Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-6471 State: PUBLISHED Published: 2017-03-04T03:38:00 Last Updated: 2024-08-05T15:33:19.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by validating the capability length. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13348 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=62afef41277dfac37f515207ca73d33306e3302b - http://www.securityfocus.com/bid/96564 - https://www.wireshark.org
commit%3Bh=62afef41277dfac37f515207ca73d33306e3302b - http://www.securityfocus.com/bid/96564 - https://www.wireshark.org/security/wnpa-sec-2017-05.html - http://www.debian.org/security/2017/dsa-3811
CVE ID: CVE-2017-6472 State: PUBLISHED Published: 2017-03-04T03:38:00 Last Updated: 2024-08-05T15:33:19.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rtmpt.c by properly incrementing a certain sequence value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96571 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2b3a0909beff8963b390034c594e0b6be6a4e531 - https://www.wireshark.org/security/wnpa-sec-2017-04.html
k.git%3Ba=commit%3Bh=2b3a0909beff8963b390034c594e0b6be6a4e531 - https://www.wireshark.org/security/wnpa-sec-2017-04.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13347 - http://www.debian.org/security/2017/dsa-3811
CVE ID: CVE-2017-6473 State: PUBLISHED Published: 2017-03-04T03:38:00 Last Updated: 2024-08-05T15:33:19.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13431 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=7edc761a01cda8e1b37677f673985582330317d2 - http://www.debian.org/security/2017/dsa-3811 - https://www.wireshark.org/
3Bh=7edc761a01cda8e1b37677f673985582330317d2 - http://www.debian.org/security/2017/dsa-3811 - https://www.wireshark.org/security/wnpa-sec-2017-09.html - http://www.securityfocus.com/bid/96565
CVE ID: CVE-2017-6474 State: PUBLISHED Published: 2017-03-04T03:38:00 Last Updated: 2024-08-05T15:33:19.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating record sizes. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13429 - https://www.wireshark.org/security/wnpa-sec-2017-07.html - http://www.debian.org/security/2017/dsa-3811 - http://www.securityfocus.com/bid/96566 - https://code.wireshark.org/review/gitweb?p=wireshark.g
security/2017/dsa-3811 - http://www.securityfocus.com/bid/96566 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a998c9195f183d85f5b0bbeebba21a2d4d303d47
CVE ID: CVE-2017-6478 State: PUBLISHED Published: 2017-03-05T20:00:00 Last Updated: 2024-08-05T15:33:20.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96584 - https://github.com/paintballrefjosh/MaNGOSWebV4/issues/15 - https://github.com/paintballrefjosh/MaNGOSWebV4/releases/tag/4.0.8
CVE ID: CVE-2017-6479 State: PUBLISHED Published: 2017-03-05T20:00:00 Last Updated: 2024-08-05T15:33:20.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: FenixHosting/fenix-open-source before 2017-03-04 is vulnerable to a reflected XSS in forums/search.php (search-by-topic parameter). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96587 - https://github.com/FenixHosting/fenix-open-source/issues/2
CVE ID: CVE-2017-6480 State: PUBLISHED Published: 2017-03-05T20:00:00 Last Updated: 2024-08-05T15:33:19.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: groovel/cmsgroovel before 3.3.7-beta is vulnerable to a reflected XSS in commons/browser.php (path parameter). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/groovel/cmsgroovel/releases/tag/3.3.7-beta - http://www.securityfocus.com/bid/96585 - https://github.com/groovel/cmsgroovel/issues/2
CVE ID: CVE-2017-6481 State: PUBLISHED Published: 2017-03-05T20:00:00 Last Updated: 2024-08-05T15:33:20.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) issues were discovered in phpipam 1.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages (instructions in app/admin/instructions/preview.php; subnetId in app/admin/powerDNS/refresh-ptr-records.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpipam/phpipam/issues/992 - http://www.security
nalyst Notes: - CVE Program Container: References: - https://github.com/phpipam/phpipam/issues/992 - http://www.securityfocus.com/bid/96573
CVE ID: CVE-2017-6482 State: REJECTED Published: 2017-03-05T20:00:00 Last Updated: 2017-03-07T02:57:01 Description: No description available.
CVE ID: CVE-2017-6483 State: PUBLISHED Published: 2017-03-05T20:00:00 Last Updated: 2024-08-05T15:33:20.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) issues were discovered in ATutor 2.2.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages (lang_code in themes/*/admin/system_preferences/language_edit.tmpl.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96578 - https://github.com/atutor/ATutor/issues/129
CVE ID: CVE-2017-6484 State: PUBLISHED Published: 2017-03-05T20:00:00 Last Updated: 2024-08-05T15:33:19.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) issues were discovered in INTER-Mediator 5.5. The vulnerabilities exist due to insufficient filtration of user-supplied data (c and cred) passed to the "INTER-Mediator-master/Auth_Support/PasswordReset/resetpassword.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/INTER-Mediator/INTER-Mediator/issues/772
CVE ID: CVE-2017-6485 State: PUBLISHED Published: 2017-03-05T20:00:00 Last Updated: 2024-08-05T15:33:19.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) issue was discovered in php-calendar before 2017-03-03. The vulnerability exists due to insufficient filtration of user-supplied data (errorMsg) passed to the "php-calendar-master/error.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jasonjoh/php-calendar/issues/4
CVE ID: CVE-2017-6486 State: PUBLISHED Published: 2017-03-05T20:00:00 Last Updated: 2024-08-05T15:33:20.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) issue was discovered in reasoncms before 4.7.1. The vulnerability exists due to insufficient filtration of user-supplied data (nyroModalSel) passed to the "reasoncms-master/www/nyroModal/demoSent.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/reasoncms/reasoncms/releases/tag/v4.7.1 - https://github.com/reasoncms/reasoncms/issues/264
CVE ID: CVE-2017-6487 State: PUBLISHED Published: 2017-03-05T20:00:00 Last Updated: 2024-08-05T15:33:20.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (state, element, id, tab, cid) passed to the "EPESI-master/modules/Utils/RecordBrowser/favorites.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96586 - https://github.com/Telaxus/EPESI/issues/165
CVE ID: CVE-2017-6488 State: PUBLISHED Published: 2017-03-05T20:00:00 Last Updated: 2024-08-05T15:33:20.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (visible, tab, cid) passed to the EPESI-master/modules/Utils/RecordBrowser/Filters/save_filters.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96955 - https://github.com/Telaxus/EPESI/issues/166
CVE ID: CVE-2017-6489 State: PUBLISHED Published: 2017-03-05T20:00:00 Last Updated: 2024-08-05T15:33:19.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (element, state, cat, id, cid) passed to the EPESI-master/modules/Utils/Watchdog/subscribe.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96955 - https://github.com/Telaxus/EPESI/issues/169
CVE ID: CVE-2017-6490 State: PUBLISHED Published: 2017-03-05T20:00:00 Last Updated: 2024-08-05T15:33:20.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (cid, value, element, mode, tab, form_name, id) passed to the EPESI-master/modules/Utils/RecordBrowser/grid.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96955 - https://github.com/Telaxus/EPESI/issues/1
CVE Program Container: References: - http://www.securityfocus.com/bid/96955 - https://github.com/Telaxus/EPESI/issues/167
CVE ID: CVE-2017-6491 State: PUBLISHED Published: 2017-03-05T20:00:00 Last Updated: 2024-08-05T15:33:20.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (tooltip_id, callback, args, cid) passed to the EPESI-master/modules/Utils/Tooltip/req.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96955 - https://github.com/Telaxus/EPESI/issues/168
CVE ID: CVE-2017-6492 State: PUBLISHED Published: 2017-03-05T20:00:00 Last Updated: 2024-08-05T15:33:20.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection was discovered in adm_program/modules/dates/dates_function.php in Admidio 3.2.5. The POST parameter dat_cat_id is concatenated into a SQL query without any input validation/sanitization. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97034 - https://github.com/hamkovic/Admidio-3.2.5-SQLi
CVE ID: CVE-2017-6497 State: PUBLISHED Published: 2017-03-06T02:00:00 Last Updated: 2024-08-05T15:33:20.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ImageMagick 6.9.7. A specially crafted psd file could lead to a NULL pointer dereference (thus, a DoS). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96594 - https://bugs.debian.org/856882 - https://github.com/ImageMagick/ImageMagick/commit/7f2dc7a1afc067d0c89f12c82bcdec0445fb1b94
CVE ID: CVE-2017-6498 State: PUBLISHED Published: 2017-03-06T02:00:00 Last Updated: 2024-08-05T15:33:19.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/65f75a32a93ae4044c528a987a68366ecd4b46b9 - https://github.com/ImageMagick/ImageMagick/pull/359 - http://www.securityfocus.com/bid/96591 - http://www.debian.org/security/2017/dsa-3808 - https://bugs.debian.org/856878
CVE ID: CVE-2017-6499 State: PUBLISHED Published: 2017-03-06T02:00:00 Last Updated: 2024-08-05T15:33:19.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak (thus, a DoS). Additional Analyst Notes: - CVE Program Container: References: - https://www.imagemagick.org/discourse-server/viewtopic.php?f=23&p=142634 - http://www.securityfocus.com/bid/96590 - https://github.com/ImageMagick/ImageMagick/commit/3358f060fc182551822576b2c0a8850faab5d543 - http://www.debian.org/security/2017/dsa-3808 - https://bugs.debian.org/856880
CVE ID: CVE-2017-6500 State: PUBLISHED Published: 2017-03-06T02:00:00 Last Updated: 2024-08-05T15:33:20.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/3007531bfd326c5c1e29cd41d2cd80c166de8528 - https://bugs.debian.org/856879 - https://github.com/ImageMagick/ImageMagick/issues/376 - https://github.com/ImageMagick/ImageMagick/issues/375 - http://www.securityfocus.com/bid/96592 - http://www.debian.org/security/2017/dsa-3808
CVE ID: CVE-2017-6501 State: PUBLISHED Published: 2017-03-06T02:00:00 Last Updated: 2024-08-05T15:33:20.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file could lead to a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/d31fec57e9dfb0516deead2053a856e3c71e9751 - http://www.securityfocus.com/bid/96589 - https://bugs.debian.org/856881
CVE ID: CVE-2017-6502 State: PUBLISHED Published: 2017-03-06T02:00:00 Last Updated: 2024-08-05T15:33:19.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore (thus, a DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/126c7c98ea788241922c30df4a5633ea692cf8df - http://www.securityfocus.com/bid/96763
CVE ID: CVE-2017-6503 State: PUBLISHED Published: 2017-03-06T02:00:00 Last Updated: 2024-08-05T15:33:20.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebUI in qBittorrent before 3.3.11 did not escape many values, which could potentially lead to XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/qbittorrent/qBittorrent/commit/6ca3e4f094da0a0017cb2d483ec1db6176bb0b16 - http://www.securityfocus.com/bid/96758 - https://www.qbittorrent.org/news.php
CVE ID: CVE-2017-6504 State: PUBLISHED Published: 2017-03-06T02:00:00 Last Updated: 2024-08-05T15:33:20.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebUI in qBittorrent before 3.3.11 did not set the X-Frame-Options header, which could potentially lead to clickjacking. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/qbittorrent/qBittorrent/commit/f5ad04766f4abaa78374ff03704316f8ce04627d - https://www.qbittorrent.org/news.php
CVE ID: CVE-2017-6505 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:33:19.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0 allows local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors, a different vulnerability than CVE-2017-9330. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=95ed56939eb2eaa4e2f349fe6dcd13ca4edfd8fb - https://bugz
tml - http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=95ed56939eb2eaa4e2f349fe6dcd13ca4edfd8fb - https://bugzilla.redhat.com/show_bug.cgi?id=1429432 - https://security.gentoo.org/glsa/201704-01 - http://www.securityfocus.com/bid/96611 - http://www.openwall.com/lists/oss-security/2017/03/06/6
CVE ID: CVE-2017-6506 State: PUBLISHED Published: 2017-03-10T10:29:00 Last Updated: 2024-08-05T15:33:20.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Azure Data Expert Ultimate 2.2.16, the SMTP verification function suffers from a buffer overflow vulnerability, leading to remote code execution. The attack vector is a crafted SMTP daemon that sends a long 220 (aka "Service ready") string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96824 - http://packetstormsecurity.com/files/141502/Azure-Data-Expert-Ultimate-2.2.16-Buffer-Overflow.html - https://www.exploit-db.com/exploits/41545/
CVE ID: CVE-2017-6507 State: PUBLISHED Published: 2017-03-24T06:56:00 Last Updated: 2024-08-05T15:33:20.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles in AppArmor init scripts, upstart jobs, and/or systemd unit files allows an attacker to possibly have increased attack surfaces of processes that were intended to be confined by AppArmor. This is due to the common logic to handle 'restart' operations removing AppArmor profiles that aren't found in the typical filesystem locations, such as /etc/apparmor.d/. Userspace projects that manage their own AppArmor profiles in atypical direc
system locations, such as /etc/apparmor.d/. Userspace projects that manage their own AppArmor profiles in atypical directories, such as what's done by LXD and Docker, are affected by this flaw in the AppArmor init script logic. Additional Analyst Notes: - CVE Program Container: References: - http://bazaar.launchpad.net/~apparmor-dev/apparmor/master/revision/3648 - http://www.securityfocus.com/bid/97223 - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-6507.html - https://bugs.launchpad.net/apparmor/+bug/1668892 - http://bazaar.launchpad.net/~apparmor-dev/apparmor/master/revision/3647
CVE ID: CVE-2017-6508 State: PUBLISHED Published: 2017-03-07T08:39:00 Last Updated: 2024-08-05T15:33:20.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.gnu.org/archive/html/bug-wget/2017-03/msg00018.html - https://security.gentoo.org/glsa/201706-16 - http://www.securityfocus.com/bid/96877 - http://git.savannah.gnu.org/cgit/wget.git/commit/?id=4d729e322fae359a1aefaafec1144764a54e8ad4
CVE ID: CVE-2017-6509 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-05T15:33:19.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smith0r/burgundy-cms before 2017-03-06 is vulnerable to a reflected XSS in admin/components/menu/views/menuitems.php (id parameter). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Smith0r/burgundy-cms/issues/36
CVE ID: CVE-2017-6510 State: PUBLISHED Published: 2017-03-16T14:00:00 Last Updated: 2024-08-05T15:33:20.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker to list and download any file from any folder outside the FTP root Directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96944 - https://www.rapid7.com/db/modules/auxiliary/scanner/ftp/easy_file_sharing_ftp
CVE ID: CVE-2017-6511 State: PUBLISHED Published: 2017-03-07T19:00:00.000Z Last Updated: 2025-05-05T19:04:31.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/andrzuk/FineCMS/commit/2c80de96d403d4a2e81ac4c48f358bdffbe85ea0 - https://github.com/andrzuk/FineCMS/issues/2
CVE ID: CVE-2017-6512 State: PUBLISHED Published: 2017-06-01T16:00:00 Last Updated: 2024-08-05T15:33:19.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the rmtree and remove_tree functions in the File-Path module before 2.13 for Perl allows attackers to set the mode on arbitrary files via vectors involving directory-permission loosening logic. Additional Analyst Notes: - CVE Program Container: References: - http://cpansearch.perl.org/src/JKEENAN/File-Path-2.13/Changes - https://usn.ubuntu.com/3625-2/ - http://www.debian.org/security/2017/dsa-3873 - http://www.securityfocus.com/bid/99180 - http://www.securitytracker.com/id/1038610 - https://security.gentoo.or
a-3873 - http://www.securityfocus.com/bid/99180 - http://www.securitytracker.com/id/1038610 - https://security.gentoo.org/glsa/201709-12 - http://security.cucumberlinux.com/security/details.php?id=153 - https://rt.cpan.org/Ticket/Display.html?id=121951 - https://usn.ubuntu.com/3625-1/
CVE ID: CVE-2017-6513 State: PUBLISHED Published: 2017-03-11T06:46:00 Last Updated: 2024-08-05T15:33:20.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/sedrubal/a83fa22f1091025a5c1a14aabd711ad7 - http://www.virtualizor.com/blog/?p=1551