Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-2117 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:39:32.406Z Vendors: CubeCart Limited Products: CubeCart Problem Types: Directory traversal Description: Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96466 - https://forums.cubecart.com/topic/52188-cubecart-615-released/ - http://jvn.jp/en/jp/JVN63474730/index.html
CVE ID: CVE-2017-2118 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:39:32.278Z Vendors: WBCE Team Products: WBCE CMS Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN73083905/index.html - http://www.securityfocus.com/bid/96467 - https://forum.wbce.org/viewtopic.php?id=977
CVE ID: CVE-2017-2119 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:39:32.281Z Vendors: WBCE Team Products: WBCE CMS Problem Types: Directory traversal Description: Directory traversal vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN73083905/index.html - http://www.securityfocus.com/bid/96467 - https://forum.wbce.org/viewtopic.php?id=977
CVE ID: CVE-2017-2120 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:39:32.256Z Vendors: WBCE Team Products: WBCE CMS Problem Types: SQL Injection Description: SQL injection vulnerability in the WBCE CMS 1.1.10 and earlier allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN73083905/index.html - http://www.securityfocus.com/bid/96467 - https://forum.wbce.org/viewtopic.php?id=977
CVE ID: CVE-2017-2122 State: PUBLISHED Published: 2017-05-12T18:00:00 Last Updated: 2024-08-05T13:39:32.351Z Vendors: Tenable Network Security, Inc. Products: Nessus Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Nessus versions 6.8.0, 6.8.1, 6.9.0, 6.9.1 and 6.9.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN87760109/index.html - https://www.tenable.com/security/tns-2017-01
CVE ID: CVE-2017-2123 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:39:32.381Z Vendors: SpiQe Software Products: OneThird CMS Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via language.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96613 - https://onethird.net/en/p1277.html - http://jvn.jp/en/jp/JVN49408248/index.html
CVE ID: CVE-2017-2124 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:39:32.332Z Vendors: SpiQe Software Products: OneThird CMS Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php. Additional Analyst Notes: - CVE Program Container: References: - https://onethird.net/en/p1277.html - http://www.securityfocus.com/bid/98604 - http://jvn.jp/en/jp/JVN13003724/index.html
CVE ID: CVE-2017-2125 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:39:32.471Z Vendors: Allied Telesis K.K. Products: CentreCOM Problem Types: Privilege escalation Description: Privilege escalation vulnerability in CentreCOM AR260S V2 remote authenticated attackers to gain privileges via the guest account. Additional Analyst Notes: - CVE Program Container: References: - http://www.allied-telesis.co.jp/support/list/faq/vuls/20170330aen.html - http://jvn.jp/en/jp/JVN55121369/index.html - http://www.securityfocus.com/bid/97249
CVE ID: CVE-2017-2126 State: PUBLISHED Published: 2017-07-22T00:00:00 Last Updated: 2024-08-05T13:39:32.287Z Vendors: BUFFALO INC. Products: WAPM-1166D, WAPM-APG600H Problem Types: Authentication bypass Description: WAPM-1166D firmware Ver.1.2.7 and earlier, WAPM-APG600H firmware Ver.1.16.1 and earlier allows remote attackers to bypass authentication and access the configuration interface via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN48823557/index.html - http://buffalo.jp/support_s/s20170718.html
CVE ID: CVE-2017-2127 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:39:32.431Z Vendors: YOP Products: YOP Poll Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in YOP Poll versions prior to 5.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN55294532/index.html - http://www.securityfocus.com/bid/97118
CVE ID: CVE-2017-2128 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:39:32.430Z Vendors: INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Products: Security guide for website operators Problem Types: OS Command Injection Description: Security guide for website operators allows remote attackers to execute arbitrary OS commands via specially crafted saved data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96923 - http://jvn.jp/en/jp/JVN11448789/index.html
CVE ID: CVE-2017-2130 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:39:32.470Z Vendors: SecureBrain Corporation Products: The installer of PhishWall Client Internet Explorer version Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installer of PhishWall Client Internet Explorer version Ver. 3.7.13 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97113 - http://www.securebrain.co.jp/about/news/2017/03/170316.html - http://jvn.jp/en/jp/JVN93699304/index.
cus.com/bid/97113 - http://www.securebrain.co.jp/about/news/2017/03/170316.html - http://jvn.jp/en/jp/JVN93699304/index.html
CVE ID: CVE-2017-2131 State: PUBLISHED Published: 2017-10-20T11:00:00 Last Updated: 2024-08-05T13:39:32.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow an attacker to bypass access restrictions to view the configuration menu via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101581 - https://jvn.jp/en/jp/JVN54795166/
CVE ID: CVE-2017-2132 State: PUBLISHED Published: 2017-10-20T11:00:00 Last Updated: 2024-08-05T13:39:32.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow an attacker to delete arbitrary files in a specific directory via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101584 - https://jvn.jp/en/jp/JVN54795166/
CVE ID: CVE-2017-2133 State: PUBLISHED Published: 2017-10-20T11:00:00 Last Updated: 2024-08-05T13:39:32.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101583 - https://jvn.jp/en/jp/JVN54795166/
CVE ID: CVE-2017-2134 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:39:32.399Z Vendors: UCHIDA YOKO CO., LTD. Products: ASSETBASE Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in ASSETBASE 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97708 - http://jvn.jp/en/jp/JVN82019695/index.html
CVE ID: CVE-2017-2135 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:39:32.425Z Vendors: WP Statistics Products: WP Statistics Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WP Statistics version 12.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wp-statistics.com/change-log/ - http://jvn.jp/en/jp/JVN17633442/index.html - http://www.securityfocus.com/bid/98610
CVE ID: CVE-2017-2136 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:39:32.469Z Vendors: WP Statistics Products: WP Statistics Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via specially crafted HTTP Referer headers. Additional Analyst Notes: - CVE Program Container: References: - https://wp-statistics.com/change-log/ - http://www.securityfocus.com/bid/97289 - http://jvn.jp/en/jp/JVN62392065/index.html
CVE ID: CVE-2017-2137 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:39:32.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000038443/Security-Advisory-for-Insecure-SOAP-Access-in-ProSAFE-Plus-Configuration-Utility-PSV-2017-1997 - http://jvn.jp/en/jp/JVN08740778/index.html
CVE ID: CVE-2017-2138 State: PUBLISHED Published: 2017-08-02T16:00:00 Last Updated: 2024-08-05T13:39:32.358Z Vendors: Frogman Office Inc. Products: CS-Cart Japanese Edition, CS-Cart Multivendor Japanese Edition Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and v3) allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN87770873/index.html - http://tips.cs-cart.jp/fix-cs
otes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN87770873/index.html - http://tips.cs-cart.jp/fix-csrf-20170406.html
CVE ID: CVE-2017-2139 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:39:32.360Z Vendors: Frogman Office Inc. Products: CS-Cart Japanese Edition, CS-Cart Multivendor Japanese Edition Problem Types: Fails to restrict access Description: CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and v3) allows remote attackers to bypass access restriction to obtain customer information via orders.pre.php. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN14396697/index.html - http://tips.cs-cart.jp/fix-jvn-14396697.html
CVE ID: CVE-2017-2140 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:48:03.447Z Vendors: Gaku Products: Tablacus Explorer Problem Types: Script injection Description: Tablacus Explorer 17.3.30 and earlier allows arbitrary scripts to be executed in the context of the application due to specially crafted directory. Additional Analyst Notes: - CVE Program Container: References: - http://tablacus.hatenablog.com/entry/2017/04/05/200424 - http://jvn.jp/en/jp/JVN64451600/index.html
CVE ID: CVE-2017-2141 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:48:03.503Z Vendors: I-O DATA DEVICE, INC. Products: WN-G300R3 Problem Types: OS Command Injection Description: WN-G300R3 firmware 1.03 and earlier allows attackers with administrator rights to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN81024552/index.html - http://www.iodata.jp/support/information/2017/wn-g300r3/
CVE ID: CVE-2017-2142 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:48:03.578Z Vendors: I-O DATA DEVICE, INC. Products: WN-G300R3 Problem Types: Buffer Overflow Description: Buffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN81024552/index.html - http://www.iodata.jp/support/information/2017/wn-g300r3/
CVE ID: CVE-2017-2143 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:48:03.502Z Vendors: Frogman Office Inc. Products: CS-Cart Japanese Edition, CS-Cart Multivendor Japanese Edition Problem Types: Fails to restrict access Description: CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php. Additional Analyst Notes: - CVE Program Container: References: - http://tips.cs-cart.jp/fix-jvn-25598952.html - http://jvn.jp/en/jp/JVN25598952/index.html
CVE ID: CVE-2017-2144 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:03.498Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9648 - http://jvn.jp/en/jp/JVN43534286/index.html
CVE ID: CVE-2017-2145 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:03.543Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Session fixation Description: Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9695 - http://jvn.jp/en/jp/JVN43534286/index.html
CVE ID: CVE-2017-2146 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:05.030Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via application menu. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9702 - http://jvn.jp/en/jp/JVN43534286/index.html
CVE ID: CVE-2017-2147 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:48:03.707Z Vendors: WP Statistics Products: WP Statistics Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wp-statistics.com/change-log/ - http://jvn.jp/en/jp/JVN77253951/index.html - http://www.securityfocus.com/bid/97711
CVE ID: CVE-2017-2148 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:48:05.174Z Vendors: I-O DATA DEVICE, INC. Products: WN-AC1167GR Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WN-AC1167GR firmware version 1.04 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97714 - http://www.iodata.jp/support/information/2017/wn-ac1167gr/ - http://jvn.jp/en/jp/JVN01537659/index.html
CVE ID: CVE-2017-2149 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:48:03.535Z Vendors: Toshiba Corporation Products: Installer for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool, Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Configuration Software, Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Software Update tool (SD-WE series<W-03>), Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Software Update tool (SD-WD/WC series<W-02>), Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Software Update t
D/WC series<W-02>), Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Software Update tool (SD-WB/WL series), Installer for SDHC Memory Card with embedded TransferJetTM functionality Configuration Software, Installer for SDHC Memory Card with embedded TransferJetTM functionality Software Update tool Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool V1.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Configuration Software V3.0.2 and earlier, SDHC Memory Card with emb
d with embedded wireless LAN functionality FlashAir Configuration Software V3.0.2 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WE series<W-03>) V3.00.01, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WD/WC series<W-02>) V2.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WB/WL series) V1.00.04 and earlier, SDHC Memory Card with embedded TransferJet functionality Configuration Software V1.02 and earlier, SDHC Memory Card with embedded TransferJet functionality Software Update tool V1.00.06 and earlier allows remote attackers to
Memory Card with embedded TransferJet functionality Software Update tool V1.00.06 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN05340816/index.html - http://www.toshiba-personalstorage.net/news/20170414.htm - http://www.securityfocus.com/bid/97697
CVE ID: CVE-2017-2150 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:48:03.531Z Vendors: wpdevelop Products: Booking Calendar Problem Types: Directory traversal Description: Directory traversal vulnerability in Booking Calendar version 7.0 and earlier allows remote attackers to read arbitrary files via specially crafted captcha_chalange parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wpbookingcalendar.com/changelog/ - http://jvn.jp/en/jp/JVN18739672/index.html
CVE ID: CVE-2017-2151 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:48:03.509Z Vendors: wpdevelop Products: Booking Calendar Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Booking Calendar version 7.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://wpbookingcalendar.com/changelog/ - http://jvn.jp/en/jp/JVN54762089/index.html
CVE ID: CVE-2017-2152 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:48:03.496Z Vendors: BUFFALO INC. Products: WNC01WH Problem Types: OS Command Injection Description: WNC01WH firmware 1.0.0.9 and earlier allows authenticated attackers to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN48790793/index.html
CVE ID: CVE-2017-2153 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:48:04.413Z Vendors: Internet Initiative Japan Inc. Products: SEIL/x86 Fuji, SEIL/BPV4, SEIL/X1, SEIL/X2, SEIL/B1 Problem Types: Denial-of-service (DoS) Description: SEIL/x86 Fuji 1.70 to 5.62, SEIL/BPV4 5.00 to 5.62, SEIL/X1 1.30 to 5.62, SEIL/X2 1.30 to 5.62, SEIL/B1 1.00 to 5.62 allows remote attackers to cause a denial of service via specially crafted IPv4 UDP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.seil.jp/support/security/a01783.html - http://jvn.jp/en/jp/JVN86171513/index.html
CVE ID: CVE-2017-2154 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:48:03.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 [Standard], JUST Office 3 [Eco Print Package], JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Police 3, Hanako 2017 trial version allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN54268888/index.
fied directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN54268888/index.html - https://www.justsystems.com/jp/info/js17002.html
CVE ID: CVE-2017-2155 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:48:04.277Z Vendors: ICON CORPORATION Products: Hoozin Viewer Problem Types: Buffer Overflow Description: Buffer overflow in Hoozin Viewer 2, 3, 4.1.5.15 and earlier, 5.1.2.13 and earlier, and 6.0.3.09 and earlier allows remote attackers to execute arbitrary code via specially crafted webpage. Additional Analyst Notes: - CVE Program Container: References: - http://www.icon-co.jp/news/20170420/index.html - http://jvn.jp/en/jp/JVN93931029/index.html
CVE ID: CVE-2017-2156 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-05T13:48:05.183Z Vendors: Vivaldi Technologies Products: Vivaldi installer for Windows Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Vivaldi installer for Windows prior to version 1.7.735.48 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN71572107/index.html - https://vivaldi.com/security/vulnerability-disclosure-vivaldi-installer-for-windows-could-run-arbitrary-downloaded-code-jvn71572107/ -
.com/security/vulnerability-disclosure-vivaldi-installer-for-windows-could-run-arbitrary-downloaded-code-jvn71572107/ - http://www.securityfocus.com/bid/98040