Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-5835 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-05T15:11:48.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96022 - https://github.com/libimobiledevice/libplist/issues/88 - http://www.openwall.com/lists/oss-security/2017/01/31/6 - http://www.openwall.com/lists/oss-security/2017/02/02/4 - https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html
CVE ID: CVE-2017-5836 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-05T15:11:48.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libimobiledevice/libplist/issues/86 - http://www.securityfocus.com/bid/96022 - http://www.openwall.com/lists/oss-security/2017/01/31/6 - http://www.openwall.com/lists/oss-security/2017/02/02/4
CVE ID: CVE-2017-5837 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-05T15:11:48.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted video file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96001 - http://www.debian.org/security/2017/dsa-3819 - https://bugzilla.gnome.org/show_bug.cgi?id=777262 - https://access.redhat.com/errata/RHSA-2017:2060 - http://www.openwall.com/lists/oss-securi
.org/show_bug.cgi?id=777262 - https://access.redhat.com/errata/RHSA-2017:2060 - http://www.openwall.com/lists/oss-security/2017/02/02/9 - https://gstreamer.freedesktop.org/releases/1.10/#1.10.3 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2017/02/01/7 - https://lists.debian.org/debian-lts-announce/2020/02/msg00032.html
CVE ID: CVE-2017-5838 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-05T15:11:48.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed datetime string. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3822 - http://www.securityfocus.com/bid/96001 - https://bugzilla.gnome.org/show_bug.cgi?id=777263 - https://access.redhat.com/errata/RHSA-2017:2060 - http://www.openwall.com/lists/oss-security/2017/02/02/9 - https://
3 - https://access.redhat.com/errata/RHSA-2017:2060 - http://www.openwall.com/lists/oss-security/2017/02/02/9 - https://gstreamer.freedesktop.org/releases/1.10/#1.10.3 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2017/02/01/7
CVE ID: CVE-2017-5839 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-05T15:11:48.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service (stack overflow and crash) via vectors involving nested WAVEFORMATEX. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96001 - http://www.debian.org/security/2017/dsa-3819 - https://access.redhat.com/errata/RHSA-2017:2060 - http://www.openwall.com/lists/oss-security/2
/security/2017/dsa-3819 - https://access.redhat.com/errata/RHSA-2017:2060 - http://www.openwall.com/lists/oss-security/2017/02/02/9 - https://bugzilla.gnome.org/show_bug.cgi?id=777265 - https://gstreamer.freedesktop.org/releases/1.10/#1.10.3 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2017/02/01/7
CVE ID: CVE-2017-5840 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-05T15:11:48.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving the current stts index. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96001 - http://www.debian.org/security/2017/dsa-3820 - https://access.redhat.com/errata/RHSA-2017:2060 - https://bugzilla.gnome.org/show_bug.cgi?id=777469 - http://www.openwall.com/lists/oss-security/201
rata/RHSA-2017:2060 - https://bugzilla.gnome.org/show_bug.cgi?id=777469 - http://www.openwall.com/lists/oss-security/2017/02/02/9 - https://gstreamer.freedesktop.org/releases/1.10/#1.10.3 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2017/02/01/7 - https://lists.debian.org/debian-lts-announce/2020/05/msg00029.html
CVE ID: CVE-2017-5841 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-05T15:11:48.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving ncdt tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96001 - http://www.debian.org/security/2017/dsa-3820 - https://access.redhat.com/errata/RHSA-2017:2060 - http://www.openwall.com/lists/oss-security/2017/02/02/9 - https://bugzilla.gnome.org/show_bug.cgi?id=777500
-2017:2060 - http://www.openwall.com/lists/oss-security/2017/02/02/9 - https://bugzilla.gnome.org/show_bug.cgi?id=777500 - https://gstreamer.freedesktop.org/releases/1.10/#1.10.3 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2017/02/01/7
CVE ID: CVE-2017-5842 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-05T15:11:48.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted SMI file, as demonstrated by OneNote_Manager.smi. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=777502 - http://www.securityfocus.com/bid/96001 - http://www.debian.org/security/2017/dsa-3819 - https://access.redhat.com/errata/RHSA-2017:2060 - http://www.openwall.co
http://www.debian.org/security/2017/dsa-3819 - https://access.redhat.com/errata/RHSA-2017:2060 - http://www.openwall.com/lists/oss-security/2017/02/02/9 - https://gstreamer.freedesktop.org/releases/1.10/#1.10.3 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2017/02/01/7
CVE ID: CVE-2017-5843 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-05T15:11:48.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_update_essence_tracks functions in GStreamer before 1.10.3 allow remote attackers to cause a denial of service (crash) via vectors involving stream tags, as demonstrated by 02785736.mxf. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3818 - https://bugzilla.gnome.org/show_bug.cgi?id=777503 - http://www.securityfocus.com/bid/96001 - https://access.redha
3818 - https://bugzilla.gnome.org/show_bug.cgi?id=777503 - http://www.securityfocus.com/bid/96001 - https://access.redhat.com/errata/RHSA-2017:2060 - http://www.openwall.com/lists/oss-security/2017/02/02/9 - https://gstreamer.freedesktop.org/releases/1.10/#1.10.3 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2017/02/01/7 - https://lists.debian.org/debian-lts-announce/2020/03/msg00038.html
CVE ID: CVE-2017-5844 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-05T15:11:48.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted ASF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96001 - https://bugzilla.gnome.org/show_bug.cgi?id=777525 - http://www.debian.org/security/2017/dsa-3819 - https://access.redhat.com/errata/RHSA-2017:2060 - http://www.openwall.com/lists/oss-security
rg/security/2017/dsa-3819 - https://access.redhat.com/errata/RHSA-2017:2060 - http://www.openwall.com/lists/oss-security/2017/02/02/9 - https://gstreamer.freedesktop.org/releases/1.10/#1.10.3 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2017/02/01/7 - https://lists.debian.org/debian-lts-announce/2020/02/msg00032.html
CVE ID: CVE-2017-5845 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-05T15:11:48.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a ncdt sub-tag that "goes behind" the surrounding tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96001 - http://www.debian.org/security/2017/dsa-3820 - https://bugzilla.gnome.org/show_bug.cgi?id=777532 - https://access.redhat.com/errata/RHSA-2017:2060 - http://www.openwall.com
://bugzilla.gnome.org/show_bug.cgi?id=777532 - https://access.redhat.com/errata/RHSA-2017:2060 - http://www.openwall.com/lists/oss-security/2017/02/02/9 - https://gstreamer.freedesktop.org/releases/1.10/#1.10.3 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2017/02/01/7
CVE ID: CVE-2017-5846 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-05T15:11:48.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gst_asf_demux_process_ext_stream_props function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors related to the number of languages in a video file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96001 - https://bugzilla.gnome.org/show_bug.cgi?id=777937 - http://www.debian.org/security/2017/dsa-3821 - http://www.openwall.com/lists/oss-security/2017/0
how_bug.cgi?id=777937 - http://www.debian.org/security/2017/dsa-3821 - http://www.openwall.com/lists/oss-security/2017/02/02/9 - https://gstreamer.freedesktop.org/releases/1.10/#1.10.3 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2017/02/01/7 - https://lists.debian.org/debian-lts-announce/2020/05/msg00030.html
CVE ID: CVE-2017-5847 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-05T15:11:49.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving extended content descriptors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GStreamer/gst-plugins-ugly/commit/d21017b52a585f145e8d62781bcc1c5fefc7ee37 - https://bugzilla.gnome.org/show_bug.cgi?id=777955#c3 - http://www.securityfocus.com/bid/96001 - http://www.debian.org/securit
://bugzilla.gnome.org/show_bug.cgi?id=777955#c3 - http://www.securityfocus.com/bid/96001 - http://www.debian.org/security/2017/dsa-3821 - http://www.openwall.com/lists/oss-security/2017/02/02/9 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2017/02/01/7 - https://lists.debian.org/debian-lts-announce/2020/05/msg00030.html
CVE ID: CVE-2017-5848 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-05T15:11:48.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors involving PSM parsing. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3818 - http://www.securityfocus.com/bid/96001 - https://access.redhat.com/errata/RHSA-2017:2060 - https://bugzilla.gnome.org/show_bug.cgi?id=777957#c3 - http://www.openwall.com/lists/oss-security/2017/02/02/
017:2060 - https://bugzilla.gnome.org/show_bug.cgi?id=777957#c3 - http://www.openwall.com/lists/oss-security/2017/02/02/9 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2017/02/01/7 - https://lists.debian.org/debian-lts-announce/2020/03/msg00038.html
CVE ID: CVE-2017-5849 State: PUBLISHED Published: 2017-03-15T19:00:00 Last Updated: 2024-08-05T15:11:48.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted tiff image file, related to transposing width and height values. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.maptools.org/show_bug.cgi?id=2655 - http://www.openwall.com/lists/oss-security/2017/02/02/2 - http://bugzilla.maptools.org/show_bug.cgi?id=2654 - https://lists.fedoraproject.org/archives/list
ecurity/2017/02/02/2 - http://bugzilla.maptools.org/show_bug.cgi?id=2654 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AF42A624FXVY3BYBHMAO6F2X7EJYHQE2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LDK3BDMKIQL2NQ3SJZXPBEN2LSOUSSEE/ - http://www.securityfocus.com/bid/96011
CVE ID: CVE-2017-5850 State: PUBLISHED Published: 2017-03-27T15:00:00 Last Updated: 2024-08-05T15:11:48.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: httpd in OpenBSD allows remote attackers to cause a denial of service (memory consumption) via a series of requests for a large file using an HTTP Range header. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/02/6 - https://pierrekim.github.io/blog/2017-02-07-openbsd-httpd-CVE-2017-5850.html - http://www.securityfocus.com/bid/95997 - https://github.com/openbsd/src/commit/142cfc82b932bc211218fbd7bdda8c7ce83f19df - https://www.exploit-db.com/exploits/41278/ - ht
github.com/openbsd/src/commit/142cfc82b932bc211218fbd7bdda8c7ce83f19df - https://www.exploit-db.com/exploits/41278/ - http://www.securitytracker.com/id/1037758 - http://marc.info/?l=openbsd-cvs&m=148587359420912&w=2 - https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/034_httpd.patch.sig - https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/017_httpd.patch.sig - http://seclists.org/fulldisclosure/2017/Feb/15 - http://packetstormsecurity.com/files/140944/OpenBSD-HTTP-Server-6.0-Denial-Of-Service.html
CVE ID: CVE-2017-5851 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:11:48.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: The free_options function in options_manager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file. NOTE: this typically has no risk; this crash of this command-line program has no further consequences for availability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96002 - https://blogs.gentoo.org/ago/2017/02/01/mp3splt-null-pointer-dereference-in-free_options-options_manager-c/
CVE ID: CVE-2017-5852 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:11:48.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/02/01/podofo-infinite-loop-in-podofopdfpagegetinheritedkeyfromobject-pdfpage-cpp/ - http://www.openwall.com/lists/oss-security/2017/02/01/12 - http://www.securityfocus.com/bid/97032 - http://www.openwall.com/lists/oss-security/2017/02/02/10
CVE ID: CVE-2017-5853 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:11:48.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96066 - https://blogs.gentoo.org/ago/2017/02/01/podofo-signed-integer-overflow-in-pdfparser-cpp/
CVE ID: CVE-2017-5854 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:11:48.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/02/01/podofo-null-pointer-dereference-in-pdfoutputstream-cpp/ - http://www.securityfocus.com/bid/96072 - http://www.openwall.com/lists/oss-security/2017/02/02/12 - http://www.openwall.com/lists/oss-security/2017/02/01/14
CVE ID: CVE-2017-5855 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:11:48.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/02/01/podofo-null-pointer-dereference-in-podofopdfparserreadxrefsubsection-pdfparser-cpp/ - http://www.securityfocus.com/bid/96516
CVE ID: CVE-2017-5856 State: PUBLISHED Published: 2017-03-16T15:00:00 Last Updated: 2024-08-05T15:11:48.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) via MegaRAID Firmware Interface (MFI) commands with the sglist size set to a value over 2 Gb. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/01/19 - http://www.securityfocus.com/bid/95999 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://bugz
tp://www.securityfocus.com/bid/95999 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://bugzilla.redhat.com/show_bug.cgi?id=1418342 - https://security.gentoo.org/glsa/201702-28 - http://www.openwall.com/lists/oss-security/2017/02/02/14 - http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=765a707000e838c30b18d712fe6cb3dd8e0435f3
CVE ID: CVE-2017-5857 State: PUBLISHED Published: 2017-03-16T15:00:00 Last Updated: 2024-08-05T15:11:48.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the virgl_cmd_resource_unref function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_UNREF commands sent without detaching the backing storage beforehand. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1418382 - http://www.openwall.com/lists/oss-security/2017/02/02/16 - http://git.qemu-project.org/?p=qemu.git%3Ba
.cgi?id=1418382 - http://www.openwall.com/lists/oss-security/2017/02/02/16 - http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=5e8e3c4c75c199aa1017db816fca02be2a9f8798 - http://www.securityfocus.com/bid/95993 - https://security.gentoo.org/glsa/201702-28 - http://www.openwall.com/lists/oss-security/2017/02/01/21
CVE ID: CVE-2017-5858 State: PUBLISHED Published: 2017-02-09T20:00:00 Last Updated: 2024-08-05T15:11:48.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Converse.js (0.8.0 - 1.0.6, 2.0.0 - 2.0.4). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jcbrand/converse.js/commit/42f249cabbbf5c026398e6d3b350f6f9536ea572 - http://openwall.com/lists/oss-security/2017/02/09/29 - http://
erse.js/commit/42f249cabbbf5c026398e6d3b350f6f9536ea572 - http://openwall.com/lists/oss-security/2017/02/09/29 - http://www.securityfocus.com/bid/96183 - https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/ - https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf
CVE ID: CVE-2017-5859 State: PUBLISHED Published: 2017-03-10T10:29:00 Last Updated: 2024-08-05T15:11:48.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Cambium Networks cnPilot R200/201 devices before 4.3, there is a vulnerability involving the certificate of the device and its RSA keys, aka RBN-183. Additional Analyst Notes: - CVE Program Container: References: - https://support.cambiumnetworks.com/file/3f88842a39f37b0d4ce5d43e5aa21bf1c4f9f1ca
CVE ID: CVE-2017-5861 State: REJECTED Published: 2020-02-27T03:52:51 Last Updated: 2020-02-27T03:52:51 Description: No description available.
CVE ID: CVE-2017-5863 State: PUBLISHED Published: 2019-05-22T19:45:38 Last Updated: 2024-08-05T15:11:48.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - http://ox.com - http://open-xchange.com - https://documentation.open-xchange.com/7.8.4/release-notes/release-notes.html
CVE ID: CVE-2017-5864 State: PUBLISHED Published: 2019-05-22T19:38:05 Last Updated: 2024-08-05T15:11:48.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - http://ox.com - http://open-xchange.com - https://documentation.open-xchange.com/7.8.4/release-notes/release-notes.html
CVE ID: CVE-2017-5865 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-05T15:11:49.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error messages depending on whether the username is valid, which allows remote attackers to enumerate user names via a large number of password reset attempts. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.org/security/advisory/?id=oc-sa-2017-001 - http://www.securityfocus.com/bid/96425