Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-12792 State: PUBLISHED Published: 2017-10-02T14:00:00 Last Updated: 2024-08-05T18:51:06.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in NexusPHP 1.5 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) linkname, (2) url, or (3) title parameter in an add action to linksmanage.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/UUUUnotfound/cve-2017-12792
CVE ID: CVE-2017-12794 State: PUBLISHED Published: 2017-09-07T13:00:00 Last Updated: 2024-08-05T18:51:07.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Django 1.10.x before 1.10.8 and 1.11.x before 1.11.5, HTML autoescaping was disabled in a portion of the template for the technical 500 debug page. Given the right circumstances, this allowed a cross-site scripting attack. This vulnerability shouldn't affect most production sites since you shouldn't run with "DEBUG = True" (which makes this page accessible) in your production settings. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3559-1/ - http://www.securityfocus.com/bid/100643 -
Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3559-1/ - http://www.securityfocus.com/bid/100643 - http://www.securitytracker.com/id/1039264 - https://www.djangoproject.com/weblog/2017/sep/05/security-releases/
CVE ID: CVE-2017-12795 State: PUBLISHED Published: 2019-05-10T14:31:40 Last Updated: 2024-08-05T18:51:07.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenMRS openmrs-module-htmlformentry 3.3.2 is affected by: (Improper Input Validation). Additional Analyst Notes: - CVE Program Container: References: - http://openmrs.com - http://openmrs-module-htmlformentry.com - https://github.com/openmrs/openmrs-module-htmlformentry/commit/86f35221c8a57cdd7557ce731a56b90db216c8e0 - https://github.com/openmrs/openmrs-module-htmlformentry/compare/f50bdf1...cc0be04
CVE ID: CVE-2017-12796 State: PUBLISHED Published: 2017-10-23T04:00:00 Last Updated: 2024-08-05T18:51:06.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Reporting Compatibility Add On before 2.0.4 for OpenMRS, as distributed in OpenMRS Reference Application before 2.6.1, does not authenticate users when deserializing XML input into ReportSchema objects. The result is that remote unauthenticated users are able to execute operating system commands by crafting malicious XML payloads, as demonstrated by a single admin/reports/reportSchemaXml.form request. Additional Analyst Notes: - CVE Program Container: References: - https://talk.openmrs.org/t/critical-security-advisory-201
ditional Analyst Notes: - CVE Program Container: References: - https://talk.openmrs.org/t/critical-security-advisory-2017-09-12/13291 - https://wiki.openmrs.org/display/RES/Release+Notes+2.6.1 - https://isears.github.io/jekyll/update/2017/10/21/openmrs-rce.html
CVE ID: CVE-2017-12797 State: PUBLISHED Published: 2017-08-29T15:00:00 Last Updated: 2024-08-05T18:51:06.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the INT123_parse_new_id3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers to cause a denial of service via a crafted file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mpg123/mailman/message/35987663/ - https://sourceforge.net/p/mpg123/bugs/254/
CVE ID: CVE-2017-12798 State: PUBLISHED Published: 2017-08-10T18:00:00Z Last Updated: 2024-09-16T23:30:29.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php. Additional Analyst Notes: - CVE Program Container: References: - http://lu4n.com/cve/6.txt
CVE ID: CVE-2017-12799 State: PUBLISHED Published: 2017-08-10T18:00:00 Last Updated: 2024-08-05T18:51:06.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: The elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21933 - https://security.gentoo.org/glsa/201801-01 - http://www.securityfocus.com/bid/100292
CVE ID: CVE-2017-12800 State: PUBLISHED Published: 2017-11-09T19:00:00 Last Updated: 2024-08-05T18:51:06.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EBML_FindNextElement function in ebmlmain.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer dereference and application crash) via a crafted mkv file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html - http://seclists.org/fulldisclosure/2017/Nov/19 - https://github.com/Matroska-Org/foundation-source/issues/24
CVE ID: CVE-2017-12801 State: PUBLISHED Published: 2017-11-09T19:00:00 Last Updated: 2024-08-05T18:51:06.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UpdateDataSize function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html - http://seclists.org/fulldisclosure/2017/Nov/19 - https://github.com/Matroska-Org/foundation-source/issues/24
CVE ID: CVE-2017-12802 State: PUBLISHED Published: 2017-11-09T19:00:00 Last Updated: 2024-08-05T18:51:07.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EBML_IntegerValue function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html - http://seclists.org/fulldisclosure/2017/Nov/19 - https://github.com/Matroska-Org/foundation-source/issues/24
CVE ID: CVE-2017-12803 State: PUBLISHED Published: 2017-11-09T19:00:00 Last Updated: 2024-08-05T18:51:07.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Node_ValidatePtr function in corec/corec/node/node.c in mkclean 0.8.9 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html - http://seclists.org/fulldisclosure/2017/Nov/19 - https://github.com/Matroska-Org/foundation-source/issues/24
CVE ID: CVE-2017-12804 State: PUBLISHED Published: 2019-05-09T15:32:59 Last Updated: 2024-08-05T18:51:06.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iwgif_init_screen function in imagew-gif.c:510 in ImageWorsener 1.3.2 allows remote attackers to cause a denial of service (hmemory exhaustion) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jsummers/imageworsener/issues/30
CVE ID: CVE-2017-12805 State: PUBLISHED Published: 2019-05-09T15:29:45 Last Updated: 2024-08-05T18:51:06.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function ReadTIFFImage, which allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/664 - https://usn.ubuntu.com/4034-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/mes
A2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html
CVE ID: CVE-2017-12806 State: PUBLISHED Published: 2019-05-09T15:11:54 Last Updated: 2024-08-05T18:51:06.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/660 - https://usn.ubuntu.com/4034-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/messag
DUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-12807 State: REJECTED Published: 2017-08-14T13:00:00 Last Updated: 2017-08-14T12:57:01 Description: No description available.
CVE ID: CVE-2017-12809 State: PUBLISHED Published: 2017-08-23T16:00:00 Last Updated: 2024-08-05T18:51:07.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU (aka Quick Emulator), when built with the IDE disk and CD/DVD-ROM Emulator support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by flushing an empty CDROM device drive. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3991 - https://lists.gnu.org/archive/html/qemu-devel/2017-08/msg01850.html - http://www.securityfocus.com/bid/100451 - http://www.openwall.com/lists/oss-security/2017/08/21/2
CVE ID: CVE-2017-12810 State: PUBLISHED Published: 2017-12-30T07:00:00 Last Updated: 2024-08-05T18:51:06.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/raw/QYxSkH1g
CVE ID: CVE-2017-12811 State: PUBLISHED Published: 2017-12-30T07:00:00 Last Updated: 2024-08-05T18:51:06.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/raw/G1gyUSSa
CVE ID: CVE-2017-12812 State: PUBLISHED Published: 2017-12-30T07:00:00 Last Updated: 2024-08-05T18:51:06.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/raw/ysWZsJHH
CVE ID: CVE-2017-12813 State: PUBLISHED Published: 2017-12-30T07:00:00 Last Updated: 2024-08-05T18:51:06.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers File Sharing Script 1.0 has stored XSS in the comments section. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/raw/LTZFaL5x
CVE ID: CVE-2017-12814 State: PUBLISHED Published: 2017-09-27T17:00:00 Last Updated: 2024-08-05T18:51:06.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windows allows attackers to execute arbitrary code via a long environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101051 - https://www.oracle.com/security-alerts/cpujul2020.html - https://rt.perl.org/Public/Bug/Display.html?id=131665 - https://perl5.git.perl.org/perl.git/log/refs/tags/v5.26.1-RC1 - https://perl5.git.perl.org/p
ug/Display.html?id=131665 - https://perl5.git.perl.org/perl.git/log/refs/tags/v5.26.1-RC1 - https://perl5.git.perl.org/perl.git/log/refs/tags/v5.24.3-RC1 - https://security.netapp.com/advisory/ntap-20180426-0001/
CVE ID: CVE-2017-12815 State: PUBLISHED Published: 2018-03-26T21:00:00 Last Updated: 2024-08-05T18:51:06.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Analysis of the Bomgar Remote Support Portal JavaStart.jar Applet 52790 and earlier revealed that it is vulnerable to a path traversal vulnerability. The archive can be downloaded from a given Bomgar Remote Support Portal deployment at https://domain/api/content/JavaStart.jar and is callable from an arbitrary website using <object> and/or <appletHTML> tags. Successful exploitation results in file creation/modification/deletion in the operating system and with privileges of the user that ran the Java applet. Additional Analyst
dification/deletion in the operating system and with privileges of the user that ran the Java applet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/541885/100/0/threaded
CVE ID: CVE-2017-12816 State: PUBLISHED Published: 2017-08-25T20:00:00 Last Updated: 2024-08-05T18:51:06.794Z Vendors: Kaspersky Lab Products: Kaspersky Lab Kaspersky Internet Security for Android 11.12.4.1622 Problem Types: Incorrect Access Control Description: In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware application to get unauthorized access to the product functionality by using Android IPC. Additional Analyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/vulnerability.aspx?el=12430#090817 - http://www.securityfocus.com/bid/100505
CVE ID: CVE-2017-12817 State: PUBLISHED Published: 2017-08-25T20:00:00 Last Updated: 2024-08-05T18:51:06.654Z Vendors: Kaspersky Lab Products: Kaspersky Lab Kaspersky Internet Security for Android 11.12.4.1622 Problem Types: Incorrect encryption Description: In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted. Additional Analyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/vulnerability.aspx?el=12430#090817 - http://www.securityfocus.com/bid/100504
CVE ID: CVE-2017-12818 State: PUBLISHED Published: 2017-10-03T13:00:00Z Last Updated: 2024-09-16T20:47:00.271Z Vendors: Gemalto Products: Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE Problem Types: Stack overflow in custom XML-parser leads to remote denial of service Description: Stack overflow in custom XML-parser in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01 - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-00
cert.gov/advisories/ICSA-18-093-01 - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-004-sentinel-ldk-rte-stack-overflow-in-custom-xml-parser-leads-to-remote-denial-of-service/ - https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf - http://www.securityfocus.com/bid/102906
CVE ID: CVE-2017-12819 State: PUBLISHED Published: 2017-10-03T13:00:00Z Last Updated: 2024-09-17T03:07:04.983Z Vendors: Gemalto Products: Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE Problem Types: Remote manipulations with language pack updater lead to NTLM-relay attack for system user Description: Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01 - https://cert-portal.siemens.com/productcert
iner: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-005-sentinel-ldk-rte-remote-manipulations-with-language-pack-updater-lead-to-ntlm-relay-attack-for-system-user/
CVE ID: CVE-2017-12820 State: PUBLISHED Published: 2017-10-03T13:00:00Z Last Updated: 2024-09-17T04:15:10.407Z Vendors: Gemalto Products: Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE Problem Types: Arbitrary memory read from controlled memory pointer leads to remote denial of service Description: Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-006-sentinel-ldk-rte-arbi
References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-006-sentinel-ldk-rte-arbitrary-memory-read-from-controlled-memory-pointer-leads-to-remote-denial-of-service/ - https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf - http://www.securityfocus.com/bid/102906
CVE ID: CVE-2017-12821 State: PUBLISHED Published: 2017-10-03T13:00:00Z Last Updated: 2024-09-17T04:10:00.999Z Vendors: Gemalto Products: Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE Problem Types: Memory corruption might cause remote code execution Description: Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 might cause remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf - http://www.securityfocus.com/bid/102906 - https://ics-
https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf - http://www.securityfocus.com/bid/102906 - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-007-sentinel-ldk-rte-memory-corruption-might-cause-remote-code-execution/
CVE ID: CVE-2017-12822 State: PUBLISHED Published: 2017-10-03T13:00:00Z Last Updated: 2024-09-17T00:51:29.212Z Vendors: Gemalto Products: Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE Problem Types: Remote enabling and disabling admin interface leads to new attack vectors Description: Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to new attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-008-sentinel-ldk-rte-remote-enabling-and-disabling-
cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-008-sentinel-ldk-rte-remote-enabling-and-disabling-admin-interface/ - https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf - http://www.securityfocus.com/bid/102906
CVE ID: CVE-2017-12823 State: PUBLISHED Published: 2017-12-08T16:00:00Z Last Updated: 2024-09-17T02:31:49.844Z Vendors: Kaspersky Labs Products: Kaspersky Embedded Systems Security Problem Types: One of the product drivers is vulnerable to a kernel pool memory corruption Description: Kernel pool memory corruption in one of drivers in Kaspersky Embedded Systems Security version 1.2.0.300 leads to local privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102141 - https://support.kaspersky.com/vulnerability.aspx?el=12430#091017
CVE ID: CVE-2017-12824 State: PUBLISHED Published: 2017-11-08T14:00:00Z Last Updated: 2024-09-16T16:39:14.631Z Vendors: InPage Products: InPage reader Problem Types: Special crafted InPage document leads to arbitrary code execution Description: Special crafted InPage document leads to arbitrary code execution in InPage reader. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94548 - https://securelist.com/inpage-zero-day-exploit-used-to-attack-financial-institutions-in-asia/76717/
CVE ID: CVE-2017-12826 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-12827 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-12828 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-12829 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-12830 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-12831 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-12832 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-12833 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-12834 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-12835 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-12836 State: PUBLISHED Published: 2017-08-24T14:00:00 Last Updated: 2024-08-05T18:51:06.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100279 - http://www.openwall.com/lists/oss-security/2017/08/11/4 - http://www.debian.org/security/2017/dsa-3940 - http://www.openwall.com/lists/oss-security/2017/08/11/1 - http://lists.nongnu.org/archive/html/bug-
rity/2017/dsa-3940 - http://www.openwall.com/lists/oss-security/2017/08/11/1 - http://lists.nongnu.org/archive/html/bug-cvs/2017-08/msg00000.html - https://bugzilla.redhat.com/show_bug.cgi?id=1480800 - https://security.gentoo.org/glsa/201709-17 - http://www.ubuntu.com/usn/USN-3399-1
CVE ID: CVE-2017-12837 State: PUBLISHED Published: 2017-09-19T18:00:00 Last Updated: 2024-08-05T18:51:06.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\N{}' escape and the case-insensitive modifier. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3982 - http://www.securityfocus.com/bid/100860 - https://www.oracle.com/security-alerts/cpujul2020.html - https://perl5.git.perl.org/perl.git/log/r