Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-9961 State: PUBLISHED Published: 2017-09-25T19:00:00Z Last Updated: 2024-09-16T20:06:55.630Z Vendors: Schneider Electric SE Products: ProFace GP-Pro EX Problem Types: Arbitrary Code Execution Description: A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code installation requires an access to the computer. By placing a specific DLL/OCX file, an attacker is able to force the process to load arbitrary DLL and execute arbitrary code in the context of the process. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100114 - http://www.schne
itional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100114 - http://www.schneider-electric.com/en/download/document/SEVD-2017-195-01/
CVE ID: CVE-2017-9962 State: PUBLISHED Published: 2017-09-25T19:00:00Z Last Updated: 2024-09-16T19:15:45.794Z Vendors: Schneider Electric SE Products: ClearSCADA Problem Types: Memory Allocation Description: Schneider Electric's ClearSCADA versions released prior to August 2017 are susceptible to a memory allocation vulnerability, whereby malformed requests can be sent to ClearSCADA client applications to cause unexpected behavior. Client applications affected include ViewX and the Server Icon. Additional Analyst Notes: - CVE Program Container: References: - http://www.schneider-electric.com/en/download/document/SEVD-2017-264-01/
CVE ID: CVE-2017-9963 State: PUBLISHED Published: 2018-02-12T23:00:00Z Last Updated: 2024-09-16T18:29:56.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 for multiple state-changing requests. This type of attack requires some level of social engineering in order to get a legitimate user to click on or access a malicious link/site containing the CSRF attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.citect.schneider
ontaining the CSRF attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhere - http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/
CVE ID: CVE-2017-9964 State: PUBLISHED Published: 2018-01-02T03:00:00Z Last Updated: 2024-09-16T20:36:19.074Z Vendors: Schneider Electric SE Products: Pelco VideoXpert Enterprise Problem Types: Security bypass Description: A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized person can execute a directory traversal attack resulting in authentication bypass or session hijack. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02 - https://www.schneider-electric.com/en/download/document/SEVD-2017-339-01/ - http://www.securit
visories/ICSA-17-355-02 - https://www.schneider-electric.com/en/download/document/SEVD-2017-339-01/ - http://www.securityfocus.com/bid/102338
CVE ID: CVE-2017-9965 State: PUBLISHED Published: 2018-01-02T03:00:00Z Last Updated: 2024-09-17T03:27:58.239Z Vendors: Schneider Electric SE Products: Pelco VideoXpert Enterprise Problem Types: Exposure of sensitive information Description: An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory traversal attack, an unauthorized person can view web server files. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02 - https://www.schneider-electric.com/en/download/document/SEVD-2017-339-01/ - http://www.securityfocus.com/bid/102338
CVE ID: CVE-2017-9966 State: PUBLISHED Published: 2018-01-02T03:00:00Z Last Updated: 2024-09-16T22:55:48.511Z Vendors: Schneider Electric SE Products: Pelco VideoXpert Enterprise Problem Types: Privilege Escalation Description: A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges and the inserted code would execute at an elevated privilege level. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02 - https://www.schneider-electric.com/en/download/document/SEVD-2017-339-01/ - http://w
ert.gov/advisories/ICSA-17-355-02 - https://www.schneider-electric.com/en/download/document/SEVD-2017-339-01/ - http://www.securityfocus.com/bid/102338
CVE ID: CVE-2017-9967 State: PUBLISHED Published: 2018-02-12T23:00:00Z Last Updated: 2024-09-17T00:45:38.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: A security misconfiguration vulnerability exists in Schneider Electric's IGSS SCADA Software versions 12 and prior. Security configuration settings such as Address Space Layout Randomization (ASLR) and Data Execution prevention (DEP) were not properly configured resulting in weak security. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-037-01/ - http://www.securityfocus.com/bid/103022
CVE ID: CVE-2017-9968 State: PUBLISHED Published: 2018-02-12T23:00:00Z Last Updated: 2024-09-17T03:14:01.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: A security misconfiguration vulnerability exists in Schneider Electric's IGSS Mobile application versions 3.01 and prior in which a lack of certificate pinning during the TLS/SSL connection establishing process can result in a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-039-02/ - http://www.securityfocus.com/bid/103048 - https://ics-cert.us-cert.gov/advisories/ICSA-18-046-03
CVE ID: CVE-2017-9969 State: PUBLISHED Published: 2018-02-12T23:00:00Z Last Updated: 2024-09-16T20:37:41.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application version 3.01 and prior. Passwords are stored in clear text in the configuration which can result in exposure of sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103046 - https://www.schneider-electric.com/en/download/document/SEVD-2018-039-02/ - https://ics-cert.us-cert.gov/advisories/ICSA-18-046-03
CVE ID: CVE-2017-9970 State: PUBLISHED Published: 2018-02-12T23:00:00Z Last Updated: 2024-09-16T22:36:48.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution vulnerability exists in Schneider Electric's StruxureOn Gateway versions 1.1.3 and prior. Uploading a zip which contains carefully crafted metadata allows for the file to be uploaded to any directory on the host machine information which could lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103052 - https://ics-cert.us-cert.gov/advisories/ICSA-18-046-04 - https://www.schneider-electric.com/en/download/document/SEVD-2018-03
://ics-cert.us-cert.gov/advisories/ICSA-18-046-04 - https://www.schneider-electric.com/en/download/document/SEVD-2018-039-01/
CVE ID: CVE-2017-9971 State: REJECTED Published: 2018-03-08T15:00:00 Last Updated: 2018-03-08T14:57:01 Description: No description available.
CVE ID: CVE-2017-9972 State: REJECTED Published: 2018-03-08T15:00:00 Last Updated: 2018-03-08T14:57:01 Description: No description available.
CVE ID: CVE-2017-9973 State: REJECTED Published: 2018-03-08T15:00:00 Last Updated: 2018-03-08T14:57:01 Description: No description available.
CVE ID: CVE-2017-9974 State: REJECTED Published: 2018-03-08T15:00:00 Last Updated: 2018-03-08T14:57:01 Description: No description available.
CVE ID: CVE-2017-9975 State: REJECTED Published: 2018-03-08T15:00:00 Last Updated: 2018-03-08T14:57:01 Description: No description available.
CVE ID: CVE-2017-9977 State: PUBLISHED Published: 2017-07-12T16:00:00 Last Updated: 2024-08-05T17:24:59.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: AVG AntiVirus for MacOS with scan engine before 4668 might allow remote attackers to bypass malware detection by leveraging failure to scan inside disk image (aka DMG) files. Additional Analyst Notes: - CVE Program Container: References: - https://wwws.nightwatchcybersecurity.com/2017/07/06/avg-antivirus-for-macos-doesnt-scan-inside-disk-images-cve-2017-9977/
CVE ID: CVE-2017-9978 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-05T17:25:00.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, a flaw was found with the error message sent as a response for users that don't exist on the system. An attacker could leverage this information to fine-tune and enumerate valid accounts on the system by searching for common usernames. Additional Analyst Notes: - CVE Program Container: References: - http://www.vvvsecurity.com/advisories/vvvsecurity-advisory-2017-6943.txt - https://www.exploit-db.com/exploits/42517/ - http://seclists.org/fulldisclosure/2017/Aug/23 - h
advisory-2017-6943.txt - https://www.exploit-db.com/exploits/42517/ - http://seclists.org/fulldisclosure/2017/Aug/23 - http://packetstormsecurity.com/files/143780/OSNEXUS-QuantaStor-4-Information-Disclosure.html
CVE ID: CVE-2017-9979 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-05T17:24:59.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, if the REST call invoked does not exist, an error will be triggered containing the invalid method previously invoked. The response sent to the user isn't sanitized in this case. An attacker can leverage this issue by including arbitrary HTML or JavaScript code as a parameter, aka XSS. Additional Analyst Notes: - CVE Program Container: References: - http://www.vvvsecurity.com/advisories/vvvsecurity-advisory-2017-6943.txt - https://www.exploit-db.com/exploits/42517/ -
http://www.vvvsecurity.com/advisories/vvvsecurity-advisory-2017-6943.txt - https://www.exploit-db.com/exploits/42517/ - http://seclists.org/fulldisclosure/2017/Aug/23 - http://packetstormsecurity.com/files/143780/OSNEXUS-QuantaStor-4-Information-Disclosure.html
CVE ID: CVE-2017-9980 State: PUBLISHED Published: 2017-07-21T06:00:00 Last Updated: 2024-08-05T17:25:00.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" (aka tag_ipPing) feature within the web interface allows performing command injection, via the "pip" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://iscouncil.blogspot.com/2017/07/command-injection-in-green-packet-dx.html
CVE ID: CVE-2017-9982 State: PUBLISHED Published: 2017-06-27T16:00:00 Last Updated: 2024-08-05T17:25:00.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: TeamSpeak Client 3.0.19 allows remote attackers to cause a denial of service (application crash) via the &#5610; Unicode character followed by the &#3903; Unicode character. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99308 - https://pastebin.com/4Ngstncy - https://www.youtube.com/watch?v=8BrQCUOgQL0
CVE ID: CVE-2017-9984 State: PUBLISHED Published: 2017-06-28T06:00:00 Last Updated: 2024-08-05T17:25:00.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: The snd_msnd_interrupt function in sound/isa/msnd/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "double fetch" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99314 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=20e2b791
p://www.securityfocus.com/bid/99314 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=20e2b791796bd68816fa115f12be5320de2b8021 - https://usn.ubuntu.com/3754-1/ - https://github.com/torvalds/linux/commit/20e2b791796bd68816fa115f12be5320de2b8021 - https://bugzilla.kernel.org/show_bug.cgi?id=196131
CVE ID: CVE-2017-9985 State: PUBLISHED Published: 2017-06-28T06:00:00 Last Updated: 2024-08-05T17:25:00.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: The snd_msndmidi_input_read function in sound/isa/msnd/msnd_midi.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "double fetch" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.kernel.org/show_bug.cgi?id=196133 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit
tps://bugzilla.kernel.org/show_bug.cgi?id=196133 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=20e2b791796bd68816fa115f12be5320de2b8021 - http://www.securityfocus.com/bid/99335 - https://usn.ubuntu.com/3754-1/ - https://github.com/torvalds/linux/commit/20e2b791796bd68816fa115f12be5320de2b8021
CVE ID: CVE-2017-9986 State: PUBLISHED Published: 2017-06-28T06:00:00 Last Updated: 2024-08-05T17:25:00.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "double fetch" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99336 - https://bugzilla.kernel.org/show_bug.cgi?id=196135
CVE ID: CVE-2017-9987 State: PUBLISHED Published: 2017-06-28T06:00:00 Last Updated: 2024-08-05T17:25:00.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer overflow in the function hpel_motion in mpegvideo_motion.c in libav 12.1. A crafted input can lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1067 - https://lists.debian.org/debian-lts-announce/2019/09/msg00000.html
CVE ID: CVE-2017-9988 State: PUBLISHED Published: 2017-06-28T06:00:00 Last Updated: 2024-08-05T17:25:00.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: The readEncUInt30 function in util/read.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack against parser.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/85 - https://lists.debian.org/debian-lts-announce/2017/11/msg00022.html - https://security.gentoo.org/glsa/201904-24
CVE ID: CVE-2017-9989 State: PUBLISHED Published: 2017-06-28T06:00:00 Last Updated: 2024-08-05T17:25:00.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: util/outputtxt.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2017/11/msg00022.html - https://github.com/libming/libming/issues/86 - https://security.gentoo.org/glsa/201904-24
CVE ID: CVE-2017-9990 State: PUBLISHED Published: 2017-06-28T06:00:00 Last Updated: 2024-08-05T17:25:00.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the color_string_to_rgba function in libavcodec/xpmdec.c in FFmpeg 3.3 before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/cb243972b121b1ae6b60a78ff55a0506c69f3879 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1466 - http://www.securityfocus.com/bid/99313
CVE ID: CVE-2017-9991 State: PUBLISHED Published: 2017-06-28T06:00:00 Last Updated: 2024-08-05T17:25:00.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1399 - http://www.securityfocus.com/bid/99316 - https://github.com/FFmpeg/FFmpeg/commit
.org/p/oss-fuzz/issues/detail?id=1399 - http://www.securityfocus.com/bid/99316 - https://github.com/FFmpeg/FFmpeg/commit/441026fcb13ac23aa10edc312bdacb6445a0ad06
CVE ID: CVE-2017-9992 State: PUBLISHED Published: 2017-06-28T06:00:00 Last Updated: 2024-08-05T17:25:00.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/f52fbf4f3ed02a7d872d8a102006f29b4421f360 - http://www.securityfocus.com/bid/99319 - https://bugs.chromium.org
peg/commit/f52fbf4f3ed02a7d872d8a102006f29b4421f360 - http://www.securityfocus.com/bid/99319 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1345 - http://www.debian.org/security/2017/dsa-4012
CVE ID: CVE-2017-9993 State: PUBLISHED Published: 2017-06-28T06:00:00 Last Updated: 2024-08-05T17:25:00.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streaming filename extensions and demuxer names, which allows attackers to read arbitrary files via crafted playlist data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/a5d849b149ca67ced2d271dc84db0bc95a548abb - http://www.debian.org/security/2017/dsa-3957 - https://github.com/FFmpeg/FFmpeg/commit/189ff4219644532bdfa7bab28dfedaee4d6d4021 -
w.debian.org/security/2017/dsa-3957 - https://github.com/FFmpeg/FFmpeg/commit/189ff4219644532bdfa7bab28dfedaee4d6d4021 - http://www.securityfocus.com/bid/99315 - https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html
CVE ID: CVE-2017-9994 State: PUBLISHED Published: 2017-06-28T06:00:00 Last Updated: 2024-08-05T17:25:00.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pix_fmt is set, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to the vp8_decode_mb_row_no_filter and pred8x8_128_dc_8_c functions. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1
Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1435 - http://www.securityfocus.com/bid/99317 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1434 - https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html - https://github.com/FFmpeg/FFmpeg/commit/6b5d3fb26fb4be48e4966e4b1d97c2165538d4ef
CVE ID: CVE-2017-9995 State: PUBLISHED Published: 2017-06-28T06:00:00 Last Updated: 2024-08-05T17:25:00.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/scpr.c in FFmpeg 3.3 before 3.3.1 does not properly validate height and width data, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1519 - https://github.com/FFmpeg/FFmpeg/commit/2171dfae8c065878a2e130390eb78cf2947a5b69 - http://www.securityfocus.com/bid/99320 - https://github.
FFmpeg/FFmpeg/commit/2171dfae8c065878a2e130390eb78cf2947a5b69 - http://www.securityfocus.com/bid/99320 - https://github.com/FFmpeg/FFmpeg/commit/7ac5067146613997bb38442cb022d7f41321a706 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1478
CVE ID: CVE-2017-9996 State: PUBLISHED Published: 2017-06-28T06:00:00 Last Updated: 2024-08-05T17:25:00.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not exclude the CHUNKY format, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1378 - http://www.securityfocus.com/bid
m Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1378 - http://www.securityfocus.com/bid/99323 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1427 - https://github.com/FFmpeg/FFmpeg/commit/1e42736b95065c69a7481d0cf55247024f54b660 - https://github.com/FFmpeg/FFmpeg/commit/e1b60aad77c27ed5d4dfc11e5e6a05a38c70489d
CVE ID: CVE-2017-9998 State: PUBLISHED Published: 2017-06-28T11:14:00 Last Updated: 2024-08-05T17:25:00.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1465756 - http://www.securityfocus.com/bid/99310
CVE ID: CVE-2017-9999 State: REJECTED Published: 2017-03-16T16:00:00Z Last Updated: 2024-09-16T23:36:08.603Z Description: No description available.
CVE ID: CVE-2018-0001 State: PUBLISHED Published: 2018-01-10T22:00:00Z Last Updated: 2024-09-17T03:48:27.310Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: Remote code execution Description: A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D67; 12.3 versions prior to 12.3R12-S5; 12.3X48 versions prior to 12.3X48-D35; 14.1 versions prior to 14.1R8