Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ckage-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/
CVE ID: CVE-2017-13748 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:20.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html - https://bugzilla.redhat.com/show_bug.cgi?id=1485287 - http://www.securityfocus.com/bid/100514 - https://security.gentoo.org/glsa/201908-03 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/mess
entoo.org/glsa/201908-03 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/
CVE ID: CVE-2017-13749 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:20.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12 that will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1485285 - http://www.securityfocus.com/bid/100514 - https://security.gentoo.org/glsa/201908-03 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ - https://lists.fedoraproject.org/
/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/
CVE ID: CVE-2017-13750 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:20.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1485280 - http://www.securityfocus.com/bid/100514 - https://security.gentoo.org/glsa/201908-03 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ - https://lists.fedoraproje
CVE ID: CVE-2017-13751 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:20.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1485283 - http://www.securityfocus.com/bid/100514 - https://security.gentoo.org/glsa/201908-03 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ - https://lists.fedoraproject.org/arch
kage-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/
CVE ID: CVE-2017-13752 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:20.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1485276 - http://www.securityfocus.com/bid/100514 - https://security.gentoo.org/glsa/201908-03 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ - https://lists.fedoraproject.org/arc
CVE ID: CVE-2017-13753 State: REJECTED Published: 2017-08-29T06:00:00 Last Updated: 2017-08-30T07:57:01 Description: No description available.
CVE ID: CVE-2017-13754 State: PUBLISHED Published: 2017-09-07T13:00:00 Last Updated: 2024-08-05T19:05:19.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "advanced settings - time server" module in Wibu-Systems CodeMeter before 6.50b allows remote attackers to inject arbitrary web script or HTML via the "server name" field in actions/ChangeConfiguration.html. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2074 - https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073133 - http://www.securityfocus.com/archive/1/541119/100/0/threaded - http://seclis
thelp.com/app/answers/detail/a_id/1073133 - http://www.securityfocus.com/archive/1/541119/100/0/threaded - http://seclists.org/fulldisclosure/2017/Sep/1 - http://www.securityfocus.com/bid/104433 - https://ics-cert.us-cert.gov/advisories/ICSA-18-102-02 - https://www.exploit-db.com/exploits/42610/
CVE ID: CVE-2017-13755 State: PUBLISHED Published: 2017-08-29T22:00:00 Last Updated: 2024-08-05T19:05:20.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: In The Sleuth Kit (TSK) 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660_proc_dir() in tsk/fs/iso9660_dent.c in libtskfs.a, as demonstrated by fls. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sleuthkit/sleuthkit/issues/913 - https://lists.debian.org/debian-lts-announce/2022/06/msg00015.html
CVE ID: CVE-2017-13756 State: PUBLISHED Published: 2017-08-29T22:00:00 Last Updated: 2024-08-05T19:05:20.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: In The Sleuth Kit (TSK) 4.4.2, opening a crafted disk image triggers infinite recursion in dos_load_ext_table() in tsk/vs/dos.c in libtskvs.a, as demonstrated by mmls. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sleuthkit/sleuthkit/issues/914 - https://lists.debian.org/debian-lts-announce/2022/06/msg00015.html
CVE ID: CVE-2017-13757 State: PUBLISHED Published: 2017-08-29T23:00:00 Last Updated: 2024-08-05T19:05:20.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to elf_i386_get_synthetic_symtab in elf32-i386.c and elf_x86_64_get_synthetic_symtab in elf64-x86-64.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=90efb6422939ca031804266fba
Program Container: References: - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=90efb6422939ca031804266fba669f77c22a274a - http://www.securityfocus.com/bid/100532 - https://sourceware.org/bugzilla/show_bug.cgi?id=22018
CVE ID: CVE-2017-13758 State: PUBLISHED Published: 2017-08-29T23:00:00 Last Updated: 2024-08-05T19:05:20.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-10, there is a heap-based buffer overflow in the TracePoint() function in MagickCore/draw.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4040 - https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=32583 - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - https://www.debian.org/security/2017/dsa-4032 - http://www.securitytracker.com/id/1039246
CVE ID: CVE-2017-13760 State: PUBLISHED Published: 2017-08-29T23:00:00 Last Updated: 2024-08-05T19:05:20.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: In The Sleuth Kit (TSK) 4.4.2, fls hangs on a corrupt exfat image in tsk_img_read() in tsk/img/img_io.c in libtskimg.a. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sleuthkit/sleuthkit/issues/906 - https://lists.debian.org/debian-lts-announce/2022/06/msg00015.html
CVE ID: CVE-2017-13761 State: PUBLISHED Published: 2017-09-14T17:00:00 Last Updated: 2024-08-05T19:05:20.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involving caching of redirect responses. Additional Analyst Notes: - CVE Program Container: References: - https://www.fastly.com/security-advisories/vulnerability-fastly-open-source-cdn-module-intended-be-integrated-magento2
CVE ID: CVE-2017-13762 State: PUBLISHED Published: 2017-08-30T00:00:00Z Last Updated: 2024-09-16T16:18:59.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: ONOS versions 1.8.0, 1.9.0, and 1.10.0 are vulnerable to XSS. Additional Analyst Notes: - CVE Program Container: References: - https://gerrit.onosproject.org/#/c/14067/ - https://gerrit.onosproject.org/#/c/14069/ - https://gerrit.onosproject.org/#/c/14182/ - https://gerrit.onosproject.org/#/c/14050/ - https://gerrit.onosproject.org/#/c/14049/ - https://gerrit.onosproject.org/#/c/14031/ - https://gerrit.onosproject.org/#/c/14148/ - https://gerrit.onosproject.org/#/c/14179/ - https://gerrit.onosproject.org/#/c/14170/ - https:/
project.org/#/c/14148/ - https://gerrit.onosproject.org/#/c/14179/ - https://gerrit.onosproject.org/#/c/14170/ - https://gerrit.onosproject.org/#/c/14066/
CVE ID: CVE-2017-13763 State: PUBLISHED Published: 2017-08-30T00:00:00Z Last Updated: 2024-09-16T23:46:15.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: ONOS versions 1.8.0, 1.9.0, and 1.10.0 do not restrict the amount of memory allocated. The Netty payload size is not limited. Additional Analyst Notes: - CVE Program Container: References: - https://gerrit.onosproject.org/#/c/13831/ - https://gerrit.onosproject.org/#/c/14318/
CVE ID: CVE-2017-13764 State: PUBLISHED Published: 2017-08-30T09:00:00 Last Updated: 2024-08-05T19:05:20.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b87ffbd12bddf64582c0a6e082b462744474de94 - http://www.securityfocus.com/bid/100545 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13925 - https://www.wireshark.org/security/wnpa-sec-2017-40.html - http://www.securitytra
k.org/bugzilla/show_bug.cgi?id=13925 - https://www.wireshark.org/security/wnpa-sec-2017-40.html - http://www.securitytracker.com/id/1039254
CVE ID: CVE-2017-13765 State: PUBLISHED Published: 2017-08-30T09:00:00 Last Updated: 2024-08-05T19:05:20.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash. This was addressed in plugins/irda/packet-ircomm.c by adding length validation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100551 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=94666d4357096fc45e3bcad3d9414a14f0831bc8 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://www.wireshark.org/security/w
4a14f0831bc8 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://www.wireshark.org/security/wnpa-sec-2017-41.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13929 - http://www.securitytracker.com/id/1039254
CVE ID: CVE-2017-13766 State: PUBLISHED Published: 2017-08-30T09:00:00 Last Updated: 2024-08-05T19:05:20.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write. This was addressed in plugins/profinet/packet-dcerpc-pn-io.c by adding string validation. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=af7b093ca528516c14247acb545046199d30843e - https://www.wireshark.org/security/wnpa-sec-2017-39.html - https://www.debian.org/security/2017/dsa-4060 - http://www.securityfocus.com/bid/100542 - https
/wnpa-sec-2017-39.html - https://www.debian.org/security/2017/dsa-4060 - http://www.securityfocus.com/bid/100542 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13847 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2096bc1e5078732543e0a3ee115a2ce520a72bbc - http://www.securitytracker.com/id/1039254
CVE ID: CVE-2017-13767 State: PUBLISHED Published: 2017-08-30T09:00:00 Last Updated: 2024-08-05T19:05:20.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-msdp.c by adding length validation. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6f18ace2a2683418a9368a8dfd92da6bd8213e15 - https://www.wireshark.org/security/wnpa-sec-2017-38.html - http://www.securityfocus.com/bid/100549 - http://www.securitytracker.com/id/1039254 - https://bugs.wire
c-2017-38.html - http://www.securityfocus.com/bid/100549 - http://www.securitytracker.com/id/1039254 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13933
CVE ID: CVE-2017-13768 State: PUBLISHED Published: 2017-08-30T09:00:00 Last Updated: 2024-08-05T19:05:20.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null Pointer Dereference in the IdentifyImage function in MagickCore/identify.c in ImageMagick through 7.0.6-10 allows an attacker to perform denial of service by sending a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - http://www.securityfocus.com/bid/100569 - https://security.gentoo.org/glsa/201711-07 - https://github.com/ImageMagick/ImageMagick/issues/706 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/deb
ageMagick/issues/706 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-13769 State: PUBLISHED Published: 2017-08-30T09:00:00 Last Updated: 2024-08-05T19:05:20.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a denial of service (buffer over-read) by sending a crafted JPEG file. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4040 - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - https://www.debian.org/security/2017/dsa-4032 - https://github.com/ImageMagick/ImageMagick/issues/705
CVE ID: CVE-2017-13771 State: PUBLISHED Published: 2017-09-07T13:00:00 Last Updated: 2024-08-05T19:05:20.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.html - http://seclists.org/f
cketstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.html - http://seclists.org/fulldisclosure/2017/Aug/46 - https://support.lexmark.com/alerts
CVE ID: CVE-2017-13772 State: PUBLISHED Published: 2017-10-23T18:00:00 Last Updated: 2024-08-05T19:05:20.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the (1) ping_addr parameter to PingIframeRpm.htm or (2) dnsserver2 parameter to WanStaticIpV6CfgRpm.htm. Additional Analyst Notes: - CVE Program Container: References: - https://www.fidusinfosec.com/tp-link-remote-code-execution-cve-2017-13772/ - https://www.exploit-db.com/exploits/43022/ - http://packetstormsecurity.com/files/158999/TP-Link-WDR4300-Remote-Code-Execution.h
www.exploit-db.com/exploits/43022/ - http://packetstormsecurity.com/files/158999/TP-Link-WDR4300-Remote-Code-Execution.html
CVE ID: CVE-2017-13774 State: PUBLISHED Published: 2017-08-30T09:00:00 Last Updated: 2024-08-05T19:05:20.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ipvm.com/reports/hik-vms-pass
CVE ID: CVE-2017-13775 State: PUBLISHED Published: 2017-08-30T09:00:00 Last Updated: 2024-08-05T19:05:20.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage() in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself does not support the requests. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/08/31/3 - https://www.debian.org/security/2018/dsa-4321 - http://www.securityfocus.com/bid/100570 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - http://hg.code.sf.net/p/graphicsmagick/code/r
570 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - http://hg.code.sf.net/p/graphicsmagick/code/rev/b037d79b6ccd - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - https://usn.ubuntu.com/4222-1/
CVE ID: CVE-2017-13776 State: PUBLISHED Published: 2017-08-30T09:00:00 Last Updated: 2024-08-05T19:05:20.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version!=10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/08/31/2 - http://www.securityfocus.com/bid/100574 - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-anno
.securityfocus.com/bid/100574 - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - http://hg.code.sf.net/p/graphicsmagick/code/rev/233a720bfd5e - https://usn.ubuntu.com/4222-1/
CVE ID: CVE-2017-13777 State: PUBLISHED Published: 2017-08-30T09:00:00 Last Updated: 2024-08-05T19:05:20.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version==10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100575 - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - http://openwall.com/lists
/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - http://openwall.com/lists/oss-security/2017/08/31/1 - http://hg.code.sf.net/p/graphicsmagick/code/rev/233a720bfd5e - https://usn.ubuntu.com/4222-1/
CVE ID: CVE-2017-13778 State: PUBLISHED Published: 2017-08-30T09:00:00 Last Updated: 2024-08-05T19:05:20.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fiyo CMS 2.0.7 has XSS in dapur\apps\app_config\sys_config.php via the site_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FiyoCMS/FiyoCMS/issues/8
CVE ID: CVE-2017-13779 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T19:05:20.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: GSTN_offline_tool in India Goods and Services Tax Network (GSTN) Offline Utility tool before 1.2 executes winstart-server.vbs from the "C:\GST Offline Tool" directory, which has insecure permissions. This allows local users to gain privileges by replacing winstart-server.vbs with arbitrary VBScript code. For example, a local user could create VBScript code for a TCP reverse shell, and use that later for Remote Command Execution. Additional Analyst Notes: - CVE Program Container: References: - https://tink2hack.blogspot.in/201
te Command Execution. Additional Analyst Notes: - CVE Program Container: References: - https://tink2hack.blogspot.in/2017/09/writeup-of-cve-2017-13779-remote.html
CVE ID: CVE-2017-13780 State: PUBLISHED Published: 2017-08-30T17:00:00 Last Updated: 2024-08-05T19:05:20.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows directory traversal attacks for reading arbitrary files via the module/admin_conf/download.php file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EyesOfNetworkCommunity/eonweb/issues/8
CVE ID: CVE-2017-13782 State: PUBLISHED Published: 2017-11-13T00:00:00 Last Updated: 2024-08-05T19:05:20.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a /dev/dtracehelper attack involving the dtrace_dif_variable and dtrace_getarg functions. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208221 - http://www.securitytracker.com/id/1039710 - https://lgtm.com/blog/apple_xnu_dtrace_CVE-2017-13782 - http://packetstormsecurity.com/files/172827
ker.com/id/1039710 - https://lgtm.com/blog/apple_xnu_dtrace_CVE-2017-13782 - http://packetstormsecurity.com/files/172827/Apple-XNU-Kernel-Memory-Exposure.html
CVE ID: CVE-2017-13783 State: PUBLISHED Published: 2017-11-13T03:00:00 Last Updated: 2024-08-05T19:05:20.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43172/ -