Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
hread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r409efdf706c2077ae5c37018a87da725a3ca89570a9530342cdc53e4%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r1c62634b7426bee5f553307063457b99c84af73b078ede4f2592b34e%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099e
%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2017-7675 State: PUBLISHED Published: 2017-08-11T02:00:00Z Last Updated: 2024-09-17T03:48:21.726Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: Information Disclosure Description: The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented directory traversal attacks. It was therefore possible to bypass security constraints using a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100256 - https://security.netapp.com/advisory/ntap-20180614-0003/ - http://www.debian.org/security/2017/dsa-3974 - https://list
- https://security.netapp.com/advisory/ntap-20180614-0003/ - http://www.debian.org/security/2017/dsa-3974 - https://lists.apache.org/thread.html/d3a5818e8af731bde6a05ef031ed3acc093c6dd7c4bfcc4936eafd6c%40%3Cannounce.tomcat.apache.org%3E - https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16e
4cdb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.h
f47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/5f8ab8a02f3610bd56ea2b0d69af25cbde451d79c46276c350e05a15%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2017-7676 State: PUBLISHED Published: 2017-06-14T17:00:00 Last Updated: 2024-08-05T16:12:27.762Z Vendors: Apache Software Foundation Products: Apache Ranger Problem Types: Authorization Description: Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '*' wildcard character - like my*test, test*.txt. This can result in unintended behavior. Additional Analyst Notes: - CVE Program Container: References: - https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger - http://www.securityfocus.com/bid/98958
CVE ID: CVE-2017-7677 State: PUBLISHED Published: 2017-06-14T17:00:00 Last Updated: 2024-08-05T16:12:27.880Z Vendors: Apache Software Foundation Products: Apache Ranger Problem Types: Authorization Description: In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98961 - https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
CVE ID: CVE-2017-7678 State: PUBLISHED Published: 2017-07-12T13:00:00 Last Updated: 2024-08-05T16:12:27.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could contain a script, would then be reflected back to the user and could be evaluated and executed by MS Windows-based clients. It is not an attack on Spark itself, but on the user, who may then execute the script inadvertently when viewing elements of the
t an attack on Spark itself, but on the user, who may then execute the script inadvertently when viewing elements of the Spark web UIs. Additional Analyst Notes: - CVE Program Container: References: - http://apache-spark-developers-list.1001551.n3.nabble.com/CVE-2017-7678-Apache-Spark-XSS-web-UI-MHTML-vulnerability-td21947.html - http://www.securityfocus.com/bid/99603
CVE ID: CVE-2017-7679 State: PUBLISHED Published: 2017-06-20T01:00:00 Last Updated: 2024-08-05T16:12:27.904Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-126 Description: In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208221 - https://access.redhat.com/errata/RHSA-2017:2479 - https://access.redhat.com/errata/RHSA-2017:2483 - https://github.com/gottburgm/Exploits/tree/master/CVE-2017-7679 - https://security.netapp.com/advisory/ntap-20180601-000
https://github.com/gottburgm/Exploits/tree/master/CVE-2017-7679 - https://security.netapp.com/advisory/ntap-20180601-0002/ - https://www.nomachine.com/SU08O00185 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us - https://access.redhat.com/errata/RHSA-2017:3475 - https://lists.apache.org/thread.html/f4515e580dfb6eeca589a5cdebd4c4c709ce632b12924f343c3b7751%40%3Cdev.httpd.apache.org%3E - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03821en_us - https://access.redhat.com/errata/RHSA-2017:3195 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.securityfocus.com/bid/99170
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.securityfocus.com/bid/99170 - https://access.redhat.com/errata/RHSA-2017:3476 - https://access.redhat.com/errata/RHSA-2017:3477 - http://www.debian.org/security/2017/dsa-3896 - https://access.redhat.com/errata/RHSA-2017:3194 - https://access.redhat.com/errata/RHSA-2017:3193 - http://www.securitytracker.com/id/1038711 - https://security.gentoo.org/glsa/201710-32 - https://access.redhat.com/errata/RHSA-2017:2478 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503
e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://www.tenable.com/security/tns-2019-09 - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3
ttpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880d
a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfcf929bd33a6833e3f0c35eebdad70d5060665f9c4e17ea467c66770%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E -
://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2017-7680 State: PUBLISHED Published: 2017-07-14T15:00:00Z Last Updated: 2024-09-16T19:09:47.391Z Vendors: Apache Software Foundation Products: Apache OpenMeetings Problem Types: Insecure crossdomain.xml policy Description: Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains. Additional Analyst Notes: - CVE Program Container: References: - http://markmail.org/message/whhibri7ervbjvda
CVE ID: CVE-2017-7681 State: PUBLISHED Published: 2017-07-14T15:00:00Z Last Updated: 2024-09-16T18:39:15.972Z Vendors: Apache Software Foundation Products: Apache OpenMeetings Problem Types: SQL injection Description: Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the application in the back-end. Additional Analyst Notes: - CVE Program Container: References: - http://markmail.org/message/j774dp5ro5xmkmg6
CVE ID: CVE-2017-7682 State: PUBLISHED Published: 2017-07-14T15:00:00Z Last Updated: 2024-09-16T22:09:03.569Z Vendors: Apache Software Foundation Products: Apache OpenMeetings Problem Types: Business Logic Bypass Description: Apache OpenMeetings 3.2.0 is vulnerable to parameter manipulation attacks, as a result attacker has access to restricted areas. Additional Analyst Notes: - CVE Program Container: References: - http://markmail.org/message/dbrbvf5k343ulivf
CVE ID: CVE-2017-7683 State: PUBLISHED Published: 2017-07-14T15:00:00Z Last Updated: 2024-09-16T18:33:49.648Z Vendors: Apache Software Foundation Products: Apache OpenMeetings Problem Types: Information Disclosure Description: Apache OpenMeetings 1.0.0 displays Tomcat version and detailed error stack trace, which is not secure. Additional Analyst Notes: - CVE Program Container: References: - http://markmail.org/message/hint6fp66lijqdvu
CVE ID: CVE-2017-7684 State: PUBLISHED Published: 2017-07-14T15:00:00Z Last Updated: 2024-09-17T03:18:54.640Z Vendors: Apache Software Foundation Products: Apache OpenMeetings Problem Types: Insecure File Upload Description: Apache OpenMeetings 1.0.0 doesn't check contents of files being uploaded. An attacker can cause a denial of service by uploading multiple large files to the server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99584 - http://markmail.org/message/v6dpmrdd6cgg66up
CVE ID: CVE-2017-7685 State: PUBLISHED Published: 2017-07-14T15:00:00Z Last Updated: 2024-09-16T16:59:04.257Z Vendors: Apache Software Foundation Products: Apache OpenMeetings Problem Types: Insecure HTTP Methods Description: Apache OpenMeetings 1.0.0 responds to the following insecure HTTP methods: PUT, DELETE, HEAD, and PATCH. Additional Analyst Notes: - CVE Program Container: References: - http://markmail.org/message/uxk4bpq35svnyjhb - http://www.securityfocus.com/bid/99592
CVE ID: CVE-2017-7686 State: PUBLISHED Published: 2017-06-28T13:00:00 Last Updated: 2024-08-05T16:12:28.262Z Vendors: Apache Software Foundation Products: Apache Ignite Problem Types: Information Disclosure Description: Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that include additional functionality, bug fixes and performance improvements. To do that the component communicates to an external PHP server (http://ignite.run) where it needs to send some system properties like Apache Ignite or Java version. Some of the properties might contain user sensitive information. Additional Analyst Notes: - CVE Program Container: Referen
e of the properties might contain user sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99292 - http://apache-ignite-developers.2346864.n4.nabble.com/CVE-2017-7686-Apache-Ignite-Information-Disclosure-td19168.html
CVE ID: CVE-2017-7687 State: PUBLISHED Published: 2017-09-28T20:00:00Z Last Updated: 2024-09-16T16:43:52.011Z Vendors: Apache Software Foundation Products: Apache Mesos Problem Types: Denial of Service Description: When handling a decoding failure for a malformed URL path of an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev might crash because the code accidentally calls inappropriate function. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/2c9ed2b07c2b
able. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/2c9ed2b07c2b2831a11d21db3cf8408a71fcf2c300d73ca01bad89df%40%3Cdev.mesos.apache.org%3E - http://www.securityfocus.com/bid/101027
CVE ID: CVE-2017-7688 State: PUBLISHED Published: 2017-07-14T15:00:00Z Last Updated: 2024-09-17T03:02:48.446Z Vendors: Apache Software Foundation Products: Apache OpenMeetings Problem Types: Insecure Password Update Description: Apache OpenMeetings 1.0.0 updates user password in insecure manner. Additional Analyst Notes: - CVE Program Container: References: - http://markmail.org/message/ctsiiqtekzsun6fi - http://www.securityfocus.com/bid/99586
CVE ID: CVE-2017-7689 State: PUBLISHED Published: 2017-04-11T21:00:00 Last Updated: 2024-08-05T16:12:27.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Command Injection vulnerability in Schneider Electric homeLYnk Controller exists in all versions before 1.5.0. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-019-01A - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-052-02 - http://www.securityfocus.com/bid/97585
CVE ID: CVE-2017-7690 State: PUBLISHED Published: 2017-04-14T18:00:00 Last Updated: 2024-08-05T16:12:27.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary with a Trojan horse program. Additional Analyst Notes: - CVE Program Container: References: - https://m4.rkw.io/blog/cve20177690-local-root-privesc-in-proxifier-for-mac-219.html - https://www.exploit-db.com/exploits/43225/
CVE ID: CVE-2017-7691 State: PUBLISHED Published: 2017-04-11T21:00:00 Last Updated: 2024-08-05T16:12:27.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: A code injection vulnerability exists in SAP TREX / Business Warehouse Accelerator (BWA). The vendor response is SAP Security Note 2419592. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97567 - https://blogs.sap.com/2017/04/11/sap-security-patch-day-april-2017/
CVE ID: CVE-2017-7692 State: PUBLISHED Published: 2017-04-20T14:00:00 Last Updated: 2024-08-05T16:12:27.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a sendmail.cf file that is mishandled in a popen call. It's possible to exploit this vulnerability to execute arbitrary shell commands on the remote server. The problem is in the Deliver_SendMail.class.php with the initStream function that uses escapeshellcmd() to sanitize the sendmail command before executing it. The use of escapeshellcmd() is not correct in this case since it doesn't escape whitespaces, allo
d before executing it. The use of escapeshellcmd() is not correct in this case since it doesn't escape whitespaces, allowing the injection of arbitrary command parameters. The problem is in -f$envelopefrom within the sendmail command line. Hence, if the target server uses sendmail and SquirrelMail is configured to use it as a command-line program, it's possible to trick sendmail into using an attacker-provided configuration file that triggers the execution of an arbitrary command. For exploitation, the attacker must upload a sendmail.cf file as an email attachment, and inject the sendmail.cf filename with the -C option within the "Options > Personal Informations > Email Address" setting. Add
ct the sendmail.cf filename with the -C option within the "Options > Personal Informations > Email Address" setting. Additional Analyst Notes: - CVE Program Container: References: - https://legalhackers.com/advisories/SquirrelMail-Exploit-Remote-Code-Exec-CVE-2017-7692-Vuln.html - http://www.securityfocus.com/bid/98067 - http://openwall.com/lists/oss-security/2017/04/19/6 - https://www.exploit-db.com/exploits/41910/ - https://security.gentoo.org/glsa/201709-13 - http://www.debian.org/security/2017/dsa-3852 - http://www.securitytracker.com/id/1038312 - http://openwall.com/lists/oss-security/2017/04/27/1
CVE ID: CVE-2017-7693 State: PUBLISHED Published: 2017-08-26T04:00:00 Last Updated: 2024-08-05T16:12:27.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in viewer_script.jsp in Riverbed OPNET App Response Xpert (ARX) version 9.6.1 allows remote authenticated users to inject arbitrary commands to read OS files. Additional Analyst Notes: - CVE Program Container: References: - http://arthrocyber.com/research#finding_5
CVE ID: CVE-2017-7694 State: PUBLISHED Published: 2017-04-11T23:00:00 Last Updated: 2024-08-05T16:12:28.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in Symphony CMS through 2.6.11 allows remote attackers to execute code and get a webshell from the back-end. The attacker must be authenticated and enter PHP code in the datasource editor or event editor. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/symphonycms/symphony-2/commit/e30a18f8f09dca836e141bf126a26e565c9a2bc7 - https://github.com/symphonycms/symphony-2/issues/2655 - http://www.securityfocus
a18f8f09dca836e141bf126a26e565c9a2bc7 - https://github.com/symphonycms/symphony-2/issues/2655 - http://www.securityfocus.com/bid/97594 - http://www.math1as.com/symphonycms_2.7_exec.txt
CVE ID: CVE-2017-7695 State: PUBLISHED Published: 2017-04-11T23:00:00Z Last Updated: 2024-09-16T16:27:35.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted File Upload exists in BigTree CMS before 4.2.17: if an attacker uploads an 'xxx.php[space]' file, they could bypass a safety check and execute any code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigtreecms/BigTree-CMS/commit/8cf4212ea40e1b843e1aecf4b24681b0964ec04c - https://github.com/bigtreecms/BigTree-CMS/issues/276 - http://www.math1as.com/bigtree_upload.txt
CVE ID: CVE-2017-7696 State: PUBLISHED Published: 2017-04-14T18:00:00 Last Updated: 2024-08-05T16:12:27.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service (memory consumption) via large values in the width and height parameters to otp_logon_ui_resources/qr, aka SAP Security Note 2389042. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-17-001-sap-java-dos-bc-iam-sso-otp-package-use-qr-servlet/
CVE ID: CVE-2017-7697 State: PUBLISHED Published: 2017-04-11T23:00:00 Last Updated: 2024-08-05T16:12:27.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/erikd/libsamplerate/issues/11 - http://www.securityfocus.com/bid/97587 - https://lists.debian.org/debian-lts-announce/2021/12/msg00010.html
CVE ID: CVE-2017-7698 State: PUBLISHED Published: 2017-05-10T14:00:00 Last Updated: 2024-08-05T16:12:28.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Use After Free in the pdf2swf part of swftools 0.9.2 and earlier allows remote attackers to execute arbitrary code via a malformed PDF document, possibly a consequence of an error in Gfx.cc in Xpdf 3.02. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/pull/19
CVE ID: CVE-2017-7700 State: PUBLISHED Published: 2017-04-12T23:00:00 Last Updated: 2024-08-05T16:12:28.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by ensuring a nonzero record size. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13478 - https://www.wireshark.org/security/wnpa-sec-2017-14.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8fc0af859de4993951a915ad735be350221f3f53 - https://li
://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8fc0af859de4993951a915ad735be350221f3f53 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - http://www.securityfocus.com/bid/97631 - http://www.securitytracker.com/id/1038262 - https://security.gentoo.org/glsa/201706-12
CVE ID: CVE-2017-7701 State: PUBLISHED Published: 2017-04-12T23:00:00 Last Updated: 2024-08-05T16:12:27.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97632 - https://www.wireshark.org/security/wnpa-sec-2017-16.html - http://www.securitytracker.com/id/1038262 - https://security.gentoo.org/glsa/201706-12 - https://bugs.wireshark.org/bu