Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-5983 State: PUBLISHED Published: 2017-04-10T15:00:00 Last Updated: 2024-08-05T15:18:49.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-64077 - https://www.kb.cert.org/vuls/id/307983 - http://www.securityfocus.com/bid/97379 - http://codewhitesec.blogspot.com/2017/04/amf.html - https://conflue
id/307983 - http://www.securityfocus.com/bid/97379 - http://codewhitesec.blogspot.com/2017/04/amf.html - https://confluence.atlassian.com/jira063/jira-security-advisory-2017-03-09-875604401.html
CVE ID: CVE-2017-5984 State: PUBLISHED Published: 2019-05-22T19:26:28 Last Updated: 2024-08-05T15:18:49.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libavcodec in Libav 9.21, ff_h264_execute_ref_pic_marking() has a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1019 - https://patches.libav.org/patch/62534/
CVE ID: CVE-2017-5985 State: PUBLISHED Published: 2017-03-14T17:00:00 Last Updated: 2024-08-05T15:18:49.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check. Additional Analyst Notes: - CVE Program Container: References: - https://lists.linuxcontainers.org/pipermail/lxc-devel/2017-March/015535.html - https://github.com/lxc/lxc/commit/16af238036a5464ae8f2420ed3af214f0de875f9 - http://www.securityfocus.com/bid/96777 - https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/16546
420ed3af214f0de875f9 - http://www.securityfocus.com/bid/96777 - https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1654676 - http://www.ubuntu.com/usn/USN-3224-1 - http://www.openwall.com/lists/oss-security/2017/03/09/4 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html
CVE ID: CVE-2017-5986 State: PUBLISHED Published: 2017-02-18T21:40:00 Last Updated: 2024-08-05T15:18:49.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel before 4.9.11 allows local users to cause a denial of service (assertion failure and panic) via a multithreaded application that peels off an association in a certain buffer-full state. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1308 - https://github.com/torvalds/linux/commit/2dcab598484185dea7ec22219c76dcdd59e3cb90 - http://www.openwall.com/lists/oss-security/2017/02/14/
/torvalds/linux/commit/2dcab598484185dea7ec22219c76dcdd59e3cb90 - http://www.openwall.com/lists/oss-security/2017/02/14/6 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2dcab598484185dea7ec22219c76dcdd59e3cb90 - https://bugzilla.redhat.com/show_bug.cgi?id=1420276 - http://www.securityfocus.com/bid/96222 - http://www.debian.org/security/2017/dsa-3804 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11
CVE ID: CVE-2017-5987 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:18:49.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors involving the transfer mode register during multi block transfer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96263 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=6e86d90352adf6cb082952552
an-lts-announce/2018/09/msg00007.html - http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=6e86d90352adf6cb08295255220295cf23c4286e - http://www.openwall.com/lists/oss-security/2017/02/14/8 - https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg02776.html - https://bugzilla.redhat.com/show_bug.cgi?id=1421995 - https://security.gentoo.org/glsa/201704-01
CVE ID: CVE-2017-5988 State: PUBLISHED Published: 2017-04-10T15:00:00 Last Updated: 2024-08-05T15:18:49.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp Clustered Data ONTAP 8.1 through 9.1P1, when NFS or SMB is enabled, allows remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/NTAP-20170331-0001
CVE ID: CVE-2017-5990 State: PUBLISHED Published: 2017-02-15T06:11:00 Last Updated: 2024-08-05T15:18:49.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PhreeBooksERP before 2017-02-13. The vulnerability exists due to insufficient filtration of user-supplied data in the "form" HTTP GET parameter passed to the "PhreeBooksERP-master/extensions/ShippingMethods/ups/label_mgr/js_include.php" and "PhreeBooksERP-master/extensions/ShippingMethods/yrc/label_mgr/js_include.php" URLs. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. NOTE: these js_include.php files do not exist in the SourceForge "s
a browser in the context of the vulnerable website. NOTE: these js_include.php files do not exist in the SourceForge "stable release" (aka R37RC1). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phreebooks/PhreeBooksERP/issues/230 - https://github.com/phreebooks/PhreeBooksERP/commit/f2a32dede7cc7f9ff59fe983c5e4abe2966d837c - http://www.securityfocus.com/bid/96219
CVE ID: CVE-2017-5991 State: PUBLISHED Published: 2017-02-15T06:11:00 Last Updated: 2024-08-05T15:18:48.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdf_run_xobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fz_paint_pixmap_with_mask painting operation. Versions 1.11 and later are unaffected. Additional Analyst Notes: - CVE Program Container: References: - http://git.ghostscript.com/?p=mupdf.git%3Bh=1912de5f08e90af1d9d0a9791f58ba3afdb9d465 - http://www.debian.org/security/2017/dsa-3797 - https://bugs.ghostscript.com/show_bug.cgi?id=697500 - https:
3afdb9d465 - http://www.debian.org/security/2017/dsa-3797 - https://bugs.ghostscript.com/show_bug.cgi?id=697500 - https://security.gentoo.org/glsa/201706-08 - https://www.exploit-db.com/exploits/42138/ - http://www.securityfocus.com/bid/96213
CVE ID: CVE-2017-5992 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-05T15:18:49.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document. Additional Analyst Notes: - CVE Program Container: References: - https://bitbucket.org/openpyxl/openpyxl/issues/749 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854442 - https://bitbucket.org/openpyxl/openpyxl/commits/3b4905f428e1 - http://www.openwall.com/lists/oss-security/2017/02/07/5
CVE ID: CVE-2017-5993 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:18:49.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the vrend_renderer_init_blit_ctx function in vrend_blitter.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_CCMD_BLIT commands. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201707-06 - https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html - http://www.openwall.com/lists/oss-security/2017/02/15/7 - http://www.securityfocus.com/bid/96275 -
ebruary/000145.html - http://www.openwall.com/lists/oss-security/2017/02/15/7 - http://www.securityfocus.com/bid/96275 - https://bugzilla.redhat.com/show_bug.cgi?id=1422438 - https://cgit.freedesktop.org/virglrenderer/commit/?id=6eb13f7a2dcf391ec9e19b4c2a79e68305f63c22
CVE ID: CVE-2017-5994 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:18:49.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and crash) via the num_elements parameter. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201707-06 - https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html - https://bugzilla.redhat.com/show_bug.cgi?id=1422452 - https://cgit.freedesktop.
nderer-devel/2017-February/000145.html - https://bugzilla.redhat.com/show_bug.cgi?id=1422452 - https://cgit.freedesktop.org/virglrenderer/commit/?id=114688c526fe45f341d75ccd1d85473c3b08f7a7 - http://www.securityfocus.com/bid/96276 - http://www.openwall.com/lists/oss-security/2017/02/15/8
CVE ID: CVE-2017-5995 State: PUBLISHED Published: 2017-03-01T20:00:00 Last Updated: 2024-08-05T15:18:49.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NetApp ONTAP Select Deploy administration utility 2.0 through 2.2.1 might allow remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/NTAP-20170228-0001 - http://www.securityfocus.com/bid/96522
CVE ID: CVE-2017-5996 State: PUBLISHED Published: 2017-10-26T18:00:00 Last Updated: 2024-08-05T15:18:49.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijacking because of weak %SYSTEMDRIVE%\ProgramData permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.vsecurity.com/download/advisories/20171026-1.txt - http://www.securitytracker.com/id/1039679
CVE ID: CVE-2017-5997 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-05T15:18:49.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SAP Message Server HTTP daemon in SAP KERNEL 7.21-7.49 allows remote attackers to cause a denial of service (memory consumption and process crash) via multiple msgserver/group?group= requests with a crafted size of the group parameter, aka SAP Security Note 2358972. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-16-038-sap-message-server-http-remote-dos/
CVE ID: CVE-2017-5998 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T15:18:49.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in InterSect Alliance SNARE Epilog for UNIX version 1.5 allows remote authenticated users to inject arbitrary web script or HTML via the str_log_name parameter in a "Web Admin Portal > Log Configuration > Add" action. Additional Analyst Notes: - CVE Program Container: References: - http://arthrocyber.com/research
CVE ID: CVE-2017-5999 State: PUBLISHED Published: 2017-03-06T06:11:00 Last Updated: 2024-08-05T15:18:49.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in sysPass 2.x before 2.1, in which an algorithm was never sufficiently reviewed by cryptographers. The fact that inc/SP/Core/Crypt.class is using the MCRYPT_RIJNDAEL_256() function (the 256-bit block version of Rijndael, not AES) instead of MCRYPT_RIJNDAEL_128 (real AES) could help an attacker to create unknown havoc in the remote system. Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2017020196 - https://github.com/nuxsmin/sysPass/commit/a0e2c485e53b3
ner: References: - https://cxsecurity.com/issue/WLB-2017020196 - https://github.com/nuxsmin/sysPass/commit/a0e2c485e53b370a7cc6d833e192c3c5bfd70e1f - http://www.securityfocus.com/bid/96562 - https://github.com/nuxsmin/sysPass/releases/tag/2.1.0.17022601
CVE ID: CVE-2017-6000 State: REJECTED Published: 2017-02-16T16:00:00 Last Updated: 2017-02-16T15:57:01 Description: No description available.
CVE ID: CVE-2017-6001 State: PUBLISHED Published: 2017-02-18T21:40:00 Last Updated: 2024-08-05T15:18:49.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a crafted application that makes concurrent perf_event_open system calls for moving a software group into a hardware context. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-6786. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96264 - https://bugzilla.redhat.com/show_bug.cgi?id=1422825 - https://github.com/torvalds/linux/commit/321027c1fe7
m/bid/96264 - https://bugzilla.redhat.com/show_bug.cgi?id=1422825 - https://github.com/torvalds/linux/commit/321027c1fe77f892f4ea07846aeae08cefbbb290 - https://access.redhat.com/errata/RHSA-2017:2669 - https://access.redhat.com/errata/RHSA-2018:1854 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7 - https://source.android.com/security/bulletin/pixel/2017-11-01 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=321027c1fe77f892f4ea07846aeae08cefbbb290 - https://access.redhat.com/errata/RHSA-2017:2077 - https://access.redhat.com/errata/RHSA-2017:1842 - http://www.debian.org/security/2017/dsa-3791 - http://www.openwall.com/lists/oss-security/2017/02/16/1
CVE ID: CVE-2017-6002 State: PUBLISHED Published: 2017-03-27T01:55:00 Last Updated: 2024-08-05T15:18:49.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Subrion CMS 4.0.5.10 has CSRF in admin/blog/add/. The attacker can add any blog entry, and can optionally insert XSS into that entry via the body parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.yiwang6.cn/Subrion.docx
CVE ID: CVE-2017-6003 State: PUBLISHED Published: 2017-03-27T01:55:00 Last Updated: 2024-08-05T15:18:49.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: dotCMS 3.7.0 has XSS reachable from ext/languages_manager/edit_language in portal/layout via the bottom two form fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97089 - http://www.yiwang6.cn/dotcms.docx
CVE ID: CVE-2017-6004 State: PUBLISHED Published: 2017-02-16T11:00:00 Last Updated: 2024-08-05T15:18:49.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled version) allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted regular expression. Additional Analyst Notes: - CVE Program Container: References: - https://vcs.pcre.org/pcre/code/trunk/pcre_jit_compile.c?r1=1676&r2=1680&view=patch - https://security.gentoo.org/glsa/201706-11 - http://www.securitytracker.com/id/1037850 - http://www.securityf
ew=patch - https://security.gentoo.org/glsa/201706-11 - http://www.securitytracker.com/id/1037850 - http://www.securityfocus.com/bid/96295 - https://access.redhat.com/errata/RHSA-2018:2486 - https://bugs.exim.org/show_bug.cgi?id=2035 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2017-6005 State: PUBLISHED Published: 2017-07-26T08:00:00 Last Updated: 2024-08-05T15:18:49.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Waves MaxxAudio, as installed on Dell laptops, adds a "WavesSysSvc" Windows service with File Version 1.1.6.0. This service has a vulnerability known as Unquoted Service Path. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. Additional Analyst Notes: - CVE Program Container: References: - http://justpentest.blogspot.in/2017/07/dell-unquoted-service-path-local.html
CVE ID: CVE-2017-6006 State: REJECTED Published: 2017-03-27T01:55:00 Last Updated: 2017-03-30T16:57:01 Description: No description available.
CVE ID: CVE-2017-6007 State: PUBLISHED Published: 2017-09-13T08:00:00 Last Updated: 2024-08-05T15:18:49.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean) allows local users to crash the OS via a malformed IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-7/ - https://www.nuitduhack.com/fr/planning/talk_10
CVE ID: CVE-2017-6008 State: PUBLISHED Published: 2017-09-13T08:00:00 Last Updated: 2024-08-05T15:18:49.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean) allows local users to escalate privileges via a malformed IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-7/ - https://www.nuitduhack.com/fr/planning/talk_10 - https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-10/ - https://gith
/fr/planning/talk_10 - https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-10/ - https://github.com/cbayet/Exploit-CVE-2017-6008 - https://www.exploit-db.com/exploits/43057/
CVE ID: CVE-2017-6009 State: PUBLISHED Published: 2017-02-16T11:00:00 Last Updated: 2024-08-05T15:18:49.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "decode_ne_resource_id" function in the "restable.c" source file. This is happening because the "len" parameter for memcpy is not checked for size and thus becomes a negative integer in the process, resulting in a failed memcpy. This affects wrestool. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201801-12 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854050 - http://www.securityfocus.com/
ity.gentoo.org/glsa/201801-12 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854050 - http://www.securityfocus.com/bid/96292 - http://rhn.redhat.com/errata/RHSA-2017-0837.html - http://www.debian.org/security/2017/dsa-3807
CVE ID: CVE-2017-6010 State: PUBLISHED Published: 2017-02-16T11:00:00 Last Updated: 2024-08-05T15:18:49.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "extract_icons" function in the "extract.c" source file. This issue can be triggered by processing a corrupted ico file and will result in an icotool crash. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201801-12 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854054 - http://rhn.redhat.com/errata/RHSA-2017-0837.html - http://www.securityfocus.com/bid/96288 - http://www.debian.org/security/2
://rhn.redhat.com/errata/RHSA-2017-0837.html - http://www.securityfocus.com/bid/96288 - http://www.debian.org/security/2017/dsa-3807
CVE ID: CVE-2017-6011 State: PUBLISHED Published: 2017-02-16T11:00:00 Last Updated: 2024-08-05T15:18:49.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in icoutils 0.31.1. An out-of-bounds read leading to a buffer overflow was observed in the "simple_vec" function in the "extract.c" source file. This affects icotool. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201801-12 - http://www.securityfocus.com/bid/96267 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854054 - http://rhn.redhat.com/errata/RHSA-2017-0837.html - http://www.debian.org/security/2017/dsa-3807
CVE ID: CVE-2017-6013 State: PUBLISHED Published: 2017-03-27T01:55:00 Last Updated: 2024-08-05T15:18:49.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Subrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97093 - https://www.yiwang6.cn/SubrionSQL.docx
CVE ID: CVE-2017-6014 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T15:18:49.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96284 - https://security.gentoo.org/glsa/201706-12 - http://www.debian.org/security/2017/dsa-3811
securityfocus.com/bid/96284 - https://security.gentoo.org/glsa/201706-12 - http://www.debian.org/security/2017/dsa-3811 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13416
CVE ID: CVE-2017-6015 State: PUBLISHED Published: 2018-05-11T13:00:00Z Last Updated: 2024-09-16T21:07:54.228Z Vendors: Rockwell Automation Products: FactoryTalk Activation Problem Types: CWE-428 Description: Without quotation marks, any whitespace in the file path for Rockwell Automation FactoryTalk Activation version 4.00.02 remains ambiguous, which may allow an attacker to link to or run a malicious executable. This may allow an authorized, but not privileged local user to execute arbitrary code with elevated privileges on the system. CVSS v3 base score: 8.8, CVSS vector string: (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Rockwell Automation has released a new version of FactoryTalk Activation,
string: (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Rockwell Automation has released a new version of FactoryTalk Activation, Version 4.01, which addresses the identified vulnerability. Rockwell Automation recommends upgrading to the latest version of FactoryTalk Activation, Version 4.01 or later. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96996 - https://rockwellautomation.custhelp.com/app/answers/detail/a_id/939382 - https://ics-cert.us-cert.gov/advisories/ICSA-17-047-02
CVE ID: CVE-2017-6016 State: PUBLISHED Published: 2017-05-19T02:43:00 Last Updated: 2024-08-05T15:18:49.401Z Vendors: n/a Products: LCDS Leao Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA Problem Types: CWE-284 Description: An Improper Access Control issue was discovered in LCDS - Leao Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA. The following versions are affected: Versions 4.1 and prior versions released before January 20, 2017. An Improper Access Control vulnerability has been identified, which may allow an authenticated user to modify application files to escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.s
application files to escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96942 - https://ics-cert.us-cert.gov/advisories/ICSA-17-075-01