Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-12932 State: PUBLISHED Published: 2017-08-18T03:00:00 Last Updated: 2024-08-05T18:51:07.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100427 - https://access.redhat.com/errata/RHSA-2018:1296 - https://github.com/php/php-src/commi
ww.securityfocus.com/bid/100427 - https://access.redhat.com/errata/RHSA-2018:1296 - https://github.com/php/php-src/commit/1a23ebc1fff59bf480ca92963b36eba5c1b904c4 - https://security.netapp.com/advisory/ntap-20180112-0001/ - https://bugs.php.net/bug.php?id=74103 - https://www.debian.org/security/2018/dsa-4080 - http://php.net/ChangeLog-7.php - https://security.gentoo.org/glsa/201709-21 - https://access.redhat.com/errata/RHSA-2019:2519
CVE ID: CVE-2017-12933 State: PUBLISHED Published: 2017-08-18T03:00:00 Last Updated: 2024-08-05T18:51:07.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: The finish_nested_data function in ext/standard/var_unserializer.re in PHP before 5.6.31, 7.0.x before 7.0.21, and 7.1.x before 7.1.7 is prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue can have an unspecified impact on the integrity of PHP. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1296 - http://php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=74111 - https://www.debian.org/security/2018/dsa-4081 - https://www
et/ChangeLog-5.php - https://bugs.php.net/bug.php?id=74111 - https://www.debian.org/security/2018/dsa-4081 - https://www.debian.org/security/2018/dsa-4080 - https://usn.ubuntu.com/3566-1/ - http://php.net/ChangeLog-7.php - http://www.securityfocus.com/bid/99490 - https://usn.ubuntu.com/3566-2/
CVE ID: CVE-2017-12934 State: PUBLISHED Published: 2017-08-18T03:00:00 Last Updated: 2024-08-05T18:51:07.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/standard/var_unserializer.re in PHP 7.0.x before 7.0.21 and 7.1.x before 7.1.7 is prone to a heap use after free while unserializing untrusted data, related to the zval_get_type function in Zend/zend_types.h. Exploitation of this issue can have an unspecified impact on the integrity of PHP. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=74101 - http://www.securityfocus.com/bid/100428 - https://access.redhat.com/errata/RHSA-2018:1296 - https://www.debian.org/security/2018/d
.securityfocus.com/bid/100428 - https://access.redhat.com/errata/RHSA-2018:1296 - https://www.debian.org/security/2018/dsa-4080 - http://php.net/ChangeLog-7.php
CVE ID: CVE-2017-12935 State: PUBLISHED Published: 2017-08-18T12:00:00 Last Updated: 2024-08-05T18:51:07.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 mishandles large MNG images, leading to an invalid memory read in the SetImageColorCallBack function in magick/image.c. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/08/05/graphicsmagick-invalid-memory-read-in-setimagecolorcallback-image-c/ - http://hg.code.sf.net/p/graphicsmagick/code/rev/cd699a44f188 - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/08/msg0
cd699a44f188 - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - https://usn.ubuntu.com/4222-1/
CVE ID: CVE-2017-12936 State: PUBLISHED Published: 2017-08-18T12:00:00 Last Updated: 2024-08-05T18:51:07.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - http://hg.code.sf.net/p/graphicsmagick/code/rev/be898b7c97bd - https://blogs.gentoo.org/ago/2017/08/05/graphicsmagick-use-after-free-in-readwmfimage-wmf-c/ - https://lists.fedoraproject.org/archives/list/packa
go/2017/08/05/graphicsmagick-use-after-free-in-readwmfimage-wmf-c/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - https://usn.ubuntu.com/4222-1/
CVE ID: CVE-2017-12937 State: PUBLISHED Published: 2017-08-18T12:00:00 Last Updated: 2024-08-05T18:51:07.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has a colormap heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://hg.code.sf.net/p/graphicsmagick/code/rev/95d00d55e978 - http://www.securityfocus.com/bid/100442 - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - https://blogs.gentoo.org/ago/2017/08/05/graphicsmagick-heap-based-buffer-overflow-in-readsunimage-sun-c/ - https://lists.fedoraprojec
.gentoo.org/ago/2017/08/05/graphicsmagick-heap-based-buffer-overflow-in-readsunimage-sun-c/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - https://usn.ubuntu.com/4222-1/
CVE ID: CVE-2017-12938 State: PUBLISHED Published: 2017-08-18T13:00:00Z Last Updated: 2024-09-16T17:33:46.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2017/q3/290
CVE ID: CVE-2017-12939 State: PUBLISHED Published: 2017-08-18T13:00:00 Last Updated: 2024-08-05T18:51:07.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor, e.g., before 5.3.8p2, 5.4.x before 5.4.5p5, 5.5.x before 5.5.4p3, 5.6.x before 5.6.3p1, and 2017.x before 2017.1.0p4. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100444 - https://unity3d.com/security#issues - https://twitter.com/0x09AL/status/898635999185711108
CVE ID: CVE-2017-12940 State: PUBLISHED Published: 2017-08-18T14:00:00 Last Updated: 2024-08-05T18:51:07.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2017/q3/290 - https://kc.mcafee.com/corporate/index?page=content&id=SB10241 - https://security.gentoo.org/glsa/201709-24
CVE ID: CVE-2017-12941 State: PUBLISHED Published: 2017-08-18T14:00:00 Last Updated: 2024-08-05T18:51:07.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2017/q3/290 - https://kc.mcafee.com/corporate/index?page=content&id=SB10241 - https://security.gentoo.org/glsa/201709-24
CVE ID: CVE-2017-12942 State: PUBLISHED Published: 2017-08-18T14:00:00 Last Updated: 2024-08-05T18:51:07.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2017/q3/290 - https://kc.mcafee.com/corporate/index?page=content&id=SB10241 - https://security.gentoo.org/glsa/201709-24
CVE ID: CVE-2017-12943 State: PUBLISHED Published: 2017-08-18T15:00:00 Last Updated: 2024-08-05T18:51:07.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?REQUIRE_FILE= absolute path traversal attack, as demonstrated by discovering the admin password. Additional Analyst Notes: - CVE Program Container: References: - https://jithindkurup.tumblr.com/post/165218785974/d-link-dir-600-authentication-bypass-absolute - https://www.youtube.com/watch?v=PeNOJORAQsQ - https://www.exploit-db.com/exploits/42581/
CVE ID: CVE-2017-12944 State: PUBLISHED Published: 2017-08-18T15:00:00 Last Updated: 2024-08-05T18:51:07.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which allows remote attackers to cause a denial of service (allocation failure and application crash) in the TIFFFetchStripThing function in tif_dirread.c during a tiff2pdf invocation. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3606-1/ - http://bugzilla.maptools.org/show_bug.cgi?id=2725 - https://usn.ubuntu.com/3602-1/ - https://www.debian.org/security/2018/dsa-4100
CVE ID: CVE-2017-12945 State: PUBLISHED Published: 2019-11-27T15:54:59 Last Updated: 2024-08-05T18:51:07.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient validation of user-supplied input for the Solstice Pod before 2.8.4 networking configuration enables authenticated attackers to execute arbitrary commands as root. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aress31/cve-2017-12945 - http://packetstormsecurity.com/files/155494/Mersive-Solstice-2.8.0-Remote-Code-Execution.html - https://www.exploit-db.com/exploits/47722 - https://documentation.mersive.com/content/pages/release-notes.htm
CVE ID: CVE-2017-12946 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T20:06:48.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in a delete action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/easy-modal/#developers - http://www.defensecode.com/advisories/DC-2017-01-007_WordPress_Easy_Modal_Plugin_Advisory.pdf
CVE ID: CVE-2017-12947 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T23:35:39.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in an untrash action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/easy-modal/#developers - http://www.defensecode.com/advisories/DC-2017-01-007_WordPress_Easy_Modal_Plugin_Advisory.pdf
CVE ID: CVE-2017-12948 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T23:56:13.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Core\Admin\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has XSS in the PATH_INFO to wp-admin/admin.php, related to PHP_SELF. Additional Analyst Notes: - CVE Program Container: References: - http://www.defensecode.com/advisories/DC-2017-05-007_WordPress_PressForward_Plugin_Advisory.pdf
CVE ID: CVE-2017-12949 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-17T01:26:44.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib\modules\contributors\contributor_list_table.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPress has SQL injection in the orderby parameter to wp-admin/admin.php, exploitable through CSRF. Additional Analyst Notes: - CVE Program Container: References: - http://www.defensecode.com/advisories/DC-2017-05-006_WordPress_Podlove_Podcast_Publisher_Plugin_Advisory.pdf
CVE ID: CVE-2017-12950 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-05T18:51:07.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Aug/39 - https://www.exploit-db.com/exploits/42546/
CVE ID: CVE-2017-12951 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-05T18:51:07.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted gig file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Aug/39 - https://www.exploit-db.com/exploits/42546/
CVE ID: CVE-2017-12952 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-05T18:51:07.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Aug/39 - https://www.exploit-db.com/exploits/42546/
CVE ID: CVE-2017-12953 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-05T18:51:07.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gig::Instrument::UpdateRegionKeyTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory write and application crash) via a crafted gig file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Aug/39 - https://www.exploit-db.com/exploits/42546/
CVE ID: CVE-2017-12954 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-05T18:51:07.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted gig file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Aug/39 - https://www.exploit-db.com/exploits/42546/
CVE ID: CVE-2017-12955 State: PUBLISHED Published: 2017-08-18T21:00:00Z Last Updated: 2024-09-16T22:52:00.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1482295
CVE ID: CVE-2017-12956 State: PUBLISHED Published: 2017-08-18T21:00:00Z Last Updated: 2024-09-16T23:01:39.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1482296
CVE ID: CVE-2017-12957 State: PUBLISHED Published: 2017-08-18T21:00:00Z Last Updated: 2024-09-16T18:39:44.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1482423
CVE ID: CVE-2017-12958 State: PUBLISHED Published: 2017-08-18T21:00:00 Last Updated: 2024-08-05T18:51:07.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/forum/forum.php?forum_id=8936 - https://bugzilla.redhat.com/show_bug.cgi?id=1482429
CVE ID: CVE-2017-12959 State: PUBLISHED Published: 2017-08-18T21:00:00 Last Updated: 2024-08-05T18:51:07.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/forum/forum.php?forum_id=8936 - https://bugzilla.redhat.com/show_bug.cgi?id=1482432
CVE ID: CVE-2017-12960 State: PUBLISHED Published: 2017-08-18T21:00:00 Last Updated: 2024-08-05T18:51:07.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/forum/forum.php?forum_id=8936 - https://bugzilla.redhat.com/show_bug.cgi?id=1482433
CVE ID: CVE-2017-12961 State: PUBLISHED Published: 2017-08-18T21:00:00 Last Updated: 2024-08-05T18:51:07.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an assertion abort in the function parse_attributes() in data/sys-file-reader.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1482436 - https://savannah.gnu.org/forum/forum.php?forum_id=8936
CVE ID: CVE-2017-12962 State: PUBLISHED Published: 2017-08-18T21:00:00Z Last Updated: 2024-09-16T18:19:34.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open parenthesis characters, leading to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1482331
CVE ID: CVE-2017-12963 State: PUBLISHED Published: 2017-08-18T21:00:00Z Last Updated: 2024-09-17T00:41:03.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. NOTE: this is similar to CVE-2017-11555 but remains exploitable after the vendor's CVE-2017-11555 fix (available from GitHub after 2017-07-24). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1482335
CVE ID: CVE-2017-12964 State: PUBLISHED Published: 2017-08-18T21:00:00Z Last Updated: 2024-09-16T18:59:15.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator() in eval.cpp. It will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1482397
CVE ID: CVE-2017-12965 State: PUBLISHED Published: 2017-08-23T16:00:00 Last Updated: 2024-08-05T18:51:07.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42520/ - http://hyp3rlinx.altervista.org/advisories/APACHE2TRIAD-SERVER-STACK-v1.5.4-MULTIPLE-CVE.txt - http://www.securityfocus.com/bid/100447 - http://packetstormsecurity.com/files/143863/Apache2Triad-1.5.4-CSRF-XSS-Session-Fixation.html
CVE ID: CVE-2017-12966 State: PUBLISHED Published: 2017-08-20T16:00:00 Last Updated: 2024-08-05T18:51:07.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: The asn1f_lookup_symbol_impl function in asn1fix_retrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to cause a denial of service (segmentation fault) via a crafted .asn1 file. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=0B9DojFnTUSNGd05zSHI1RmpKQjQ
CVE ID: CVE-2017-12967 State: PUBLISHED Published: 2017-08-19T16:00:00 Last Updated: 2024-08-05T18:51:07.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a malformed tekhex binary. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21962 - http://www.securityfocus.com/bid/100462 - https://security.gentoo.org/glsa/201801-01
CVE ID: CVE-2017-12969 State: PUBLISHED Published: 2017-11-09T19:00:00 Last Updated: 2024-08-05T18:51:07.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to cause a denial of service (heap corruption and crash) or execute arbitrary code via a long string to the open method. Additional Analyst Notes: - CVE Program Container: References: - http://hyp3rlinx.altervista.org/advisories/AVAYA-OFFICE-IP-%28IPO%29-v9.1.0-10.1-VIEWERCTRL-ACTIVE-X-BUFFER-OVERFLOW-0DAY.txt - http://downloads.avaya.com/css/P8/documents/101044091 - http://packetstormsecurit
RL-ACTIVE-X-BUFFER-OVERFLOW-0DAY.txt - http://downloads.avaya.com/css/P8/documents/101044091 - http://packetstormsecurity.com/files/144882/Avaya-IP-Office-IPO-10.1-Active-X-Buffer-Overflow.html - http://www.securityfocus.com/bid/101667 - https://www.exploit-db.com/exploits/43120/ - http://seclists.org/fulldisclosure/2017/Nov/17
CVE ID: CVE-2017-12970 State: PUBLISHED Published: 2017-08-23T16:00:00 Last Updated: 2024-08-05T18:51:07.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authentication of authenticated users for requests that (1) add or (2) delete user accounts via a request to phpsftpd/users.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42520/ - http://hyp3rlinx.altervista.org/advisories/APACHE2TRIAD-SERVER-STACK-v1.5.4-MULTIPLE-CVE.txt - http://www.securityfocus.com/bid/100447 - http://packetstormsecurity.com/files/143863/Apa
TACK-v1.5.4-MULTIPLE-CVE.txt - http://www.securityfocus.com/bid/100447 - http://packetstormsecurity.com/files/143863/Apache2Triad-1.5.4-CSRF-XSS-Session-Fixation.html