Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
com/bid/98589 - https://security.gentoo.org/glsa/201709-02 - https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/ - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=f32ba72991d2406b21ab17edc234a2f3fa7fb23d
CVE ID: CVE-2017-9039 State: PUBLISHED Published: 2017-05-18T01:00:00 Last Updated: 2024-08-05T16:55:22.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program headers, related to the get_program_headers function in readelf.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=82156ab704b08b124d319c0decdbd48b3ca2dac5 - https://security.gentoo.org/glsa/201709-02 - http://www.securityfocus.com/bid/98580 - https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/
CVE ID: CVE-2017-9040 State: PUBLISHED Published: 2017-05-18T01:00:00 Last Updated: 2024-08-05T16:55:21.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash), related to the process_mips_specific function in readelf.c, via a crafted ELF file that triggers a large memory-allocation attempt. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98579 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=7296a62a2a237f6b1ad8db8c38b090e9f592c8cf - https://security.gentoo.org/glsa/201709-02 - https://blogs.gent
s-gdb.git%3Bh=7296a62a2a237f6b1ad8db8c38b090e9f592c8cf - https://security.gentoo.org/glsa/201709-02 - https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/
CVE ID: CVE-2017-9041 State: PUBLISHED Published: 2017-05-18T01:00:00 Last Updated: 2024-08-05T16:55:22.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to MIPS GOT mishandling in the process_mips_specific function in readelf.c. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-02 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=75ec1fdbb797a389e4fe4aaf2e15358a070dcc19 - https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/ - http://www.securit
97a389e4fe4aaf2e15358a070dcc19 - https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/ - http://www.securityfocus.com/bid/98598 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=c4ab9505b53cdc899506ed421fddb7e1f8faf7a3
CVE ID: CVE-2017-9042 State: PUBLISHED Published: 2017-05-18T01:00:00 Last Updated: 2024-08-05T16:55:22.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: readelf.c in GNU Binutils 2017-04-12 has a "cannot be represented in type long" issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=7296a62a2a237f6b1ad8db8c38b090e9f592c8cf - https://security.gentoo.org/glsa/201709-02 - https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/
CVE ID: CVE-2017-9043 State: PUBLISHED Published: 2017-05-18T01:00:00 Last Updated: 2024-08-05T16:55:21.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: readelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long" issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=ddef72cdc10d82ba011a7ff81cafbbd3466acf54 - http://www.securityfocus.com/bid/98591 - https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/
CVE ID: CVE-2017-9044 State: PUBLISHED Published: 2017-05-18T01:00:00 Last Updated: 2024-08-05T16:55:22.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: The print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98587 - https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/
CVE ID: CVE-2017-9045 State: PUBLISHED Published: 2017-05-18T06:13:00 Last Updated: 2024-08-05T16:55:21.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Google I/O 2017 application before 5.1.4 for Android downloads multiple .json files from http://storage.googleapis.com without SSL, which makes it easier for man-in-the-middle attackers to spoof Feed and Schedule data by creating a modified blocks_v4.json file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98549 - https://wwws.nightwatchcybersecurity.com/2017/05/17/advisory-google-io-2017-android-app/
CVE ID: CVE-2017-9046 State: PUBLISHED Published: 2017-05-21T14:00:00 Last Updated: 2024-08-05T16:55:21.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: winpm-32.exe in Pegasus Mail (aka Pmail) v4.72 build 572 allows code execution via a crafted ssgp.dll file that must be installed locally. For example, if ssgp.dll is on the desktop and executes arbitrary code in the DllMain function, then clicking on a mailto: link on a remote web page triggers the attack. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/142606/Pegasus-4.72-Build-572-Remote-Code-Execution.html
CVE ID: CVE-2017-9047 State: PUBLISHED Published: 2017-05-18T06:13:00 Last Updated: 2024-08-05T16:55:21.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content->type is XML_ELEMENT_CONTENT_ELEMENT, then (i) the content->prefix is appended to buf (if it actually fits) whereupon (ii) content->name is written to the buffer. However, the check for whether the content->name actually fits also uses 'len' rather
nt->name is written to the buffer. However, the check for whether the content->name actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write about "size" many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2, such as PHP, to crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98599 - http://www.debian.org/security/2017/dsa-3952 - https://security.gentoo.org/glsa/201711-01 - http://www.openwall.com/lists/oss-security/2017/05/15/1 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.o
//lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2017-9048 State: PUBLISHED Published: 2017-05-18T06:13:00 Last Updated: 2024-08-05T16:55:22.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes programs that use libxml2, such as PHP, to crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org
e libxml2, such as PHP, to crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3952 - https://security.gentoo.org/glsa/201711-01 - http://www.openwall.com/lists/oss-security/2017/05/15/1 - http://www.securityfocus.com/bid/98556 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2017-9049 State: PUBLISHED Published: 2017-05-18T06:13:00 Last Updated: 2024-08-05T16:55:22.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3952 - https://security.gentoo.org/glsa/201711-01 - http://www.openwall.com/lists/oss-security/2017/05/15/1 - http://www.securityfocus.com/b
ity.gentoo.org/glsa/201711-01 - http://www.openwall.com/lists/oss-security/2017/05/15/1 - http://www.securityfocus.com/bid/98601 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2017-9050 State: PUBLISHED Published: 2017-05-18T06:13:00 Last Updated: 2024-08-05T16:55:21.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98568 - http://www.debian.org/security/2017/dsa-3952 - https://security.gentoo.org/glsa/201711-01 - http://www.openwall.com/lists/oss-security/2017/05/15/1 -
y/2017/dsa-3952 - https://security.gentoo.org/glsa/201711-01 - http://www.openwall.com/lists/oss-security/2017/05/15/1 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2017-9051 State: PUBLISHED Published: 2017-05-18T06:13:00 Last Updated: 2024-08-05T16:55:21.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: libav before 12.1 is vulnerable to an invalid read of size 1 due to NULL pointer dereferencing in the nsv_read_chunk function in libavformat/nsvdec.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1039 - http://www.securityfocus.com/bid/98548 - https://github.com/libav/libav/commit/fe6eea99efac66839052af547426518efd970b24
CVE ID: CVE-2017-9052 State: PUBLISHED Published: 2017-05-18T06:13:00 Last Updated: 2024-08-05T16:55:21.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue, also known as DW201703-006, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarf_formsdata() is due to a failure to check a pointer for being in bounds (in a few places in this function) and a failure in a check in dwarf_attr_list(). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98553 - https://www.prevanders.net/dwarfbug.html
CVE ID: CVE-2017-9053 State: PUBLISHED Published: 2017-05-18T06:13:00 Last Updated: 2024-08-05T16:55:21.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in _dwarf_read_loc_expr_op() is due to a failure to check a pointer for being in bounds (in a few places in this function). Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html
CVE ID: CVE-2017-9054 State: PUBLISHED Published: 2017-05-18T06:13:00 Last Updated: 2024-08-05T16:55:21.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue, also known as DW201703-002, was discovered in libdwarf 2017-03-21. In _dwarf_decode_s_leb128_chk() a byte pointer was dereferenced just before it was checked for being in bounds, leading to a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html
CVE ID: CVE-2017-9055 State: PUBLISHED Published: 2017-05-18T06:13:00 Last Updated: 2024-08-05T16:55:21.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarf_formsdata() a few data types were not checked for being in bounds, leading to a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html
CVE ID: CVE-2017-9058 State: PUBLISHED Published: 2017-05-18T06:13:00 Last Updated: 2024-08-05T16:55:21.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to incorrect boundary checking in the SIZECHECK macro in lib/ytnef.c. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3667-1/ - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862556 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-9059 State: PUBLISHED Published: 2017-05-18T06:13:00 Last Updated: 2024-08-05T16:55:22.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NFSv4 implementation in the Linux kernel through 4.11.1 allows local users to cause a denial of service (resource consumption) by leveraging improper channel callback shutdown when unmounting an NFSv4 filesystem, aka a "module reference and kernel daemon" leak. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1451386 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c70422f760c120480fee4de6c38804c72aa26bc1 - https://github.com/torvalds/li
linux/kernel/git/torvalds/linux.git/commit/?id=c70422f760c120480fee4de6c38804c72aa26bc1 - https://github.com/torvalds/linux/commit/c70422f760c120480fee4de6c38804c72aa26bc1 - https://www.spinics.net/lists/linux-nfs/msg63334.html - http://www.securityfocus.com/bid/98551
CVE ID: CVE-2017-9060 State: PUBLISHED Published: 2017-06-01T16:00:00 Last Updated: 2024-08-05T16:55:22.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the virtio_gpu_set_scanout function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (memory consumption) via a large number of "VIRTIO_GPU_CMD_SET_SCANOUT:" commands. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201706-03 - http://www.securityfocus.com/bid/98632 - http://www.openwall.com/lists/oss-security/2017/05/19/1 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=dd248ed7e204ee8a1873914e02b8b
nwall.com/lists/oss-security/2017/05/19/1 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=dd248ed7e204ee8a1873914e02b8b526e8f1b80d - https://bugzilla.redhat.com/show_bug.cgi?id=1452597
CVE ID: CVE-2017-9061 State: PUBLISHED Published: 2017-05-18T14:00:00 Last Updated: 2024-08-05T16:55:22.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability exists when attempting to upload very large files, because the error message does not properly restrict presentation of the filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038520 - https://wordpress.org/news/2017/05/wordpress-4-7-5/ - http://www.debian.org/security/2017/dsa-3870 - https://wpvulndb.com/vulnerabilities/8819 - http://www.securityfocus.com/bid/98509 - https://codex.wordpress.org/Versi
- https://wpvulndb.com/vulnerabilities/8819 - http://www.securityfocus.com/bid/98509 - https://codex.wordpress.org/Version_4.7.5 - https://github.com/WordPress/WordPress/commit/8c7ea71edbbffca5d9766b7bea7c7f3722ffafa6
CVE ID: CVE-2017-9062 State: PUBLISHED Published: 2017-05-18T14:00:00 Last Updated: 2024-08-05T16:55:22.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038520 - https://github.com/WordPress/WordPress/commit/3d95e3ae816f4d7c638f40d3e936a4be19724381 - https://wordpress.org/news/2017/05/wordpress-4-7-5/ - http://www.debian.org/security/2017/dsa-3870 - http://www.securityfocus.com/bid/98509 - https://wpvulndb.com/vulnerabilities/8816 - https://codex.wordpress.org/Version_4.7.5
CVE ID: CVE-2017-9063 State: PUBLISHED Published: 2017-05-18T14:00:00 Last Updated: 2024-08-05T16:55:22.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability related to the Customizer exists, involving an invalid customization session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038520 - https://wordpress.org/news/2017/05/wordpress-4-7-5/ - http://www.debian.org/security/2017/dsa-3870 - http://www.securityfocus.com/bid/98509 - https://wpvulndb.com/vulnerabilities/8820 - https://github.com/WordPress/WordPress/commit/3d10fef22d788f29aed745b0f5ff6f6baea69af3 -
ndb.com/vulnerabilities/8820 - https://github.com/WordPress/WordPress/commit/3d10fef22d788f29aed745b0f5ff6f6baea69af3 - https://codex.wordpress.org/Version_4.7.5
CVE ID: CVE-2017-9064 State: PUBLISHED Published: 2017-05-18T14:00:00 Last Updated: 2024-08-05T16:55:22.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialog because a nonce is not required for updating credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038520 - https://wordpress.org/news/2017/05/wordpress-4-7-5/ - http://www.debian.org/security/2017/dsa-3870 - http://www.securityfocus.com/bid/98509 - https://github.com/WordPress/WordPress/commit/38347d7c580be4cdd8476e4bbc653d5c79ed9b67 - https://wpvul
s.com/bid/98509 - https://github.com/WordPress/WordPress/commit/38347d7c580be4cdd8476e4bbc653d5c79ed9b67 - https://wpvulndb.com/vulnerabilities/8818 - https://codex.wordpress.org/Version_4.7.5
CVE ID: CVE-2017-9065 State: PUBLISHED Published: 2017-05-18T14:00:00 Last Updated: 2024-08-05T16:55:22.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038520 - https://wordpress.org/news/2017/05/wordpress-4-7-5/ - http://www.debian.org/security/2017/dsa-3870 - http://www.securityfocus.com/bid/98509 - https://codex.wordpress.org/Version_4.7.5 - https://github.com/WordPress/WordPress/commit/e88a48a066ab2200ce3091b131d43e2fab2460a4 - https://wpvulndb.com/vulnerabilities/8817
CVE ID: CVE-2017-9066 State: PUBLISHED Published: 2017-05-18T14:00:00 Last Updated: 2024-08-05T16:55:22.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4090 - http://www.securitytracker.com/id/1038520 - https://wpvulndb.com/vulnerabilities/8815 - https://wordpress.org/news/2017/05/wordpress-4-7-5/ - http://www.securityfocus.com/bid/98509 - https://twitter.com/skansing/status/865362551097393153 - https://github.com/WordPress/WordPress/commit/76d77e927bb4d0f87c7262a50e28
tter.com/skansing/status/865362551097393153 - https://github.com/WordPress/WordPress/commit/76d77e927bb4d0f87c7262a50e28d84e01fd2b11 - https://codex.wordpress.org/Version_4.7.5
CVE ID: CVE-2017-9067 State: PUBLISHED Published: 2017-05-18T16:00:00Z Last Updated: 2024-09-16T20:32:21.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MODX Revolution before 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary files on the web server due to insufficient validation of the action parameter to setup/index.php, aka directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://citadelo.com/en/2017/04/modx-revolution-cms/ - https://github.com/modxcms/revolution/pull/13428 - https://github.com/modxcms/revolution/pull/13422
CVE ID: CVE-2017-9068 State: PUBLISHED Published: 2017-05-18T16:00:00Z Last Updated: 2024-09-16T16:33:23.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into several fields on the setup page, as demonstrated by the database_type parameter. Additional Analyst Notes: - CVE Program Container: References: - https://citadelo.com/en/2017/04/modx-revolution-cms/ - https://github.com/modxcms/revolution/pull/13424
CVE ID: CVE-2017-9069 State: PUBLISHED Published: 2017-05-18T16:00:00Z Last Updated: 2024-09-16T23:41:54.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MODX Revolution before 2.5.7, a user with file upload permissions is able to execute arbitrary code by uploading a file with the name .htaccess. Additional Analyst Notes: - CVE Program Container: References: - https://citadelo.com/en/2017/04/modx-revolution-cms/ - https://github.com/modxcms/revolution/pull/13423
CVE ID: CVE-2017-9070 State: PUBLISHED Published: 2017-05-18T16:00:00Z Last Updated: 2024-09-16T22:31:17.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MODX Revolution before 2.5.7, a user with resource edit permissions can inject an XSS payload into the title of any post via the pagetitle parameter to connectors/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://citadelo.com/en/2017/04/modx-revolution-cms/ - https://github.com/modxcms/revolution/pull/13415
CVE ID: CVE-2017-9071 State: PUBLISHED Published: 2017-05-18T16:00:00Z Last Updated: 2024-09-17T04:20:42.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MODX Revolution before 2.5.7, an attacker might be able to trigger XSS by injecting a payload into the HTTP Host header of a request. This is exploitable only in conjunction with other issues such as Cache Poisoning. Additional Analyst Notes: - CVE Program Container: References: - https://citadelo.com/en/2017/04/modx-revolution-cms/ - https://github.com/modxcms/revolution/pull/13426
CVE ID: CVE-2017-9072 State: PUBLISHED Published: 2017-05-18T17:00:00 Last Updated: 2024-08-05T16:55:21.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Two CalendarXP products have XSS in common parts of HTML files. CalendarXP FlatCalendarXP through 9.9.290 has XSS in iflateng.htm and nflateng.htm. CalendarXP PopCalendarXP through 9.8.308 has XSS in ipopeng.htm and npopeng.htm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102632 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - https://github.com/victorwon/calendarxp/issues/2