Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-15124 State: PUBLISHED Published: 2018-01-09T21:00:00Z Last Updated: 2024-08-05T19:50:16.166Z Vendors: QEMU Products: Qemu Problem Types: CWE-770 Description: VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer updates sent to its client. If the client did not consume these updates, VNC server allocates growing memory to hold onto this data. A malicious remote VNC client could use this flaw to cause DoS to the server host. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102295 - https://bugzilla.redhat.co
alyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102295 - https://bugzilla.redhat.com/show_bug.cgi?id=1525195 - https://www.debian.org/security/2018/dsa-4213 - https://access.redhat.com/errata/RHSA-2018:0816 - https://access.redhat.com/errata/RHSA-2018:1104 - https://access.redhat.com/errata/RHSA-2018:1113 - https://usn.ubuntu.com/3575-1/ - https://access.redhat.com/errata/RHSA-2018:3062
CVE ID: CVE-2017-15125 State: PUBLISHED Published: 2018-07-27T15:00:00 Last Updated: 2024-08-05T19:50:16.404Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Red Hat Products: cloudforms Problem Types: CWE-79 Description: A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not properly sanitized for HTML and JavaScript input. An attacker could use this flaw to execute a stored XSS attack on an application administrator using CloudForms. Please note that CSP (Content Security Policy) prevents exploitation of this XSS however not all browsers support CSP. Additional Analyst Notes: - CVE Program Contain
prevents exploitation of this XSS however not all browsers support CSP. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15125 - https://access.redhat.com/errata/RHSA-2018:0380 - http://www.securityfocus.com/bid/102287
CVE ID: CVE-2017-15126 State: PUBLISHED Published: 2018-01-14T06:00:00 Last Updated: 2024-08-05T19:50:16.412Z Vendors: n/a Products: Linux Kernel before 4.13.6 Problem Types: CWE-119 Description: A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events with userfaultfd_ctx_put(). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102516 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id
s: - http://www.securityfocus.com/bid/102516 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=384632e67e0829deb8015ee6ad916b180049d252 - https://bugzilla.redhat.com/show_bug.cgi?id=1523481 - https://access.redhat.com/errata/RHSA-2018:1062 - https://github.com/torvalds/linux/commit/384632e67e0829deb8015ee6ad916b180049d252 - https://access.redhat.com/errata/RHSA-2018:0676 - https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.6 - https://access.redhat.com/security/cve/CVE-2017-15126
CVE ID: CVE-2017-15127 State: PUBLISHED Published: 2018-01-14T06:00:00 Last Updated: 2024-08-05T19:50:16.370Z Vendors: n/a Products: Linux kernel before 4.13 Problem Types: CWE-460 Description: A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VM_SHARED hugetlbfs mapping could trigger a local denial of service (BUG). Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5af10dfd0afc559bb4b0f7e3e8227a1578333995 - https://access.redhat.com/errata/RHSA-2018:1062 - https://bugzilla.redhat.com/show_bug.cgi?id=1525218 -
227a1578333995 - https://access.redhat.com/errata/RHSA-2018:1062 - https://bugzilla.redhat.com/show_bug.cgi?id=1525218 - https://access.redhat.com/errata/RHSA-2018:0676 - https://github.com/torvalds/linux/commit/5af10dfd0afc559bb4b0f7e3e8227a1578333995 - https://access.redhat.com/security/cve/CVE-2017-15127 - http://www.securityfocus.com/bid/102517
CVE ID: CVE-2017-15128 State: PUBLISHED Published: 2018-01-14T06:00:00 Last Updated: 2024-08-05T19:50:16.308Z Vendors: n/a Products: Linux kernel before 4.13.12 Problem Types: CWE-119 Description: A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13.12. A lack of size check could cause a denial of service (BUG). Additional Analyst Notes: - CVE Program Container: References: - https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.12 - https://access.redhat.com/security/cve/CVE-2017-15128 - https://bugzilla.redhat.com/show_bug.cgi?id=1525222 - https://github.com/torvalds/linux/commit/1e3921471354244f70fe268586ff94a97a6dd4df - http://gi
/show_bug.cgi?id=1525222 - https://github.com/torvalds/linux/commit/1e3921471354244f70fe268586ff94a97a6dd4df - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e3921471354244f70fe268586ff94a97a6dd4df
CVE ID: CVE-2017-15129 State: PUBLISHED Published: 2018-01-09T19:00:00 Last Updated: 2024-08-05T19:50:15.698Z Vendors: n/a Products: Linux kernel v4.0-rc1 through v4.15-rc5 Problem Types: CWE-362 Description: A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function get_net_ns_by_id() in net/core/net_namespace.c does not check for the net::count value after it has found a peer network in netns_ids idr, which could lead to double free and memory corruption. This vulnerability could allow an unprivileged local user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege esca
user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is thought to be unlikely. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3617-1/ - https://usn.ubuntu.com/3619-2/ - https://usn.ubuntu.com/3617-3/ - https://marc.info/?l=linux-netdev&m=151370451121029&w=2 - https://marc.info/?t=151370468900001&r=1&w=2 - https://usn.ubuntu.com/3632-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=1531174 - https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.11 - https://github.com/torvalds/linux/commit/21b5944350052d2583e82dd59b19a9ba94a007f0 - ht
x/kernel/v4.x/ChangeLog-4.14.11 - https://github.com/torvalds/linux/commit/21b5944350052d2583e82dd59b19a9ba94a007f0 - https://access.redhat.com/errata/RHSA-2018:1062 - https://access.redhat.com/errata/RHSA-2018:0654 - https://access.redhat.com/security/cve/CVE-2017-15129 - http://www.securityfocus.com/bid/102485 - http://seclists.org/oss-sec/2018/q1/7 - https://access.redhat.com/errata/RHSA-2018:0676 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=21b5944350052d2583e82dd59b19a9ba94a007f0 - https://usn.ubuntu.com/3617-2/ - https://usn.ubuntu.com/3619-1/ - https://access.redhat.com/errata/RHSA-2019:1946
CVE ID: CVE-2017-15130 State: PUBLISHED Published: 2018-03-02T15:00:00Z Last Updated: 2024-09-16T20:17:43.957Z Vendors: The Dovecot Project Products: dovecot Problem Types: CWE-400 Description: A denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random SNI server names could exploit TLS SNI configuration lookups, leading to excessive memory usage and the process to restart. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3587-1/ - http://seclists.org/oss-sec/2018/q1/205 - https://lists.debian.org/debian-lts-announce/2018/03/msg00036.html - https://www.debian.org/security/2018/dsa-4130 - https://usn.ubuntu.com/3587-
debian-lts-announce/2018/03/msg00036.html - https://www.debian.org/security/2018/dsa-4130 - https://usn.ubuntu.com/3587-2/ - https://bugzilla.redhat.com/show_bug.cgi?id=1532356 - https://www.dovecot.org/list/dovecot-news/2018-February/000370.html
CVE ID: CVE-2017-15131 State: PUBLISHED Published: 2018-01-09T21:00:00Z Last Updated: 2024-08-05T19:50:16.341Z Vendors: Red Hat, Inc. Products: RHEL shipped xdg-user-dirs and gnome-session Problem Types: CWE-284 Description: It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This only affects xdg-user-dirs before 0.15.5 as shipped with Red Hat Enterprise Linux. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1412762 - https://access.redhat.com/errata/RHSA-2018:0842 - https://lists.apache.org/thread.html/rf9fa47ab66495c78
gi?id=1412762 - https://access.redhat.com/errata/RHSA-2018:0842 - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE ID: CVE-2017-15132 State: PUBLISHED Published: 2018-01-25T20:00:00Z Last Updated: 2024-09-17T00:36:33.953Z Vendors: The Dovecot Project Products: dovecot Problem Types: CWE-400 Description: A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results in a memory leak in dovecot's auth client used by login processes. The leak has impact in high performance configuration where same login processes are reused and can cause the process to crash due to memory exhaustion. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dovecot/core/commit/1a29ed2f96da1be22fa5a4d96c7583aa81b8b060.patch - https://lists.debian.org/debian-lts-a
://github.com/dovecot/core/commit/1a29ed2f96da1be22fa5a4d96c7583aa81b8b060.patch - https://lists.debian.org/debian-lts-announce/2018/03/msg00036.html - https://bugzilla.redhat.com/show_bug.cgi?id=1532768 - https://www.debian.org/security/2018/dsa-4130 - https://usn.ubuntu.com/3556-1/ - https://usn.ubuntu.com/3556-2/ - https://www.dovecot.org/list/dovecot-news/2018-February/000370.html
CVE ID: CVE-2017-15133 State: PUBLISHED Published: 2018-01-29T19:00:00Z Last Updated: 2024-09-16T22:56:27.008Z Vendors: Miek Gieben Products: miekg-dns Problem Types: CWE-400 Description: A denial of service flaw was found in miekg-dns before 1.0.4. A remote attacker could use carefully timed TCP packets to block the DNS server from accepting new connections. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1538763 - https://github.com/miekg/dns/issues/627
CVE ID: CVE-2017-15134 State: PUBLISHED Published: 2018-03-01T21:00:00Z Last Updated: 2024-09-16T23:06:25.183Z Vendors: Red Hat, Inc. Products: 389-ds-base Problem Types: CWE-120 Description: A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x before 1.4.0.5 handled certain LDAP search filters. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:0163 - https://pagure.io/389-ds-base/c/6aa2acdc3cad9 - https://bug
erences: - https://access.redhat.com/errata/RHSA-2018:0163 - https://pagure.io/389-ds-base/c/6aa2acdc3cad9 - https://bugzilla.redhat.com/show_bug.cgi?id=1531573 - http://www.securityfocus.com/bid/102790 - https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00033.html
CVE ID: CVE-2017-15135 State: PUBLISHED Published: 2018-01-24T15:00:00Z Last Updated: 2024-08-05T19:50:16.357Z Vendors: Red Hat, Inc. Products: 389-ds-base Problem Types: CWE-287 Description: It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker could potentially use this flaw to bypass the authentication process under very rare and specific circumstances. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102811 - https://bugzilla.redhat.com/show_bug.cgi?id=1525628 - https://access.redhat.co
http://www.securityfocus.com/bid/102811 - https://bugzilla.redhat.com/show_bug.cgi?id=1525628 - https://access.redhat.com/errata/RHSA-2018:0414 - https://access.redhat.com/errata/RHSA-2018:0515 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00033.html
CVE ID: CVE-2017-15136 State: PUBLISHED Published: 2018-02-27T21:00:00Z Last Updated: 2024-08-05T19:50:16.369Z Vendors: Red Hat, Inc. Products: Satellite 6 Problem Types: CWE-20 Description: When registering and activating a new system with Red Hat Satellite 6 if the new systems hostname is then reset to the hostname of a previously registered system the previously registered system will lose access to updates including security updates. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103210 - https://bugzilla.redhat.com/show_bug.cgi?id=1540343
CVE ID: CVE-2017-15137 State: PUBLISHED Published: 2018-07-16T20:00:00 Last Updated: 2024-08-05T19:50:16.136Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: [UNKNOWN] Products: atomic-openshift Problem Types: CWE-20 Description: The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15137 - https://access.redhat.com/errata/RHBA-2018:0489
CVE ID: CVE-2017-15138 State: PUBLISHED Published: 2018-08-13T17:00:00 Last Updated: 2024-08-05T19:50:16.307Z Severity: MEDIUM (CVSS 5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: [UNKNOWN] Products: atomic-openshift Problem Types: CWE-200 Description: The OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker with sufficient privileges to view confidential webhook tokens. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15138 - https://access.redhat.com/errata/RHBA-2018:0489
CVE ID: CVE-2017-15139 State: PUBLISHED Published: 2018-08-27T17:00:00 Last Updated: 2024-08-05T19:50:16.404Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: OpenStack Foundation Products: openstack-cinder Problem Types: CWE-200 Description: A vulnerability was found in openstack-cinder releases up to and including Queens, allowing newly created volumes in certain storage volume configurations to contain previous data. It specifically affects ScaleIO volumes using thin volumes and zero padding. This could lead to leakage of sensitive information between tenants. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.openstack.org/wiki/
ation between tenants. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.openstack.org/wiki/OSSN/OSSN-0084 - https://access.redhat.com/errata/RHSA-2018:3601 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15139 - https://access.redhat.com/errata/RHSA-2019:0917
CVE ID: CVE-2017-15140 State: REJECTED Published: 2020-11-05T22:22:25 Last Updated: 2020-11-05T22:22:25 Description: No description available.
CVE ID: CVE-2017-15141 State: REJECTED Published: 2020-11-05T22:22:53 Last Updated: 2020-11-05T22:22:53 Description: No description available.
CVE ID: CVE-2017-15142 State: REJECTED Published: 2020-11-05T22:23:21 Last Updated: 2020-11-05T22:23:21 Description: No description available.
CVE ID: CVE-2017-15143 State: REJECTED Published: 2020-11-05T22:23:44 Last Updated: 2020-11-05T22:23:44 Description: No description available.
CVE ID: CVE-2017-15144 State: REJECTED Published: 2020-11-05T22:24:14 Last Updated: 2020-11-05T22:24:14 Description: No description available.
CVE ID: CVE-2017-15145 State: REJECTED Published: 2020-11-05T22:24:38 Last Updated: 2020-11-05T22:24:38 Description: No description available.
CVE ID: CVE-2017-15146 State: REJECTED Published: 2020-11-05T22:25:11 Last Updated: 2020-11-05T22:25:11 Description: No description available.
CVE ID: CVE-2017-15147 State: REJECTED Published: 2020-11-05T22:25:35 Last Updated: 2020-11-05T22:25:35 Description: No description available.
CVE ID: CVE-2017-15148 State: REJECTED Published: 2020-11-05T22:26:08 Last Updated: 2020-11-05T22:26:08 Description: No description available.
CVE ID: CVE-2017-15149 State: REJECTED Published: 2020-11-05T22:26:31 Last Updated: 2020-11-05T22:26:31 Description: No description available.
CVE ID: CVE-2017-15150 State: REJECTED Published: 2020-11-05T22:26:56 Last Updated: 2020-11-05T22:26:56 Description: No description available.
CVE ID: CVE-2017-15151 State: REJECTED Published: 2020-11-05T22:27:23 Last Updated: 2020-11-05T22:27:23 Description: No description available.
CVE ID: CVE-2017-15152 State: REJECTED Published: 2020-11-05T22:27:53 Last Updated: 2020-11-05T22:27:53 Description: No description available.
CVE ID: CVE-2017-15153 State: REJECTED Published: 2020-11-05T22:28:15 Last Updated: 2020-11-05T22:28:15 Description: No description available.
CVE ID: CVE-2017-15154 State: REJECTED Published: 2020-11-05T22:29:26 Last Updated: 2020-11-05T22:29:26 Description: No description available.
CVE ID: CVE-2017-15155 State: REJECTED Published: 2020-11-05T22:29:57 Last Updated: 2020-11-05T22:29:57 Description: No description available.
CVE ID: CVE-2017-15156 State: REJECTED Published: 2020-11-05T22:30:27 Last Updated: 2020-11-05T22:30:27 Description: No description available.
CVE ID: CVE-2017-15157 State: REJECTED Published: 2020-11-05T22:30:57 Last Updated: 2020-11-05T22:30:57 Description: No description available.
CVE ID: CVE-2017-15158 State: REJECTED Published: 2020-11-05T22:31:35 Last Updated: 2020-11-05T22:31:35 Description: No description available.
CVE ID: CVE-2017-15159 State: REJECTED Published: 2020-11-05T22:31:58 Last Updated: 2020-11-05T22:31:58 Description: No description available.
CVE ID: CVE-2017-15160 State: REJECTED Published: 2020-11-05T22:32:37 Last Updated: 2020-11-05T22:32:37 Description: No description available.
CVE ID: CVE-2017-15161 State: REJECTED Published: 2020-11-05T22:32:59 Last Updated: 2020-11-05T22:32:59 Description: No description available.
CVE ID: CVE-2017-15162 State: REJECTED Published: 2020-11-05T22:33:23 Last Updated: 2020-11-05T22:33:23 Description: No description available.
CVE ID: CVE-2017-15163 State: REJECTED Published: 2020-11-05T22:33:47 Last Updated: 2020-11-05T22:33:47 Description: No description available.
CVE ID: CVE-2017-15164 State: REJECTED Published: 2020-11-05T22:34:13 Last Updated: 2020-11-05T22:34:13 Description: No description available.
CVE ID: CVE-2017-15165 State: REJECTED Published: 2020-11-05T22:34:36 Last Updated: 2020-11-05T22:34:36 Description: No description available.
CVE ID: CVE-2017-15166 State: REJECTED Published: 2020-11-05T22:34:56 Last Updated: 2020-11-05T22:34:56 Description: No description available.
CVE ID: CVE-2017-15167 State: REJECTED Published: 2020-11-05T22:35:16 Last Updated: 2020-11-05T22:35:16 Description: No description available.
CVE ID: CVE-2017-15168 State: REJECTED Published: 2020-11-05T22:35:41 Last Updated: 2020-11-05T22:35:41 Description: No description available.
CVE ID: CVE-2017-15169 State: REJECTED Published: 2020-11-05T22:36:04 Last Updated: 2020-11-05T22:36:04 Description: No description available.
CVE ID: CVE-2017-15170 State: REJECTED Published: 2020-11-05T22:36:38 Last Updated: 2020-11-05T22:36:38 Description: No description available.
CVE ID: CVE-2017-15171 State: REJECTED Published: 2020-11-05T22:37:01 Last Updated: 2020-11-05T22:37:01 Description: No description available.
CVE ID: CVE-2017-15172 State: REJECTED Published: 2020-11-05T22:37:31 Last Updated: 2020-11-05T22:37:31 Description: No description available.
CVE ID: CVE-2017-15173 State: REJECTED Published: 2020-11-05T22:37:52 Last Updated: 2020-11-05T22:37:52 Description: No description available.
CVE ID: CVE-2017-15174 State: REJECTED Published: 2020-11-05T22:38:12 Last Updated: 2020-11-05T22:38:12 Description: No description available.
CVE ID: CVE-2017-15175 State: REJECTED Published: 2020-11-05T22:38:37 Last Updated: 2020-11-05T22:38:37 Description: No description available.
CVE ID: CVE-2017-15176 State: REJECTED Published: 2020-11-05T22:39:07 Last Updated: 2020-11-05T22:39:07 Description: No description available.
CVE ID: CVE-2017-15177 State: REJECTED Published: 2020-11-05T22:39:53 Last Updated: 2020-11-05T22:39:53 Description: No description available.
CVE ID: CVE-2017-15178 State: REJECTED Published: 2020-11-05T22:40:15 Last Updated: 2020-11-05T22:40:15 Description: No description available.
CVE ID: CVE-2017-15179 State: REJECTED Published: 2020-11-05T22:41:01 Last Updated: 2020-11-05T22:41:01 Description: No description available.
CVE ID: CVE-2017-15180 State: REJECTED Published: 2020-11-05T22:41:27 Last Updated: 2020-11-05T22:41:27 Description: No description available.
CVE ID: CVE-2017-15181 State: REJECTED Published: 2020-11-05T22:41:48 Last Updated: 2020-11-05T22:41:48 Description: No description available.
CVE ID: CVE-2017-15182 State: REJECTED Published: 2020-11-05T22:42:10 Last Updated: 2020-11-05T22:42:10 Description: No description available.
CVE ID: CVE-2017-15183 State: REJECTED Published: 2020-11-05T22:42:32 Last Updated: 2020-11-05T22:42:32 Description: No description available.
CVE ID: CVE-2017-15184 State: REJECTED Published: 2020-11-05T22:42:55 Last Updated: 2020-11-05T22:42:55 Description: No description available.
CVE ID: CVE-2017-15185 State: PUBLISHED Published: 2017-10-09T05:00:00 Last Updated: 2024-08-05T19:50:15.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbis_block_clear function with uninitialized data upon detection of invalid input, which allows remote attackers to cause a denial of service (application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/82 - https://www.exploit-db.com/exploits/42399/ - https://lists.debian.org/debian-lts/2017/09/msg00115.html - https://anonscm.debian.org/cgit/users/ron/mp3splt.git/commit/?id=18f018cd7
debian.org/debian-lts/2017/09/msg00115.html - https://anonscm.debian.org/cgit/users/ron/mp3splt.git/commit/?id=18f018cd774cb931116ce06a520dc0c5f9443932
CVE ID: CVE-2017-15186 State: PUBLISHED Published: 2017-10-24T17:00:00 Last Updated: 2024-08-05T19:50:16.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/10/20/4 - http://www.securityfocus.com/bid/101518 - https://www.debian.org/security/2017/dsa-4049
CVE ID: CVE-2017-15188 State: PUBLISHED Published: 2017-10-10T05:00:00 Last Updated: 2024-08-05T19:50:16.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: A persistent (stored) XSS vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the hosts array parameter to module/admin_device/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_device_index%20stored%20XSS