Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef
5c5d4b467%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2017-15711 State: REJECTED Published: 2017-12-28T14:00:00 Last Updated: 2017-12-28T13:57:01 Description: No description available.
CVE ID: CVE-2017-15712 State: PUBLISHED Published: 2018-02-19T14:00:00Z Last Updated: 2024-09-17T01:46:21.738Z Vendors: Apache Software Foundation Products: Apache Oozie Problem Types: Information Disclosure Description: Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 4.3.0 and 5.0.0-beta1 to expose private files on the Oozie server process. The malicious user can construct a workflow XML file containing XML directives and configuration that reference sensitive files on the Oozie server host. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103102 - https://lists.apache.org/thread.html/4606709264fe7cb0285e2a12aca2d01a06b14cd587
ttp://www.securityfocus.com/bid/103102 - https://lists.apache.org/thread.html/4606709264fe7cb0285e2a12aca2d01a06b14cd58791c9fc32abd216%40%3Cdev.oozie.apache.org%3E
CVE ID: CVE-2017-15713 State: PUBLISHED Published: 2018-01-19T17:00:00Z Last Updated: 2024-09-17T04:08:48.075Z Vendors: Apache Software Foundation Products: Apache Hadoop Problem Types: Information Disclosure Description: Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files owned by the user running the MapReduce job history server process. The malicious user can construct a configuration file containing XML directives that reference sensitive files on the MapReduce job history server host. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.h
history server host. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/a790a251ace7213bde9f69777dedb453b1a01a6d18289c14a61d4f91%40%3Cgeneral.hadoop.apache.org%3E
CVE ID: CVE-2017-15714 State: PUBLISHED Published: 2018-01-04T15:00:00Z Last Updated: 2024-09-16T22:31:04.561Z Vendors: Apache Software Foundation Products: Apache OFBiz Problem Types: Arbitrary Code Execution Description: The BIRT plugin in Apache OFBiz 16.11.01 to 16.11.03 does not escape user input property passed. This allows for code injection by passing that code through the URL. For example by appending this code "__format=%27;alert(%27xss%27)" to the URL an alert window would execute. Additional Analyst Notes: - CVE Program Container: References: - https://s.apache.org/UO3W
CVE ID: CVE-2017-15715 State: PUBLISHED Published: 2018-03-26T15:00:00Z Last Updated: 2024-09-17T02:21:04.135Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: <FilesMatch> bypass with a trailing newline in the file name Description: In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the trailing portion of the filename. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/362
ing portion of the filename. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3627-1/ - https://www.debian.org/security/2018/dsa-4164 - https://security.netapp.com/advisory/ntap-20180601-0004/ - https://access.redhat.com/errata/RHSA-2018:3558 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us - https://access.redhat.com/errata/RHSA-2019:0367 - https://usn.ubuntu.com/3627-2/ - http://www.securityfocus.com/bid/103525 - http://www.securitytracker.com/id/1040570 - https://httpd.apache.org/security/vulnerabilities_24.html - http://www.openwall.com/lists/oss-security/2018/03/24/6 - https://access.redhat.com/errata
ity/vulnerabilities_24.html - http://www.openwall.com/lists/oss-security/2018/03/24/6 - https://access.redhat.com/errata/RHSA-2019:0366 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://security.elarlang.eu/cve-2017-15715-apache-http-server-filesmatch-bypass-with-a-trailing-newline-at-the-end-of-the-file-name.html - https://www.tenable.com/security/tns-2019-09 - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E -
://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107
a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/
.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2017-15716 State: REJECTED Published: 2019-04-23T15:31:47 Last Updated: 2019-04-23T15:31:47 Description: No description available.
CVE ID: CVE-2017-15717 State: PUBLISHED Published: 2018-01-10T14:00:00Z Last Updated: 2024-09-17T01:06:14.724Z Vendors: Apache Software Foundation Products: Apache Sling Problem Types: Insufficient XSS protection Description: A flaw in the way URLs are escaped and encoded in the org.apache.sling.xss.impl.XSSAPIImpl#getValidHref and org.apache.sling.xss.impl.XSSFilterImpl#isValidHref allows special crafted URLs to pass as valid, although they carry XSS payloads. The affected versions are Apache Sling XSS Protection API 1.0.4 to 1.0.18, Apache Sling XSS Protection API Compat 1.1.0 and Apache Sling XSS Protection API 2.0.0. Additional Analyst Notes: - CVE Program Container: References: - https:
1.1.0 and Apache Sling XSS Protection API 2.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://s.apache.org/CVE-2017-15717
CVE ID: CVE-2017-15718 State: PUBLISHED Published: 2018-01-24T14:00:00Z Last Updated: 2024-09-17T03:02:11.843Z Vendors: Apache Software Foundation Products: Apache Hadoop Problem Types: Information Disclosure Description: The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the NodeManager to YARN Applications. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/773c93c2d8a6a52bbe97610c2b1c2ad205b970e1b8c04fb5b2fccad6%40%3Cgeneral.hadoop.apache.org%3E
CVE ID: CVE-2017-15719 State: PUBLISHED Published: 2018-03-12T13:00:00Z Last Updated: 2024-09-17T02:11:55.065Z Vendors: Apache Software Foundation Products: Wicket jQuery UI Problem Types: XSS Description: In Wicket jQuery UI 6.28.0 and earlier, 7.9.1 and earlier, and 8.0.0-M8 and earlier, a security issue has been discovered in the WYSIWYG editor that allows an attacker to submit arbitrary JS code to WYSIWYG editor. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sebfz1/wicket-jquery-ui/wiki#cve-2017-15719---xss-in-wysiwyg-editor - http://openmeetings.apache.org/security.html#_toc_cve-2017-15719_-_wicket_jquery_ui_xss_in_wysiwyg_e
CVE ID: CVE-2017-15720 State: PUBLISHED Published: 2019-01-23T17:00:00Z Last Updated: 2024-09-16T22:45:21.283Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: Remote code execution (RCE) Description: In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57%40%3Cdev.airflow.apache.org%3E
CVE ID: CVE-2017-15721 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T20:04:49.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference. This is a separate, but similar, issue relative to CVE-2017-9468. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4016 - https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html - https://irssi.org/security/irssi_sa_2017_10.txt - http://openwall.com/lists/oss-security/2017/10/22/4
CVE ID: CVE-2017-15722 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T20:04:49.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: In certain cases, Irssi before 1.0.5 may fail to verify that a Safe channel ID is long enough, causing reads beyond the end of the string. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4016 - https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html - https://irssi.org/security/irssi_sa_2017_10.txt - http://openwall.com/lists/oss-security/2017/10/22/4
CVE ID: CVE-2017-15723 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T20:04:49.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Irssi before 1.0.5, overlong nicks or targets may result in a NULL pointer dereference while splitting the message. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4016 - https://irssi.org/security/irssi_sa_2017_10.txt - http://openwall.com/lists/oss-security/2017/10/22/4
CVE ID: CVE-2017-15725 State: PUBLISHED Published: 2019-10-28T18:33:28 Last Updated: 2024-08-05T20:04:49.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML External Entity Injection vulnerability exists in Dzone AnswerHub. Additional Analyst Notes: - CVE Program Container: References: - https://il.linkedin.com/in/nivlevy
CVE ID: CVE-2017-15727 State: PUBLISHED Published: 2017-10-21T22:00:00 Last Updated: 2024-08-05T20:04:49.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML attachment. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43063/ - https://github.com/thorsten/phpMyFAQ/commit/5c3e4f96ff0ef6b91a3f0aa64eb28197c5cf5435
CVE ID: CVE-2017-15728 State: PUBLISHED Published: 2017-10-21T22:00:00Z Last Updated: 2024-09-16T22:36:00.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via metaDescription or metaKeywords. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thorsten/phpMyFAQ/commit/2d2a85b59e058869d7cbcfe2d73fed4a282f2e5b
CVE ID: CVE-2017-15729 State: PUBLISHED Published: 2017-10-21T22:00:00Z Last Updated: 2024-09-16T21:57:13.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for adding a glossary. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thorsten/phpMyFAQ/commit/867618110feb836e168435548d6c2cbb7c65eda3
CVE ID: CVE-2017-15730 State: PUBLISHED Published: 2017-10-21T22:00:00 Last Updated: 2024-08-05T20:04:49.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.ratings.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thorsten/phpMyFAQ/commit/cce47f94375bb0102ab4f210672231dbb854dd0d - https://www.exploit-db.com/exploits/43064/
CVE ID: CVE-2017-15731 State: PUBLISHED Published: 2017-10-21T22:00:00Z Last Updated: 2024-09-16T19:00:35.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.adminlog.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thorsten/phpMyFAQ/commit/fadb9a70b5f7624a6926b8834d5c6001c210f09c
CVE ID: CVE-2017-15732 State: PUBLISHED Published: 2017-10-21T22:00:00Z Last Updated: 2024-09-17T02:57:40.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/news.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thorsten/phpMyFAQ/commit/ec8b3cc37d05b6625e24916b8f7253f830015b5f
CVE ID: CVE-2017-15733 State: PUBLISHED Published: 2017-10-21T22:00:00Z Last Updated: 2024-09-17T02:56:40.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/ajax.attachment.php and admin/att.main.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thorsten/phpMyFAQ/commit/ef5a66df4bcfacc7573322af33ce10c30e0bb896
CVE ID: CVE-2017-15734 State: PUBLISHED Published: 2017-10-21T22:00:00Z Last Updated: 2024-09-16T19:21:09.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.main.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thorsten/phpMyFAQ/commit/fa26c52384b010edaf60c525ae5b040f05da9f77
CVE ID: CVE-2017-15735 State: PUBLISHED Published: 2017-10-21T22:00:00Z Last Updated: 2024-09-17T01:46:14.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for modifying a glossary. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thorsten/phpMyFAQ/commit/867618110feb836e168435548d6c2cbb7c65eda3
CVE ID: CVE-2017-15736 State: PUBLISHED Published: 2017-10-21T22:00:00 Last Updated: 2024-08-05T20:04:49.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability (stored) in SPIP before 3.1.7 allows remote attackers to inject arbitrary web script or HTML via a crafted string, as demonstrated by a PGP field, related to prive/objets/contenu/auteur.html and ecrire/inc/texte_mini.php. Additional Analyst Notes: - CVE Program Container: References: - https://core.spip.net/projects/spip/repository/revisions/23701 - https://www.debian.org/security/2018/dsa-4228 - https://usn.ubuntu.com/4536-1/
CVE ID: CVE-2017-15737 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T20:04:50.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d246f." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15737
CVE ID: CVE-2017-15738 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T20:04:49.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d22d8." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15738
CVE ID: CVE-2017-15739 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T20:04:49.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at CADIMAGE+0x00000000000042d5." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15739
CVE ID: CVE-2017-15740 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T20:04:49.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls Code Flow starting at CADIMAGE+0x000000000033228e." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15740
CVE ID: CVE-2017-15741 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T20:04:49.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Possible Stack Corruption starting at CADIMAGE+0x00000000003d2378." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15741
CVE ID: CVE-2017-15742 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T20:04:49.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d2328." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15742
CVE ID: CVE-2017-15743 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T20:04:49.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADIMAGE+0x00000000003d24a0." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15743
CVE ID: CVE-2017-15744 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T20:04:49.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow starting at CADIMAGE+0x00000000003d35a7." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15744
CVE ID: CVE-2017-15745 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T20:04:49.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000002ca2e." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15745
CVE ID: CVE-2017-15746 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T20:04:50.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000003d21b3." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15746
CVE ID: CVE-2017-15747 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T20:04:49.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x0000700b00260112 called from CADIMAGE+0x00000000003d35ad." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15747
CVE ID: CVE-2017-15748 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T20:04:50.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADIMAGE+0x000000000000613a." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15748
CVE ID: CVE-2017-15749 State: PUBLISHED Published: 2017-10-22T17:00:00 Last Updated: 2024-08-05T20:04:50.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000000348b9." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15749