Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-5794 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T01:36:23.953Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (IMC) PLAT Problem Types: Remote Arbitrary File Download Description: A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center (IMC) PLAT version 7.2 E0403P06 was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03715en_us
CVE ID: CVE-2017-5795 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T22:26:18.801Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (IMC) PLAT Problem Types: Local Arbitrary File Download Description: A Local Arbitrary File Download vulnerability in HPE Intelligent Management Center (IMC) version PLAT 7.2 E0403P06 was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03714en_us - http://www.securityfocus.com/bid/96773
CVE ID: CVE-2017-5796 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T19:30:36.304Z Vendors: Hewlett Packard Enterprise Products: 2620 Series Network Switches Problem Types: Remote Cross Site Request Forgery (CSRF) Description: A Remote Cross Site Request Forgery (CSRF) vulnerability in HPE 2620 Series Network Switches version RA.15.05.0006 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96813 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03711en_us
CVE ID: CVE-2017-5797 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T22:15:07.962Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (IMC) Problem Types: Remote Unauthenticated Disclosure of Information Description: A Remote Unauthenticated Disclosure of Information vulnerability in HPE Intelligent Management Center (IMC) SOM version v7.3 (E0501) was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97214 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03719en_us
CVE ID: CVE-2017-5798 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T22:20:13.404Z Vendors: Hewlett Packard Enterprise Products: OpenCall Media Platform (OCMP) Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x). Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41927/ - http://www.securityfocus.com/bid/98013 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us
CVE ID: CVE-2017-5799 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T20:03:01.696Z Vendors: Hewlett Packard Enterprise Products: OpenCall Media Platform (OCMP) Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x). Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41927/ - http://www.securityfocus.com/bid/98013 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03686en_us
CVE ID: CVE-2017-5800 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T00:11:04.512Z Vendors: Hewlett Packard Enterprise Products: Operations Bridge Analytics Problem Types: Remote Cross-Site Scripting (XSS) Description: A Remote Cross-Site Scripting (XSS) vulnerability in HPE Operations Bridge Analytics version v3.0 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97412 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03721en_us
CVE ID: CVE-2017-5801 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T20:52:43.903Z Vendors: Hewlett Packard Enterprise Products: Business Process Monitor Problem Types: Remote Unauthorized Access to Data Description: A Remote Unauthorized Access to Data vulnerability in HPE Business Process Monitor version v09.2x, v09.30 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97386 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03727en_us - http://www.securitytracker.com/id/1038176
CVE ID: CVE-2017-5802 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T18:08:08.732Z Vendors: Hewlett Packard Enterprise Products: Vertica Analytics Platform Problem Types: Remote Gain Privileged Access Description: A Remote Gain Privileged Access vulnerability in HPE Vertica Analytics Platform version v4.1 and later was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97706 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03734en_us
CVE ID: CVE-2017-5803 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T01:50:56.193Z Vendors: Hewlett Packard Enterprise Products: NonStop Servers using SSH Service Problem Types: Remote Disclosure of Information Description: A Remote Disclosure of Information vulnerability in HPE NonStop Servers using SSH Service version L series: T0801L02 through T0801L02^ABX; J and H series: T0801H01 through T0801H01^ACA was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbns03735en_us - http://www.securityfocus.com/bid/98052 - http://www.securitytracker.com/id/1038370 - https://support.hpe.co
03735en_us - http://www.securityfocus.com/bid/98052 - http://www.securitytracker.com/id/1038370 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03735en_us
CVE ID: CVE-2017-5804 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T16:13:17.150Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038377 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03738en_us - http://www.securityfocus.com/bid/98088
CVE ID: CVE-2017-5805 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T03:44:19.868Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038377 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03738en_us - http://www.securityfocus.com/bid/98088
CVE ID: CVE-2017-5806 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T16:32:44.624Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038377 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03738en_us - http://www.securityfocus.com/bid/98088
CVE ID: CVE-2017-5807 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T00:06:21.031Z Vendors: Hewlett Packard Enterprise Products: Data Protector Problem Types: Remote Arbitrary Code Execution Description: A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03732en_us - https://www.tenable.com/security/research/tra-2017-26 - http://www.securityfocus.com/bid/100088
CVE ID: CVE-2017-5808 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T20:26:50.192Z Vendors: Hewlett Packard Enterprise Products: Data Protector Problem Types: Remote Arbitrary Code Execution Description: A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03732en_us - https://www.tenable.com/security/research/tra-2017-26 - http://www.securityfocus.com/bid/100088
CVE ID: CVE-2017-5809 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T17:17:52.004Z Vendors: Hewlett Packard Enterprise Products: Data Protector Problem Types: Remote Arbitrary Code Execution Description: A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found. Additional Analyst Notes: - CVE Program Container: References: - https://labs.mwrinfosecurity.com/assets/BlogFiles/mwri-setuid-bit-set-omniresolve-2017-08-02.pdf - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03732en_us - http://www.securityfocus.com/bid/100088
CVE ID: CVE-2017-5810 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T02:00:35.189Z Vendors: Hewlett Packard Enterprise Products: Network Automation Problem Types: remote sql injection Description: A remote sql injection vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03740en_us - http://www.securityfocus.com/bid/98331 - http://www.securitytracker.com/id/1038407
CVE ID: CVE-2017-5811 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T00:21:33.833Z Vendors: Hewlett Packard Enterprise Products: Network Automation Problem Types: remote code execution Description: A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03740en_us - http://www.securityfocus.com/bid/98331 - http://www.securitytracker.com/id/1038407
CVE ID: CVE-2017-5812 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T01:11:05.260Z Vendors: Hewlett Packard Enterprise Products: Network Automation Problem Types: remote information disclosure Description: A remote sql information disclosure vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03740en_us - http://www.securityfocus.com/bid/98331 - http://www.securitytracker.com/id/1038407
CVE ID: CVE-2017-5813 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T19:35:23.768Z Vendors: Hewlett Packard Enterprise Products: Network Automation Problem Types: remote unauthenticated access Description: A remote unauthenticated access vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03740en_us - http://www.securityfocus.com/bid/98331 - http://www.securitytracker.com/id/1038407
CVE ID: CVE-2017-5814 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T00:05:45.601Z Vendors: Hewlett Packard Enterprise Products: Network Automation Problem Types: remote authentication bypass Description: A remote sql injection authentication bypass in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03740en_us - http://www.securityfocus.com/bid/98331 - http://www.securitytracker.com/id/1038407
CVE ID: CVE-2017-5815 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T18:29:58.450Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038472 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03743en_us
CVE ID: CVE-2017-5816 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T20:42:51.091Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038478 - https://www.exploit-db.com/exploits/43198/ - http://www.securityfocus.com/bid/100470 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03745en_us - https://www.exploit-db.com/exploits/43493/
CVE ID: CVE-2017-5817 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T16:43:03.439Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43492/ - http://www.securitytracker.com/id/1038478 - https://www.exploit-db.com/exploits/43195/ - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03745en_us
CVE ID: CVE-2017-5818 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T17:34:13.672Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038478 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03745en_us
CVE ID: CVE-2017-5819 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T01:16:52.176Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038478 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03745en_us
CVE ID: CVE-2017-5820 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T17:28:36.074Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038560 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03746en_us
CVE ID: CVE-2017-5821 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T16:54:06.116Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038560 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03746en_us
CVE ID: CVE-2017-5822 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T04:29:19.129Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038560 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03746en_us
CVE ID: CVE-2017-5823 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T23:31:14.747Z Vendors: Hewlett Packard Enterprise Products: Intelligent Management Center (iMC) PLAT Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038560 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03746en_us
CVE ID: CVE-2017-5824 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T02:36:57.469Z Vendors: Hewlett Packard Enterprise Products: Aruba ClearPass Policy Manager Problem Types: unathenticated remote code execution Description: An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03730en_us - http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt - http://www.securityfocus.com/bid/98722
CVE ID: CVE-2017-5825 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T17:04:02.234Z Vendors: Hewlett Packard Enterprise Products: Aruba ClearPass Policy Manager Problem Types: privilage escalation Description: A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03730en_us - http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt - http://www.securityfocus.com/bid/98722
CVE ID: CVE-2017-5826 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T23:50:47.692Z Vendors: Hewlett Packard Enterprise Products: Aruba ClearPass Policy Manager Problem Types: authenticated remote code execution Description: An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03730en_us - http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt - http://www.securityfocus.com/bid/98722
CVE ID: CVE-2017-5827 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T18:08:55.544Z Vendors: Hewlett Packard Enterprise Products: Aruba ClearPass Policy Manager Problem Types: reflected cross site scripting Description: A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03730en_us - http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt - http://www.securityfocus.com/bid/98722
CVE ID: CVE-2017-5828 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T19:14:39.994Z Vendors: Hewlett Packard Enterprise Products: Aruba ClearPass Policy Manager Problem Types: arbitrary command execution Description: An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03730en_us - http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt - http://www.securityfocus.com/bid/98722
CVE ID: CVE-2017-5829 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T01:46:38.917Z Vendors: Hewlett Packard Enterprise Products: Aruba ClearPass Policy Manager Problem Types: access restriction bypass Description: An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03730en_us - http://www.arubanetworks.com/assets/alert/HPESBHF03730.txt - http://www.securityfocus.com/bid/98722
CVE ID: CVE-2017-5830 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-05T15:11:48.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Revive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized data in the cookies related to the delivery scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/02/3 - https://www.revive-adserver.com/security/revive-sa-2017-001/ - http://www.securityfocus.com/bid/95875
CVE ID: CVE-2017-5831 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-05T15:11:48.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in the forgot password mechanism in Revive Adserver before 4.0.1, when setting a new password, allows remote attackers to hijack web sessions via the session ID. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/02/3 - https://www.revive-adserver.com/security/revive-sa-2017-001/ - http://www.securityfocus.com/bid/95875
CVE ID: CVE-2017-5832 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-05T15:11:48.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Revive Adserver before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the user's email address. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/02/3 - https://www.revive-adserver.com/security/revive-sa-2017-001/ - http://www.securityfocus.com/bid/95875
CVE ID: CVE-2017-5833 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-05T15:11:48.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the invocation code generation for interstitial zones in Revive Adserver before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/02/3 - https://www.revive-adserver.com/security/revive-sa-2017-001/ - http://www.securityfocus.com/bid/95875
CVE ID: CVE-2017-5834 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-05T15:11:48.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96022 - https://github.com/libimobiledevice/libplist/issues/89 - http://www.openwall.com/lists/oss-security/2017/01/31/6 - http://www.openwall.com/lists/oss-security/2017/02/02/4 - https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html