Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-10842 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.539Z Vendors: baserCMS Users Community Products: baserCMS Problem Types: SQL Injection Description: SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://basercms.net/security/JVN78151490 - http://jvn.jp/en/jp/JVN78151490/index.html
CVE ID: CVE-2017-10843 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.626Z Vendors: baserCMS Users Community Products: baserCMS Problem Types: Arbitrary File Deletion Description: baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" field is being used in the mail form. Additional Analyst Notes: - CVE Program Container: References: - https://basercms.net/security/JVN78151490 - http://jvn.jp/en/jp/JVN78151490/index.html
CVE ID: CVE-2017-10844 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T17:50:12.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://basercms.net/security/JVN78151490 - http://jvn.jp/en/jp/JVN78151490/index.html
CVE ID: CVE-2017-10845 State: PUBLISHED Published: 2017-09-15T17:00:00 Last Updated: 2024-08-05T17:50:12.555Z Vendors: NTT DOCOMO, INC. Products: Wi-Fi STATION L-02F Problem Types: CWE-255 Description: Wi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the device with administrative privileges and perform unintended operations through a backdoor account. Additional Analyst Notes: - CVE Program Container: References: - https://www.nttdocomo.co.jp/info/notice/page/170710_01_m.html - https://jvn.jp/en//jp/JVN68922465/index.html
CVE ID: CVE-2017-10846 State: PUBLISHED Published: 2017-09-15T17:00:00 Last Updated: 2024-08-05T17:50:12.689Z Vendors: NTT DOCOMO, INC. Products: Wi-Fi STATION L-02F Problem Types: Fails to restrict access Description: Wi-Fi STATION L-02F Software version V10b and earlier allows remote attackers to bypass access restrictions to obtain information on device settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN03044183/index.html - https://www.nttdocomo.co.jp/info/notice/page/170710_01_m.html
CVE ID: CVE-2017-10848 State: PUBLISHED Published: 2017-09-01T14:00:00 Last Updated: 2024-08-05T17:50:12.701Z Vendors: Fuji Xerox Co.,Ltd. Products: Installer for DocuWorks, Installer for DocuWorks Viewer Light Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installers for DocuWorks 8.0.7 and earlier and DocuWorks Viewer Light published in Jul 2017 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN09769017/index.html - http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html
CVE ID: CVE-2017-10849 State: PUBLISHED Published: 2017-09-01T14:00:00 Last Updated: 2024-08-05T17:50:12.633Z Vendors: Fuji Xerox Co.,Ltd. Products: Self-extracting document generated by DocuWorks Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Self-extracting document generated by DocuWorks 8.0.7 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN09769017/index.html - http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html
CVE ID: CVE-2017-10850 State: PUBLISHED Published: 2017-09-01T14:00:00 Last Updated: 2024-08-05T17:50:12.585Z Vendors: Fuji Xerox Co.,Ltd. Products: Installer of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, Installer of ART EX Driver for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271, Installer of PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, Installer of PostScript? Driver + Additional Feature Plug-in + PPD File for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271, Installer of XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, Installer of XPS Print Driver for DocuCentre-VI C77
S Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, Installer of XPS Print Driver for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271, Installer of ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, Installer of ART EX Direct FAX Driver for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271, Installer of Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, Installer of Setting Restore Tool for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271,
ntrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:04 UTC.), PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:10 UTC.), XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 3 Nov 2017 23:48 UTC.), ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C
imestamp of code signing is before 3 Nov 2017 23:48 UTC.), ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 26 May 2017 07:44 UTC.), Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 25 Aug 2015 08:51 UTC.) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN09769017/index.html - http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectif
erences: - https://jvn.jp/en/jp/JVN09769017/index.html - http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html
CVE ID: CVE-2017-10851 State: PUBLISHED Published: 2017-09-01T14:00:00 Last Updated: 2024-08-05T17:50:12.584Z Vendors: Fuji Xerox Co.,Ltd. Products: Installer for ContentsBridge Utility for Windows Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer for ContentsBridge Utility for Windows 7.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN09769017/index.html - http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html
CVE ID: CVE-2017-10852 State: PUBLISHED Published: 2018-03-09T16:00:00 Last Updated: 2024-08-05T17:50:12.624Z Vendors: Corega Inc Products: CG-WGR1200 Problem Types: Buffer Overflow Description: Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN15201064/index.html - http://corega.jp/support/security/20180309_wgr1200.htm
CVE ID: CVE-2017-10853 State: PUBLISHED Published: 2018-03-09T16:00:00 Last Updated: 2024-08-05T17:50:12.735Z Vendors: Corega Inc Products: CG-WGR1200 Problem Types: Buffer Overflow Description: Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN15201064/index.html - http://corega.jp/support/security/20180309_wgr1200.htm
CVE ID: CVE-2017-10854 State: PUBLISHED Published: 2018-03-09T16:00:00 Last Updated: 2024-08-05T17:50:12.547Z Vendors: Corega Inc Products: CG-WGR1200 Problem Types: Authentication bypass Description: Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to bypass authentication and change the login password via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN15201064/index.html - http://corega.jp/support/security/20180309_wgr1200.htm
CVE ID: CVE-2017-10855 State: PUBLISHED Published: 2017-09-15T17:00:00 Last Updated: 2024-08-05T17:50:12.532Z Vendors: FUJITSU LIMITED Products: FENCE-Explorer for Windows Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in FENCE-Explorer for Windows V8.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN57205588/index.html - http://www.fujitsu.com/jp/group/bsc/services/fence/info-2017080101.html
CVE ID: CVE-2017-10856 State: PUBLISHED Published: 2017-09-15T17:00:00 Last Updated: 2024-08-05T17:50:12.562Z Vendors: Internet Initiative Japan Inc. Products: SEIL/X, SEIL/B1, SEIL/x86, SEIL/BPV4 Problem Types: Denial-of-service (DoS) Description: SEIL/X 4.60 to 5.72, SEIL/B1 4.60 to 5.72, SEIL/x86 3.20 to 5.72, SEIL/BPV4 5.00 to 5.72 allows remote attackers to cause a temporary failure of the device's encrypted communications via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN76692689/index.html - http://www.seil.jp/support/security/a01811.html
CVE ID: CVE-2017-10857 State: PUBLISHED Published: 2017-10-12T14:00:00 Last Updated: 2024-08-05T17:50:12.589Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Fails to restrict access Description: Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" function. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9811 - http://jvn.jp/en/jp/JVN14658424/index.html
CVE ID: CVE-2017-10858 State: PUBLISHED Published: 2017-09-15T17:00:00 Last Updated: 2024-08-05T17:50:12.647Z Vendors: Digital Arts Inc. Products: "i-filter 6.0 install program" Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in "i-filter 6.0 install program" file version 1.0.8.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.daj.jp/cs/info/2017/0912/ - https://jvn.jp/en/jp/JVN75929834/index.html
CVE ID: CVE-2017-10859 State: PUBLISHED Published: 2017-09-15T17:00:00 Last Updated: 2024-08-05T17:50:12.573Z Vendors: Digital Arts Inc. Products: "i-filter 6.0 installer" Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.daj.jp/cs/info/2017/0912/ - https://jvn.jp/en/jp/JVN75929834/index.html
CVE ID: CVE-2017-10860 State: PUBLISHED Published: 2017-09-15T17:00:00 Last Updated: 2024-08-05T17:50:12.548Z Vendors: Digital Arts Inc. Products: "i-filter 6.0 installer" Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.daj.jp/cs/info/2017/0912/ - http://www.securityfocus.com/bid/100916 - https://jvn.jp/en/jp/JVN75929834/index.html
CVE ID: CVE-2017-10861 State: PUBLISHED Published: 2017-12-01T14:00:00 Last Updated: 2024-08-05T17:50:12.573Z Vendors: QualitySoft Corporation Products: QND Advance/Standard Problem Types: Directory traversal Description: Directory traversal vulnerability in QND Advance/Standard allows an attacker to read arbitrary files via a specially crafted command. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/vu/JVNVU94198685/index.html - http://www.qualitysoft.com/qnd_vulnerabilities
CVE ID: CVE-2017-10862 State: PUBLISHED Published: 2017-10-12T14:00:00 Last Updated: 2024-08-05T17:50:12.535Z Vendors: reallyl IO Products: jwt-scala Problem Types: Improper verification of signatures Description: jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/reallylabs/jwt-scala - https://jvn.jp/en/vu/JVNVU90916766/index.html
CVE ID: CVE-2017-10863 State: PUBLISHED Published: 2017-10-12T14:00:00 Last Updated: 2024-08-05T17:50:12.541Z Vendors: Hitachi Solutions, Ltd. Products: HIBUN Confidential File Decryption program Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in HIBUN Confidential File Decryption program prior to 10.50.0.5 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Note this is a separate vulnerability from CVE-2017-10865. Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi-solutions.co.jp/hibun/sp/support/importance/20170929.html - https://jvn.jp/en/jp/JVN58909026/index.html
CVE ID: CVE-2017-10864 State: PUBLISHED Published: 2017-10-12T14:00:00 Last Updated: 2024-08-05T17:50:12.522Z Vendors: Hitachi Solutions, Ltd. Products: Installer of HIBUN Confidential File Viewer Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer of HIBUN Confidential File Viewer prior to 11.20.0001 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi-solutions.co.jp/hibun/sp/support/importance/20170929.html - https://jvn.jp/en/jp/JVN94056834/index.html
CVE ID: CVE-2017-10865 State: PUBLISHED Published: 2017-10-12T14:00:00 Last Updated: 2024-08-05T17:50:12.499Z Vendors: Hitachi Solutions, Ltd. Products: HIBUN Confidential File Decryption program Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in HIBUN Confidential File Decryption program prior to 10.50.0.5 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Note this is a separate vulnerability from CVE-2017-10863. Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi-solutions.co.jp/hibun/sp/support/importance/20170929.html - https://jvn.jp/en/jp/JVN55516206/index.html
CVE ID: CVE-2017-10868 State: PUBLISHED Published: 2017-12-22T14:00:00 Last Updated: 2024-08-05T17:50:12.720Z Vendors: Kazuho Oku Products: H2O Problem Types: Denial-of-service (DoS) Description: H2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/1 header. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/h2o/h2o/issues/1459 - https://jvn.jp/en/jp/JVN84182676/index.html
CVE ID: CVE-2017-10869 State: PUBLISHED Published: 2017-12-22T14:00:00 Last Updated: 2024-08-05T17:50:12.563Z Vendors: Kazuho Oku Products: H2O Problem Types: Buffer Overflow Description: Buffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of-service in the server via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/h2o/h2o/issues/1460 - https://jvn.jp/en/jp/JVN84182676/index.html
CVE ID: CVE-2017-10870 State: PUBLISHED Published: 2017-11-02T15:00:00 Last Updated: 2024-08-05T17:50:12.579Z Vendors: Justsystem Products: Rakuraku Hagaki, Rakuraku Hagaki Select for Ichitaro Problem Types: Memory Corrution vulnerability Description: Memory corruption vulnerability in Rakuraku Hagaki (Rakuraku Hagaki 2018, Rakuraku Hagaki 2017, Rakuraku Hagaki 2016) and Rakuraku Hagaki Select for Ichitaro (Ichitaro 2017, Ichitaro 2016, Ichitaro 2015, Ichitaro Pro3, Ichitaro Pro2, Ichitaro Pro, Ichitaro 2011, Ichitaro Government 8, Ichitaro Government 7, Ichitaro Government 6 and Ichitaro 2017 Trial version) allows attackers to execute arbitrary code with privileges of the application via sp
6 and Ichitaro 2017 Trial version) allows attackers to execute arbitrary code with privileges of the application via specially crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/vu/JVNVU93703434/index.html - https://www.justsystems.com/jp/info/js17003.html
CVE ID: CVE-2017-10871 State: PUBLISHED Published: 2017-11-13T14:00:00 Last Updated: 2024-08-05T17:50:12.716Z Vendors: NTT DOCOMO, INC. Products: Wi-Fi STATION L-02F Software Problem Types: Buffer Overflow Description: Buffer overflow in NTT DOCOMO Wi-Fi STATION L-02F Software version L02F-MDM9625-V10h-JUN-23-2017-DCM-JP and earlier allows an attacker to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN23367475/index.html
CVE ID: CVE-2017-10872 State: PUBLISHED Published: 2017-12-22T14:00:00 Last Updated: 2024-08-05T17:50:12.503Z Vendors: Kazuho Oku Products: H2O Problem Types: Denial-of-service (DoS) Description: H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/h2o/h2o/issues/1543 - https://jvn.jp/en/jp/JVN84182676/index.html
CVE ID: CVE-2017-10873 State: PUBLISHED Published: 2017-11-02T15:00:00 Last Updated: 2024-08-05T17:50:12.528Z Vendors: Open Source Solution Technology Corporation Products: OpenAM Problem Types: Authentication bypass Description: OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. Note that this vulnerability affects OpenAM (Open Source Edition) implementations configured as SAML 2.0IdP, and switches authentication methods based on AuthnContext requests sent from the service provider. Additional Analyst Notes: - CVE Program Container: References: - https://www.cs.themistruct.com/ - https://jvn.jp/en/jp/JVN79546124
Analyst Notes: - CVE Program Container: References: - https://www.cs.themistruct.com/ - https://jvn.jp/en/jp/JVN79546124/ - https://www.osstech.co.jp/support/am2017-2-1-en
CVE ID: CVE-2017-10874 State: PUBLISHED Published: 2017-12-01T14:00:00 Last Updated: 2024-08-05T17:50:12.521Z Vendors: NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION Products: PWR-Q200 Problem Types: Use of Insufficiently Random Values Description: PWR-Q200 does not use random values for source ports of DNS query packets, which allows remote attackers to conduct DNS cache poisoning attacks. Additional Analyst Notes: - CVE Program Container: References: - http://web116.jp/shop/hikari_p/q200/q200_00.html - https://jvn.jp/en/jp/JVN73141967/index.html
CVE ID: CVE-2017-10875 State: PUBLISHED Published: 2017-11-13T14:00:00 Last Updated: 2024-08-05T17:50:12.551Z Vendors: I-O DATA DEVICE, INC. Products: LAN DISK Connect Problem Types: Denial-of-Service (DoS) Description: I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN87886530/index.html - http://www.iodata.jp/support/information/2017/ld-connect/
CVE ID: CVE-2017-10885 State: PUBLISHED Published: 2017-11-13T14:00:00 Last Updated: 2024-08-05T17:50:12.631Z Vendors: SBI SECURITIES Co.,Ltd. Products: HYPER SBI Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in HYPER SBI Ver. 2.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN71284826/index.html
CVE ID: CVE-2017-10886 State: PUBLISHED Published: 2017-11-17T14:00:00 Last Updated: 2024-08-05T17:50:12.728Z Vendors: Frogman Office Inc. Products: CS-Cart Japanese Edition, CS-Cart Multivendor Japanese Edition Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and v3) allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN29602086/index.html - http://tips.cs-cart.jp/fix-jvn-29602086.html
CVE ID: CVE-2017-10887 State: PUBLISHED Published: 2017-11-17T14:00:00 Last Updated: 2024-08-05T17:50:12.577Z Vendors: BOOK WALKER Co.,Ltd. Products: BOOK WALKER for Windows Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in BOOK WALKER for Windows Ver.1.2.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://bookwalker.jp/info/message20171113_pc_app/ - https://jvn.jp/en/jp/JVN18420340/index.html
CVE ID: CVE-2017-10888 State: PUBLISHED Published: 2017-11-17T14:00:00 Last Updated: 2024-08-05T17:50:12.493Z Vendors: BOOK WALKER Co.,Ltd. Products: BOOK WALKER for Windows, BOOK WALKER for Mac Problem Types: Information Disclosure Description: BOOK WALKER for Windows Ver.1.2.9 and earlier, BOOK WALKER for Mac Ver.1.2.5 and earlier allow an attacker to access local files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bookwalker.jp/info/message20171113_pc_app/ - https://jvn.jp/en/jp/JVN18420340/index.html
CVE ID: CVE-2017-10889 State: PUBLISHED Published: 2017-11-17T14:00:00 Last Updated: 2024-08-05T17:50:12.580Z Vendors: tablepress.org Products: TablePress Problem Types: XML external entities (XXE) Description: TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/tablepress/#developers - https://jvn.jp/en/jp/JVN05398317/index.html
CVE ID: CVE-2017-10890 State: PUBLISHED Published: 2017-11-17T14:00:00 Last Updated: 2024-08-05T17:50:12.497Z Vendors: Sharp Corporation Products: RX-V200 firmware, RX-V100 firmware, RX-CLV1-P firmware, RX-CLV2-B firmware, RX-CLV3-N firmware Problem Types: Session Management Issue Description: Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17.09, RX-CLV1-P firmware versions prior to 79.17.17.09, RX-CLV2-B firmware versions prior to 89.07.17.09, RX-CLV3-N firmware versions prior to 91.09.17.10 allows an attacker on the same LAN to perform arbitrary operations or access information via unspecified vectors. Additional Analyst
tacker on the same LAN to perform arbitrary operations or access information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN76382932/index.html