Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-15189 State: PUBLISHED Published: 2017-10-10T21:00:00 Last Updated: 2024-08-05T19:50:16.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.1, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by adding decrements. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101228 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=625bab309d9dd21db2d8ae2aa3511810d32842a8 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14080 - https://code.wireshark.org/review/23663 - https://www.wireshark.org/security/wnpa-sec-2017-4
lla/show_bug.cgi?id=14080 - https://code.wireshark.org/review/23663 - https://www.wireshark.org/security/wnpa-sec-2017-46.html
CVE ID: CVE-2017-15190 State: PUBLISHED Published: 2017-10-10T21:00:00 Last Updated: 2024-08-05T19:50:16.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.1, the RTSP dissector could crash. This was addressed in epan/dissectors/packet-rtsp.c by correcting the scope of a variable. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14077 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e27870eaa6efa1c2dac08aa41a67fe9f0839e6e0 - https://www.wireshark.org/security/wnpa-sec-2017-45.html - https://code.wireshark.org/review/23635 - http://www.securityfocus.com/bid/10122
rk.org/security/wnpa-sec-2017-45.html - https://code.wireshark.org/review/23635 - http://www.securityfocus.com/bid/101229
CVE ID: CVE-2017-15191 State: PUBLISHED Published: 2017-10-10T21:00:00 Last Updated: 2024-08-05T19:50:15.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash. This was addressed in epan/dissectors/packet-dmp.c by validating a string length. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2017-44.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14068 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - http://www.securityfocus.com/bid/101227 - https://code.wireshark.org/review/23591 - https://code.wi
9/01/msg00010.html - http://www.securityfocus.com/bid/101227 - https://code.wireshark.org/review/23591 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8dbb21dfde14221dab09b6b9c7719b9067c1f06e
CVE ID: CVE-2017-15192 State: PUBLISHED Published: 2017-10-10T21:00:00 Last Updated: 2024-08-05T19:50:15.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by considering a case where not all of the BTATT packets have the same encapsulation level. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14049 - https://code.wireshark.org/review/23470 - http://www.securityfocus.com/bid/101235 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3689dc1db36037436b16167
tyfocus.com/bid/101235 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3689dc1db36037436b1616715f9a3f888fc9a0f6 - https://www.wireshark.org/security/wnpa-sec-2017-42.html
CVE ID: CVE-2017-15193 State: PUBLISHED Published: 2017-10-10T21:00:00 Last Updated: 2024-08-05T19:50:16.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-mbim.c by changing the memory-allocation approach. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=afb9ff7982971aba6e42472de0db4c1bedfc641b - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14056 - https://code.wireshark.org/review/23537 - https://www.wireshark.org/security/wnpa-sec-2017
zilla/show_bug.cgi?id=14056 - https://code.wireshark.org/review/23537 - https://www.wireshark.org/security/wnpa-sec-2017-43.html - http://www.securityfocus.com/bid/101240
CVE ID: CVE-2017-15194 State: PUBLISHED Published: 2017-10-10T05:00:00 Last Updated: 2024-08-05T19:50:16.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039569 - https://github.com/Cacti/cacti/issues/1010 - https://github.com/Cacti/cacti/commit/93f661d8adcfa6618b11522cdab30e97bada33fd
CVE ID: CVE-2017-15195 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-16T20:42:52.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can edit swimlanes of a private project of another user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 - http://openwall.com/lists/oss-security/2017/10/04/9 - https://kanboard.net/news/version-1.0.47 - https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE ID: CVE-2017-15196 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-16T16:39:06.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can remove columns from a private project of another user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 - http://openwall.com/lists/oss-security/2017/10/04/9 - https://kanboard.net/news/version-1.0.47 - https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE ID: CVE-2017-15197 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-17T02:53:07.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new category to a private project of another user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 - http://openwall.com/lists/oss-security/2017/10/04/9 - https://kanboard.net/news/version-1.0.47 - https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE ID: CVE-2017-15198 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-16T16:54:12.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can edit a category of a private project of another user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 - http://openwall.com/lists/oss-security/2017/10/04/9 - https://kanboard.net/news/version-1.0.47 - https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE ID: CVE-2017-15199 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-16T19:09:17.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can edit metadata of a private project of another user, as demonstrated by Name, Email, Identifier, and Description. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 - http://openwall.com/lists/oss-security/2017/10/04/9 - https://kanboard.net/news/version-1.0.47 - https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE ID: CVE-2017-15200 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-16T20:27:13.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of another user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 - http://openwall.com/lists/oss-security/2017/10/04/9 - https://kanboard.net/news/version-1.0.47 - https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE ID: CVE-2017-15201 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-16T18:24:25.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 - http://openwall.com/lists/oss-security/2017/10/04/9 - https://kanboard.net/news/version-1.0.47 - https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE ID: CVE-2017-15202 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-16T21:07:29.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 - http://openwall.com/lists/oss-security/2017/10/04/9 - https://kanboard.net/news/version-1.0.47 - https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE ID: CVE-2017-15203 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-16T19:10:49.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories from a private project of another user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 - http://openwall.com/lists/oss-security/2017/10/04/9 - https://kanboard.net/news/version-1.0.47 - https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE ID: CVE-2017-15204 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-17T04:14:59.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can add automatic actions to a private project of another user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 - http://openwall.com/lists/oss-security/2017/10/04/9 - https://kanboard.net/news/version-1.0.47 - https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE ID: CVE-2017-15205 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-16T22:09:15.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project of another user. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/10/04/9 - https://kanboard.net/news/version-1.0.47 - https://github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1
CVE ID: CVE-2017-15206 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-17T02:20:49.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link to a private project of another user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 - http://openwall.com/lists/oss-security/2017/10/04/9 - https://kanboard.net/news/version-1.0.47 - https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE ID: CVE-2017-15207 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-16T16:48:23.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a private project of another user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 - http://openwall.com/lists/oss-security/2017/10/04/9 - https://kanboard.net/news/version-1.0.47 - https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE ID: CVE-2017-15208 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-16T22:02:12.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can remove automatic actions from a private project of another user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 - http://openwall.com/lists/oss-security/2017/10/04/9 - https://kanboard.net/news/version-1.0.47 - https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE ID: CVE-2017-15209 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-16T20:58:55.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another user. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/10/04/9 - https://kanboard.net/news/version-1.0.47 - https://github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1
CVE ID: CVE-2017-15210 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-17T01:07:02.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can see thumbnails of pictures from a private project of another user. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/10/04/9 - https://kanboard.net/news/version-1.0.47 - https://github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1
CVE ID: CVE-2017-15211 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-16T18:33:26.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link to a private project of another user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 - http://openwall.com/lists/oss-security/2017/10/04/9 - https://kanboard.net/news/version-1.0.47 - https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE ID: CVE-2017-15212 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-16T20:01:48.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kanboard before 1.0.47, by altering form data, an authenticated user can at least see the names of tags of a private project of another user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 - http://openwall.com/lists/oss-security/2017/10/04/9 - https://kanboard.net/news/version-1.0.47 - https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
CVE ID: CVE-2017-15213 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-16T22:35:06.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS vulnerability in Flyspray before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges, via the real_name or email_address field to themes/CleanFS/templates/common.editallusers.tpl. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Flyspray/flyspray/commit/754ec5d04348ef7ecb8cb02ade976dc412b031f8 - https://github.com/Flyspray/flyspray/releases/tag/v1.0-rc6 - http://openwall.com/lists/oss-security/2017/10/07/1
CVE ID: CVE-2017-15214 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-16T20:12:25.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS vulnerability in Flyspray 1.0-rc4 before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges and also to execute JavaScript against other users (including unauthenticated users), via the name, title, or id parameter to plugins/dokuwiki/lib/plugins/changelinks/syntax.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Flyspray/flyspray/releases/tag/v1.0-rc6 - http://openwall.com/lists/oss-security/2017/10/07/1 - https://github.com/Flyspray/
pray/flyspray/releases/tag/v1.0-rc6 - http://openwall.com/lists/oss-security/2017/10/07/1 - https://github.com/Flyspray/flyspray/commit/00cfae5661124f9d67ac6733db61b2bfee34dccc
CVE ID: CVE-2017-15215 State: PUBLISHED Published: 2017-10-10T05:00:00Z Last Updated: 2024-09-16T20:01:14.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to inject JavaScript via the searchtags parameter to index.php. If the victim is an administrator, an attacker can (for example) take over the admin session or change global settings or add/delete links. It is also possible to execute JavaScript against unauthenticated users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shaarli/Shaarli/pull/987 - http://openwall.com/lists/oss-security/2017/10/07/2 - https:/
eferences: - https://github.com/shaarli/Shaarli/pull/987 - http://openwall.com/lists/oss-security/2017/10/07/2 - https://github.com/shaarli/Shaarli/releases/tag/v0.9.2
CVE ID: CVE-2017-15216 State: PUBLISHED Published: 2017-10-10T18:00:00 Last Updated: 2024-08-05T19:50:16.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: MISP before 2.4.81 has a potential reflected XSS in a quickDelete action that is used to delete a sighting, related to app/View/Sightings/ajax/quickDeleteConfirmationForm.ctp and app/webroot/js/misp.js. Additional Analyst Notes: - CVE Program Container: References: - https://www.misp.software/Changelog.txt - https://github.com/MISP/MISP/commit/ca6f4a783a6ba65532dc8767446bda44773ec627
CVE ID: CVE-2017-15217 State: PUBLISHED Published: 2017-10-10T20:00:00 Last Updated: 2024-08-05T19:50:16.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in coders/sgi.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101231 - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/759
CVE ID: CVE-2017-15218 State: PUBLISHED Published: 2017-10-10T20:00:00 Last Updated: 2024-08-05T19:50:16.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in coders/png.c. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - http://www.securityfocus.com/bid/101233 - https://github.com/ImageMagick/ImageMagick/issues/760
CVE ID: CVE-2017-15219 State: PUBLISHED Published: 2017-10-10T21:00:00Z Last Updated: 2024-09-16T19:52:28.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dotCMS 4.1.1 application is vulnerable to Stored Cross-Site Scripting (XSS) affecting a vanity-urls Title field, a containers Description field, and a templates Description field. Additional Analyst Notes: - CVE Program Container: References: - https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/dotCMS%20%3E%204.1.1%20-%20Stored%20XSS
CVE ID: CVE-2017-15220 State: PUBLISHED Published: 2017-10-11T13:00:00 Last Updated: 2024-08-05T19:50:16.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ substring. This allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42973/
CVE ID: CVE-2017-15221 State: PUBLISHED Published: 2017-10-16T18:00:00 Last Updated: 2024-08-05T19:50:16.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/144590/ASX-To-MP3-3.1.3.7-Buffer-Overflow.html - https://www.exploit-db.com/exploits/42974/ - http://packetstormsecurity.com/files/154788/ASX-To-MP3-Converter-3.1.3.7-Stack-Overflow.html
CVE ID: CVE-2017-15222 State: PUBLISHED Published: 2017-10-24T17:00:00 Last Updated: 2024-08-05T19:50:15.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Ayukov NFTPD 2.0 and earlier allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43448/ - https://www.exploit-db.com/exploits/43025/ - https://www.exploit-db.com/exploits/46070/ - http://www.securityfocus.com/bid/101602
CVE ID: CVE-2017-15223 State: PUBLISHED Published: 2017-10-24T17:00:00 Last Updated: 2024-08-05T19:50:16.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources (memory consumption) via unspecified vectors, possibly triggering an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43026/
CVE ID: CVE-2017-15225 State: PUBLISHED Published: 2017-10-10T23:00:00Z Last Updated: 2024-09-17T01:56:31.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: _bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory leak) via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=b55ec8b676ed05d93ee49d6c79ae0403616c4fb0 - https://sourceware.org/bugzilla/show_bug.cgi?id=22212
CVE ID: CVE-2017-15226 State: PUBLISHED Published: 2017-10-10T23:00:00Z Last Updated: 2024-09-17T02:31:39.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel NBG6716 V1.00(AAKG.9)C0 devices allow command injection in the ozkerz component because beginIndex and endIndex are used directly in a popen call. Additional Analyst Notes: - CVE Program Container: References: - https://www.secarma.co.uk/labs/sohopelessly-broken-0-day-strategy/
CVE ID: CVE-2017-15227 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T19:50:16.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Irssi before 1.0.5, while waiting for the channel synchronisation, may incorrectly fail to remove destroyed channels from the query list, resulting in use-after-free conditions when updating the state later on. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4016 - https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html - https://irssi.org/security/irssi_sa_2017_10.txt - http://openwall.com/lists/oss-security/2017/10/22/4