Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-10930 State: PUBLISHED Published: 2017-09-19T14:00:00Z Last Updated: 2024-09-16T17:33:43.111Z Vendors: ZTE Products: ZX10 1800-2S Problem Types: Improper Access Control Description: The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource from an unauthorized actor, resulting in ordinary users being able to download configuration files to steal information like administrator accounts and passwords. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008262
CVE ID: CVE-2017-10931 State: PUBLISHED Published: 2017-09-19T14:00:00Z Last Updated: 2024-09-17T03:37:33.507Z Vendors: ZTE Products: ZX10 1800-2S Problem Types: Path Traversal Description: The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to download any files and cause information leaks such as system configuration. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008262
CVE ID: CVE-2017-10932 State: PUBLISHED Published: 2017-09-27T16:00:00Z Last Updated: 2024-09-16T22:30:02.897Z Vendors: ZTE Products: NR8000 Series Problem Types: Remote Code Execution Description: All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the applications of C/S architecture using the Java RMI service in which the servers use the Apache Commons Collections (ACC) library that may result in Java deserialization vulnerabilities. An unauthenticated remote attacker can exploit the vulnerabilities by sending a crafted RMI request to execute arbitrary code on the target host. Additional Analyst No
the vulnerabilities by sending a crafted RMI request to execute arbitrary code on the target host. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008422
CVE ID: CVE-2017-10933 State: PUBLISHED Published: 2017-10-19T21:00:00Z Last Updated: 2024-09-16T23:10:37.132Z Vendors: ZTE Products: ZXDT22 SF01 Problem Types: Directory Traversal Description: All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulnerability that allows remote attackers to read arbitrary files on the system via a full path name after host address. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008582
CVE ID: CVE-2017-10934 State: PUBLISHED Published: 2018-07-25T15:00:00Z Last Updated: 2024-09-17T04:10:07.231Z Vendors: ZTE Products: ZXIPTV-EPG Problem Types: Remote Code Execution Description: All versions prior to V5.09.02.02T4 of the ZTE ZXIPTV-EPG product use the Java RMI service in which the servers use the Apache Commons Collections (ACC) library that may result in Java deserialization vulnerabilities. An unauthenticated remote attacker can exploit the vulnerabilities by sending a crafted RMI request to execute arbitrary code on the target host. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=100868
tes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008682
CVE ID: CVE-2017-10935 State: PUBLISHED Published: 2018-07-25T15:00:00Z Last Updated: 2024-09-16T20:01:55.652Z Vendors: ZTE Products: ZXR10 1800-2S Problem Types: Weak Password Recovery Mechanism Description: All versions prior to ZSRV2 V3.00.40 of the ZTE ZXR10 1800-2S products allow remote authenticated users to bypass the original password authentication protection to change other user's password. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008723
CVE ID: CVE-2017-10936 State: PUBLISHED Published: 2018-07-25T15:00:00Z Last Updated: 2024-09-17T03:08:03.979Z Vendors: ZTE Products: ZXCDN-SNS Problem Types: SQL Injection Description: SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008722
CVE ID: CVE-2017-10937 State: PUBLISHED Published: 2018-07-25T15:00:00Z Last Updated: 2024-09-17T00:55:35.698Z Vendors: ZTE Products: ZXIPTV-UCM Problem Types: SQL injection Description: SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers to execute arbitrary SQL commands via the opertype parameter, resulting in the disclosure of database information. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008782
CVE ID: CVE-2017-10938 State: REJECTED Published: 2018-02-27T14:00:00 Last Updated: 2018-02-27T13:57:01 Description: No description available.
CVE ID: CVE-2017-10939 State: REJECTED Published: 2018-02-27T14:00:00 Last Updated: 2018-02-27T13:57:01 Description: No description available.
CVE ID: CVE-2017-10940 State: PUBLISHED Published: 2017-10-31T19:00:00 Last Updated: 2024-08-05T17:50:12.720Z Vendors: Joyent Products: Joyent Smart Data Center Problem Types: CWE-22 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Joyent Smart Data Center prior to agentsshar@1.0.0-release-20160901-20160901T051624Z-g3fd5adf (e469cf49-4de3-4658-8419-ab42837916ad). An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the docker API. The process does not properly validate user-supplied data which can allow for the upload
w exists within the docker API. The process does not properly validate user-supplied data which can allow for the upload of arbitrary files. An attacker can leverage this vulnerability to execute arbitrary code under the context of root. Was ZDI-CAN-3853. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-453 - http://www.securityfocus.com/bid/99510 - https://help.joyent.com/hc/en-us/articles/115009649927-Security-Advisory-ZDI-CAN-3853-Docker-File-Overwrite-Vulnerability
CVE ID: CVE-2017-10941 State: PUBLISHED Published: 2017-10-31T19:00:00 Last Updated: 2024-08-05T17:50:12.793Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AFParseDateEx function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context o
to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4816. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-454
CVE ID: CVE-2017-10942 State: PUBLISHED Published: 2017-10-31T19:00:00 Last Updated: 2024-08-05T17:50:12.901Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with ot
ta, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-4737. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-455
CVE ID: CVE-2017-10943 State: PUBLISHED Published: 2017-10-31T19:00:00 Last Updated: 2024-08-05T17:50:12.853Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with ot
ta, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-4738. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-456
CVE ID: CVE-2017-10944 State: PUBLISHED Published: 2017-10-31T19:00:00 Last Updated: 2024-08-05T17:50:12.826Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ObjStm objects. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction wi
ed data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-4846. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-457
CVE ID: CVE-2017-10945 State: PUBLISHED Published: 2017-10-31T19:00:00 Last Updated: 2024-08-05T17:50:12.831Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the app.alert function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of th
performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4855. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-458 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2017-10946 State: PUBLISHED Published: 2017-10-31T19:00:00 Last Updated: 2024-08-05T17:50:12.726Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.1.6871. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the setItem function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the c
forming operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4721. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-459
CVE ID: CVE-2017-10947 State: PUBLISHED Published: 2017-10-31T19:00:00 Last Updated: 2024-08-05T17:50:12.723Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.1.6871. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the print function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the cur
rming operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4722. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-460
CVE ID: CVE-2017-10948 State: PUBLISHED Published: 2017-10-31T19:00:00 Last Updated: 2024-08-05T17:50:12.850Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.1.6871. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the app.execMenuItem function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context
or to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4723. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101670 - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-17-461
CVE ID: CVE-2017-10949 State: PUBLISHED Published: 2017-08-04T15:00:00Z Last Updated: 2024-09-16T23:15:55.612Z Vendors: Zero Day Initiative Products: Dell Storage Manager Problem Types: Directory Traversal Description: Directory Traversal in Dell Storage Manager 2016 R2.1 causes Information Disclosure when the doGet method of the EmWebsiteServlet class doesn't properly validate user provided path before using it in file operations. Was ZDI-CAN-4459. Additional Analyst Notes: - CVE Program Container: References: - http://topics-cdn.dell.com/pdf/dell-compellent-sc8000_release%20notes24_en-us.pdf - http://www.zerodayinitiative.com/advisories/ZDI-17-523 - http://www.securityfocus.com/bid/100138
CVE ID: CVE-2017-10950 State: PUBLISHED Published: 2017-08-29T13:00:00 Last Updated: 2024-08-05T17:50:12.794Z Vendors: Zero Day Initiative Products: Bitdefender Total Security Problem Types: CWE-415 Description: This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Bitdefender Total Security 21.0.24.62. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within processing of the 0x8000E038 IOCTL in the bdfwfpf driver. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An atta
sue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker could leverage this vulnerability to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-4776. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-693 - http://www.securityfocus.com/bid/100418
CVE ID: CVE-2017-10951 State: PUBLISHED Published: 2017-08-29T13:00:00 Last Updated: 2024-08-05T17:50:12.743Z Vendors: Zero Day Initiative Products: Foxit Reader Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within app.launchURL method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the
string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4724. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039213 - https://zerodayinitiative.com/advisories/ZDI-17-691 - http://www.securityfocus.com/bid/100409
CVE ID: CVE-2017-10952 State: PUBLISHED Published: 2017-08-29T13:00:00 Last Updated: 2024-08-05T17:50:12.796Z Vendors: Zero Day Initiative Products: Foxit Reader Problem Types: CWE-693 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.0.2051. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the saveAs JavaScript function. The issue results from the lack of proper validation of user-supplied data, which can lead to writing arbitrary files into attacker controlled locations. An attacker can leverage th
supplied data, which can lead to writing arbitrary files into attacker controlled locations. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4518. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100412 - https://zerodayinitiative.com/advisories/ZDI-17-692 - https://0patch.blogspot.com/2017/08/0patching-foxit-readers-saveas-0day-cve.html - http://www.securitytracker.com/id/1039212
CVE ID: CVE-2017-10953 State: PUBLISHED Published: 2017-10-31T19:00:00 Last Updated: 2024-08-05T17:50:12.853Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the gotoURL method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the c
sing it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5030. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-718 - http://www.securityfocus.com/bid/100682 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2017-10954 State: PUBLISHED Published: 2017-10-31T19:00:00 Last Updated: 2024-08-05T17:50:12.839Z Vendors: Bitdefender Products: Bitdefender Internet Security Problem Types: CWE-190 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security Internet Security 2018 prior to build 7.72918. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within pdf.xmd. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer.
the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. Was ZDI-CAN-4361. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-717 - http://www.securityfocus.com/bid/100676
CVE ID: CVE-2017-10955 State: PUBLISHED Published: 2017-10-19T19:00:00 Last Updated: 2024-08-05T17:50:12.838Z Vendors: Dell EMC Products: Dell EMC Data Protection Advisor Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0. Authentication is required to exploit this vulnerability. The specific flaw exists within the EMC DPA Application service, which listens on TCP port 9002 by default. When parsing the preScript parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to exec
ate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute arbitrary code under the context of SYSTEM. Was ZDI-CAN-4697. NOTE: Dell EMC disputes that this is a vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.securityfocus.com/bid/101008 - https://zerodayinitiative.com/advisories/ZDI-17-812
CVE ID: CVE-2017-10956 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T17:50:12.860Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the tile index member of SOT markers. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunc
-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-4978. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-858 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2017-10957 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T17:50:12.838Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the arrowEnd attribute of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code u