Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-10800 State: PUBLISHED Published: 2017-07-03T01:00:00 Last Updated: 2024-08-05T17:50:11.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: When GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c, it can lead to a denial of service (OOM) in ReadMATImage() if the size specified for a MAT Object is larger than the actual amount of data. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4321 - http://hg.code.sf.net/p/graphicsmagick/code/rev/e5761e3a2012 - http://www.securityfocus.com/bid/99356
CVE ID: CVE-2017-10801 State: PUBLISHED Published: 2017-07-19T07:00:00 Last Updated: 2024-08-05T17:50:11.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpSocial (formerly phpDolphin) before 3.0.1 has XSS in the PATH_INFO to the search/tag/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.seekurity.com/blog/advisories/cross-sitescripting-vulnerability-in-phpsocial-aka-phpdolphin-social-network-script/ - https://phpsocial.com/page/changelog
CVE ID: CVE-2017-10803 State: PUBLISHED Published: 2017-07-04T18:00:00 Last Updated: 2024-08-05T17:50:11.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the Database Anonymization module allows remote authenticated privileged users to execute arbitrary Python code, because unpickle is used. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/17898
CVE ID: CVE-2017-10804 State: PUBLISHED Published: 2017-07-04T18:00:00 Last Updated: 2024-08-05T17:50:11.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass authentication under certain circumstances because parameters containing 0x00 characters are truncated before reaching the database layer. This occurs because Psycopg 2.x before 2.6.3 is used. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/17914 - http://initd.org/psycopg/docs/news.html#what-s-new-in-psycopg-2-6-3 - https://github.com/psycopg/psycopg2/iss
es/17914 - http://initd.org/psycopg/docs/news.html#what-s-new-in-psycopg-2-6-3 - https://github.com/psycopg/psycopg2/issues/420
CVE ID: CVE-2017-10805 State: PUBLISHED Published: 2017-07-04T18:00:00 Last Updated: 2024-08-05T17:50:11.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in the OAuth module allows remote authenticated users to hijack OAuth sessions of other users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/17921
CVE ID: CVE-2017-10806 State: PUBLISHED Published: 2017-08-02T19:00:00 Last Updated: 2024-08-05T17:50:12.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU process crash) via vectors related to logging debug messages. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://bugzilla.redhat.com/show_bug.cgi?id=1468496 - http://www.securityfocus.com/bid/99475 - http://www.openwall.com/lists/oss-security/2017/07/07/1 - https://lists.nongnu.org/archive/html/qem
ocus.com/bid/99475 - http://www.openwall.com/lists/oss-security/2017/07/07/1 - https://lists.nongnu.org/archive/html/qemu-devel/2017-05/msg03087.html - http://www.debian.org/security/2017/dsa-3925
CVE ID: CVE-2017-10807 State: PUBLISHED Published: 2017-07-04T15:00:00 Last Updated: 2024-08-05T17:50:11.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jabberd2/jabberd2/commit/8416ae54ecefa670534f27a31db71d048b9c7f16 - http://www.debian.org/security/2017/dsa-3902 - https://github.com/jabberd2/jabberd2/releases/tag/jabberd-2.6.1 - http://www.securityfocus.com/bid/99511 - https://bugs.debian.org/867032
CVE ID: CVE-2017-10810 State: PUBLISHED Published: 2017-07-04T20:00:00 Last Updated: 2024-08-05T17:50:12.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c in the Linux kernel through 4.11.8 allows attackers to cause a denial of service (memory consumption) by triggering object-initialization failures. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3927 - http://www.securityfocus.com/bid/99433 - https://lkml.org/lkml/2017/4/6/668 - https://github.com/torvalds/linux/commit/385aee965b4e4c36551c362a334378d2985b722a - http://git.ke
rg/lkml/2017/4/6/668 - https://github.com/torvalds/linux/commit/385aee965b4e4c36551c362a334378d2985b722a - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=385aee965b4e4c36551c362a334378d2985b722a
CVE ID: CVE-2017-10811 State: PUBLISHED Published: 2017-08-18T13:00:00 Last Updated: 2024-08-05T17:50:11.696Z Vendors: BUFFALO INC. Products: WCR-1166DS Problem Types: OS Command Injection Description: Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://buffalo.jp/support_s/s20170804_1.html - https://jvn.jp/en/jp/JVN05340005/index.html
CVE ID: CVE-2017-10812 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.050Z Vendors: NTT DOCOMO, INC. Products: Photo Collection PC Software Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Photo Collection PC Software Ver.4.0.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN67954465/index.html
CVE ID: CVE-2017-10813 State: PUBLISHED Published: 2017-09-15T17:00:00 Last Updated: 2024-08-05T17:50:12.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.corega.jp/support/security/20170908_wlr300nm.htm - https://jvn.jp/en/jp/JVN00719891/index.html
CVE ID: CVE-2017-10814 State: PUBLISHED Published: 2017-09-15T17:00:00 Last Updated: 2024-08-05T17:50:11.622Z Vendors: Corega Inc. Products: CG-WLR300NM Problem Types: Buffer Overflow Description: Buffer overflow in CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.corega.jp/support/security/20170908_wlr300nm.htm - https://jvn.jp/en/jp/JVN00719891/index.html
CVE ID: CVE-2017-10815 State: PUBLISHED Published: 2017-08-04T16:00:00 Last Updated: 2024-08-05T17:50:12.095Z Vendors: Intercom, Inc. Products: MaLion for Windows, MaLion for Mac Problem Types: Authentication bypass Description: MaLion for Windows 5.2.1 and earlier (only when "Remote Control" is installed) and MaLion for Mac 4.0.1 to 5.2.1 (only when "Remote Control" is installed) allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent. Additional Analyst Notes: - CVE Program Container: References: - http://www.intercom.co.jp/information/2017/0801.html - https://jvn.jp/en/vu/JVNVU91587298/index.html
CVE ID: CVE-2017-10816 State: PUBLISHED Published: 2017-08-04T16:00:00 Last Updated: 2024-08-05T17:50:11.733Z Vendors: Intercom, Inc. Products: MaLion for Windows and Mac Problem Types: SQL Injection Description: SQL injection vulnerability in the MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to execute arbitrary SQL commands via Relay Service Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.intercom.co.jp/information/2017/0801.html - https://jvn.jp/en/vu/JVNVU91587298/index.html
CVE ID: CVE-2017-10817 State: PUBLISHED Published: 2017-08-04T16:00:00 Last Updated: 2024-08-05T17:50:11.883Z Vendors: Intercom, Inc. Products: MaLion for Windows and Mac Problem Types: Authentication bypass Description: MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to bypass authentication to alter settings in Relay Service Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.intercom.co.jp/information/2017/0801.html - https://jvn.jp/en/vu/JVNVU91587298/index.html
CVE ID: CVE-2017-10818 State: PUBLISHED Published: 2017-08-04T16:00:00 Last Updated: 2024-08-05T17:50:12.049Z Vendors: Intercom, Inc. Products: MaLion for Windows and Mac Problem Types: Use of Hard-coded Cryptographic Key Description: MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service. Additional Analyst Notes: - CVE Program Container: References: - http://www.intercom.co.jp/information/2017/0801.html - https://jvn.jp/en/vu/JVNVU91587298/index.html
CVE ID: CVE-2017-10819 State: PUBLISHED Published: 2017-08-04T16:00:00 Last Updated: 2024-08-05T17:50:11.661Z Vendors: Intercom, Inc. Products: MaLion for Mac Problem Types: Improper Certificate Validation Description: MaLion for Mac 4.3.0 to 5.2.1 does not properly validate certificates, which may allow an attacker to eavesdrop on an encrypted communication. Additional Analyst Notes: - CVE Program Container: References: - http://www.intercom.co.jp/information/2017/0801.html - https://jvn.jp/en/vu/JVNVU91587298/index.html
CVE ID: CVE-2017-10820 State: PUBLISHED Published: 2017-08-04T16:00:00 Last Updated: 2024-08-05T17:50:12.086Z Vendors: H.Shirouzu / Asahi Net, Inc. Products: Installer of IP Messenger for Win Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer of IP Messenger for Win 4.60 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://ipmsg.org/ipmsg_dll_vulnerability.html.en - https://jvn.jp/en/jp/JVN86724730/index.html
CVE ID: CVE-2017-10821 State: PUBLISHED Published: 2017-08-18T13:00:00 Last Updated: 2024-08-05T17:50:12.077Z Vendors: Agency for Natural Resources and Energy of Ministry of Economy,Trade and Industry (METI) Products: Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program (program released on 2013 September 30) Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program (program released on 2013 September 30) Distributed on the website until 2017 May 17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Pr
ws an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN73559859/index.html
CVE ID: CVE-2017-10822 State: PUBLISHED Published: 2017-08-18T13:00:00 Last Updated: 2024-08-05T17:50:12.056Z Vendors: Agency for Natural Resources and Energy of Ministry of Economy,Trade and Industry (METI) Products: Installer for Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program (program released on 2013 September 30) Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer for Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program (program released on 2013 September 30) distributed on the website until 2017 May 17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes:
17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN71104430/index.html
CVE ID: CVE-2017-10823 State: PUBLISHED Published: 2017-08-18T13:00:00 Last Updated: 2024-08-05T17:50:11.829Z Vendors: Agency for Natural Resources and Energy of Ministry of Economy,Trade and Industry (METI) Products: Installer for Shin Kinkyuji Houkoku Data Nyuryoku Program (program released on 2011 March 10) Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer for Shin Kinkyuji Houkoku Data Nyuryoku Program (program released on 2011 March 10) Distributed on the website till 2017 May 17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: Refere
privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN23546631/index.html
CVE ID: CVE-2017-10824 State: PUBLISHED Published: 2017-08-18T13:00:00 Last Updated: 2024-08-05T17:50:12.091Z Vendors: Teikoku Databank, Ltd. Products: TDB CA TypeA use software Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in TDB CA TypeA use software Version 5.2 and earlier, distributed until 10 August 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN18641169/index.html
CVE ID: CVE-2017-10825 State: PUBLISHED Published: 2017-11-02T15:00:00 Last Updated: 2024-08-05T17:50:12.087Z Vendors: NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION Products: Installer of Flets Easy Setup Tool Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer of Flets Easy Setup Tool Ver1.2.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://flets-w.com/topics/setup_tool_vulnerability/ - https://jvn.jp/en/jp/JVN97243511/278948/index.html
CVE ID: CVE-2017-10826 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.123Z Vendors: NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION Products: Security Kinou Mihariban Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Security Kinou Mihariban v1.0.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN11601216/index.html - http://flets-w.com/topics/mihariban_vulnerability/
CVE ID: CVE-2017-10827 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.094Z Vendors: NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION Products: Flets Azukeru for Windows Auto Backup Tool Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Flets Azukeru for Windows Auto Backup Tool v1.0.3.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN14658714/index.html - http://flets-w.com/topics/azukeru_vulnerability/
CVE ID: CVE-2017-10828 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.116Z Vendors: NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION Products: Flets Install Tool Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Flets Install Tool all versions distributed through the website till 2017 August 8 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN14926025/index.html - http://flets-w.com/topics/inst_tool_vulnerability/
CVE ID: CVE-2017-10829 State: PUBLISHED Published: 2017-09-01T14:00:00 Last Updated: 2024-08-05T17:50:12.039Z Vendors: NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION, NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION Products: Remote Support Tool (Enkaku Support Tool) Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Remote Support Tool (Enkaku Support Tool) All versions distributed through the website till 2017 August 10 allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN26115441/index.html - http://flets-w.com/top
alyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN26115441/index.html - http://flets-w.com/topics/remote_support_vulnerability/ - https://flets.com/osa/remote/pc_tool.html
CVE ID: CVE-2017-10830 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.120Z Vendors: NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION Products: Security Setup Tool Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Security Setup Tool all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN36303528/index.html - http://f-security.jp/v6/support/information/100161.html
CVE ID: CVE-2017-10831 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in The electronic authentication system based on the commercial registration system "The CRCA user's Software" Ver1.8 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN30866130/index.html - http://www.moj.go.jp/MINJI/minji06_00027.html
CVE ID: CVE-2017-10832 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.148Z Vendors: NIPPON ANTENNA Co., Ltd Products: "Dokodemo eye Smart HD" SCR02HD Problem Types: OS Command Injection Description: "Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.nippon-antenna.co.jp/product/ine/pdf/scr02hd_about_security.pdf - https://jvn.jp/en/jp/JVN87410770/index.html
CVE ID: CVE-2017-10833 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.147Z Vendors: NIPPON ANTENNA Co., Ltd Products: "Dokodemo eye Smart HD" SCR02HD Problem Types: Fails to restrict access Description: "Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to bypass access restriction to view information or modify configurations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.nippon-antenna.co.jp/product/ine/pdf/scr02hd_about_security.pdf - https://jvn.jp/en/jp/JVN87410770/index.html
CVE ID: CVE-2017-10834 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.058Z Vendors: NIPPON ANTENNA Co., Ltd Products: "Dokodemo eye Smart HD" SCR02HD Problem Types: Directory traversal Description: Directory traversal vulnerability in "Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.nippon-antenna.co.jp/product/ine/pdf/scr02hd_about_security.pdf - https://jvn.jp/en/jp/JVN87410770/index.html
CVE ID: CVE-2017-10835 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: "Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows authenticated attackers to conduct code injection attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.nippon-antenna.co.jp/product/ine/pdf/scr02hd_about_security.pdf - https://jvn.jp/en/jp/JVN87410770/index.html
CVE ID: CVE-2017-10836 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.129Z Vendors: OPTiM Corporation Products: Optimal Guard Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Optimal Guard 1.1.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN87540575/index.html - https://www.optim.co.jp/contents/23246
CVE ID: CVE-2017-10837 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.126Z Vendors: BackupGuard Products: BackupGuard Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/backup/#developers - https://jvn.jp/en/jp/JVN58559719/index.html
CVE ID: CVE-2017-10838 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.124Z Vendors: SEO Panel Products: SEO Panel Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN39628662/index.html
CVE ID: CVE-2017-10839 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.110Z Vendors: SEO Panel Products: SEO Panel Problem Types: SQL Injection Description: SQL injection vulnerability in the SEO Panel prior to version 3.11.0 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN39628662/index.html
CVE ID: CVE-2017-10840 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.587Z Vendors: k5n.us Products: WebCalendar Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN23340457/index.html - https://github.com/craigk5n/webcalendar/releases/tag/v1.2.8
CVE ID: CVE-2017-10841 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.600Z Vendors: k5n.us Products: WebCalendar Problem Types: Directory traversal Description: Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN23340457/index.html - https://github.com/craigk5n/webcalendar/releases/tag/v1.2.8