Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
es: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1448 - http://www.securityfocus.com/bid/103880 - https://access.redhat.com/errata/RHSA-2018:0479 - https://access.redhat.com/errata/RHSA-2018:0481 - https://access.redhat.com/errata/RHSA-2018:1449 - https://access.redhat.com/errata/RHSA-2018:1450 - https://access.redhat.com/errata/RHSA-2018:0577 - https://access.redhat.com/errata/RHSA-2018:0576 - https://access.redhat.com/errata/RHSA-2017:3190 - https://access.redhat.com/errata/RHSA-2018:1451 - https://access.redhat.com/errata/RHSA-2017:3189 - https://access.redhat.com/errata/RHSA-2018:2927 - http://www.securitytracker.com/id/1039769 - https://access.redhat
89 - https://access.redhat.com/errata/RHSA-2018:2927 - http://www.securitytracker.com/id/1039769 - https://access.redhat.com/errata/RHSA-2018:0342 - https://access.redhat.com/errata/RHSA-2018:0480 - https://access.redhat.com/errata/RHSA-2018:1447 - https://access.redhat.com/errata/RHSA-2018:0478 - https://www.debian.org/security/2017/dsa-4037 - https://access.redhat.com/errata/RHSA-2019:2858 - https://access.redhat.com/errata/RHSA-2019:3149 - https://access.redhat.com/errata/RHSA-2019:3892 - https://lists.apache.org/thread.html/f095a791bda6c0595f691eddd0febb2d396987eec5cbd29120d8c629%40%3Csolr-user.lucene.apache.org%3E - https://lists.debian.org/debian-lts-announce/2020/01/msg00037.html - ht
9120d8c629%40%3Csolr-user.lucene.apache.org%3E - https://lists.debian.org/debian-lts-announce/2020/01/msg00037.html - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://security.netapp.com/advisory/ntap-20171214-0003/ - https://github.com/FasterXML/jackson-databind/issues/1737 - https://github
ity.netapp.com/advisory/ntap-20171214-0003/ - https://github.com/FasterXML/jackson-databind/issues/1737 - https://github.com/FasterXML/jackson-databind/issues/1680
CVE ID: CVE-2017-15096 State: PUBLISHED Published: 2017-10-26T17:00:00Z Last Updated: 2024-08-05T19:50:14.965Z Vendors: Red Hat, Inc. Products: GlusterFS Problem Types: Null pointer dereference Description: A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c may be used to cause denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1504255
CVE ID: CVE-2017-15097 State: PUBLISHED Published: 2018-07-27T20:00:00 Last Updated: 2024-08-05T19:50:16.051Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: postgresql init script Problem Types: CWE-59 Description: Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to the postgres user account could use these flaws to obtain root access on the server machine. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:3402 - https://access.redhat.com/errata/RHSA-2017:3403 - https://access.redhat.com/errata/RHSA-2017:3405 - https:
A-2017:3402 - https://access.redhat.com/errata/RHSA-2017:3403 - https://access.redhat.com/errata/RHSA-2017:3405 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15097 - http://www.securitytracker.com/id/1039983 - https://access.redhat.com/errata/RHSA-2017:3404
CVE ID: CVE-2017-15098 State: PUBLISHED Published: 2017-11-22T17:00:00Z Last Updated: 2024-09-16T23:10:51.250Z Vendors: Red Hat, Inc. Products: postgresql Problem Types: CWE-200 Description: Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or disclose a few bytes of server memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101781 - https://www.debian.org/security/2017/dsa-4027 - https://access.redhat.com/errata/RHSA-2018:2511 - https://www.postgresql.org/support/security/ - h
urity/2017/dsa-4027 - https://access.redhat.com/errata/RHSA-2018:2511 - https://www.postgresql.org/support/security/ - http://www.securitytracker.com/id/1039752 - https://www.postgresql.org/about/news/1801/ - https://access.redhat.com/errata/RHSA-2018:2566 - https://www.debian.org/security/2017/dsa-4028
CVE ID: CVE-2017-15099 State: PUBLISHED Published: 2017-11-22T18:00:00Z Last Updated: 2024-09-16T16:43:27.924Z Vendors: Red Hat, Inc. Products: postgresql Problem Types: CWE-200 Description: INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE privileges. Exploits bypass row level security policies and lack of SELECT privilege. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101781 - https://access.redhat.com
nalyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101781 - https://access.redhat.com/errata/RHSA-2018:2511 - https://www.postgresql.org/support/security/ - http://www.securitytracker.com/id/1039752 - https://www.postgresql.org/about/news/1801/ - https://access.redhat.com/errata/RHSA-2018:2566 - https://www.debian.org/security/2017/dsa-4028
CVE ID: CVE-2017-15100 State: PUBLISHED Published: 2017-11-27T14:00:00 Last Updated: 2024-08-05T19:50:16.130Z Vendors: Foreman Project Products: Foreman Problem Types: CWE-79 Description: An attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on certain pages: (1) Facts page, when clicking on the "chart" button and hovering over the chart; (2) Trends page, when checking the graph for a trend based on a such fact; (3) Statistics page, for facts that are aggregated on this page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/theforeman/foreman/pull/4967 - https://access.redhat.com/errata/RHSA-2018:2927 - http://projects.th
- https://github.com/theforeman/foreman/pull/4967 - https://access.redhat.com/errata/RHSA-2018:2927 - http://projects.theforeman.org/issues/21519
CVE ID: CVE-2017-15101 State: PUBLISHED Published: 2018-07-27T20:00:00 Last Updated: 2024-08-05T19:50:16.378Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Liblouis Products: liblouis Problem Types: CWE-121 Description: A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. An attacker could cause a denial of service condition or potentially even arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15101 - https://access.redhat.com/errata/RHSA-2017:3384
CVE ID: CVE-2017-15102 State: PUBLISHED Published: 2017-11-15T21:00:00 Last Updated: 2024-08-05T19:50:16.007Z Vendors: n/a Products: Linux kernel through version 4.9-rc1 Problem Types: race condition Description: The tower_probe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users (who are physically proximate for inserting a crafted USB device) to gain privileges by leveraging a write-what-where condition that occurs after a race condition and a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1505905 - https://usn.ubuntu.com/3583-2/ - http://git.kernel.org/cgit/l
s: - https://bugzilla.redhat.com/show_bug.cgi?id=1505905 - https://usn.ubuntu.com/3583-2/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2fae9e5a7babada041e2e161699ade2447a01989 - https://usn.ubuntu.com/3583-1/ - http://seclists.org/oss-sec/2017/q4/238 - http://www.securityfocus.com/bid/101790 - https://github.com/torvalds/linux/commit/2fae9e5a7babada041e2e161699ade2447a01989
CVE ID: CVE-2017-15103 State: PUBLISHED Published: 2017-12-18T19:00:00Z Last Updated: 2024-08-05T19:50:15.563Z Vendors: Heketi Products: Heketi Problem Types: CWE-78 Description: A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user could send specially crafted requests to the Heketi server, resulting in remote command execution as the user running Heketi server and possibly privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1510147 - https://access.redhat.com/errata/RHSA-2017:3481 - https://access.redhat.com/security/cve/CVE-2017-15103
CVE ID: CVE-2017-15104 State: PUBLISHED Published: 2017-12-18T19:00:00Z Last Updated: 2024-08-05T19:50:15.558Z Vendors: Heketi Products: Heketi Problem Types: CWE-552 Description: An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could read plain-text passwords from the heketi.json file. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:3481 - https://bugzilla.redhat.com/show_bug.cgi?id=1510149 - https://access.redhat.com/security/cve/CVE-2017-15104 - https://github.com/heketi/heketi/releases/tag/v5.0.1
CVE ID: CVE-2017-15105 State: PUBLISHED Published: 2018-01-23T16:00:00Z Last Updated: 2024-09-16T21:56:27.390Z Vendors: NLnet Labs Products: unbound Problem Types: CWE-358 Description: A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence (NXDOMAIN answer) of an existing wildcard record, or trick unbound into accepting a NODATA proof. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102817 - https://lists.debian.org/debian-lts-announce/2019/02/msg00022.html - https://lists.debian.org/debian-lts-announce/2018/01/msg00039
sts.debian.org/debian-lts-announce/2019/02/msg00022.html - https://lists.debian.org/debian-lts-announce/2018/01/msg00039.html - https://unbound.net/downloads/CVE-2017-15105.txt - https://usn.ubuntu.com/3673-1/
CVE ID: CVE-2017-15106 State: REJECTED Published: 2022-08-08T18:52:12 Last Updated: 2022-08-08T18:52:12 Description: No description available.
CVE ID: CVE-2017-15107 State: PUBLISHED Published: 2018-01-23T16:00:00Z Last Updated: 2024-08-05T19:50:16.035Z Vendors: Simon Kelley Products: dnsmasq Problem Types: CWE-358 Description: A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist. Additional Analyst Notes: - CVE Program Container: References: - http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2018q1/011896.html - http://www.securityfocus.com/bid/102812 - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00027.html
CVE ID: CVE-2017-15108 State: PUBLISHED Published: 2018-01-20T00:00:00Z Last Updated: 2024-08-05T19:50:15.989Z Vendors: Red Hat, Inc. Products: spice-vdagent Problem Types: CWE-78 Description: spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201804-09 - https://cgit.freedesktop.org/spice/linux/vd_agent/commit/?id=8ba174816d245757e743e636df357910e1d5eb61 - https://lists.debian.org/debian-lts-announce/2021/01/msg00012.html
CVE ID: CVE-2017-15109 State: REJECTED Published: 2022-08-08T18:52:16 Last Updated: 2022-08-08T18:52:16 Description: No description available.
CVE ID: CVE-2017-15110 State: PUBLISHED Published: 2017-11-20T14:00:00 Last Updated: 2024-08-05T19:50:16.042Z Vendors: n/a Products: Moodle 3.x Problem Types: improper access control Description: In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101909 - https://moodle.org/mod/forum/discuss.php?d=361784
CVE ID: CVE-2017-15111 State: PUBLISHED Published: 2018-01-20T00:00:00Z Last Updated: 2024-09-17T02:26:44.402Z Vendors: jdennis Products: keycloak-httpd-client-install Problem Types: CWE-377 Description: keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jdennis/keycloak-httpd-client-install/commit/07f26e213196936fb328ea0c1d5a66a09d8b5440 - https://access.redhat.com/errata/RHSA-2019:2137
CVE ID: CVE-2017-15112 State: PUBLISHED Published: 2018-01-20T00:00:00Z Last Updated: 2024-09-16T21:08:17.733Z Vendors: jdennis Products: keycloak-httpd-client-install Problem Types: CWE-200 Description: keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jdennis/keycloak-httpd-client-install/commit/c3121b271abaaa1a76de2b9ae89dacde0105cd75 - https://access.redhat.com/errata/RHSA-2019:2137
CVE ID: CVE-2017-15113 State: PUBLISHED Published: 2018-07-27T16:00:00 Last Updated: 2024-08-05T19:50:15.567Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Red Hat Products: ovirt-engine Problem Types: CWE-212 Description: ovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file without masking. Only administrators can change the log level and only administrators can access the logs. This presents a risk when debug-level logs are shared with vendors or other parties to troubleshoot issues. Additional Analyst Notes: - CVE Program Container: References: - https://gerrit.ovirt.org/gitweb?p=ovirt-engine.git%3Ba=commitdif
l Analyst Notes: - CVE Program Container: References: - https://gerrit.ovirt.org/gitweb?p=ovirt-engine.git%3Ba=commitdiff%3Bh=f4a5d0cc772127dbfe40789e26c4633ceea07d14%3Bhp=e6e8704ac9eb115624ff66e2965877d8e63a45f4 - http://www.securityfocus.com/bid/101933 - https://access.redhat.com/errata/RHEA-2017:3138 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15113
CVE ID: CVE-2017-15114 State: PUBLISHED Published: 2017-11-27T16:00:00 Last Updated: 2024-08-05T19:50:16.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: When libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it defaults to the same certificate authority as all non-libvirtd services. As no additional authentication is configured this allows these services to connect to libvirtd (which is equivalent to root access). If a vulnerability exists in another service it could, combined with this flaw, be exploited to escalate privileges to gain control over compute nodes. Additional Analyst Notes: - CVE Program Container: References: - https://gi
ivileges to gain control over compute nodes. Additional Analyst Notes: - CVE Program Container: References: - https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=994922a8ba996fe68d047df0e1486fa805dbea31 - http://www.securityfocus.com/bid/101971
CVE ID: CVE-2017-15115 State: PUBLISHED Published: 2017-11-15T21:00:00 Last Updated: 2024-08-05T19:50:15.609Z Vendors: n/a Products: Linux kernel before 4.14-rc6 Problem Types: local crash Description: The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1513345 - https://github.com/torvalds/linux/commit/df80cd9b28b9ebaa284a41df611d
ps://bugzilla.redhat.com/show_bug.cgi?id=1513345 - https://github.com/torvalds/linux/commit/df80cd9b28b9ebaa284a41df611dbf3a2d05ca74 - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - https://usn.ubuntu.com/3583-2/ - http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html - https://patchwork.ozlabs.org/patch/827077/ - https://usn.ubuntu.com/3582-1/ - https://source.android.com/security/bulletin/pixel/2018-04-01 - https://usn.ubuntu.com/3583-1/ - http://www.securityfocus.com/bid/101877 - https://usn.ubuntu.com/3581-1/ - https://usn.ubuntu.com/3581-3/ - https://usn.ubuntu.com/3581-2/ - http://seclists.org/oss-sec/2017/q4/282 - http://git.kernel.org/cgit/l
tu.com/3581-3/ - https://usn.ubuntu.com/3581-2/ - http://seclists.org/oss-sec/2017/q4/282 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=df80cd9b28b9ebaa284a41df611dbf3a2d05ca74 - https://usn.ubuntu.com/3582-2/
CVE ID: CVE-2017-15116 State: PUBLISHED Published: 2017-11-30T18:00:00 Last Updated: 2024-08-05T19:50:15.583Z Vendors: n/a Products: Linux kernel Problem Types: null pointer dereference Description: The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1485815 - https://bugzilla.redhat.com/show_bug.cgi?id=1514609 - https://access.redhat.com/errata/RHSA-2018:1062 - https://access.redhat.com/errata/RHSA-2018:0676 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=94f1bb1
ess.redhat.com/errata/RHSA-2018:0676 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=94f1bb15bed84ad6c893916b7e7b9db6f1d7eec6 - https://github.com/torvalds/linux/commit/94f1bb15bed84ad6c893916b7e7b9db6f1d7eec6
CVE ID: CVE-2017-15117 State: REJECTED Published: 2017-11-27T16:00:00 Last Updated: 2017-11-27T15:57:01 Description: No description available.
CVE ID: CVE-2017-15118 State: PUBLISHED Published: 2018-07-27T21:00:00 Last Updated: 2024-08-05T19:50:15.604Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: QEMU Products: Qemu Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS. Additional Analyst Notes: - CVE Program Container: Refere
he buffer overflow without first successfully negotiating TLS. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15118 - https://access.redhat.com/errata/RHSA-2018:1104 - https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg05045.html - https://usn.ubuntu.com/3575-1/ - http://www.securityfocus.com/bid/101975 - http://www.openwall.com/lists/oss-security/2017/11/28/8 - https://www.exploit-db.com/exploits/43194/
CVE ID: CVE-2017-15119 State: PUBLISHED Published: 2018-07-27T16:00:00 Last Updated: 2024-08-05T19:50:16.089Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: QEMU Products: qemu Problem Types: CWE-400 Description: The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from serving other requests, resulting in DoS. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2
in DoS. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg05044.html - http://www.openwall.com/lists/oss-security/2017/11/28/9 - http://www.securityfocus.com/bid/102011 - https://www.debian.org/security/2018/dsa-4213 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15119 - https://access.redhat.com/errata/RHSA-2018:1104 - https://access.redhat.com/errata/RHSA-2018:1113 - https://usn.ubuntu.com/3575-1/
CVE ID: CVE-2017-15120 State: PUBLISHED Published: 2018-07-27T15:00:00 Last Updated: 2024-08-05T19:50:16.333Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: PowerDNS Products: pdns-recursor Problem Types: CWE-476 Description: An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer containing a CNAME of a different class than IN. An unauthenticated remote attacker could cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15120 - https://doc.powerdns.
CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15120 - https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-08.html - https://www.debian.org/security/2017/dsa-4063 - http://seclists.org/oss-sec/2017/q4/382 - http://www.securityfocus.com/bid/106335
CVE ID: CVE-2017-15121 State: PUBLISHED Published: 2017-12-06T16:00:00Z Last Updated: 2024-08-05T19:50:16.100Z Vendors: Red Hat, Inc. Products: Red Hat Enterprise Linux Problem Types: CWE-20 Description: A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1520893 - https://access.redhat.com/errata/RHSA-2018:1854 - https://access.redhat.com/errata/RHSA-2018:1062 - https://access.redhat.com/errata/RHSA-2018:0676 - http://www.securityfocus.com/bid/102128 - https
rrata/RHSA-2018:1062 - https://access.redhat.com/errata/RHSA-2018:0676 - http://www.securityfocus.com/bid/102128 - https://support.f5.com/csp/article/K42142782?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2017-15122 State: REJECTED Published: 2022-08-08T18:52:20 Last Updated: 2022-08-08T18:52:20 Description: No description available.
CVE ID: CVE-2017-15123 State: PUBLISHED Published: 2019-06-12T13:39:34 Last Updated: 2024-08-05T19:50:16.217Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: redhat Products: CloudForms Problem Types: CWE-306 Description: A flaw was found in the CloudForms web interface, versions 5.8 - 5.10, where the RSS feed URLs are not properly restricted to authenticated users only. An attacker could use this flaw to view potentially sensitive information from CloudForms including data such as newly created virtual machines. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15123 - http://www.securityfo
CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15123 - http://www.securityfocus.com/bid/108690 - https://hacked0x90.wordpress.com/2019/07/17/cve-2017-15123-exploit/