Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ounce/2017-01/msg00025.html - http://www.securityfocus.com/bid/95678 - http://www.openwall.com/lists/oss-security/2017/01/11/3 - http://www.debian.org/security/2017/dsa-3765 - http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00026.html - http://www.ubuntu.com/usn/USN-3178-1 - http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00024.html - https://bugzilla.redhat.com/show_bug.cgi?id=1412259 - https://git.savannah.gnu.org/cgit/icoutils.git/commit/?id=1a108713ac26215c7568353f6e02e727e6d4b24a
CVE ID: CVE-2017-5334 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T14:55:35.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/10/7 - https://access.redhat.com/errata/RHSA-2017:2292 - http://www.securitytracker.com/id/1037576 - http://www.openwall.com/lists/oss-
access.redhat.com/errata/RHSA-2017:2292 - http://www.securitytracker.com/id/1037576 - http://www.openwall.com/lists/oss-security/2017/01/11/4 - https://gnutls.org/security.html#GNUTLS-SA-2017-1 - http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html - http://www.securityfocus.com/bid/95370 - https://security.gentoo.org/glsa/201702-04 - https://gitlab.com/gnutls/gnutls/commit/c5aaa488a3d6df712dc8dff23a049133cab5ec1b
CVE ID: CVE-2017-5335 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T14:55:35.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/10/7 - https://access.redhat.com/errata/RHSA-2017:2292 - http://www.securitytracker.com/id/1037576 - http://www.openwall.com/lists/oss-security/2017/01/11/4 - https://bugs.chromium.org/p/oss-f
ritytracker.com/id/1037576 - http://www.openwall.com/lists/oss-security/2017/01/11/4 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=337 - http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html - http://rhn.redhat.com/errata/RHSA-2017-0574.html - https://security.gentoo.org/glsa/201702-04 - https://gnutls.org/security.html#GNUTLS-SA-2017-2 - https://gitlab.com/gnutls/gnutls/commit/49be4f7b82eba2363bb8d4090950dad976a77a3a - http://www.securityfocus.com/bid/95374
CVE ID: CVE-2017-5336 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T14:55:35.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via a crafted OpenPGP certificate. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gnutls/gnutls/commit/5140422e0d7319a8e2fe07f02cbcafc4d6538732 - http://www.securityfocus.com/bid/95377 - http://www.openwall.com/lists/oss-security/2017/01/10/7 - https://access.redhat.com/errata/RHSA-2017:2292 - http://www.securi
//www.openwall.com/lists/oss-security/2017/01/10/7 - https://access.redhat.com/errata/RHSA-2017:2292 - http://www.securitytracker.com/id/1037576 - http://www.openwall.com/lists/oss-security/2017/01/11/4 - http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=340 - http://rhn.redhat.com/errata/RHSA-2017-0574.html - https://security.gentoo.org/glsa/201702-04 - https://gnutls.org/security.html#GNUTLS-SA-2017-2
CVE ID: CVE-2017-5337 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T14:55:35.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/10/7 - https://access.redhat.com/errata/RHSA-2017:2292 - http://www.securitytracker.com/id/1037576 - http://www.openwall.com/lists/oss-security/2017/01/11/4 - http://lists.opensuse.org/opensuse-security-announce/2017
76 - http://www.openwall.com/lists/oss-security/2017/01/11/4 - http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html - http://www.securityfocus.com/bid/95372 - http://rhn.redhat.com/errata/RHSA-2017-0574.html - https://security.gentoo.org/glsa/201702-04 - https://gnutls.org/security.html#GNUTLS-SA-2017-2 - https://gitlab.com/gnutls/gnutls/commit/94fcf1645ea17223237aaf8d19132e004afddc1a - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=338 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=346
CVE ID: CVE-2017-5338 State: REJECTED Published: 2017-04-11T16:00:00 Last Updated: 2017-04-11T15:57:02 Description: No description available.
CVE ID: CVE-2017-5339 State: REJECTED Published: 2017-04-11T16:00:00 Last Updated: 2017-04-11T15:57:02 Description: No description available.
CVE ID: CVE-2017-5340 State: PUBLISHED Published: 2017-01-11T06:02:00 Last Updated: 2024-08-05T14:55:35.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow, uninitialized memory access, and use of arbitrary destructor function pointers) via crafted serialized data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/php/php-src/commit/4cc0286f2f3780abc6084bcdae5dce595daa3c12 - https://access.redhat.com/errata/RHSA-2018:1296 -
thub.com/php/php-src/commit/4cc0286f2f3780abc6084bcdae5dce595daa3c12 - https://access.redhat.com/errata/RHSA-2018:1296 - https://security.netapp.com/advisory/ntap-20180112-0001/ - http://www.securityfocus.com/bid/95371 - https://bugs.php.net/bug.php?id=73832 - http://www.securitytracker.com/id/1037659
CVE ID: CVE-2017-5341 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-05T14:55:35.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print(). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2017-5342 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-05T14:55:35.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: In tcpdump before 4.9.0, a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in print-ether.c:ether_print(). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/20
s-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2017-5344 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:55:35.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in dotCMS through 3.6.1. The findChildrenByFilter() function which is called by the web accessible path /categoriesServlet performs string interpolation and direct SQL query execution. SQL quote escaping and a keyword blacklist were implemented in a new class, SQLUtil (main/java/com/dotmarketing/common/util/SQLUtil.java), as part of the remediation of CVE-2016-8902; however, these can be overcome in the case of the q and inode parameters to the /categoriesServlet path. Overcoming these controls permits
be overcome in the case of the q and inode parameters to the /categoriesServlet path. Overcoming these controls permits a number of blind boolean SQL injection vectors in either parameter. The /categoriesServlet web path can be accessed remotely and without authentication in a default dotCMS deployment. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96259 - https://github.com/xdrr/webapp-exploits/blob/master/vendors/dotcms/2017.01.blind-sqli/dotcms-dump.sh - http://seclists.org/fulldisclosure/2017/Feb/34 - http://dotcms.com/security/SI-39 - https://www.exploit-db.com/exploits/41377/
CVE ID: CVE-2017-5345 State: PUBLISHED Published: 2017-01-12T06:06:00 Last Updated: 2024-08-05T14:55:35.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary SQL commands via the term parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/semplon/GeniXCMS/commit/6e21c01d87672d81080450e6913e0093a02bfab8 - http://www.securityfocus.com/bid/95660 - https://github.com/semplon/GeniXCMS/issues/60
CVE ID: CVE-2017-5346 State: PUBLISHED Published: 2017-01-12T06:06:00 Last Updated: 2024-08-05T14:55:35.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter to gxadmin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://code610.blogspot.com/2017/01/genixcms-sql-injection-quick-autopsy.html - http://www.securityfocus.com/bid/95655 - https://github.com/semplon/GeniXCMS/issues/61
CVE ID: CVE-2017-5347 State: PUBLISHED Published: 2017-01-12T06:06:00 Last Updated: 2024-08-05T14:55:35.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the recipient parameter to gxadmin/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/semplon/GeniXCMS/issues/61 - http://www.securityfocus.com/bid/95684
CVE ID: CVE-2017-5350 State: PUBLISHED Published: 2017-01-12T06:06:00 Last Updated: 2024-08-05T14:55:35.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allow attackers to crash systemUI by leveraging incomplete exception handling. The Samsung ID is SVE-2016-7122. Additional Analyst Notes: - CVE Program Container: References: - http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017 - http://www.securityfocus.com/bid/95424
CVE ID: CVE-2017-5351 State: PUBLISHED Published: 2017-01-12T06:06:00 Last Updated: 2024-08-05T14:55:35.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Note devices with KK(4.4), L(5.0/5.1), and M(6.0) software allow attackers to crash the system by creating an arbitrarily large number of active VR service threads. The Samsung ID is SVE-2016-7650. Additional Analyst Notes: - CVE Program Container: References: - http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017 - http://www.securityfocus.com/bid/95418
CVE ID: CVE-2017-5356 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-05T14:55:35.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formatting sequence (%[) without a closing bracket (]). Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html - http://www.securityfocus.com/bid/96581 - https://blog.fuzzing-project.org/55-Fuzzing-Irssi-with-Perl-Scripts.html - https://irssi.org/security/irssi_sa_2017_01.txt - http://www.openwall.com/lists/oss-security/201
ith-Perl-Scripts.html - https://irssi.org/security/irssi_sa_2017_01.txt - http://www.openwall.com/lists/oss-security/2017/01/12/8 - http://www.openwall.com/lists/oss-security/2017/01/13/2
CVE ID: CVE-2017-5357 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-05T14:55:35.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service (crash) via a malformed command, which triggers an invalid free. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/12/5 - http://www.openwall.com/lists/oss-security/2017/01/12/6 - https://lists.gnu.org/archive/html/bug-ed/2017-01/msg00000.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVH54XNZ77ICNBJTPI2DLJYQTA3SYSFC/ - http://ww
oject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVH54XNZ77ICNBJTPI2DLJYQTA3SYSFC/ - http://www.securityfocus.com/bid/95422 - http://www.openwall.com/lists/oss-security/2017/01/12/7 - http://www.openwall.com/lists/oss-security/2017/01/13/3
CVE ID: CVE-2017-5358 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-05T14:55:35.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allows remote attackers to execute arbitrary code via the server argument to the (1) i5_connect, (2) i5_pconnect, or (3) i5_private_connect API function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96419 - http://hyp3rlinx.altervista.org/advisories/EASYCOM-PHP-API-BUFFER-OVERFLOW.txt - http://seclists.org/fulldisclosure/2017/Feb/60 - http://packetstormsecurity.com/files/141299/EasyCom-AS400-PHP
LOW.txt - http://seclists.org/fulldisclosure/2017/Feb/60 - http://packetstormsecurity.com/files/141299/EasyCom-AS400-PHP-API-Buffer-Overflow.html - https://www.exploit-db.com/exploits/41425/
CVE ID: CVE-2017-5359 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-05T14:55:35.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: EasyCom SQL iPlug allows remote attackers to cause a denial of service via the D$EVAL parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://hyp3rlinx.altervista.org/advisories/EASYCOM-SQL-IPLUG-DENIAL-OF-SERVICE.txt - http://packetstormsecurity.com/files/141300/EasyCom-SQL-iPlug-Denial-Of-Service.html - http://www.securityfocus.com/archive/1/540218/100/0/threaded - http://seclists.org/fulldisclosure/2017/Feb/61 - https://www.exploit-db.com/exploits/41426/ - http://www.securityfoc
d - http://seclists.org/fulldisclosure/2017/Feb/61 - https://www.exploit-db.com/exploits/41426/ - http://www.securityfocus.com/bid/96420
CVE ID: CVE-2017-5361 State: PUBLISHED Published: 2017-07-03T16:00:00 Last Updated: 2024-08-05T14:55:35.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 does not use a constant-time comparison algorithm for secrets, which makes it easier for remote attackers to obtain sensitive user password information via a timing side-channel attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3883 - https://forum.bestpractical.com/t/security-vulnerabilities-in-rt-2017-06-15/32016 - http://www.debian.org/security/2017/dsa-3882
CVE ID: CVE-2017-5364 State: PUBLISHED Published: 2017-01-13T09:00:00 Last Updated: 2024-08-05T14:55:35.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory Corruption Vulnerability in Foxit PDF Toolkit v1.3 allows an attacker to cause Denial of Service and Remote Code Execution when the victim opens the specially crafted PDF file. The Vulnerability has been fixed in v2.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securityfocus.com/bid/95356
CVE ID: CVE-2017-5367 State: PUBLISHED Published: 2017-02-06T17:00:00 Last Updated: 2024-08-05T14:55:35.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, which allows a remote attacker to execute malicious scripts within an authenticated client's browser. The URL is /zm/index.php and sample parameters could include action=login&view=postlogin[XSS] view=console[XSS] view=groups[XSS] view=events&filter[terms][1][cnj]=and[XSS] view=events&filter%5Bterms%5D%5B1%5D%5Bcnj%5D=and[XSS] view=events&filter%5Bterms%5D%5B1%5D%5Bcnj%5D
s][1][cnj]=and[XSS] view=events&filter%5Bterms%5D%5B1%5D%5Bcnj%5D=and[XSS] view=events&filter%5Bterms%5D%5B1%5D%5Bcnj%5D=[XSS]and view=events&limit=1%22%3E%3C/a%3E[XSS] (among others). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Feb/11 - http://www.securityfocus.com/bid/96120 - http://seclists.org/bugtraq/2017/Feb/6
CVE ID: CVE-2017-5368 State: PUBLISHED Published: 2017-02-06T17:00:00 Last Updated: 2024-08-05T14:55:35.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, is vulnerable to CSRF (Cross Site Request Forgery) which allows a remote attack to make changes to the web application as the current logged in victim. If the victim visits a malicious web page, the attacker can silently and automatically create a new admin user within the web application for remote persistence and further attacks. The URL is /zm/index.php and sample parameters could include action=user uid=0 newUser[Username]=attacker1 newUser[Password]=P
L is /zm/index.php and sample parameters could include action=user uid=0 newUser[Username]=attacker1 newUser[Password]=Password1234 conf_password=Password1234 newUser[System]=Edit (among others). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Feb/11 - http://www.securityfocus.com/bid/96126 - http://seclists.org/bugtraq/2017/Feb/6
CVE ID: CVE-2017-5371 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-05T14:55:35.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Odata Server in SAP Adaptive Server Enterprise (ASE) 16 allows remote attackers to cause a denial of service (process crash) via a series of crafted requests, aka SAP Security Note 2330422. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-16-036-sap-ase-odata-server-denial-service/ - https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-october-2016/ - http://seclists.org/fulldisclosure/2017/Jan/47 - http://www.securityfocus.com/bid/93545 - http://packet
-october-2016/ - http://seclists.org/fulldisclosure/2017/Jan/47 - http://www.securityfocus.com/bid/93545 - http://packetstormsecurity.com/files/140610/SAP-ASE-ODATA-Server-16-Denial-Of-Service.html
CVE ID: CVE-2017-5372 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-05T14:55:35.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: The function msp (aka MSPRuntimeInterface) in the P4 SERVERCORE component in SAP AS JAVA allows remote attackers to obtain sensitive system information by leveraging a missing authorization check for the (1) getInformation, (2) getParameters, (3) getServiceInfo, (4) getStatistic, or (5) getClientStatistic function, aka SAP Security Note 2331908. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-october-2016/ - http://seclists.org/fulldiscl
https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-october-2016/ - http://seclists.org/fulldisclosure/2017/Jan/50 - http://packetstormsecurity.com/files/140611/SAP-NetWeaver-AS-Java-P4-MSPRUNTIMEINTERFACE-Information-Disclosure.html - https://erpscan.io/advisories/erpscan-16-037-sap-java-p4-mspruntimeinterface-information-disclosure/ - http://www.securityfocus.com/bid/93504
CVE ID: CVE-2017-5373 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T14:55:35.805Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Memory safety bugs fixed in Firefox 51 and Firefox ESR 45.7 Description: Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2017-03/ - https:
Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2017-03/ - https://www.mozilla.org/security/advisories/mfsa2017-02/ - https://security.gentoo.org/glsa/201702-22 - https://www.debian.org/security/2017/dsa-3832 - http://www.securityfocus.com/bid/95762 - https://security.gentoo.org/glsa/201702-13 - https://www.debian.org/security/2017/dsa-3771 - http://www.securitytracker.com/id/1037693 - https://www.mozilla.org/security/advisories/mfsa2017-01/ - http://rhn.redhat.com/errata/RHSA-2017-0190.html - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1322315%2C1328834%2C1322420%2C1285833%2C1285960%2C1328251%2C1331058%2C1325938%2C1325877 - http://r
rg/buglist.cgi?bug_id=1322315%2C1328834%2C1322420%2C1285833%2C1285960%2C1328251%2C1331058%2C1325938%2C1325877 - http://rhn.redhat.com/errata/RHSA-2017-0238.html
CVE ID: CVE-2017-5374 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T14:55:35.811Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 51 Description: Memory safety bugs were reported in Firefox 50.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 51. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95759 - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1325344%2C1317501%2C1311319%2C1329989%2C1300145%2C1322305%2C1288561%2C1295747%2C1318766%
.mozilla.org/buglist.cgi?bug_id=1325344%2C1317501%2C1311319%2C1329989%2C1300145%2C1322305%2C1288561%2C1295747%2C1318766%2C1297808%2C1321374%2C1324810%2C1313385%2C1319888%2C1302231%2C1307458%2C1293327%2C1315447%2C1319456 - http://www.securitytracker.com/id/1037693 - https://www.mozilla.org/security/advisories/mfsa2017-01/
CVE ID: CVE-2017-5375 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T14:55:35.692Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Excessive JIT code allocation allows bypass of ASLR and DEP Description: JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2017-03/ - https://www.mozilla.org/security/advisories/mfsa2017-02/ - https://security.gentoo.org/glsa/201702-22 - https://ww