Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-16802 State: PUBLISHED Published: 2017-11-13T16:00:00 Last Updated: 2024-08-05T20:35:21.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/a659664447a7b2a383cb9e0f6b43dcb43ec69194
CVE ID: CVE-2017-16803 State: PUBLISHED Published: 2017-11-13T17:00:00 Last Updated: 2024-08-05T20:35:21.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Libav through 11.11 and 12.x through 12.1, the smacker_decode_tree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service (bitstream.c:build_table() out-of-bounds read and application crash) via a crafted Smacker stream. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4119 - https://security.gentoo.org/glsa/201811-19 - https://bugzilla.libav.org/show_bug.cgi?id=1098 - http://www.security
119 - https://security.gentoo.org/glsa/201811-19 - https://bugzilla.libav.org/show_bug.cgi?id=1098 - http://www.securityfocus.com/bid/101882 - https://github.com/libav/libav/commit/cd4663dc80323ba64989d0c103d51ad3ee0e9c2f
CVE ID: CVE-2017-16804 State: PUBLISHED Published: 2017-11-13T20:00:00 Last Updated: 2024-08-05T20:35:21.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://github.com/redmine/redmine/commit/0f09f161f64f4190a52166675ff380a15b72a8bc - https://www.debian.org/security/2018/dsa-4191 - https://www.redmi
mine/commit/0f09f161f64f4190a52166675ff380a15b72a8bc - https://www.debian.org/security/2018/dsa-4191 - https://www.redmine.org/issues/25713
CVE ID: CVE-2017-16805 State: PUBLISHED Published: 2017-11-13T21:00:00Z Last Updated: 2024-09-16T20:12:14.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file, related to r_bin_dwarf_parse_comp_unit in dwarf.c and sdb_set_internal in shlr/sdb/src/sdb.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/issues/8813 - https://github.com/radare/radare2/commit/2ca9ab45891b6ae8e32b6c28c81eebca059cbe5d
CVE ID: CVE-2017-16806 State: PUBLISHED Published: 2017-11-13T21:00:00 Last Updated: 2024-08-05T20:35:21.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0 allows HTTP server directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ulterius/server/commit/770d1821de43cf1d0a93c79025995bdd812a76ee - https://www.exploit-db.com/exploits/43141/
CVE ID: CVE-2017-16807 State: PUBLISHED Published: 2017-11-13T21:00:00 Last Updated: 2024-08-05T20:35:21.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site Scripting (XSS) vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exists when displaying a specially prepared SVG document that has been uploaded as a content file. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/144965/KirbyCMS-Cross-Site-Scripting.html - https://getkirby.com/changelog/kirby-2-5-7 - https://www.exploit-db.com/exploits/43140/
CVE ID: CVE-2017-16808 State: PUBLISHED Published: 2017-11-13T21:00:00 Last Updated: 2024-08-05T20:35:21.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039773 - https://github.com/the-tcpdump-group/tcpdump/issues/645 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00065.html - https://seclists.org/bugtraq/2019/Oct/2 - https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES - http://packetstormsecurity.com/files/154710/Slack
ttps://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES - http://packetstormsecurity.com/files/154710/Slackware-Security-Advisory-tcpdump-Updates.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5
FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://support.apple.com/kb/HT210788 - https://seclists.org/bugtraq/2019/Dec/23 - http://seclists.org/fulldisclosure/2019/Dec/26 - https://usn.ubuntu.com/4252-2/ - https://usn.ubuntu.com/4252-1/
CVE ID: CVE-2017-16810 State: PUBLISHED Published: 2017-11-14T03:00:00Z Last Updated: 2024-09-16T17:43:31.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the All Variables tab in Octopus Deploy 3.4.0-3.13.6 (fixed in 3.13.7) allows remote attackers to inject arbitrary web script or HTML via the Variable Set Name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/3919
CVE ID: CVE-2017-16813 State: PUBLISHED Published: 2018-02-26T22:00:00 Last Updated: 2024-08-05T20:35:20.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: A denial-of-service issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. This occurs when a user uploads a file that includes a hexadecimal Unicode character in the "filename" parameter via Wi-Fi, since the app could fail to parse this. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2017-16814 State: PUBLISHED Published: 2018-02-26T22:00:00 Last Updated: 2024-08-05T20:35:21.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Directory Traversal issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. This occurs by abusing the URL + escape character during a Wi-Fi transfer, which could be exploited by attackers to bypass intended restrictions on local application files. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2017-16815 State: PUBLISHED Published: 2017-11-14T19:00:00Z Last Updated: 2024-09-16T18:12:46.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: installer.php in the Snap Creek Duplicator (WordPress Site Migration & Backup) plugin before 1.2.30 for WordPress has XSS because the values "url_new" (/wp-content/plugins/duplicator/installer/build/view.step4.php) and "logging" (wp-content/plugins/duplicator/installer/build/view.step2.php) are not filtered correctly. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/144914/WordPress-Duplicator-Migration-1.2.28-Cross-Site-Scripting.html - https://snapcreek.com/duplicator/d
ty.com/files/144914/WordPress-Duplicator-Migration-1.2.28-Cross-Site-Scripting.html - https://snapcreek.com/duplicator/docs/changelog
CVE ID: CVE-2017-16816 State: PUBLISHED Published: 2018-07-05T20:00:00 Last Updated: 2024-08-05T20:35:20.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: The condor_schedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote authenticated users to cause a denial of service (daemon crash) by leveraging use of GSI and VOMS extensions. Additional Analyst Notes: - CVE Program Container: References: - https://www-auth.cs.wisc.edu/lists/htcondor-users/2017-November/msg00022.shtml - http://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2017-0001.html
CVE ID: CVE-2017-16818 State: PUBLISHED Published: 2017-12-20T17:00:00 Last Updated: 2024-08-05T20:35:20.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by leveraging "full" (not necessarily admin) privileges to post an invalid profile to the admin API, related to rgw/rgw_iam_policy.cc, rgw/rgw_basic_types.h, and rgw/rgw_iam_types.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ceph/ceph/commit/b3118cabb8060a8cc6a01c4e8264cb18e7b1745a - https://bugzilla.redhat.com/show_bug.cgi?id=1515872 - ht
com/ceph/ceph/commit/b3118cabb8060a8cc6a01c4e8264cb18e7b1745a - https://bugzilla.redhat.com/show_bug.cgi?id=1515872 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6VJA32U7HKGDRJQDJVM7JBYWD4T7BJL/
CVE ID: CVE-2017-16819 State: PUBLISHED Published: 2017-11-17T17:00:00 Last Updated: 2024-08-05T20:35:21.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to inject arbitrary JavaScript in the nameFirst (aka First Name) field for the employee details page (/employee.html) that is then reflected in multiple pages where that field data is utilized, resulting in session hijacking and possible elevation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43158/ - https://www.keiththome.
alyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43158/ - https://www.keiththome.com/rtc-1000-vuln/
CVE ID: CVE-2017-16820 State: PUBLISHED Published: 2017-11-14T21:00:00 Last Updated: 2024-08-05T20:35:21.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other impact). Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:0252 - https://security.gentoo.org/glsa/201803-10 - https://bugs.debian.org/881757 - https://github.com/collectd/collectd/issues/2291 - https://access.redhat.com/errata/RHSA-2018:0560 - https://access.redhat.com/errata
b.com/collectd/collectd/issues/2291 - https://access.redhat.com/errata/RHSA-2018:0560 - https://access.redhat.com/errata/RHSA-2018:1605 - https://access.redhat.com/errata/RHSA-2018:2615 - https://access.redhat.com/errata/RHSA-2018:0299 - https://github.com/collectd/collectd/releases/tag/collectd-5.6.3 - https://github.com/collectd/collectd/commit/d16c24542b2f96a194d43a73c2e5778822b9cb47
CVE ID: CVE-2017-16821 State: PUBLISHED Published: 2017-11-15T03:00:00Z Last Updated: 2024-09-16T17:58:03.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: b3log Symphony (aka Sym) 2.2.0 has XSS in processor/AdminProcessor.java in the admin console, as demonstrated by a crafted X-Forwarded-For HTTP header that is mishandled during display of a client IP address in /admin/user/userid. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/b3log/symphony/issues/503
CVE ID: CVE-2017-16826 State: PUBLISHED Published: 2017-11-15T08:00:00 Last Updated: 2024-08-05T20:35:21.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: The coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted PE file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=22376 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=a67d66eb97e7613a38ffe6622d837303b3ecd31
_bug.cgi?id=22376 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=a67d66eb97e7613a38ffe6622d837303b3ecd31d - https://security.gentoo.org/glsa/201811-17
CVE ID: CVE-2017-16827 State: PUBLISHED Published: 2017-11-15T08:00:00 Last Updated: 2024-08-05T20:35:20.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (slurp_symtab invalid free and application crash) or possibly have unspecified other impact via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-17 - https://sourceware.org/bugzilla/show_bug.cgi?id=22306 - https://sourceware.org/git/gitweb.cgi?p=binutils-
sa/201811-17 - https://sourceware.org/bugzilla/show_bug.cgi?id=22306 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=0301ce1486b1450f219202677f30d0fa97335419
CVE ID: CVE-2017-16828 State: PUBLISHED Published: 2017-11-15T08:00:00 Last Updated: 2024-08-05T20:35:21.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: The display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (integer overflow and heap-based buffer over-read, and application crash) or possibly have unspecified other impact via a crafted ELF file, related to print_debug_frame. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=bf59c5d5f4f5b8b4da1f5f605cfa546f8029b43d - https://sourceware.org/bugzilla/show_bug.cgi?id=22386 - https://securit
t%3Bh=bf59c5d5f4f5b8b4da1f5f605cfa546f8029b43d - https://sourceware.org/bugzilla/show_bug.cgi?id=22386 - https://security.gentoo.org/glsa/201811-17
CVE ID: CVE-2017-16829 State: PUBLISHED Published: 2017-11-15T08:00:00 Last Updated: 2024-08-05T20:35:21.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _bfd_elf_parse_gnu_properties function in elf-properties.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not prevent negative pointers, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=cf54ebff3b7361989712fd9c0128a9b255578163
er: References: - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=cf54ebff3b7361989712fd9c0128a9b255578163 - https://security.gentoo.org/glsa/201811-17 - https://sourceware.org/bugzilla/show_bug.cgi?id=22307
CVE ID: CVE-2017-16830 State: PUBLISHED Published: 2017-11-15T08:00:00 Last Updated: 2024-08-05T20:35:21.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=22384 - https://security.gentoo.org/glsa/201811-17 - http://www.securityfocus.com/bid/101941 - https://sourcew
ug.cgi?id=22384 - https://security.gentoo.org/glsa/201811-17 - http://www.securityfocus.com/bid/101941 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=6ab2c4ed51f9c4243691755e1b1d2149c6a426f4
CVE ID: CVE-2017-16831 State: PUBLISHED Published: 2017-11-15T08:00:00 Last Updated: 2024-08-05T20:35:21.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate the symbol count, which allows remote attackers to cause a denial of service (integer overflow and application crash, or excessive memory allocation) or possibly have unspecified other impact via a crafted PE file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=6cee897971d4d7cd37d2a686bb6d2aa3e759c8ca - https://security.gento
//sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=6cee897971d4d7cd37d2a686bb6d2aa3e759c8ca - https://security.gentoo.org/glsa/201811-17 - https://sourceware.org/bugzilla/show_bug.cgi?id=22385
CVE ID: CVE-2017-16832 State: PUBLISHED Published: 2017-11-15T08:00:00 Last Updated: 2024-08-05T20:35:21.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate size and offset values in the data dictionary, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted PE file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=22373 - https://security.gentoo.org/gls
Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=22373 - https://security.gentoo.org/glsa/201811-17 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=0bb6961f18b8e832d88b490d421ca56cea16c45b
CVE ID: CVE-2017-16833 State: PUBLISHED Published: 2017-11-15T09:00:00Z Last Updated: 2024-09-16T16:24:03.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored cross-site scripting (XSS) vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the "homepage" value of a ".gemspec" file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PierreRambaud/gemirro/commit/9659f9b7ce15a723da8e361bd41b9203b19c97de
CVE ID: CVE-2017-16834 State: PUBLISHED Published: 2017-11-16T02:00:00 Last Updated: 2024-08-05T20:35:21.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account but root code execution depends on these files, which allows local users to gain privileges by leveraging access to this unprivileged account. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201806-09 - https://github.com/lingej/pnp4nagios/issues/140
CVE ID: CVE-2017-16835 State: PUBLISHED Published: 2018-02-20T06:00:00 Last Updated: 2024-08-05T20:35:21.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Photo,Video Locker-Calculator" application 12.0 for Android has android:allowBackup="true" in AndroidManifest.xml, which allows attackers to obtain sensitive cleartext information via an "adb backup '-f smart.calculator.gallerylock'" command. Additional Analyst Notes: - CVE Program Container: References: - https://www.ds-security.com/2017/11/16/photovideo-locker-calculator-leak-of-sensitive-files/
CVE ID: CVE-2017-16836 State: PUBLISHED Published: 2017-11-16T02:00:00 Last Updated: 2024-08-05T20:35:21.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arris TG1682G devices with Comcast TG1682_2.0s7_PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via the actionHandler/ajax_managed_services.php service parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/134288/Arris-TG1682G-Modem-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/38657/
CVE ID: CVE-2017-16837 State: PUBLISHED Published: 2017-11-16T02:00:00 Last Updated: 2024-08-05T20:35:21.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain function pointers in Trusted Boot (tboot) through 1.9.6 are not validated and can cause arbitrary code execution, which allows local users to overwrite dynamic PCRs of Trusted Platform Module (TPM) by hooking these function pointers. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/tboot/code/ci/521c58e51eb5be105a29983742850e72c44ed80e/ - https://www.usenix.org/conference/usenixsecurity18/presentation/han
CVE ID: CVE-2017-16839 State: PUBLISHED Published: 2018-03-29T22:00:00 Last Updated: 2024-08-05T20:35:21.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hashicorp vagrant-vmware-fusion 5.0.4 allows local users to steal root privileges if VMware Fusion is not installed. Additional Analyst Notes: - CVE Program Container: References: - https://m4.rkw.io/blog/cve201716839-hashicorp-vagrantvmwarefusion-v504-local-root.html
CVE ID: CVE-2017-16840 State: PUBLISHED Published: 2017-11-21T08:00:00 Last Updated: 2024-08-05T20:35:21.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service (out-of-bounds read) because of incorrect buffer padding for non-Haar wavelets, related to libavcodec/vc2enc.c and libavcodec/vc2enc_dwt.c. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=a94cb36ab2ad99d3a1331c9f91831ef593d94f74 - http://www.securityfocus.com/bid/101924 - https://www.debian.org/security/2017/dsa-4049 - https://github.com/FFmpeg/FFmp
http://www.securityfocus.com/bid/101924 - https://www.debian.org/security/2017/dsa-4049 - https://github.com/FFmpeg/FFmpeg/commit/94e538aebbc9f9c529e8b1f2eda860cfb8c473b1
CVE ID: CVE-2017-16841 State: PUBLISHED Published: 2017-11-16T03:00:00 Last Updated: 2024-08-05T20:35:21.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43149/ - https://www.linkedin.com/pulse/lansweeper-bug-miguel-angel-mendez-oscp
CVE ID: CVE-2017-16842 State: PUBLISHED Published: 2017-11-16T03:00:00 Last Updated: 2024-08-05T20:35:21.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/google_search_console/class-gsc-table.php in the Yoast SEO plugin before 5.8.0 for WordPress allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145080/WordPress-Yoast-SEO-Cross-Site-Scripting.html - https://plugins.trac.wordpress.org/changeset/1766831/wordpress-seo/trunk/admin/google_search_console/class-gsc-table.php - https://wordpress.org/plugins/wordpress-seo
766831/wordpress-seo/trunk/admin/google_search_console/class-gsc-table.php - https://wordpress.org/plugins/wordpress-seo/#developers
CVE ID: CVE-2017-16843 State: PUBLISHED Published: 2017-11-16T21:00:00 Last Updated: 2024-08-05T20:35:21.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43150/ - https://gh0s7.net/vonage/