/oss-security/2017/01/23/3 - http://www.openwall.com/lists/oss-security/2017/01/25/2
CVE ID: CVE-2017-5579 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-05T15:04:15.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - http://www.openwall.com/lists/oss-security/2017/01/24/8 - https://access.redhat.com/errata/RHSA-2017:2392 - https://security.gentoo.org/gls
.com/lists/oss-security/2017/01/24/8 - https://access.redhat.com/errata/RHSA-2017:2392 - https://security.gentoo.org/glsa/201702-28 - http://www.securityfocus.com/bid/95780 - http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=8409dc884a201bf74b30a9d232b6bbdd00cb7e2b - http://www.openwall.com/lists/oss-security/2017/01/25/3 - https://access.redhat.com/errata/RHSA-2017:2408
CVE ID: CVE-2017-5580 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-05T15:04:15.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse_instruction function in gallium/auxiliary/tgsi/tgsi_text.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and process crash) via a crafted texture instruction. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201707-06 - https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html - https://cgit.freedesktop.org/virglrenderer/commit/src/gallium/auxiliary/tgsi/tgsi_text.c?id=28894
February/000145.html - https://cgit.freedesktop.org/virglrenderer/commit/src/gallium/auxiliary/tgsi/tgsi_text.c?id=28894a30a17a84529be102b21118e55d6c9f23fa - http://www.securityfocus.com/bid/95782 - http://www.openwall.com/lists/oss-security/2017/01/24/5 - http://www.openwall.com/lists/oss-security/2017/01/25/5
CVE ID: CVE-2017-5581 State: PUBLISHED Published: 2017-02-28T18:00:00 Last Updated: 2024-08-05T15:04:15.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/22/1 - http://rhn.redhat.com/errata/RHSA-2017-0630.html - https://access.redhat.com/errata/RHSA-2017:2000 - https://security.gentoo.org/glsa/201702-19 - https://github.com/TigerVNC/tigervnc/pull/399 - https://g
/RHSA-2017:2000 - https://security.gentoo.org/glsa/201702-19 - https://github.com/TigerVNC/tigervnc/pull/399 - https://github.com/TigerVNC/tigervnc/commit/18c020124ff1b2441f714da2017f63dba50720ba - https://github.com/TigerVNC/tigervnc/releases/tag/v1.7.1 - http://www.openwall.com/lists/oss-security/2017/01/25/6 - http://www.securityfocus.com/bid/95789
CVE ID: CVE-2017-5583 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:04:15.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96370 - http://www.securitytracker.com/id/1037890 - https://security.paloaltonetworks.com/CVE-2017-5583