Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-14920 State: PUBLISHED Published: 2017-09-29T07:00:00 Last Updated: 2024-08-05T19:42:21.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS vulnerability in eGroupware Community Edition before 16.1.20170922 allows an unauthenticated remote attacker to inject JavaScript via the User-Agent HTTP header, which is mishandled during rendering by the application administrator. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/09/28/12 - https://github.com/EGroupware/egroupware/commit/0ececf8c78f1c3f9ba15465f53a682dd7d89529f
CVE ID: CVE-2017-14921 State: PUBLISHED Published: 2017-09-29T07:00:00 Last Updated: 2024-08-05T19:42:22.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS vulnerability via IMG element at "Filename" of Filemanager in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/releases - https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/24e39e1e930097b8793a03b8864d3c484ede546b - https://github.com/t
com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/24e39e1e930097b8793a03b8864d3c484ede546b - https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/bc8a6fbd3128cf5ef27d808f6c6ba869fdc2262b - https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/146c5aaafd826c1c8990333c393bff6f64c90786 - http://openwall.com/lists/oss-security/2017/09/28/11
CVE ID: CVE-2017-14922 State: PUBLISHED Published: 2017-09-29T07:00:00 Last Updated: 2024-08-05T19:42:22.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS vulnerability via IMG element at "History" of Profile, Calendar, Tasks, and CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/releases - https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/24e39e1e930097b8793a03b8864d3c484ede546b -
ses - https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/24e39e1e930097b8793a03b8864d3c484ede546b - https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/bc8a6fbd3128cf5ef27d808f6c6ba869fdc2262b - https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/146c5aaafd826c1c8990333c393bff6f64c90786 - http://openwall.com/lists/oss-security/2017/09/28/11
CVE ID: CVE-2017-14923 State: PUBLISHED Published: 2017-09-29T07:00:00 Last Updated: 2024-08-05T19:42:22.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS vulnerability via IMG element at "Leadname" of CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application administrator and other users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/releases - https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/24e39e1e930097b8793a03b8864d3c484ede546b - https://github.com/tine20/Ti
20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/24e39e1e930097b8793a03b8864d3c484ede546b - https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/bc8a6fbd3128cf5ef27d808f6c6ba869fdc2262b - https://github.com/tine20/Tine-2.0-Open-Source-Groupware-and-CRM/commit/146c5aaafd826c1c8990333c393bff6f64c90786 - http://openwall.com/lists/oss-security/2017/09/28/11
CVE ID: CVE-2017-14924 State: PUBLISHED Published: 2017-09-29T07:00:00 Last Updated: 2024-08-05T19:42:22.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with an IMG element, related to tiki-assignuser.php. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/09/28/13 - https://tiki.org/article449-Security-and-bug-fix-updates-Tiki-17-1-Tiki-16-3-15-5-and-Tiki-12-12-releas
/2017/09/28/13 - https://tiki.org/article449-Security-and-bug-fix-updates-Tiki-17-1-Tiki-16-3-15-5-and-Tiki-12-12-released - https://sourceforge.net/p/tikiwiki/code/63829
CVE ID: CVE-2017-14925 State: PUBLISHED Published: 2017-09-29T07:00:00 Last Updated: 2024-08-05T19:42:22.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS allows an authenticated user to edit global permissions if an administrator opens a wiki page with an IMG element, related to tiki-objectpermissions.php. For example, an attacker could assign administrator privileges to every unauthenticated user of the site. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/09/28/1
te. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/09/28/13 - https://tiki.org/article449-Security-and-bug-fix-updates-Tiki-17-1-Tiki-16-3-15-5-and-Tiki-12-12-released - https://sourceforge.net/p/tikiwiki/code/63872
CVE ID: CVE-2017-14926 State: PUBLISHED Published: 2017-09-29T07:00:00 Last Updated: 2024-08-05T19:42:22.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Content::Content in Annot.cc via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.freedesktop.org/show_bug.cgi?id=102601 - https://lists.debian.org/debian-lts-announce/2020/11/msg00014.html
CVE ID: CVE-2017-14927 State: PUBLISHED Published: 2017-09-29T07:00:00 Last Updated: 2024-08-05T19:42:22.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Poppler 0.59.0, a NULL Pointer Dereference exists in the SplashOutputDev::type3D0() function in SplashOutputDev.cc via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.freedesktop.org/show_bug.cgi?id=102604
CVE ID: CVE-2017-14928 State: PUBLISHED Published: 2017-09-29T07:00:00 Last Updated: 2024-08-05T19:42:22.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Configuration::Configuration in Annot.cc via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.freedesktop.org/show_bug.cgi?id=102607 - https://lists.debian.org/debian-lts-announce/2020/11/msg00014.html
CVE ID: CVE-2017-14929 State: PUBLISHED Published: 2017-09-29T07:00:00 Last Updated: 2024-08-05T19:42:22.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Poppler 0.59.0, memory corruption occurs in a call to Object::dictLookup() in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opFill, Gfx::doPatternFill, Gfx::doTilingPatternFill and Gfx::drawForm calls (aka a Gfx.cc infinite loop), a different vulnerability than CVE-2017-14519. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.freedesktop.org/show_bug.cgi?id=102969 - https://www.debian.org/security/2018/dsa-4097
CVE ID: CVE-2017-14930 State: PUBLISHED Published: 2017-09-29T08:00:00 Last Updated: 2024-08-05T19:42:22.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=22191
CVE ID: CVE-2017-14931 State: PUBLISHED Published: 2017-09-29T08:00:00 Last Updated: 2024-08-05T19:42:22.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: ExifImageFile::readDQT in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted JPEG file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/skysider/openexif_vulnerabilities - http://seclists.org/fulldisclosure/2017/Sep/34
CVE ID: CVE-2017-14932 State: PUBLISHED Published: 2017-09-29T08:00:00 Last Updated: 2024-08-05T19:42:22.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=e338894dc2e603683bed2172e8e9f25b29051005 - https://sourceware.org/bugzilla/show_bug.cgi?id=22204
CVE ID: CVE-2017-14933 State: PUBLISHED Published: 2017-09-29T08:00:00 Last Updated: 2024-08-05T19:42:22.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=33e0a9a056bd23e923b929a4f2ab049ade0b1c32 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=30d0157a2ad64e64e5ff9fcc0dbe78a3e682f573 - https://security.gentoo.org/glsa/20
org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=30d0157a2ad64e64e5ff9fcc0dbe78a3e682f573 - https://security.gentoo.org/glsa/201811-17 - https://sourceware.org/bugzilla/show_bug.cgi?id=22210 - http://www.securityfocus.com/bid/101203
CVE ID: CVE-2017-14934 State: PUBLISHED Published: 2017-09-29T08:00:00 Last Updated: 2024-08-05T19:42:22.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: process_debug_info in dwarf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file that contains a negative size value in a CU structure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101204 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=19485196044b2521af979f1e5c4a89bfb90fba0b - https://sourceware.org/bugzilla/show_bug.cgi?id=
b.cgi?p=binutils-gdb.git%3Bh=19485196044b2521af979f1e5c4a89bfb90fba0b - https://sourceware.org/bugzilla/show_bug.cgi?id=22219
CVE ID: CVE-2017-14935 State: PUBLISHED Published: 2017-09-29T08:00:00 Last Updated: 2024-08-05T19:42:22.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pulse Secure Pulse One On-Premise 2.0.1649 and below does not properly validate requests, which allows remote users to query and obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40971
CVE ID: CVE-2017-14937 State: PUBLISHED Published: 2017-10-20T14:00:00 Last Updated: 2024-08-05T19:42:22.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: The airbag detonation algorithm allows injury to passenger-car occupants via predictable Security Access (SA) data to the internal CAN bus (or the OBD connector). This affects the airbag control units (aka pyrotechnical control units or PCUs) of unspecified passenger vehicles manufactured in 2014 or later, when the ignition is on and the speed is less than 6 km/h. Specifically, there are only 256 possible key pairs, and authentication attempts have no rate limit. In addition, at least one manufacturer's interpretation of the
y pairs, and authentication attempts have no rate limit. In addition, at least one manufacturer's interpretation of the ISO 26021 standard is that it must be possible to calculate the key directly (i.e., the other 255 key pairs must not be used). Exploitation would typically involve an attacker who has already gained access to the CAN bus, and sends a crafted Unified Diagnostic Service (UDS) message to detonate the pyrotechnical charges, resulting in the same passenger-injury risks as in any airbag deployment. Additional Analyst Notes: - CVE Program Container: References: - https://www.rapid7.com/db/modules/post/hardware/automotive/pdt - http://www.mmt.hs-karlsruhe.de/downloads/IEEM/Schwachs
https://www.rapid7.com/db/modules/post/hardware/automotive/pdt - http://www.mmt.hs-karlsruhe.de/downloads/IEEM/Schwachstellen/PCU_Vulnerability_Description_HsKA.PDF - https://www.researchgate.net/publication/321183727_Security_Evaluation_of_an_Airbag-ECU_by_Reusing_Threat_Modeling_Artefacts
CVE ID: CVE-2017-14938 State: PUBLISHED Published: 2017-09-29T18:00:00 Last Updated: 2024-08-05T19:42:22.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: _bfd_elf_slurp_version_tables in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=22166 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=bd61e135492ecf624880e6b78e5fcde3c9716df6 - https://blogs.gentoo.org/ago/2017/09/26/bin
gitweb.cgi?p=binutils-gdb.git%3Bh=bd61e135492ecf624880e6b78e5fcde3c9716df6 - https://blogs.gentoo.org/ago/2017/09/26/binutils-memory-allocation-failure-in-_bfd_elf_slurp_version_tables-elf-c/ - http://www.securityfocus.com/bid/101212
CVE ID: CVE-2017-14939 State: PUBLISHED Published: 2017-09-29T18:00:00 Last Updated: 2024-08-05T19:42:22.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to read_1_byte. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42970/ - https://blogs.gentoo.org/ago/2017/09/26/binutils-heap-based-buffer-overflow-in-read_1_byte-dwarf2-c/ - ht
loits/42970/ - https://blogs.gentoo.org/ago/2017/09/26/binutils-heap-based-buffer-overflow-in-read_1_byte-dwarf2-c/ - http://www.securityfocus.com/bid/101216 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=515f23e63c0074ab531bc954f84ca40c6281a724 - https://sourceware.org/bugzilla/show_bug.cgi?id=22169
CVE ID: CVE-2017-14940 State: PUBLISHED Published: 2017-09-29T18:00:00Z Last Updated: 2024-09-16T23:22:06.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: scan_unit_for_symbols in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=22166 - https://blogs.gentoo.org/ago/2017/09/26/binutils-null-pointer-dereference-in-scan_unit_for_symbols-dwarf2-c/ - https://sourceware.org/git/gitweb.cgi?p=bin
09/26/binutils-null-pointer-dereference-in-scan_unit_for_symbols-dwarf2-c/ - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=0d76029f92182c3682d8be2c833d45bc9a2068fe
CVE ID: CVE-2017-14941 State: PUBLISHED Published: 2017-10-01T03:00:00 Last Updated: 2024-08-05T19:42:22.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/binary1985/VulnerabilityDisclosure/blob/master/JasperSoft%20JasperReports%20-%204.7%20-%20CVE-2017-14941
CVE ID: CVE-2017-14942 State: PUBLISHED Published: 2017-09-29T19:00:00Z Last Updated: 2024-09-17T02:21:22.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intelbras WRN 150 devices allow remote attackers to read the configuration file, and consequently bypass authentication, via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42916/ - http://whiteboyz.xyz/authentication-bypass-intelbras-wrn-150.html
CVE ID: CVE-2017-14943 State: PUBLISHED Published: 2017-10-10T06:00:00 Last Updated: 2024-08-05T19:42:22.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trapeze TransitMaster is vulnerable to information disclosure (emails / hashed passwords) via a modified userID field in JSON data to ManageSubscriber.aspx/GetSubscriber. NOTE: this software is independently deployed at multiple municipal transit systems; it is not found exclusively on the "webwatch.(REDACTED).com" server mentioned in the reference. Additional Analyst Notes: - CVE Program Container: References: - https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/TransitMaster%20%3E%20Information%20Dis
es: - https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/TransitMaster%20%3E%20Information%20Disclosure%20-%20CVE-2017-14943
CVE ID: CVE-2017-14944 State: PUBLISHED Published: 2017-09-29T19:00:00Z Last Updated: 2024-09-16T18:18:47.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060. Additional Analyst Notes: - CVE Program Container: References: - http://inedo.com/blog/proget-4714-released
CVE ID: CVE-2017-14945 State: PUBLISHED Published: 2017-09-29T20:00:00Z Last Updated: 2024-09-17T03:07:48.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artifex GSView 6.0 Beta on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Possible Stack Corruption starting at KERNELBASE!RaiseException+0x0000000000000068." Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=698537
CVE ID: CVE-2017-14946 State: PUBLISHED Published: 2017-09-29T20:00:00Z Last Updated: 2024-09-16T18:38:44.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artifex GSView 6.0 Beta on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Address controls Branch Selection starting at mupdfnet64!mIncrementalSaveFile+0x000000000000344e." Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=698538
CVE ID: CVE-2017-14947 State: PUBLISHED Published: 2017-09-29T20:00:00Z Last Updated: 2024-09-16T19:51:32.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artifex GSView 6.0 Beta on Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Block Data Move starting at mupdfnet64!mIncrementalSaveFile+0x0000000000193359." Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=698551
CVE ID: CVE-2017-14948 State: PUBLISHED Published: 2019-10-14T17:03:25 Last Updated: 2024-08-05T19:42:22.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute arbitrary code (remote). The component is: htdocs/fileaccess.cgi. The attack vector is: A crafted HTTP request handled by fileacces.cgi could allow an attacker to mount a ROP attack: if the HTTP header field CONTENT_TYPE starts with ''boundary=' followed by more than 256 characters, a buffer overflow would be triggered, potentially causing code execution. Additional Analyst Notes: - CVE Progr
racters, a buffer overflow would be triggered, potentially causing code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/badnack/d_link_880_bug/blob/master/README.md
CVE ID: CVE-2017-14949 State: PUBLISHED Published: 2017-11-30T18:00:00 Last Updated: 2024-08-05T19:42:22.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE attack, because only general external entities (not parameter external entities) are properly considered. This is related to XmlRepresentation, DOMRepresentation, SaxRepresentation, and JacksonRepresentation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/restlet/restlet-framework-java/wiki/XEE-security-enhancements - https://lgtm.com/blog/restlet_CVE-2
- https://github.com/restlet/restlet-framework-java/wiki/XEE-security-enhancements - https://lgtm.com/blog/restlet_CVE-2017-14949
CVE ID: CVE-2017-14952 State: PUBLISHED Published: 2017-10-16T16:00:00 Last Updated: 2024-08-05T19:42:22.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.sourcebrella.com/blog/double-free-vulnerability-international-components-unicode-icu/ - http://bugs.icu-project.org/trac/changeset/40324/trunk/icu4c/source/i18n/zonemeta.cpp - https://www.oracle.com/technetwork/security
.icu-project.org/trac/changeset/40324/trunk/icu4c/source/i18n/zonemeta.cpp - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
CVE ID: CVE-2017-14953 State: PUBLISHED Published: 2017-12-01T17:00:00 Last Updated: 2024-08-05T19:42:22.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: HikVision Wi-Fi IP cameras, when used in a wired configuration, allow physically proximate attackers to trigger association with an arbitrary access point by leveraging a default SSID with no WiFi encryption or authentication. NOTE: Vendor states that this is not a vulnerability, but more an increase to the attack surface of the product Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Nov/43 - http://packetstormsecurity.com/files/145131/HikVision
er: References: - http://seclists.org/fulldisclosure/2017/Nov/43 - http://packetstormsecurity.com/files/145131/HikVision-Wi-Fi-IP-Camera-Wireless-Access-Point-State.html