Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-9582 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "BNB Mobile Banking" by Brady National Bank app 3.0.0 -- aka bnb-mobile-banking/id674215747 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9583 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Charlevoix State Bank" by Charlevoix State Bank app 3.0.1 -- aka charlevoix-state-bank/id1128963717 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9584 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "HBO Mobile Banking" by Heritage Bank of Ozarks app 3.0.0 -- aka hbo-mobile-banking/id860224933 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9585 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Community State Bank - Lamar Mobile Banking" by Community State Bank - Lamar app 3.0.3 -- aka community-state-bank-lamar-mobile-banking/id1083927885 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9586 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "FSBY Mobile Banking" by First State Bank of Yoakum TX app 3.0.0 -- aka fsby-mobile-banking/id899136434 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9587 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "PCSB BANK Mobile" by PCSB Bank app 3.0.4 -- aka pcsb-bank-mobile/id1067472090 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9588 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Oritani Mobile Banking" by Oritani Bank app 3.0.0 -- aka oritani-mobile-banking/id778851066 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9589 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "SCSB Shelbyville IL Mobile Banking" by Shelby County State Bank app 3.0.0 -- aka scsb-shelbyville-il-mobile-banking/id938960224 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9590 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "State Bank of Waterloo Mobile Banking" by State Bank of Waterloo app 3.0.2 -- aka state-bank-of-waterloo-mobile-banking/id555321714 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9591 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "PCB Mobile" by Phelps County Bank app 3.0.2 -- aka pcb-mobile/id436891295 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9592 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Your Legacy Federal Credit Union Mobile Banking" by Your Legacy Federal Credit Union app 3.0.1 -- aka your-legacy-federal-credit-union-mobile-banking/id919131389 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9593 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Oculina Mobile Banking" by Oculina Bank app 3.0.0 -- aka oculina-mobile-banking/id867025690 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9594 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "SVB Mobile" by Sauk Valley Bank Mobile Banking app 3.0.0 -- aka svb-mobile/id796429885 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9595 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "First State Bank of Bigfork Mobile Banking" by First State Bank of Bigfork app 4.0.3 -- aka first-state-bank-of-bigfork-mobile-banking/id1133969876 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9596 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "CFB Mobile Banking" by Citizens First Bank Wisconsin app 3.0.1 -- aka cfb-mobile-banking/id1081102805 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9597 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Blue Ridge Bank and Trust Co. Mobile Banking" by Blue Ridge Bank and Trust Co. app 3.0.1 -- aka blue-ridge-bank-and-trust-co-mobile-banking/id699679197 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9598 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Morton Credit Union Mobile Banking" by Morton Credit Union app 3.0.1 -- aka morton-credit-union-mobile-banking/id1119623070 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9599 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Fountain Trust Mobile Banking" by FOUNTAIN TRUST COMPANY app before 3.2.0 -- aka fountain-trust-mobile-banking/id891343006 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5 - https://itunes.apple.com/us/app/foun
ory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5 - https://itunes.apple.com/us/app/fountain-trust-mobile-banking/id891343006
CVE ID: CVE-2017-9600 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Peoples Bank Tulsa" by Peoples Bank - OK app 3.0.2 -- aka peoples-bank-tulsa/id1074279285 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9601 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "FNB Kemp Mobile Banking" by First National Bank of Kemp app 3.0.2 -- aka fnb-kemp-mobile-banking/id571448725 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9602 State: PUBLISHED Published: 2017-06-16T13:00:00 Last Updated: 2024-08-05T17:11:02.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-management component. An unauthenticated user can access the file upload and deletion functionality. Through this functionality, a user can upload an ASPX script to Uploads/Documents/ to run any arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42184/
CVE ID: CVE-2017-9603 State: PUBLISHED Published: 2017-06-13T18:00:00 Last Updated: 2024-08-05T17:11:02.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitrary SQL commands via the jobid parameter to wp-admin/edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-jobs/#developers - https://www.exploit-db.com/exploits/42172/ - https://wpvulndb.com/vulnerabilities/8847
CVE ID: CVE-2017-9604 State: PUBLISHED Published: 2017-06-13T13:00:00Z Last Updated: 2024-09-17T02:16:34.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - https://commits.kde.org/messagelib/c54706e990bbd6498e7b1597ec7900bc809e8197 - https://commits.kde.org/kmail/78c5552be2f00a4ac25bd77ca39386522fca70a8
CVE ID: CVE-2017-9605 State: PUBLISHED Published: 2017-06-13T19:00:00 Last Updated: 2024-08-05T17:11:02.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vmw_gb_surface_define_ioctl function (accessible via DRM_IOCTL_VMW_GB_SURFACE_CREATE) in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.11.4 defines a backup_handle variable but does not give it an initial value. If one attempts to create a GB surface, with a previously allocated DMA buffer to be used as a backup buffer, the backup_handle variable does not get written to and is then later returned to user space, allowing local users to obtain sensitive information from uninitialized kernel memory via
later returned to user space, allowing local users to obtain sensitive information from uninitialized kernel memory via a crafted ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3927 - https://github.com/torvalds/linux/commit/07678eca2cf9c9a18584e546c2b2a0d0c9a3150c - http://www.debian.org/security/2017/dsa-3945 - http://www.securityfocus.com/bid/99095 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=07678eca2cf9c9a18584e546c2b2a0d0c9a3150c
CVE ID: CVE-2017-9606 State: PUBLISHED Published: 2017-06-15T03:00:00 Last Updated: 2024-08-05T17:11:02.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Infotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by placing a Trojan horse ViPNet update file in the update folder. The attack succeeds because of incorrect folder permissions in conjunction with a lack of integrity and authenticity checks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Houl777/CVE-2017-9606
CVE ID: CVE-2017-9607 State: PUBLISHED Published: 2017-09-20T16:00:00 Last Updated: 2024-08-05T17:11:02.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4 might allow attackers to write arbitrary data to secure memory, bypass the bl1_plat_mem_check protection mechanism, cause a denial of service, or possibly have unspecified other impact via a crafted AArch32 image, which triggers an integer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ARM-software/arm-trusted-firmware/blob/v1.4/docs/change-log.rst#new-features - https://github.com/ARM-software/arm-trusted-firmware/w
arm-trusted-firmware/blob/v1.4/docs/change-log.rst#new-features - https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-4
CVE ID: CVE-2017-9608 State: PUBLISHED Published: 2017-12-27T19:00:00 Last Updated: 2024-08-05T17:11:02.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dnxhd decoder in FFmpeg before 3.2.6, and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted mov file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/0a709e2a10b8288a0cc383547924ecfe285cef89 - http://www.securityfocus.com/bid/100348 - https://www.debian.org/security/2017/dsa-3957 - https://github.com/FFmpeg/FFmpeg/commit/611b35627488a8d0763e75c25ee0875c5b7987dd - http://www.openwall.com/lists/oss-security
://github.com/FFmpeg/FFmpeg/commit/611b35627488a8d0763e75c25ee0875c5b7987dd - http://www.openwall.com/lists/oss-security/2017/08/15/8 - https://github.com/FFmpeg/FFmpeg/commit/31c1c0b46a7021802c3d1d18039fca30dba5a14e - http://www.openwall.com/lists/oss-security/2017/08/14/1
CVE ID: CVE-2017-9609 State: PUBLISHED Published: 2017-07-17T21:00:00 Last Updated: 2024-08-05T17:11:02.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Blackcat CMS 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the map_language parameter to backend/pages/lang_settings.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/faizzaidi/Blackcat-cms-v1.2-xss-POC-by-Provensec-llc - http://packetstormsecurity.com/files/143103/Blackcat-CMS-1.2-Cross-Site-Scripting.html - https://github.com/BlackCatDevelopment/BlackCatCMS/issues/373
CVE ID: CVE-2017-9610 State: PUBLISHED Published: 2017-07-26T19:00:00 Last Updated: 2024-08-05T17:11:02.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=698025 - https://security.gentoo.org/glsa/201811-12 - http://www.securityfocus.com/bid/99976 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=d2ab84732936
811-12 - http://www.securityfocus.com/bid/99976 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=d2ab84732936b6e7e5a461dc94344902965e9a06
CVE ID: CVE-2017-9611 State: PUBLISHED Published: 2017-07-26T19:00:00 Last Updated: 2024-08-05T17:11:02.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ins_MIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-12 - https://bugs.ghostscript.com/show_bug.cgi?id=698024 - http://www.debian.org/security/2017/dsa-3986 - http://www.securityfocus.com/bid/99975 - http://git.ghostscript.com/?p=g
http://www.debian.org/security/2017/dsa-3986 - http://www.securityfocus.com/bid/99975 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=c7c55972758a93350882c32147801a3485b010fe
CVE ID: CVE-2017-9612 State: PUBLISHED Published: 2017-07-26T19:00:00 Last Updated: 2024-08-05T17:11:02.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ins_IP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-12 - https://bugs.ghostscript.com/show_bug.cgi?id=698026 - http://www.debian.org/security/2017/dsa-3986 - http://www.securityfocus.com/bid/99979 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba
ian.org/security/2017/dsa-3986 - http://www.securityfocus.com/bid/99979 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=98f6da60b9d463c617e631fc254cf6d66f2e8e3c
CVE ID: CVE-2017-9613 State: PUBLISHED Published: 2017-06-15T18:00:00 Last Updated: 2024-08-05T17:11:02.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored Cross-site scripting (XSS) vulnerability in SAP SuccessFactors before b1705.1234962 allows remote authenticated users to inject arbitrary web script or HTML via the file upload functionality. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2017/Jun/27 - http://www.securityfocus.com/bid/99072 - https://packetstormsecurity.com/files/142952/SAP-Successfactors-b1702p5e.1190658-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/540731/100/0/threaded
CVE ID: CVE-2017-9614 State: PUBLISHED Published: 2017-07-27T06:00:00 Last Updated: 2024-08-05T17:11:02.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fill_input_buffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted jpg file. NOTE: Maintainer asserts the issue is due to a bug in downstream code caused by misuse of the libjpeg API Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/66 - https://www.exploit-db.com/exploits/42391/ - http://seclists.org/fulldisclosure
eclists.org/fulldisclosure/2017/Jul/66 - https://www.exploit-db.com/exploits/42391/ - http://seclists.org/fulldisclosure/2017/Jul/66 - http://packetstormsecurity.com/files/143518/libjpeg-turbo-1.5.1-Denial-Of-Service.html - https://github.com/libjpeg-turbo/libjpeg-turbo/issues/167
CVE ID: CVE-2017-9615 State: PUBLISHED Published: 2017-06-26T07:00:00 Last Updated: 2024-08-05T17:11:02.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all data, because verbose logging writes the administrator password to a world-readable file. Additional Analyst Notes: - CVE Program Container: References: - http://cognito.co.nz/mwcommunity/viewtopic.php?f=1&t=3542 - https://gist.github.com/ari/e0dd74c12d84f102e3bcb365118e8c30