Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-11400 State: PUBLISHED Published: 2017-11-20T15:00:00 Last Updated: 2024-08-05T18:05:30.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. An incomplete firmware signature allows a local attacker to upgrade the equipment (kernel, file system) with unsigned, attacker-controlled, data. This occurs because the appliance_config file is signed but the .tar.sec file is unsigned. Additional Analyst Notes: - CVE Program Container: References: - https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf - https://github.com/a
/www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf - https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt
CVE ID: CVE-2017-11401 State: PUBLISHED Published: 2017-11-20T15:00:00 Last Updated: 2024-08-05T18:05:30.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering. Additional Analyst Notes: - CVE Program Container: References: - https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf - https://github.com/airbus-seclab/security-advisories/blob/mas
lletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf - https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt
CVE ID: CVE-2017-11402 State: PUBLISHED Published: 2017-11-20T15:00:00 Last Updated: 2024-08-05T18:05:30.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OPC classic and in custom netfilter modules allow an attacker to remotely activate rules on the firewall and to connect to any TCP port of a protected asset, thus bypassing the firewall. The attack methodology is a crafted OPC dynamic port shift. Additional Analyst Notes: - CVE Program Container: References: - https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.
ner: References: - https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf - https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt
CVE ID: CVE-2017-11403 State: PUBLISHED Published: 2017-07-18T00:00:00 Last Updated: 2024-08-05T18:05:30.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4321 - https://blogs.gentoo.org/ago/2017/07/12/graphicsmagick-use-after-free-in-closeblob-blob-c/ - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - http://hg.code.sf.net/p/graphicsmagick/code/rev/d0a76868ca37 - https://usn.ubuntu.com/4206-1/
CVE ID: CVE-2017-11404 State: PUBLISHED Published: 2017-07-18T00:00:00Z Last Updated: 2024-09-16T18:04:12.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a FileManager action to admin/moduleinterface.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.yuesec.com/img/cccccve/CMSMadeSimple/upl0advul123/images/upload_vulnerability_yuesec.html
CVE ID: CVE-2017-11405 State: PUBLISHED Published: 2017-07-18T00:00:00Z Last Updated: 2024-09-16T23:00:22.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a CMSContentManager action to admin/moduleinterface.php, followed by a FilePicker action to admin/moduleinterface.php in which type=image is changed to type=file. Additional Analyst Notes: - CVE Program Container: References: - http://www.yuesec.com/img/cccccve/CMSMadeSimple/upl0advul123/filepickerimages/FilePicker_upload_vulnerability.html
CVE ID: CVE-2017-11406 State: PUBLISHED Published: 2017-07-18T21:00:00 Last Updated: 2024-08-05T18:05:30.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=250216263c3a3f2c651e80d9c6b3dc0adc53dc2c - http://www.securityfocus.com/bid/99903 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://www.wireshark.org/securit
s.com/bid/99903 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://www.wireshark.org/security/wnpa-sec-2017-36.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13797 - http://www.securitytracker.com/id/1038966
CVE ID: CVE-2017-11407 State: PUBLISHED Published: 2017-07-18T21:00:00 Last Updated: 2024-08-05T18:05:30.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4e54dae7f0d7840836ee6d5ce1e688f152ab2978 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13792 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - http://www.securityfocus.com/b
w_bug.cgi?id=13792 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - http://www.securityfocus.com/bid/99910 - http://www.securitytracker.com/id/1038966 - https://www.wireshark.org/security/wnpa-sec-2017-35.html
CVE ID: CVE-2017-11408 State: PUBLISHED Published: 2017-07-18T21:00:00 Last Updated: 2024-08-05T18:05:30.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a102c172b0b2fe231fdb49f4f6694603f5b93b0c - https://www.debian.org/security/2017/dsa-4060 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e57c86ef8e3b57b7f90c224f6053d1eacf20e1ba - https://bug
//code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e57c86ef8e3b57b7f90c224f6053d1eacf20e1ba - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13780 - https://lists.debian.org/debian-lts-announce/2017/12/msg00029.html - http://www.securitytracker.com/id/1038966 - http://www.securityfocus.com/bid/99894 - https://www.wireshark.org/security/wnpa-sec-2017-34.html
CVE ID: CVE-2017-11409 State: PUBLISHED Published: 2017-07-18T21:00:00 Last Updated: 2024-08-05T18:05:30.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.0.0 to 2.0.13, the GPRS LLC dissector could go into a large loop. This was addressed in epan/dissectors/packet-gprs-llc.c by using a different integer data type. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=57b83bbbd76f543eb8d108919f13b662910bff9a - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13603 - http://www.securityfocus.com/bid/99914 - https://www.wireshark.org/security/wnpa-sec-2017-37.html - https://lists.
603 - http://www.securityfocus.com/bid/99914 - https://www.wireshark.org/security/wnpa-sec-2017-37.html - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - http://www.securitytracker.com/id/1038966
CVE ID: CVE-2017-11410 State: PUBLISHED Published: 2017-07-18T21:00:00 Last Updated: 2024-08-05T18:05:30.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding validation of the relationships between indexes and lengths. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-7702. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13796 - https://code.wireshark.org/review/gitw
tainer: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13796 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3c7168cc5f044b4da8747d35da0b2b204dabf398 - https://www.wireshark.org/security/wnpa-sec-2017-13.html
CVE ID: CVE-2017-11411 State: PUBLISHED Published: 2017-07-18T21:00:00 Last Updated: 2024-08-05T18:05:30.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by adding length validation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9350. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2017-28.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a83a324acdfc07a0ca8b65e6ebaba3374ab19c76 - https://b
s://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a83a324acdfc07a0ca8b65e6ebaba3374ab19c76 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13755
CVE ID: CVE-2017-11412 State: PUBLISHED Published: 2017-07-18T05:00:00 Last Updated: 2024-08-05T18:05:30.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/controller/comment_status.php via $_GET['id']. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FiyoCMS/FiyoCMS/issues/5
CVE ID: CVE-2017-11413 State: PUBLISHED Published: 2017-07-18T05:00:00 Last Updated: 2024-08-05T18:05:30.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/comment_status.php via $_GET['id']. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FiyoCMS/FiyoCMS/issues/5
CVE ID: CVE-2017-11414 State: PUBLISHED Published: 2017-07-18T05:00:00 Last Updated: 2024-08-05T18:05:30.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/sys_comment.php via $_POST['comment'], $_POST['name'], $_POST['web'], $_POST['email'], $_POST['status'], $_POST['id'], and $_REQUEST['id']. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FiyoCMS/FiyoCMS/issues/5
CVE ID: CVE-2017-11415 State: PUBLISHED Published: 2017-07-18T05:00:00 Last Updated: 2024-08-05T18:05:30.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/sys_article.php via $_POST['parent_id'], $_POST['desc'], $_POST['keys'], and $_POST['level']. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FiyoCMS/FiyoCMS/issues/5
CVE ID: CVE-2017-11416 State: PUBLISHED Published: 2017-07-18T05:00:00 Last Updated: 2024-08-05T18:05:30.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fiyo CMS 2.0.7 has SQL injection in /apps/app_comment/controller/insert.php via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FiyoCMS/FiyoCMS/issues/5
CVE ID: CVE-2017-11417 State: PUBLISHED Published: 2017-07-18T05:00:00 Last Updated: 2024-08-05T18:05:30.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_status.php via $_GET['id']. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FiyoCMS/FiyoCMS/issues/5
CVE ID: CVE-2017-11418 State: PUBLISHED Published: 2017-07-18T05:00:00 Last Updated: 2024-08-05T18:05:30.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_list.php via $_GET['cat'], $_GET['user'], $_GET['level'], and $_GET['iSortCol_'.$i]. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FiyoCMS/FiyoCMS/issues/5
CVE ID: CVE-2017-11419 State: PUBLISHED Published: 2017-07-18T05:00:00 Last Updated: 2024-08-05T18:12:39.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fiyo CMS 2.0.7 has SQL injection in /apps/app_article/controller/editor.php via $_POST['id'] and $_POST['art_title']. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FiyoCMS/FiyoCMS/issues/5
CVE ID: CVE-2017-11420 State: PUBLISHED Published: 2017-07-18T05:00:00 Last Updated: 2024-08-05T18:12:39.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ASUS_Discovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to execute arbitrary code via long device information that is mishandle
N16, and RT-N300 devices allows remote attackers to execute arbitrary code via long device information that is mishandled during a strcat to a device list. Additional Analyst Notes: - CVE Program Container: References: - https://asuswrt.lostrealm.ca/changelog - http://www.openwall.com/lists/oss-security/2017/07/13/1
CVE ID: CVE-2017-11421 State: PUBLISHED Published: 2017-07-18T19:00:00 Last Updated: 2024-08-05T18:12:39.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: gnome-exe-thumbnailer before 0.9.5 is prone to a VBScript Injection when generating thumbnails for MSI files, aka the "Bad Taste" issue. There is a local attack if the victim uses the GNOME Files file manager, and navigates to a directory containing a .msi file with VBScript code in its filename. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/868705 - https://github.com/gnome-exe-thumbnailer/gnome-exe-thumbnailer/commit/1d8e3102dd8fd23431ae6127d14a236da6b4a4a5 - http://news.dieweltist
com/gnome-exe-thumbnailer/gnome-exe-thumbnailer/commit/1d8e3102dd8fd23431ae6127d14a236da6b4a4a5 - http://news.dieweltistgarnichtso.net/posts/gnome-thumbnailer-msi-fail.html - http://www.securityfocus.com/bid/99922
CVE ID: CVE-2017-11422 State: PUBLISHED Published: 2017-07-24T12:00:00 Last Updated: 2024-08-05T18:12:39.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Statamic framework before 2.6.0 does not correctly check a session's permissions when the methods from a user's class are called. Problematic methods include reset password, create new account, create new role, etc. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/rambo691/3714c8c09cf894d574d37c294711c49e
CVE ID: CVE-2017-11423 State: PUBLISHED Published: 2017-07-18T20:00:00 Last Updated: 2024-08-05T18:12:39.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted CAB file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/02/msg00014.html - http://www.debian.org/security/2017/dsa-3946 - https://github.com/hackerlib/hackerlib-vul/tree/master/clamav-vul - https://security.gentoo.org/glsa/2018
017/dsa-3946 - https://github.com/hackerlib/hackerlib-vul/tree/master/clamav-vul - https://security.gentoo.org/glsa/201804-16 - https://bugzilla.clamav.net/show_bug.cgi?id=11873
CVE ID: CVE-2017-11424 State: PUBLISHED Published: 2017-08-24T16:00:00 Last Updated: 2024-08-05T18:12:39.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PyJWT 1.5.0 and below the `invalid_strings` check in `HMACAlgorithm.prepare_key` does not account for all PEM encoded public keys. Specifically, the PKCS1 PEM encoded format would be allowed because it is prefaced with the string `-----BEGIN RSA PUBLIC KEY-----` which is not accounted for. This enables symmetric/asymmetric key confusion attacks against users using the PKCS1 PEM encoded public keys, which would allow an attacker to craft JWTs from scratch. Additional Analyst Notes: - CVE Program Container: References: - htt
would allow an attacker to craft JWTs from scratch. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3979 - https://github.com/jpadilla/pyjwt/pull/277
CVE ID: CVE-2017-11427 State: PUBLISHED Published: 2019-04-17T13:59:19 Last Updated: 2024-08-05T18:12:39.492Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: OneLogin Products: PythonSAML Problem Types: CWE-287 Description: OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers. Additional Analyst Notes: - CVE Program Container: References: - https://duo.com/blog/duo-finds-saml-vulnerabilities-a
. Additional Analyst Notes: - CVE Program Container: References: - https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations - https://www.kb.cert.org/vuls/id/475445
CVE ID: CVE-2017-11428 State: PUBLISHED Published: 2019-04-17T13:59:53 Last Updated: 2024-08-05T18:12:39.617Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: OneLogin Products: Ruby-SAML Problem Types: CWE-287 Description: OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers. Additional Analyst Notes: - CVE Program Container: References: - https://duo.com/blog/duo-finds-saml-vulnerabilities-aff
Additional Analyst Notes: - CVE Program Container: References: - https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations - https://www.kb.cert.org/vuls/id/475445
CVE ID: CVE-2017-11429 State: PUBLISHED Published: 2019-04-17T14:00:08 Last Updated: 2024-08-05T18:12:39.610Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Clever Products: saml2-js Problem Types: CWE-287 Description: Clever saml2-js 2.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers. Additional Analyst Notes: - CVE Program Container: References: - https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-m
al Analyst Notes: - CVE Program Container: References: - https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations - https://www.kb.cert.org/vuls/id/475445
CVE ID: CVE-2017-11430 State: PUBLISHED Published: 2019-04-17T14:00:30 Last Updated: 2024-08-05T18:12:39.543Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: OmniAuth Products: OmnitAuth-SAML Problem Types: CWE-287 Description: OmniAuth OmnitAuth-SAML 1.9.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers. Additional Analyst Notes: - CVE Program Container: References: - https://duo.com/blog/duo-finds-saml-vulnerabi
roviders. Additional Analyst Notes: - CVE Program Container: References: - https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations - https://www.kb.cert.org/vuls/id/475445
CVE ID: CVE-2017-11434 State: PUBLISHED Published: 2017-07-25T18:00:00 Last Updated: 2024-08-05T18:12:39.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a crafted DHCP options string. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - http://www.securityfocus.com/bid/99923 - https://lists.gnu.org/archive/html/qemu-devel/2017-07/msg05001.html - https://bugzilla.redhat.com/show_bug.cgi?id=1472611 - http://www.openwall.com/l
/html/qemu-devel/2017-07/msg05001.html - https://bugzilla.redhat.com/show_bug.cgi?id=1472611 - http://www.openwall.com/lists/oss-security/2017/07/19/2 - http://www.debian.org/security/2017/dsa-3925
CVE ID: CVE-2017-11435 State: PUBLISHED Published: 2017-07-19T07:00:00 Last Updated: 2024-08-05T18:12:39.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Humax Wi-Fi Router model HG100R-* 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the management console. The bug is exploitable remotely when the router is configured to expose the management console. The router is not validating the session token while returning answers for some methods in url '/api'. An attacker can use this vulnerability to retrieve sensitive information such as private/public IP addresses, SSID names, and passwords. Additional Analyst Notes: - CVE Program Co
e information such as private/public IP addresses, SSID names, and passwords. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/Resources/Security-Advisories/Advisories/Multiple-Vulnerabilities-in-Humax-Routers/?fid=9700
CVE ID: CVE-2017-11436 State: PUBLISHED Published: 2017-07-19T07:00:00 Last Updated: 2024-08-05T18:12:39.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-615 before v20.12PTb04 has a second admin account with a 0x1 BACKDOOR value, which might allow remote attackers to obtain access via a TELNET connection. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-615/REVT/DIR-615_REVT_RELEASE_NOTES_20.12PTB04.pdf - http://www.rootlabs.com.br/backdoor-dlink-dir-615/
CVE ID: CVE-2017-11437 State: PUBLISHED Published: 2017-08-02T19:00:00 Last Updated: 2024-08-05T18:12:39.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the ability to create a project to use the mirroring feature to potentially read repositories belonging to other users. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2017/07/19/gitlab-9-dot-3-dot-8-released/