Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-18329 State: PUBLISHED Published: 2019-01-03T15:00:00 Last Updated: 2024-08-05T21:20:49.958Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Copy Without Checking Size of Input in Modem Data Description: Possible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon wear in versions MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 810, SD 820, SD 835, SD 845 / SD 850, SDA660, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130 Addit
D 710 / SD 670, SD 810, SD 820, SD 835, SD 845 / SD 850, SDA660, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/106128
CVE ID: CVE-2017-18330 State: PUBLISHED Published: 2019-01-03T15:00:00 Last Updated: 2024-08-05T21:20:50.284Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Copy Without Checking Size of Input in Crypto Description: Buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon automobile, snapdragon mobile and snapdragon wear in versions IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA6
435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/106128
CVE ID: CVE-2017-18331 State: PUBLISHED Published: 2019-01-18T22:00:00 Last Updated: 2024-08-05T21:20:50.303Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Access Control on Access Control Module Description: Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, SDA660 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/106128
CVE ID: CVE-2017-18332 State: PUBLISHED Published: 2019-01-18T22:00:00 Last Updated: 2024-08-05T21:20:49.946Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Information Exposure in WCDMA Description: Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130 Additional Analyst Notes: - CVE Program Container: Refere
820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/106128
CVE ID: CVE-2017-18333 State: REJECTED Published: 2019-08-30T15:17:28 Last Updated: 2019-08-30T15:17:28 Description: No description available.
CVE ID: CVE-2017-18334 State: REJECTED Published: 2019-08-30T15:18:10 Last Updated: 2019-08-30T15:18:10 Description: No description available.
CVE ID: CVE-2017-18335 State: REJECTED Published: 2019-08-30T15:19:10 Last Updated: 2019-08-30T15:19:10 Description: No description available.
CVE ID: CVE-2017-18336 State: REJECTED Published: 2019-08-30T15:20:16 Last Updated: 2019-08-30T15:20:16 Description: No description available.
CVE ID: CVE-2017-18337 State: REJECTED Published: 2019-08-30T15:29:06 Last Updated: 2019-08-30T15:29:06 Description: No description available.
CVE ID: CVE-2017-18338 State: REJECTED Published: 2019-08-30T15:29:43 Last Updated: 2019-08-30T15:29:43 Description: No description available.
CVE ID: CVE-2017-18339 State: REJECTED Published: 2019-08-30T15:30:27 Last Updated: 2019-08-30T15:30:27 Description: No description available.
CVE ID: CVE-2017-18340 State: REJECTED Published: 2019-08-30T15:30:58 Last Updated: 2019-08-30T15:30:58 Description: No description available.
CVE ID: CVE-2017-18341 State: REJECTED Published: 2019-08-30T15:31:25 Last Updated: 2019-08-30T15:31:25 Description: No description available.
CVE ID: CVE-2017-18342 State: PUBLISHED Published: 2018-06-27T12:00:00 Last Updated: 2024-08-05T21:20:50.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yaml/pyyaml/pull/74 - https://github.com/yaml/pyyaml/blob/master/CHANGES - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6JCFGEIEOFMWWIXGHSELMKQDD4CV2B
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6JCFGEIEOFMWWIXGHSELMKQDD4CV2BA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSQQMRUQSXBSUXLCRD3TSZYQ7SEZRKCE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JEX7IPV5P2QJITAMA5Z63GQCZA5I6NVZ/ - https://github.com/marshmallow-code/apispec/issues/278 - https://github.com/yaml/pyyaml/issues/193 - https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load%28input%29-Deprecation - https://security.gentoo.org/glsa/202003-45
CVE ID: CVE-2017-18343 State: PUBLISHED Published: 2018-07-20T00:00:00 Last Updated: 2024-08-05T21:20:50.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: The debug handler in Symfony before v2.7.33, 2.8.x before v2.8.26, 3.x before v3.2.13, and 3.3.x before v3.3.6 has XSS via an array key during exception pretty printing in ExceptionHandler.php, as demonstrated by a /_debugbar/open?op=get URI. NOTE: the vendor's position is that this is not a vulnerability because the debug tools are not intended for production use. NOTE: the Symfony Debug component is used by Laravel Debugbar Additional Analyst Notes: - CVE Program Container: References: - https://github.com/symfony/symfony/p
y Laravel Debugbar Additional Analyst Notes: - CVE Program Container: References: - https://github.com/symfony/symfony/pull/23684 - https://github.com/symfony/debug/pull/7/commits/e48bda29143bd1a83001780b4a78e483822d985c - https://github.com/symfony/symfony/issues/27987 - https://github.com/barryvdh/laravel-debugbar/issues/850
CVE ID: CVE-2017-18344 State: PUBLISHED Published: 2018-07-26T19:00:00 Last Updated: 2024-08-05T21:20:50.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). This allows userspace applications to read arbitrary kernel memory (on a kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE). Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3540 - https
Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3540 - https://access.redhat.com/errata/RHSA-2018:3083 - https://access.redhat.com/errata/RHSA-2018:3591 - https://access.redhat.com/errata/RHSA-2018:3459 - http://www.securitytracker.com/id/1041414 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8 - https://access.redhat.com/errata/RHSA-2018:3590 - https://access.redhat.com/errata/RHSA-2018:2948 - https://github.com/torvalds/linux/commit/cef31d9af908243421258f1df35a4a644604efbe - https://usn.ubuntu.com/3742-2/ - http://www.securityfocus.com/bid/104909 - https://usn.ubuntu.com/3742-1/ - https://access.redhat.com/errata/RH
3742-2/ - http://www.securityfocus.com/bid/104909 - https://usn.ubuntu.com/3742-1/ - https://access.redhat.com/errata/RHSA-2018:3586 - https://www.exploit-db.com/exploits/45175/ - https://access.redhat.com/errata/RHSA-2018:3096
CVE ID: CVE-2017-18345 State: PUBLISHED Published: 2018-08-26T21:00:00 Last Updated: 2024-08-05T21:20:50.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue, resulting in exposing the credentials of the database via an index.php?option=com_joomanager&controller=details&task=download&path=configuration.php request. Additional Analyst Notes: - CVE Program Container: References: - https://vel.joomla.org/vel-blog/2020-joomanager-2-0-0-other - https://www.exploit-db.com/exploits/44252 - https://cxsecurity.com/issue/WLB-2018030054
CVE ID: CVE-2017-18346 State: PUBLISHED Published: 2019-07-03T16:33:38 Last Updated: 2024-08-05T21:20:50.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in /wbg/core/_includes/authorization.inc.php in CMS Web-Gooroo through 2013-01-19 allows remote attackers to execute arbitrary SQL commands via the wbg_login parameter. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.123295 - https://www.exploit-db.com/exploits/42577/
CVE ID: CVE-2017-18347 State: PUBLISHED Published: 2018-09-12T15:00:00Z Last Updated: 2024-09-17T01:36:16.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full initialization of the SWD interface and the setup of flash protection. Additional Analyst Notes: - CVE Program Container: References: - https://community.st.com/s/question/0D50X00009Xke7aSAB/readout-protection-cracked-on-stm32 - https://www.usenix.org/conferen
s://community.st.com/s/question/0D50X00009Xke7aSAB/readout-protection-cracked-on-stm32 - https://www.usenix.org/conference/woot17/workshop-program/presentation/obermaier - https://www.aisec.fraunhofer.de/en/FirmwareProtection.html
CVE ID: CVE-2017-18348 State: PUBLISHED Published: 2018-10-19T08:00:00 Last Updated: 2024-08-05T21:20:50.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Splunk Enterprise 6.6.x, when configured to run as root but drop privileges to a specific non-root account, allows local users to gain privileges by leveraging access to that non-root account to modify $SPLUNK_HOME/etc/splunk-launch.conf and insert Trojan horse programs into $SPLUNK_HOME/bin, because the non-root setup instructions state that chown should be run across all of $SPLUNK_HOME to give non-root access. Additional Analyst Notes: - CVE Program Container: References: - https://www.splunk.com/view/SP-CAAAP3M - http://w
cess. Additional Analyst Notes: - CVE Program Container: References: - https://www.splunk.com/view/SP-CAAAP3M - http://www.securityfocus.com/bid/101664 - https://korelogic.com/Resources/Advisories/KL-001-2017-022.txt
CVE ID: CVE-2017-18349 State: PUBLISHED Published: 2018-10-23T20:00:00Z Last Updated: 2024-09-17T00:02:21.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi:// URI in the dataSourceName field of HTTP POST data to the Pippo /json URI, which is mishandled in AjaxApplication.java. Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/encyclopedia/ips/44059 - https://github.com/alibaba/fastjson/wiki/security_update_20170315 - https://github.
tiguard.com/encyclopedia/ips/44059 - https://github.com/alibaba/fastjson/wiki/security_update_20170315 - https://github.com/pippo-java/pippo/issues/466
CVE ID: CVE-2017-18350 State: PUBLISHED Published: 2020-03-12T20:13:32 Last Updated: 2024-08-05T21:20:50.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name. Additional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures - https://medium.com/%40lukedashjr/cve-2017-18350-disclosure-fe6d695f45d5
CVE ID: CVE-2017-18352 State: PUBLISHED Published: 2018-12-17T06:00:00 Last Updated: 2024-08-05T21:20:50.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Error reporting within Rendertron 1.0.0 allows reflected Cross Site Scripting (XSS) from invalid URLs. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=759111 - https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e - https://github.com/GoogleChrome/rendertron/pull/88
CVE ID: CVE-2017-18353 State: PUBLISHED Published: 2018-12-17T06:00:00 Last Updated: 2024-08-05T21:20:50.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rendertron 1.0.0 includes an _ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users. Visiting this route with a GET request allows any unauthorized remote attacker to disable the core service of the application. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=759111 - https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e - https://github.com/GoogleChrome/rendertron/pull/88
CVE ID: CVE-2017-18354 State: PUBLISHED Published: 2018-12-17T06:00:00 Last Updated: 2024-08-05T21:20:50.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rendertron 1.0.0 allows for alternative protocols such as 'file://' introducing a Local File Inclusion (LFI) bug where arbitrary files can be read by a remote attacker. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=759111 - https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e - https://github.com/GoogleChrome/rendertron/pull/88
CVE ID: CVE-2017-18355 State: PUBLISHED Published: 2018-12-17T06:00:00 Last Updated: 2024-08-05T21:20:50.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Installed packages are exposed by node_modules in Rendertron 1.0.0, allowing remote attackers to read absolute paths on the server by examining the "_where" attribute of package.json files. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=759111 - https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e - https://github.com/GoogleChrome/rendertron/pull/88
CVE ID: CVE-2017-18356 State: PUBLISHED Published: 2019-01-15T16:00:00 Last Updated: 2024-08-05T21:20:50.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Automattic WooCommerce plugin before 3.2.4 for WordPress, an attack is possible after gaining access to the target site with a user account that has at least Shop manager privileges. The attacker then constructs a specifically crafted string that will turn into a PHP object injection involving the includes/shortcodes/class-wc-shortcode-products.php WC_Shortcode_Products::get_products() use of cached queries within shortcodes. Additional Analyst Notes: - CVE Program Container: References: - https://blog.ripstech.com/201
ueries within shortcodes. Additional Analyst Notes: - CVE Program Container: References: - https://blog.ripstech.com/2018/woocommerce-php-object-injection/ - https://woocommerce.wordpress.com/2017/11/16/woocommerce-3-2-4-security-fix-release-notes/
CVE ID: CVE-2017-18357 State: PUBLISHED Published: 2019-01-15T16:00:00 Last Updated: 2024-08-05T21:20:50.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the Shopware_Controllers_Backend_ProductStream controller, with resultant XXE via instantiation of a SimpleXMLElement object. Additional Analyst Notes: - CVE Program Container: References: - https://demo.ripstech.com/projects/shopware_5.3.3 - https://blog.ripstech.com/2017/shopware-php-object-instantiation-to-blind-xxe/ - http://packetstormsecurity.com/files/152995/Shopware-createInstanceFromNamedArguments-PH
t-instantiation-to-blind-xxe/ - http://packetstormsecurity.com/files/152995/Shopware-createInstanceFromNamedArguments-PHP-Object-Instantiation.html
CVE ID: CVE-2017-18358 State: PUBLISHED Published: 2019-01-15T16:00:00 Last Updated: 2024-08-05T21:20:50.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: LimeSurvey before 2.72.4 has Stored XSS by using the Continue Later (aka Resume later) feature to enter an email address, which is mishandled in the admin panel. Additional Analyst Notes: - CVE Program Container: References: - https://blog.ripstech.com/2018/limesurvey-persistent-xss-to-code-execution/ - https://github.com/LimeSurvey/LimeSurvey/commit/700b20e2ae918550bfbf283f433f07622480978b
CVE ID: CVE-2017-18359 State: PUBLISHED Published: 2019-01-25T05:00:00 Last Updated: 2024-08-05T21:20:50.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostGIS 2.x before 2.3.3, as used with PostgreSQL, allows remote attackers to cause a denial of service via crafted ST_AsX3D function input, as demonstrated by an abnormal server termination for "SELECT ST_AsX3D('LINESTRING EMPTY');" because empty geometries are mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://trac.osgeo.org/postgis/changeset/15444 - https://trac.osgeo.org/postgis/changeset/15445 - https://lists.debian.org/debian-lts-announce/2019/01/msg00030.html - https://trac.osgeo.org/p
/postgis/changeset/15445 - https://lists.debian.org/debian-lts-announce/2019/01/msg00030.html - https://trac.osgeo.org/postgis/ticket/3704 - https://lists.debian.org/debian-lts-announce/2021/12/msg00020.html
CVE ID: CVE-2017-18360 State: PUBLISHED Published: 2019-01-31T09:00:00 Last Updated: 2024-08-05T21:20:50.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: In change_port_settings in drivers/usb/serial/io_ti.c in the Linux kernel before 4.11.3, local users could cause a denial of service by division-by-zero in the serial device layer by trying to set very high baud rates. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.3 - https://bugzilla.suse.com/show_bug.cgi?id=1123706 - http://www.securityfocus.com/bid/106802 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6aeb75e6adfaed1
securityfocus.com/bid/106802 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6aeb75e6adfaed16e58780309613a578fe1ee90b - https://github.com/torvalds/linux/commit/6aeb75e6adfaed16e58780309613a578fe1ee90b - https://usn.ubuntu.com/3933-2/ - https://usn.ubuntu.com/3933-1/
CVE ID: CVE-2017-18361 State: PUBLISHED Published: 2019-02-01T09:00:00 Last Updated: 2024-08-05T21:20:50.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Pylons/colander/pull/323 - https://github.com/Pylons/colander/issues/290
CVE ID: CVE-2017-18362 State: PUBLISHED Published: 2019-02-05T05:00:00.000Z Last Updated: 2025-10-21T23:45:43.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all endpoints managed by the VSA server. If the ManagedIT.asmx page is available via the Kaseya VSA web interface, anyone with access to the page is able to run arbitrary SQL queries, both read and write, without authentication. Addition
yone with access to the page is able to run arbitrary SQL queries, both read and write, without authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://archive.today/rdkeQ - https://github.com/kbni/owlky - https://webcache.googleusercontent.com/search?q=cache:ZEo8ZRF_iEIJ:https://helpdesk.kaseya.com/hc/en-gb/articles/360022495572-Connectwise-API-Vulnerability+
CVE ID: CVE-2017-18364 State: PUBLISHED Published: 2019-03-27T16:59:39 Last Updated: 2024-08-05T21:20:51.113Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.netsparker.com/web-applications-advisories/ns-17-030-multiple-reflected-xss-vulnerabilities-in-phpfkl-lite/ - http://packetstormsecurity.com/files/153591/phpFK-lite-version-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2019/Jul/15
CVE ID: CVE-2017-18365 State: PUBLISHED Published: 2019-03-28T05:23:18 Last Updated: 2024-08-05T21:20:50.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code. This occurs because the enterprise session secret is always the same, and can be found in the product's source code. By sending a crafted cookie signed with this secret, one can call Marshal.load with arbitrary data, which is a problem because the Marshal data format allows Ruby objects. Additional Analyst Notes: - CVE Program Container: References: - https://www.ex
Marshal data format allows Ruby objects. Additional Analyst Notes: - CVE Program Container: References: - https://www.exablue.de/blog/2017-03-15-github-enterprise-remote-code-execution.html - https://enterprise.github.com/releases/2.8.7/notes
CVE ID: CVE-2017-18366 State: PUBLISHED Published: 2019-04-12T20:53:04 Last Updated: 2024-08-05T21:20:50.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Subrion CMS 4.1.5 has CSRF in blog/delete/. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/intelliants/subrion/issues/477
CVE ID: CVE-2017-18367 State: PUBLISHED Published: 2019-04-24T20:02:19 Last Updated: 2024-08-05T21:20:50.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them. A process running under a restrictive seccomp filter that specified multiple syscall arguments could bypass intended access restrictions by specifying a single matching argument. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/seccomp/libseccomp-golang/issues/22 - https://github.com/seccomp/libseccomp-golang/commit/06e7a29f36a34b8cf419aeb87b979ee508e58f9e - http://www.openwall.