Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-5130 State: PUBLISHED Published: 2018-02-07T23:00:00 Last Updated: 2024-08-05T14:55:34.823Z Vendors: n/a Products: Google Chrome prior to 62.0.3202.62 Problem Types: Integer overflow Description: An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101482 - https://lists.debian.org/debian-lts-announce/2017/11/msg00034.html - http://bugzilla.gnome.org/show_bug.cgi?id=783026 - https://chromereleases.googleblog.com/2017/1
/2017/11/msg00034.html - http://bugzilla.gnome.org/show_bug.cgi?id=783026 - https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html - https://git.gnome.org/browse/libxml2/commit/?id=897dffbae322b46b83f99a607d527058a72c51ed - https://access.redhat.com/errata/RHSA-2017:2997 - https://crbug.com/722079 - https://security.gentoo.org/glsa/201710-24 - https://security.netapp.com/advisory/ntap-20190719-0001/ - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html
CVE ID: CVE-2017-5131 State: PUBLISHED Published: 2018-02-07T23:00:00 Last Updated: 2024-08-05T14:55:35.126Z Vendors: n/a Products: Google Chrome prior to 62.0.3202.62 Problem Types: Integer Overflow Description: An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101482 - https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html - https://www.debian.org/security/2017/dsa-4020 - https://access.redhat.com/errata/RHSA-2017:2997 - https://cr
ktop.html - https://www.debian.org/security/2017/dsa-4020 - https://access.redhat.com/errata/RHSA-2017:2997 - https://crbug.com/744109 - https://security.gentoo.org/glsa/201710-24
CVE ID: CVE-2017-5132 State: PUBLISHED Published: 2018-02-07T23:00:00 Last Updated: 2024-08-05T14:55:35.657Z Vendors: n/a Products: Google Chrome prior to 62.0.3202.62 Problem Types: Inappropriate implementation Description: Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka incorrect WebAssembly stack manipulation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101482 - https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html - https://www.debian.org/security/2017/dsa-4020 - https://crbug.com/71885
2017/10/stable-channel-update-for-desktop.html - https://www.debian.org/security/2017/dsa-4020 - https://crbug.com/718858 - https://access.redhat.com/errata/RHSA-2017:2997 - https://security.gentoo.org/glsa/201710-24
CVE ID: CVE-2017-5133 State: PUBLISHED Published: 2018-02-07T23:00:00 Last Updated: 2024-08-05T14:55:34.974Z Vendors: n/a Products: Google Chrome prior to 62.0.3202.62 Problem Types: Out of bounds read and write Description: Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak information and potentially execute code via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101482 - https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html - https://crbug.com/762106 - https://www.debian.org/security/2017/dsa-4020
017/10/stable-channel-update-for-desktop.html - https://crbug.com/762106 - https://www.debian.org/security/2017/dsa-4020 - https://access.redhat.com/errata/RHSA-2017:2997 - https://security.gentoo.org/glsa/201710-24
CVE ID: CVE-2017-5135 State: PUBLISHED Published: 2017-04-27T15:00:00 Last Updated: 2024-08-05T14:55:34.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases. The Technicolor (formerly Cisco) DPC3928SL with firmware D3928SL-P15-13-A386-c3420r55105-160127a could be reached by any SNMP community string from the Internet; also, you can write in the MIB because it provides write properties, aka Stringbleed. NOTE: the string-bleed/StringBleed-CVE-2017-5135 GitHub repository is not a valid reference as of 2017-04-27; it contains Trojan horse code purported to exploit this
135 GitHub repository is not a valid reference as of 2017-04-27; it contains Trojan horse code purported to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://stringbleed.github.io/ - http://www.securityfocus.com/bid/98092 - https://www.reddit.com/r/netsec/comments/67qt6u/cve_20175135_snmp_authentication_bypass/
CVE ID: CVE-2017-5136 State: PUBLISHED Published: 2017-02-05T18:00:00 Last Updated: 2024-08-05T14:55:35.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on SendQuick Entera and Avera devices before 2HF16. The application failed to check the access control of the request which could result in an attacker being able to shutdown the system. Additional Analyst Notes: - CVE Program Container: References: - https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances/ - http://www.securityfocus.com/bid/96031
CVE ID: CVE-2017-5137 State: PUBLISHED Published: 2017-02-05T18:00:00 Last Updated: 2024-08-05T14:55:34.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could request and download the SMS logs from an unauthenticated perspective. Additional Analyst Notes: - CVE Program Container: References: - https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances/ - http://www.securityfocus.com/bid/96031
CVE ID: CVE-2017-5139 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:34.858Z Vendors: n/a Products: Honeywell XL Web II Controller Problem Types: Honeywell XL Web II Controller Plaintext Storage of a Password Description: An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Any user is able to disclose a password by accessing a specific URL, because of Plaintext Storage of a Password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95971 - https://ics-cert.us-cert.gov/advisories/ICSA-17-033-01
CVE ID: CVE-2017-5140 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:35.460Z Vendors: n/a Products: Honeywell XL Web II Controller Problem Types: Honeywell XL Web II Controller Password is stored in clear text Description: An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Password is stored in clear text. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95971 - https://ics-cert.us-cert.gov/advisories/ICSA-17-033-01
CVE ID: CVE-2017-5141 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:35.614Z Vendors: n/a Products: Honeywell XL Web II Controller Problem Types: Honeywell XL Web II Controller SESSION FIXATION Description: An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. An attacker can establish a new user session, without invalidating any existing session identifier, which gives the opportunity to steal authenticated sessions (SESSION FIXATION). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95971 - https://ics-cert.us-cert.gov/advisor
es: - CVE Program Container: References: - http://www.securityfocus.com/bid/95971 - https://ics-cert.us-cert.gov/advisories/ICSA-17-033-01
CVE ID: CVE-2017-5142 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:35.162Z Vendors: n/a Products: Honeywell XL Web II Controller Problem Types: Honeywell XL Web II Controller Improper Privilege Management Description: An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user with low privileges is able to open and change the parameters by accessing a specific URL because of Improper Privilege Management. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95971 - https://ics-cert.us-cert.gov/advisories/ICSA-17-033-01
CVE ID: CVE-2017-5143 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:35.292Z Vendors: n/a Products: Honeywell XL Web II Controller Problem Types: Honeywell XL Web II Controller directory traversal Description: An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user without authenticating can make a directory traversal attack by accessing a specific URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95971 - https://ics-cert.us-cert.gov/advisories/ICSA-17-033-01
CVE ID: CVE-2017-5144 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:35.374Z Vendors: n/a Products: Carlo Gavazzi VMU-C EM and VMU-C PV Problem Types: Carlo Gavazzi VMU-C EM and VMU-C PV access control flaw Description: An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. The access control flaw allows access to most application functions without authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95411 - https://ics-cert.us-cert.gov/advisories/ICSA-17-012-03
CVE ID: CVE-2017-5145 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:34.927Z Vendors: n/a Products: Carlo Gavazzi VMU-C EM and VMU-C PV Problem Types: Carlo Gavazzi VMU-C EM and VMU-C PV csrf Description: An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. Successful exploitation of this CROSS-SITE REQUEST FORGERY (CSRF) vulnerability can allow execution of unauthorized actions on the device such as configuration parameter changes, and saving modified configuration. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95411 - https://ics-ce
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95411 - https://ics-cert.us-cert.gov/advisories/ICSA-17-012-03
CVE ID: CVE-2017-5146 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:34.228Z Vendors: n/a Products: Carlo Gavazzi VMU-C EM and VMU-C PV Problem Types: Carlo Gavazzi VMU-C EM and VMU-C PV clear-text storage Description: An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. Sensitive information is stored in clear-text. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95411 - https://ics-cert.us-cert.gov/advisories/ICSA-17-012-03
CVE ID: CVE-2017-5147 State: PUBLISHED Published: 2017-09-09T01:00:00 Last Updated: 2024-08-05T14:55:34.229Z Vendors: n/a Products: AzeoTech DAQFactory Problem Types: CWE-427 Description: An Uncontrolled Search Path Element issue was discovered in AzeoTech DAQFactory versions prior to 17.1. An uncontrolled search path element vulnerability has been identified, which may execute malicious DLL files that have been placed within the search path. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100522 - https://ics-cert.us-cert.gov/advisories/ICSA-17-241-01
CVE ID: CVE-2017-5149 State: PUBLISHED Published: 2017-02-13T22:00:00 Last Updated: 2024-08-05T14:55:34.850Z Vendors: n/a Products: St. Jude Merlin@home Transmitter before 8.2.2 Problem Types: St. Jude Merlin@home Transmitter Vulnerability MITM Description: An issue was discovered in St. Jude Medical Merlin@home, versions prior to Version 8.2.2 (RF models: EX1150; Inductive models: EX1100; and Inductive models: EX1100 with MerlinOnDemand capability). The identities of the endpoints for the communication channel between the transmitter and St. Jude Medical's web site, Merlin.net, are not verified. This may allow a man-in-the-middle attacker to access or influence communications between the id
.net, are not verified. This may allow a man-in-the-middle attacker to access or influence communications between the identified endpoints. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95331 - https://ics-cert.us-cert.gov/advisories/ICSMA-17-009-01A
CVE ID: CVE-2017-5151 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:35.418Z Vendors: n/a Products: VideoInsight Web Client 6.3.5.11 and previous Problem Types: VideoInsight Web Client SQL Injection Description: An issue was discovered in VideoInsight Web Client Version 6.3.5.11 and previous versions. A SQL Injection vulnerability has been identified, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95416 - https://ics-cert.us-cert.gov/advisories/ICSA-17-012-02
CVE ID: CVE-2017-5152 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:34.908Z Vendors: n/a Products: Advantech WebAccess 8.1 Problem Types: Advantech WebAccess AUTHENTICATION BYPASS Description: An issue was discovered in Advantech WebAccess Version 8.1. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access pages unrestricted (AUTHENTICATION BYPASS). Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2017-04 - http://www.securityfocus.com/bid/95410 - https://ics-cert.us-cert.gov/advisories/ICSA-17-012-01
CVE ID: CVE-2017-5153 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:34.943Z Vendors: n/a Products: OSIsoft PI Coresight and PI Web API Problem Types: OSIsoft PI Coresight and PI Web API information exposure Description: An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed using the PI AF Services 2016 R2 integrated install kit. An information exposure through server log files vulnerability has been identified, which may allow service account passwords to become exposed for the affected services, potentially leading to unauthorized shutdown of the affected PI services as well as potential reuse of d
ected services, potentially leading to unauthorized shutdown of the affected PI services as well as potential reuse of domain credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95355 - https://ics-cert.us-cert.gov/advisories/ICSA-17-010-01
CVE ID: CVE-2017-5154 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:34.985Z Vendors: n/a Products: Advantech WebAccess 8.1 Problem Types: Advantech WebAccess SQL injection Description: An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an attacker must supply malformed input to the WebAccess software. Successful attack could result in administrative access to the application and its data files. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2017-04 - http://www.securityfocus.com/bid/95410 - https://ics-cert.us-cert.gov/advisories/ICS
com/security/research/tra-2017-04 - http://www.securityfocus.com/bid/95410 - https://ics-cert.us-cert.gov/advisories/ICSA-17-012-01
CVE ID: CVE-2017-5155 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:35.780Z Vendors: n/a Products: Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier Problem Types: Schneider Electric Wonderware Historian default passwords Description: An issue was discovered in Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier. Wonderware Historian creates logins with default passwords, which can allow a malicious entity to compromise Historian databases. In some installation scenarios, resources beyond those created by Wonderware Historian may be compromised as well. Additional Analyst Notes: - CVE Program Container: References: - https://
nderware Historian may be compromised as well. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-024-01 - http://www.securitytracker.com/id/1037808 - http://www.securityfocus.com/bid/95766 - http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000115/
CVE ID: CVE-2017-5156 State: PUBLISHED Published: 2017-04-20T19:00:00 Last Updated: 2024-08-05T14:55:34.857Z Vendors: n/a Products: Schneider Electric Wonderware InTouch Access Anywhere Problem Types: Cross-Site Request Forgery Description: A Cross-Site Request Forgery issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The client request may be forged from a different site. This will allow an external site to access internal RDP systems on behalf of the currently logged in user. Additional Analyst Notes: - CVE Program Container: References: - http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000114/ - http://www.security
ntainer: References: - http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000114/ - http://www.securityfocus.com/bid/97256 - https://ics-cert.us-cert.gov/advisories/ICSA-17-089-01
CVE ID: CVE-2017-5157 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:35.495Z Vendors: n/a Products: Schneider Electric homeLYnk Controller prior to V1.5.0 Problem Types: Schneider Electric homeLYnk Controller XSS Description: An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0. The homeLYnk controller is susceptible to a cross-site scripting attack. User inputs can be manipulated to cause execution of JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95665 - https://ics-cert.us-cert.gov/advisories/ICSA-17-019-01
CVE ID: CVE-2017-5158 State: PUBLISHED Published: 2017-04-20T19:00:00 Last Updated: 2024-08-05T14:55:35.144Z Vendors: n/a Products: Schneider Electric Wonderware InTouch Access Anywhere Problem Types: Information Exposure Description: An Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. Credentials may be exposed to external systems via specific URL parameters, as arbitrary destination addresses may be specified. Additional Analyst Notes: - CVE Program Container: References: - http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000114/ - http://www.securityfocus.com/bid/97256 - https://ics-cert.us-cer
der-electric.com/pdf/security-bulletin/lfsec00000114/ - http://www.securityfocus.com/bid/97256 - https://ics-cert.us-cert.gov/advisories/ICSA-17-089-01
CVE ID: CVE-2017-5159 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:34.991Z Vendors: n/a Products: Phoenix Contact mGuard 8.4.0 Problem Types: Phoenix Contact mGuard default admin password Description: An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0. When updating an mGuard device to Version 8.4.0 via the update-upload facility, the update will succeed, but it will reset the password of the admin user to its default value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95648 - https://ics-cert.us-cert.gov/advisories/ICSA-17-017-01
CVE ID: CVE-2017-5160 State: PUBLISHED Published: 2017-04-20T19:00:00 Last Updated: 2024-08-05T14:55:35.401Z Vendors: n/a Products: Schneider Electric Wonderware InTouch Access Anywhere Problem Types: Inadequate Encryption Strength Description: An Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The software will connect via Transport Layer Security without verifying the peer's SSL certificate properly. Additional Analyst Notes: - CVE Program Container: References: - http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000114/ - http://www.securityfocus.com/bid/97256 - https://ics-cert.us-ce
ider-electric.com/pdf/security-bulletin/lfsec00000114/ - http://www.securityfocus.com/bid/97256 - https://ics-cert.us-cert.gov/advisories/ICSA-17-089-01
CVE ID: CVE-2017-5161 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:34.973Z Vendors: n/a Products: Sielco Sistemi Winlog SCADA Software prior to Version 3.02.01 Problem Types: Sielco Sistemi Winlog SCADA Software DLL Hijacking Description: An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path element (DLL Hijacking) vulnerability has been identified. Exploitation of this vulnerability could give an attacker access to the system with the same level of privilege as the application that utilizes the malicious DLL. Addit
attacker access to the system with the same level of privilege as the application that utilizes the malicious DLL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96119 - https://ics-cert.us-cert.gov/advisories/ICSA-17-038-01
CVE ID: CVE-2017-5162 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:35.398Z Vendors: n/a Products: BINOM3 Electric Power Quality Meter Problem Types: BINOM3 Electric Power Quality Meter Lack of authentication Description: An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for remote service gives access to application set up and configuration. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01A - http://www.securityfocus.com/bid/93028
CVE ID: CVE-2017-5163 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:35.703Z Vendors: n/a Products: Belden Hirschmann GECKO 2.0.00 and prior Problem Types: Belden Hirschmann GECKO path traversal Description: An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an administrator downloads a configuration file, a copy of the configuration file, which includes hashes of user passwords, is saved to a location that is accessible without authentication by path traversal. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95815 - https://ics-cert.us-cert.gov/advi
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95815 - https://ics-cert.us-cert.gov/advisories/ICSA-17-026-02
CVE ID: CVE-2017-5164 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T14:55:35.700Z Vendors: n/a Products: BINOM3 Electric Power Quality Meter Problem Types: BINOM3 Electric Power Quality Meter XSS Description: An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Input sent from a malicious client is not properly verified by the server. An attacker can execute arbitrary script code in another user's browser session (CROSS-SITE SCRIPTING). Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01A - http://www.securityfocus.com/bid/93028