Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-7240 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T15:56:36.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Miele Professional PST10 devices. The corresponding embedded webserver "PST10 WebServer" typically listens to port 80 and is prone to a directory traversal attack; therefore, an unauthenticated attacker may be able to exploit this issue to access sensitive information to aide in subsequent attacks. A Proof of Concept is GET /../../../../../../../../../../../../etc/shadow HTTP/1.1. This affects PG8527 devices 2.02 before 2.12, PG8527 devices 2.51 before 2.61, PG8527 devices 2.52 before 2.62, PG8527 de
his affects PG8527 devices 2.02 before 2.12, PG8527 devices 2.51 before 2.61, PG8527 devices 2.52 before 2.62, PG8527 devices 2.54 before 2.64, PG8528 devices 2.02 before 2.12, PG8528 devices 2.51 before 2.61, PG8528 devices 2.52 before 2.62, PG8528 devices 2.54 before 2.64, PG8535 devices 1.00 before 1.10, PG8535 devices 1.04 before 1.14, PG8536 devices 1.10 before 1.20, and PG8536 devices 1.14 before 1.24. Additional Analyst Notes: - CVE Program Container: References: - https://www.miele.de/en/m/miele-admits-communication-glitch-4072.htm - http://seclists.org/fulldisclosure/2017/Mar/63 - https://www.exploit-db.com/exploits/41718/ - https://ics-cert.us-cert.gov/advisories/ICSA-17-138-01 - h
re/2017/Mar/63 - https://www.exploit-db.com/exploits/41718/ - https://ics-cert.us-cert.gov/advisories/ICSA-17-138-01 - http://www.securityfocus.com/bid/97080
CVE ID: CVE-2017-7241 State: PUBLISHED Published: 2017-03-31T04:26:00 Last Updated: 2024-08-05T15:56:36.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the MantisBT Move Attachments page (move_attachments_page.php, part of admin tools) allows remote attackers to inject arbitrary code through a crafted 'type' parameter, if Content Security Protection (CSP) settings allows it. This is fixed in 1.3.9, 2.1.3, and 2.2.3. Note that this vulnerability is not exploitable if the admin tools directory is removed, as recommended in the "Post-installation and upgrade tasks" of the MantisBT Admin Guide. A reminder to do so is also displayed on
ended in the "Post-installation and upgrade tasks" of the MantisBT Admin Guide. A reminder to do so is also displayed on the login page. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/03/30/4 - http://www.securitytracker.com/id/1038169 - http://www.mantisbt.org/bugs/view.php?id=22568 - http://www.securityfocus.com/bid/97253
CVE ID: CVE-2017-7242 State: PUBLISHED Published: 2017-03-23T19:00:00 Last Updated: 2024-08-05T15:56:36.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) were discovered in admin/modules components in SLiMS 7 Cendana through 2017-03-23: the keywords parameter to bibliography/checkout_item.php, bibliography/dl_print.php, bibliography/item.php, bibliography/item_barcode_generator.php, bibliography/printed_card.php, circulation/loan_rules.php, master_file/author.php, master_file/coll_type.php, and master_file/doc_language.php and the quickReturnID field to circulation/ajax_action.php. Additional Analyst Notes: - CVE Program Container: References
nd the quickReturnID field to circulation/ajax_action.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97062 - http://www.daimacn.com/post/10.html
CVE ID: CVE-2017-7243 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T15:56:36.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service (DTLS peer crash) by sending a "Change cipher spec" packet without pre-handshake. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k1rh4/CVE/blob/master/tinydtls - http://www.securityfocus.com/bid/97193 - https://gist.github.com/k1rh4/25dcb124aef2a8a2a5f4677d64d1998b
CVE ID: CVE-2017-7244 State: PUBLISHED Published: 2017-03-23T21:00:00 Last Updated: 2024-08-05T15:56:36.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97067 - https://blogs.gentoo.org/ago/2017/03/20/libpcre-invalid-memory-read-in-_pcre32_xclass-pcre_xclass-c/ - https://access.redhat.com/errata/RHSA-2018:2486 - https://security.gentoo.org/glsa/201710-25
CVE ID: CVE-2017-7245 State: PUBLISHED Published: 2017-03-23T21:00:00 Last Updated: 2024-08-05T15:56:36.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97067 - https://blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-overflow-write-in-pcre32_copy_substring-pcre_get-c/ - https://access.redhat.com/errata/RHSA-2018:2486 - https://secur
er-overflow-write-in-pcre32_copy_substring-pcre_get-c/ - https://access.redhat.com/errata/RHSA-2018:2486 - https://security.gentoo.org/glsa/201710-25
CVE ID: CVE-2017-7246 State: PUBLISHED Published: 2017-03-23T21:00:00 Last Updated: 2024-08-05T15:56:36.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97067 - https://blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-overflow-write-in-pcre32_copy_substring-pcre_get-c/ - https://access.redhat.com/errata/RHSA-2018:2486 - https://sec
ffer-overflow-write-in-pcre32_copy_substring-pcre_get-c/ - https://access.redhat.com/errata/RHSA-2018:2486 - https://security.gentoo.org/glsa/201710-25
CVE ID: CVE-2017-7247 State: PUBLISHED Published: 2017-03-23T22:00:00 Last Updated: 2024-08-05T15:56:36.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) were discovered in Gazelle before 2017-03-19. The vulnerabilities exist due to insufficient filtration of user-supplied data (torrents, size) passed to the 'Gazelle-master/sections/tools/managers/multiple_freeleech.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WhatCD/Gazelle/issues/114 - https://github.com/scriptzteam/Gazelle---Torren
Container: References: - https://github.com/WhatCD/Gazelle/issues/114 - https://github.com/scriptzteam/Gazelle---Torrent-Tracker-ANTi-XSS - http://www.securityfocus.com/bid/97063
CVE ID: CVE-2017-7248 State: PUBLISHED Published: 2017-03-23T22:00:00 Last Updated: 2024-08-05T15:56:35.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) was discovered in Gazelle before 2017-03-19. The vulnerability exists due to insufficient filtration of user-supplied data (type) passed to the 'Gazelle-master/sections/better/transcode.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WhatCD/Gazelle/issues/111 - https://github.com/scriptzteam/Gazelle---Torrent-Tracker-ANTi-XSS - http://www.secu
thub.com/WhatCD/Gazelle/issues/111 - https://github.com/scriptzteam/Gazelle---Torrent-Tracker-ANTi-XSS - http://www.securityfocus.com/bid/97063
CVE ID: CVE-2017-7249 State: PUBLISHED Published: 2017-03-23T22:00:00 Last Updated: 2024-08-05T15:56:36.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) were discovered in Gazelle before 2017-03-19. The vulnerabilities exist due to insufficient filtration of user-supplied data (action, userid) passed to the 'Gazelle-master/sections/tools/data/ocelot_info.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WhatCD/Gazelle/issues/112 - https://github.com/scriptzteam/Gazelle---Torrent-Tracker-A
References: - https://github.com/WhatCD/Gazelle/issues/112 - https://github.com/scriptzteam/Gazelle---Torrent-Tracker-ANTi-XSS - http://www.securityfocus.com/bid/97063
CVE ID: CVE-2017-7250 State: PUBLISHED Published: 2017-03-23T22:00:00 Last Updated: 2024-08-05T15:56:36.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) was discovered in Gazelle before 2017-03-19. The vulnerability exists due to insufficient filtration of user-supplied data (action) passed to the 'Gazelle-master/sections/tools/finances/bitcoin_balance.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WhatCD/Gazelle/issues/113 - https://github.com/scriptzteam/Gazelle---Torrent-Tracker-ANTi-XSS -
es: - https://github.com/WhatCD/Gazelle/issues/113 - https://github.com/scriptzteam/Gazelle---Torrent-Tracker-ANTi-XSS - http://www.securityfocus.com/bid/97063
CVE ID: CVE-2017-7251 State: PUBLISHED Published: 2017-03-23T22:00:00 Last Updated: 2024-08-05T15:56:36.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) was discovered in pi-engine/pi 2.5.0. The vulnerability exists due to insufficient filtration of user-supplied data (preview) passed to the "pi-develop/www/script/editor/markitup/preview/markdown.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97061 - https://github.com/pi-engine/pi/issues/1523
CVE ID: CVE-2017-7252 State: PUBLISHED Published: 2023-11-03T00:00:00 Last Updated: 2024-09-12T19:35:01.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it easier for attackers to determine the cleartext password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://botan.randombit.net/security.html - https://bugzilla.suse.com/show_bug.cgi?id=1034591
CVE ID: CVE-2017-7253 State: PUBLISHED Published: 2017-03-30T18:00:00 Last Updated: 2024-08-05T15:56:35.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request to a certain URI. 2. Login to the IP camera with admin credentials so as to obtain full control of the target IP camera. During exploitation, the first JSON object encountered has a "Component error: login challenge!" message. The second JSON object encountered has a result indicating a successful admin login. Additional Analyst Notes: - CVE Program Container: References: - http://
s a result indicating a successful admin login. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97263 - https://gist.github.com/anonymous/16aca69b7dea27cb73ddebb0d9033b02
CVE ID: CVE-2017-7255 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T15:56:36.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_title parameter. Someone must login to conduct the attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.03i0.com/index.php/archives/113/ - http://www.securityfocus.com/bid/97203
CVE ID: CVE-2017-7256 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T15:56:36.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_summary parameter. Someone must login to conduct the attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.03i0.com/index.php/archives/113/ - http://www.securityfocus.com/bid/97204
CVE ID: CVE-2017-7257 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T15:56:36.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_content parameter. Someone must login to conduct the attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.03i0.com/index.php/archives/113/ - http://www.securityfocus.com/bid/97205
CVE ID: CVE-2017-7258 State: PUBLISHED Published: 2017-03-29T20:00:00 Last Updated: 2024-08-05T15:56:36.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTP Exploit in eMLi Portal in AuroMeera Technometrix Pvt. Ltd. eMLi allows an Attacker to View Restricted Information or (even more seriously) execute powerful commands on the web server which can lead to a full compromise of the system via Directory Path Traversal, as demonstrated by reading core-emli/Storage. The affected versions are eMLi School Management 1.0, eMLi College Campus Management 1.0, and eMLi University Management 1.0. Additional Analyst Notes: - CVE Program Container: References: - https://sudoat.blogspot.in/
University Management 1.0. Additional Analyst Notes: - CVE Program Container: References: - https://sudoat.blogspot.in/2017/03/path-traversal-vulnerability-in-emli.html - http://www.securityfocus.com/bid/97255
CVE ID: CVE-2017-7259 State: REJECTED Published: 2017-03-25T01:00:00 Last Updated: 2017-03-25T00:57:01 Description: No description available.
CVE ID: CVE-2017-7261 State: PUBLISHED Published: 2017-03-24T21:00:00 Last Updated: 2024-08-05T15:56:36.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.5 does not check for a zero value of certain levels data, which allows local users to cause a denial of service (ZERO_SIZE_PTR dereference, and GPF and possibly panic) via a crafted ioctl call for a /dev/dri/renderD* device. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?t=149037004200005&r=1&w=2 - http://www.securityfocus.com/bid/97096 - https://lists.freedesktop.org/archives/dr
arc.info/?t=149037004200005&r=1&w=2 - http://www.securityfocus.com/bid/97096 - https://lists.freedesktop.org/archives/dri-devel/2017-March/136814.html - https://bugzilla.redhat.com/show_bug.cgi?id=1435719
CVE ID: CVE-2017-7262 State: PUBLISHED Published: 2017-03-25T00:00:00 Last Updated: 2024-08-05T15:56:36.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AMD Ryzen processor with AGESA microcode through 2017-01-27 allows local users to cause a denial of service (system hang) via an application that makes a long series of FMA3 instructions, as demonstrated by the Flops test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97098 - https://news.ycombinator.com/item?id=13924192 - http://forum.hwbot.org/showthread.php?t=167605 - http://forum.hwbot.org/showpost.php?p=480524 - https://www.techpowerup.com/231536/amd-ryzen-mach
owthread.php?t=167605 - http://forum.hwbot.org/showpost.php?p=480524 - https://www.techpowerup.com/231536/amd-ryzen-machine-crashes-to-a-sequence-of-fma3-instructions
CVE ID: CVE-2017-7263 State: PUBLISHED Published: 2017-03-26T05:47:00 Last Updated: 2024-08-05T15:56:36.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8698. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/03/03/potrace-heap-based-buffer-overflow-in-bm_readbody_bmp-bitmap_io-c-incomplete-fix-for-cve-2016-8698/ - http://www.se
3/03/potrace-heap-based-buffer-overflow-in-bm_readbody_bmp-bitmap_io-c-incomplete-fix-for-cve-2016-8698/ - http://www.securityfocus.com/bid/97112
CVE ID: CVE-2017-7264 State: PUBLISHED Published: 2017-03-26T05:47:00 Last Updated: 2024-08-05T15:56:36.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted document. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/02/09/mupdf-use-after-free-in-fz_subsample_pixmap-pixmap-c/ - http://git.ghostscript.com/?p=mupdf.git%3Bh=2c4e5867ee699b1081527bc6c6ea0e99a35a5c27 - http://www.secu
ixmap-pixmap-c/ - http://git.ghostscript.com/?p=mupdf.git%3Bh=2c4e5867ee699b1081527bc6c6ea0e99a35a5c27 - http://www.securityfocus.com/bid/97111 - https://bugs.ghostscript.com/show_bug.cgi?id=697515
CVE ID: CVE-2017-7266 State: PUBLISHED Published: 2017-03-26T05:47:00 Last Updated: 2024-08-05T15:56:36.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Netflix/security_monkey/releases/tag/v0.8.0 - http://www.securityfocus.com/bid/97088 - https://github.com/Netflix/security_monkey/commit/3b4da13efabb05970c80f464a50d3c1c12262466 - https://github.com/Netflix/security_monkey/pull/482
CVE ID: CVE-2017-7269 State: PUBLISHED Published: 2017-03-27T01:55:00.000Z Last Updated: 2025-10-21T23:55:43.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41992/ - http://www.securityfocus.com/bid/97127 - https://medium.com/%40irakl
ces: - https://www.exploit-db.com/exploits/41992/ - http://www.securityfocus.com/bid/97127 - https://medium.com/%40iraklis/number-of-internet-facing-vulnerable-iis-6-0-to-cve-2017-7269-8bd153ef5812 - https://github.com/rapid7/metasploit-framework/pull/8162 - https://github.com/danigargu/explodingcan - http://www.securitytracker.com/id/1038168 - https://www.exploit-db.com/exploits/41738/ - https://support.microsoft.com/en-us/help/3197835/description-of-the-security-update-for-windows-xp-and-windows-server - https://0patch.blogspot.com/2017/03/0patching-immortal-cve-2017-7269.html - https://github.com/edwardz246003/IIS_exploit
CVE ID: CVE-2017-7271 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-05T15:56:36.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross-site scripting (XSS) vulnerability in Yii Framework before 2.0.11, when development mode is used, allows remote attackers to inject arbitrary web script or HTML via crafted request data that is mishandled on the debug-mode exception screen. Additional Analyst Notes: - CVE Program Container: References: - http://www.yiiframework.com/news/123/yii-2-0-11-is-released/ - https://github.com/yiisoft/yii2/commit/97171a0db7cda0a49931ee0c3b998ef50bd06756 - http://www.securityfocus.com/bid/97167 - https://github.com/yiiso
yii2/commit/97171a0db7cda0a49931ee0c3b998ef50bd06756 - http://www.securityfocus.com/bid/97167 - https://github.com/yiisoft/yii2/pull/13401
CVE ID: CVE-2017-7272 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-05T15:56:36.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen hostname argument with an expectation that the port number is constrained. Because a :port syntax is recognized, fsockopen will use the port number that is specified in the hostname argument, instead of the port number in the second argument of the function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97178 - http://www.securitytracker.com/id/1038158 - https://bugs.php.net/bug.p
ences: - http://www.securityfocus.com/bid/97178 - http://www.securitytracker.com/id/1038158 - https://bugs.php.net/bug.php?id=75505 - https://github.com/php/php-src/commit/bab0b99f376dac9170ac81382a5ed526938d595a - https://security.netapp.com/advisory/ntap-20180112-0001/ - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170403-0_PHP_Misbehavior_of_fsockopen_function_v10.txt - https://bugs.php.net/bug.php?id=74216
CVE ID: CVE-2017-7273 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-05T15:56:36.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cp_report_fixup function in drivers/hid/hid-cypress.c in the Linux kernel 3.2 and 4.x before 4.9.4 allows physically proximate attackers to cause a denial of service (integer underflow) or possibly have unspecified other impact via a crafted HID report. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.4 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1ebb71143758f45dc0fa76e2f48429e13b16d110 - https://github.com/torvalds/li
linux/kernel/git/torvalds/linux.git/commit/?id=1ebb71143758f45dc0fa76e2f48429e13b16d110 - https://github.com/torvalds/linux/commit/1ebb71143758f45dc0fa76e2f48429e13b16d110 - http://www.securityfocus.com/bid/97190 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4faec4a2ef5dd481682cc155cb9ea14ba2534b76
CVE ID: CVE-2017-7274 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-05T15:56:36.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: The r_pkcs7_parse_cms function in libr/util/r_pkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PE file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/commit/7ab66cca5bbdf6cb2d69339ef4f513d95e532dbf - http://www.securityfocus.com/bid/97181 - https://github.com/radare/radare2/issues/7152
CVE ID: CVE-2017-7275 State: PUBLISHED Published: 2017-03-27T18:00:00 Last Updated: 2024-08-05T15:56:36.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service (attempted large memory allocation and application crash) via a crafted file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862 and CVE-2016-8866. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/271 - https://blogs.gentoo.org/ago/2017/03/27/imagemagick-memory-allocation-failure-in-acquiremagickmemory-memory-c-incompl