Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-8849 State: PUBLISHED Published: 2017-05-17T14:00:00 Last Updated: 2024-08-05T16:48:22.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service. Additional Analyst Notes: - CVE Program Container: References: - https://cgit.kde.org/smb4k.git/commit/?id=a90289b0962663bc1d247bbbd31b9e65b2ca000e - https://www.exploit-db.com/exploits/42053/ - https://bugzilla.redhat.com/show_bug.cgi?id=1449656 - http://www.debian.org/security/2017/dsa-3951 - https://security.gentoo.org/glsa/201705-14 - https://www.kde.org/info/security/advisory-20170510-2
urity/2017/dsa-3951 - https://security.gentoo.org/glsa/201705-14 - https://www.kde.org/info/security/advisory-20170510-2.txt - https://cgit.kde.org/smb4k.git/commit/?id=71554140bdaede27b95dbe4c9b5a028a83c83cce - http://www.securityfocus.com/bid/98690 - http://www.openwall.com/lists/oss-security/2017/05/10/3 - http://www.securityfocus.com/bid/98737
CVE ID: CVE-2017-8850 State: PUBLISHED Published: 2017-05-11T18:00:00 Last Updated: 2024-08-05T16:48:22.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on OnePlus One, X, 2, 3, and 3T devices. Due to a lenient updater-script in the OnePlus OTA images, and the fact that both ROMs use the same OTA verification keys, attackers can install HydrogenOS over OxygenOS and vice versa, even on locked bootloaders, which allows for exploitation of vulnerabilities patched on one image but not on the other, in addition to expansion of the attack surface. This vulnerability can be exploited by Man-in-the-Middle (MiTM) attackers targeting the update process. This is p
rface. This vulnerability can be exploited by Man-in-the-Middle (MiTM) attackers targeting the update process. This is possible because the update transaction does not occur over TLS (CVE-2016-10370). In addition, physical attackers can reboot the phone into recovery, and then use 'adb sideload' to push the OTA (on OnePlus 3/3T 'Secure Start-up' must be off). Additional Analyst Notes: - CVE Program Container: References: - https://alephsecurity.com/vulns/aleph-2017020
CVE ID: CVE-2017-8851 State: PUBLISHED Published: 2017-05-11T18:00:00 Last Updated: 2024-08-05T16:48:22.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on OnePlus One and X devices. Due to a lenient updater-script on the OnePlus One and X OTA images, the fact that both products use the same OTA verification keys, and the fact that both products share the same 'ro.build.product' system property, attackers can install OTAs of one product over the other, even on locked bootloaders. That could theoretically allow for exploitation of vulnerabilities patched on one image but not on the other, in addition to expansion of the attack surface. Moreover, the vuln
rabilities patched on one image but not on the other, in addition to expansion of the attack surface. Moreover, the vulnerability may result in having the device unusable until a Factory Reset is performed. This vulnerability can be exploited by Man-in-the-Middle (MiTM) attackers targeting the update process. This is possible because the update transaction does not occur over TLS (CVE-2016-10370). In addition, physical attackers can reboot the phone into recovery, and then use 'adb sideload' to push the OTA. Additional Analyst Notes: - CVE Program Container: References: - https://alephsecurity.com/vulns/aleph-2017021
CVE ID: CVE-2017-8852 State: PUBLISHED Published: 2017-05-10T17:00:00 Last Updated: 2024-08-05T16:48:22.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP SAPCAR 721.510 has a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted CAR archive file received from an untrusted remote source. The problem is that the length of data written is an arbitrary number found within the file. The vendor response is SAP Security Note 2441560. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories/sap-sapcar-heap-based-buffer-overflow-vulnerability - https://www.exploit-db.com/exploits/41991/ - http://www.securityfoc
ap-sapcar-heap-based-buffer-overflow-vulnerability - https://www.exploit-db.com/exploits/41991/ - http://www.securityfocus.com/bid/98350
CVE ID: CVE-2017-8853 State: PUBLISHED Published: 2017-05-09T16:00:00Z Last Updated: 2024-09-16T19:35:39.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/app_config/controller/backuper.php via directory traversal in the file parameter during an act=db action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FiyoCMS/FiyoCMS/issues/2
CVE ID: CVE-2017-8854 State: PUBLISHED Published: 2017-05-09T20:00:00Z Last Updated: 2024-09-17T03:37:32.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: wolfSSL before 3.10.2 has an out-of-bounds memory access with loading crafted DH parameters, aka a buffer overflow triggered by a malformed temporary DH file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfssl/releases/tag/v3.10.2-stable
CVE ID: CVE-2017-8855 State: PUBLISHED Published: 2017-05-09T20:00:00Z Last Updated: 2024-09-16T19:00:56.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: wolfSSL before 3.11.0 does not prevent wc_DhAgree from accepting a malformed DH key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfssl/releases/tag/v3.11.0-stable
CVE ID: CVE-2017-8856 State: PUBLISHED Published: 2017-05-09T21:00:00 Last Updated: 2024-08-05T16:48:22.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated, arbitrary remote command execution using the 'bprd' process. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98379 - https://www.veritas.com/content/support/en_US/security/VTS17-004.html#Issue1
CVE ID: CVE-2017-8857 State: PUBLISHED Published: 2017-05-09T21:00:00 Last Updated: 2024-08-05T16:48:22.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote command execution using the 'bprd' process. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS17-004.html#Issue2 - http://www.securityfocus.com/bid/98384
CVE ID: CVE-2017-8858 State: PUBLISHED Published: 2017-05-09T21:00:00 Last Updated: 2024-08-05T16:48:22.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote file write using the 'bprd' process. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS17-004.html#Issue3 - http://www.securityfocus.com/bid/98381
CVE ID: CVE-2017-8859 State: PUBLISHED Published: 2017-05-09T21:00:00 Last Updated: 2024-08-05T16:48:22.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Veritas NetBackup Appliance 3.0 and earlier, unauthenticated users can execute arbitrary commands as root. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98383 - https://www.veritas.com/content/support/en_US/security/VTS17-005.html#Issue1
CVE ID: CVE-2017-8860 State: PUBLISHED Published: 2017-11-22T08:00:00 Last Updated: 2024-08-05T16:48:22.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information disclosure through directory listing on the Cohu 3960HD allows an attacker to view and download source code, log files, and other sensitive device information via a specially crafted web request with an extra / character, such as a "GET // HTTP/1.1" request. Additional Analyst Notes: - CVE Program Container: References: - https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/
CVE ID: CVE-2017-8861 State: PUBLISHED Published: 2017-11-22T08:00:00 Last Updated: 2024-08-05T16:48:22.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing authentication for the remote configuration port 1236/tcp on the Cohu 3960HD allows an attacker to change configuration parameters such as IP address and username/password via specially crafted XML SOAP packets. Additional Analyst Notes: - CVE Program Container: References: - https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/
CVE ID: CVE-2017-8862 State: PUBLISHED Published: 2017-11-22T08:00:00 Last Updated: 2024-08-05T16:48:22.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: The webupgrade function on the Cohu 3960HD does not verify the firmware upgrade files or process, allowing an attacker to upload a specially crafted postinstall.sh file that will be executed with "root" privileges. Additional Analyst Notes: - CVE Program Container: References: - https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/
CVE ID: CVE-2017-8863 State: PUBLISHED Published: 2017-11-22T08:00:00 Last Updated: 2024-08-05T16:48:22.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information disclosure of .esp source code on the Cohu 3960 allows an attacker to view sensitive information such as application logic with a simple web browser. Additional Analyst Notes: - CVE Program Container: References: - https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/
CVE ID: CVE-2017-8864 State: PUBLISHED Published: 2017-11-22T08:00:00 Last Updated: 2024-08-05T16:48:22.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD allows an attacker to manipulate options sent to the camera and cause malfunction or code execution, as demonstrated by a client-side "if (!passwordsAreEqual())" test. Additional Analyst Notes: - CVE Program Container: References: - https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/
CVE ID: CVE-2017-8865 State: PUBLISHED Published: 2017-12-11T21:00:00 Last Updated: 2024-08-05T16:48:22.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 do not provide sufficient protections against capture-replay attacks, allowing an attacker on the network to replay VoIP traffic between a Dino device and remote server to any other Dino device. Additional Analyst Notes: - CVE Program Container: References: - https://dl.acm.org/citation.cfm?id=3139947
CVE ID: CVE-2017-8866 State: PUBLISHED Published: 2017-12-11T21:00:00 Last Updated: 2024-08-05T16:48:22.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 share a fixed small pool of hardcoded keys, allowing a remote attacker to use a different Dino device to decrypt VoIP traffic between a child's Dino and remote server. Additional Analyst Notes: - CVE Program Container: References: - https://dl.acm.org/citation.cfm?id=3139947
CVE ID: CVE-2017-8867 State: PUBLISHED Published: 2017-12-11T21:00:00 Last Updated: 2024-08-05T16:48:22.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 use AES-128 with ECB mode to encrypt voice traffic between the device and remote server, allowing a malicious user to map encrypted traffic to a particular AES key index and gaining further access to eavesdrop on privacy-sensitive voice communication of a child and their Dino device. Additional Analyst Notes: - CVE Program Container: References: - https://dl.acm.org/citation.cfm?id=3139947
CVE ID: CVE-2017-8868 State: PUBLISHED Published: 2017-05-10T05:14:00 Last Updated: 2024-08-05T16:48:22.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: acp/core/files.browser.php in flatCore 1.4.7 allows file deletion via directory traversal in the delete parameter to acp/acp.php. The risk might be limited to requests submitted through CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatCore/flatCore-CMS/issues/30
CVE ID: CVE-2017-8869 State: PUBLISHED Published: 2017-07-27T13:00:00 Last Updated: 2024-08-05T16:48:22.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MediaCoder 0.8.48.5888 allows remote attackers to execute arbitrary code via a crafted .m3u file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42384/
CVE ID: CVE-2017-8870 State: PUBLISHED Published: 2017-07-27T18:00:00 Last Updated: 2024-08-05T16:48:22.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AudioCoder 0.8.46 allows remote attackers to execute arbitrary code via a crafted .m3u file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42385/
CVE ID: CVE-2017-8871 State: PUBLISHED Published: 2017-06-12T06:00:00 Last Updated: 2024-08-05T16:48:22.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted CSS file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=782649 - https://www.exploit-db.com/exploits/42147/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html - http://www.openwall.com/lists/oss-security/2020/08/13/3
CVE ID: CVE-2017-8872 State: PUBLISHED Published: 2017-05-10T05:14:00 Last Updated: 2024-08-05T16:48:22.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=775200 - https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html
CVE ID: CVE-2017-8874 State: PUBLISHED Published: 2017-05-10T05:14:00 Last Updated: 2024-08-05T16:48:22.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that (1) delete email campaigns or (2) delete contacts. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mautic/mautic/issues/3486
CVE ID: CVE-2017-8875 State: PUBLISHED Published: 2017-05-10T05:14:00 Last Updated: 2024-08-05T16:48:22.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the login redirect URL or logout redirect URL. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/clean-login/#developers - http://seclists.org/fulldisclosure/2017/May/23
CVE ID: CVE-2017-8876 State: PUBLISHED Published: 2017-05-10T05:14:00 Last Updated: 2024-08-05T16:48:22.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symphony 2 2.6.11 has XSS in the meta[navigation_group] parameter to content/content.blueprintssections.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DeuxHuitHuit/symphony-2/commit/cd69a2a516e6503c1a1c7e097ee90d255ec3d6b7
CVE ID: CVE-2017-8877 State: PUBLISHED Published: 2017-05-10T05:14:00 Last Updated: 2024-08-05T16:48:22.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASUS RT-AC* and RT-N* devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID. Additional Analyst Notes: - CVE Program Container: References: - https://wwws.nightwatchcybersecurity.com/2017/05/09/multiple-vulnerabilities-in-asus-routers/
CVE ID: CVE-2017-8878 State: PUBLISHED Published: 2017-05-10T05:14:00 Last Updated: 2024-08-05T16:48:22.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 allow remote authenticated users to discover the Wi-Fi password via WPS_info.xml. Additional Analyst Notes: - CVE Program Container: References: - https://wwws.nightwatchcybersecurity.com/2017/05/09/multiple-vulnerabilities-in-asus-routers/
CVE ID: CVE-2017-8879 State: PUBLISHED Published: 2017-05-10T14:00:00Z Last Updated: 2024-09-16T18:19:40.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr ERP/CRM 4.0.4 allows password changes without supplying the current password, which makes it easier for physically proximate attackers to obtain access via an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxmole.com/advisories/foxmole-2017-02-23.txt
CVE ID: CVE-2017-8890 State: PUBLISHED Published: 2017-05-10T16:00:00 Last Updated: 2024-08-05T16:48:22.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98562 - https://source.android.com/security/bulletin/2017-09-01 - https://access.redhat.com/errata/RHSA-2017:2669 - https://access.redhat.com/errata/RHSA-2018:1854 - http://git.kernel
- https://access.redhat.com/errata/RHSA-2017:2669 - https://access.redhat.com/errata/RHSA-2018:1854 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=657831ffc38e30092a2d5f03d385d710eb88b09a - https://github.com/torvalds/linux/commit/657831ffc38e30092a2d5f03d385d710eb88b09a - https://access.redhat.com/errata/RHSA-2017:2077 - http://www.debian.org/security/2017/dsa-3886 - https://access.redhat.com/errata/RHSA-2017:1842
CVE ID: CVE-2017-8891 State: PUBLISHED Published: 2017-05-10T16:00:00Z Last Updated: 2024-09-17T04:14:07.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dropbox Lepton 1.2.1 allows DoS (SEGV and application crash) via a malformed lepton file because the code does not ensure setup of a correct number of threads. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/05/10/1 - https://github.com/dropbox/lepton/issues/87 - https://github.com/dropbox/lepton/commit/82167c144a322cc956da45407f6dce8d4303d346
CVE ID: CVE-2017-8892 State: PUBLISHED Published: 2017-05-10T17:00:00Z Last Updated: 2024-09-17T04:13:45.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in OpenText Tempo Box 10.0.3 allows remote attackers to inject arbitrary web script or HTML persistently via the name of an uploaded image. Additional Analyst Notes: - CVE Program Container: References: - https://www.tarlogic.com/blog/vulnerabilidades-en-tempobox/
CVE ID: CVE-2017-8893 State: PUBLISHED Published: 2017-07-02T17:00:00 Last Updated: 2024-08-05T16:48:22.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroAdmin 4.1 uses a function to copy data between two pointers where the size of the data copied is taken directly from a network packet. This can cause a buffer overflow and denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.tarlogic.com/advisories/Tarlogic-2017-001.txt
CVE ID: CVE-2017-8894 State: PUBLISHED Published: 2017-07-02T17:00:00 Last Updated: 2024-08-05T16:48:22.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroAdmin 4.1 uses an insecure protocol (HTTP) to perform software updates. An attacker can hijack an update via man-in-the-middle in order to execute code in the machine. Additional Analyst Notes: - CVE Program Container: References: - https://www.tarlogic.com/advisories/Tarlogic-2017-001.txt
CVE ID: CVE-2017-8895 State: PUBLISHED Published: 2017-05-10T21:00:00 Last Updated: 2024-08-05T16:48:22.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulnerability in multiple agents that can lead to a denial of service or remote code execution. An unauthenticated attacker can use this vulnerability to crash the agent or potentially take control of the agent process and then the system it is running on. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98386 - https://www.veritas.com/content/sup
tes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98386 - https://www.veritas.com/content/support/en_US/security/VTS17-006.html#Issue1 - http://www.securitytracker.com/id/1038561 - https://www.exploit-db.com/exploits/42282/
CVE ID: CVE-2017-8896 State: PUBLISHED Published: 2017-07-17T21:00:00 Last Updated: 2024-08-05T16:48:22.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS on error pages by injecting code in url parameters. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/215410 - https://owncloud.org/security/advisory/?id=oc-sa-2017-004 - http://www.securityfocus.com/bid/99321
CVE ID: CVE-2017-8897 State: PUBLISHED Published: 2017-05-11T17:00:00Z Last Updated: 2024-09-16T23:40:53.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has pre-auth reflected XSS in the IPS UTF8 Converter v1.1.18: admin/convertutf8/index.php?controller= is the attack vector. This UTF8 Converter vulnerability can easily be used to make a malicious announcement affecting any Invision Power Board user who views the announcement. Additional Analyst Notes: - CVE Program Container: References: - http://zeroday.insecurity.zone/exploits/ipb_owned.txt - https://twitter.com/insecurity/status/862154908895780864 - https:
ttp://zeroday.insecurity.zone/exploits/ipb_owned.txt - https://twitter.com/insecurity/status/862154908895780864 - https://twitter.com/sxcurity/status/862284967715381248
CVE ID: CVE-2017-8898 State: PUBLISHED Published: 2017-05-11T17:00:00Z Last Updated: 2024-09-17T01:10:33.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has stored XSS in the Announcements, allowing privilege escalation from an Invision Power Board moderator to an admin. An attack uses the announce_content parameter in an index.php?/modcp/announcements/&action=create request. This is related to the "<> Source" option. Additional Analyst Notes: - CVE Program Container: References: - http://zeroday.insecurity.zone/exploits/ipb_owned.txt - https://twitter.com/insecurity/status/862154908895780864 - https://twitter
oday.insecurity.zone/exploits/ipb_owned.txt - https://twitter.com/insecurity/status/862154908895780864 - https://twitter.com/sxcurity/status/862284967715381248
CVE ID: CVE-2017-8899 State: PUBLISHED Published: 2017-05-11T17:00:00Z Last Updated: 2024-09-17T00:31:12.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has a composite of Stored XSS and Information Disclosure issues in the attachments feature found in User CP. This can be triggered by any Invision Power Board user and can be used to gain access to moderator/admin accounts. The primary cause is the ability to upload an SVG document with a crafted attribute such an onload; however, full path disclosure is required for exploitation. Additional Analyst Notes: - CVE Program Container: References: - http://zeroday.