Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-14305 State: PUBLISHED Published: 2017-09-11T18:00:00 Last Updated: 2024-08-05T19:20:41.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at STDUJBIG2File!DllUnregisterServer+0x0000000000005578." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14305
CVE ID: CVE-2017-14306 State: PUBLISHED Published: 2017-09-11T18:00:00 Last Updated: 2024-08-05T19:20:41.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006e10." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14306
CVE ID: CVE-2017-14307 State: PUBLISHED Published: 2017-09-11T18:00:00 Last Updated: 2024-08-05T19:20:41.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77400000!TpAllocCleanupGroup+0x0000000000000402." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14307
CVE ID: CVE-2017-14308 State: PUBLISHED Published: 2017-09-11T18:00:00 Last Updated: 2024-08-05T19:20:41.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006ddd." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14308
CVE ID: CVE-2017-14309 State: PUBLISHED Published: 2017-09-11T18:00:00 Last Updated: 2024-08-05T19:20:41.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006ec8." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14309
CVE ID: CVE-2017-14310 State: PUBLISHED Published: 2017-09-11T18:00:00 Last Updated: 2024-08-05T19:20:41.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000001869." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14310
CVE ID: CVE-2017-14311 State: PUBLISHED Published: 2017-09-19T16:00:00 Last Updated: 2024-08-05T19:20:41.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C402088 IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42735/
CVE ID: CVE-2017-14312 State: PUBLISHED Published: 2017-09-11T22:00:00 Last Updated: 2024-08-05T19:20:41.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios Core through 4.3.4 initially executes /usr/sbin/nagios as root but supports configuration options in which this file is owned by a non-root account (and similarly can have nagios.cfg owned by a non-root account), which allows local users to gain privileges by leveraging access to this non-root account. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201812-03 - https://github.com/NagiosEnterprises/nagioscore/issues/424 - http://www.securityfocus.com/bid/100881
CVE ID: CVE-2017-14313 State: PUBLISHED Published: 2017-09-12T00:00:00 Last Updated: 2024-08-05T19:20:41.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shibboleth_login_form function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of add_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8901 - https://github.com/michaelryanmcneill/shibboleth/commit/1d65ad6786282d23ba1865f56e2fd19188e7c26a - http://www.debian.org/security/2017/dsa-3973 - https://bugs.debian.org/874416
CVE ID: CVE-2017-14314 State: PUBLISHED Published: 2017-09-12T00:00:00 Last Updated: 2024-08-05T19:20:41.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the DrawImage function in magick/render.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (DrawDashPolygon heap-based buffer over-read and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - http://hg.code.sf.net/p/graphicsmagick/code/rev/2835184bfb78 - https://sourceforge.net/p/graphicsmagick/bugs/448/ - https
ttp://hg.code.sf.net/p/graphicsmagick/code/rev/2835184bfb78 - https://sourceforge.net/p/graphicsmagick/bugs/448/ - https://usn.ubuntu.com/4232-1/
CVE ID: CVE-2017-14315 State: PUBLISHED Published: 2017-09-12T15:00:00 Last Updated: 2024-08-05T19:20:41.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Apple iOS 7 through 9, due to a BlueBorne flaw in the implementation of LEAP (Low Energy Audio Protocol), a large audio command can be sent to a targeted device and lead to a heap overflow with attacker-controlled data. Since the audio commands sent via LEAP are not properly validated, an attacker can use this overflow to gain full control of the device through the relatively high privileges of the Bluetooth stack in iOS. The attack bypasses Bluetooth access control; however, the default "Bluetooth On" value must be presen
oth stack in iOS. The attack bypasses Bluetooth access control; however, the default "Bluetooth On" value must be present in Settings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100816 - https://www.armis.com/blueborne - http://seclists.org/fulldisclosure/2019/May/24 - https://support.apple.com/kb/HT210121 - https://seclists.org/bugtraq/2019/May/30
CVE ID: CVE-2017-14316 State: PUBLISHED Published: 2017-09-12T15:00:00 Last Updated: 2024-08-05T19:20:41.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: A parameter verification issue was discovered in Xen through 4.9.x. The function `alloc_heap_pages` allows callers to specify the first NUMA node that should be used for allocations through the `memflags` parameter; the node is extracted using the `MEMF_get_node` macro. While the function checks to see if the special constant `NUMA_NO_NODE` is specified, it otherwise does not handle the case where `node >= MAX_NUMNODES`. This allows an out-of-bounds access to an internal array. Additional Analyst Notes: - CVE Program Containe
AX_NUMNODES`. This allows an out-of-bounds access to an internal array. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100818 - http://xenbits.xen.org/xsa/advisory-231.html - https://support.citrix.com/article/CTX227185 - https://www.debian.org/security/2017/dsa-4050 - https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html - http://www.securitytracker.com/id/1039348
CVE ID: CVE-2017-14317 State: PUBLISHED Published: 2017-09-12T15:00:00 Last Updated: 2024-08-05T19:20:41.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: A domain cleanup issue was discovered in the C xenstore daemon (aka cxenstored) in Xen through 4.9.x. When shutting down a VM with a stubdomain, a race in cxenstored may cause a double-free. The xenstored daemon may crash, resulting in a DoS of any parts of the system relying on it (including domain creation / destruction, ballooning, device changes, etc.). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039350 - http://xenbits.xen.org/xsa/advisory-233.html - https://www.deb
References: - http://www.securitytracker.com/id/1039350 - http://xenbits.xen.org/xsa/advisory-233.html - https://www.debian.org/security/2017/dsa-4050 - https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html - http://www.securityfocus.com/bid/100826
CVE ID: CVE-2017-14318 State: PUBLISHED Published: 2017-09-12T15:00:00 Last Updated: 2024-08-05T19:20:41.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen 4.5.x through 4.9.x. The function `__gnttab_cache_flush` handles GNTTABOP_cache_flush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mapping to the calling domain exists for the page in question. However, the function does not check to see if the owning domain actually has a grant table or not. Some special domains, such as `DOMID_XEN`, `DOMID_IO` and `DOMID_COW`
e owning domain actually has a grant table or not. Some special domains, such as `DOMID_XEN`, `DOMID_IO` and `DOMID_COW` are created without grant tables. Hence, if __gnttab_cache_flush operates on a page owned by these special domains, it will attempt to dereference a NULL pointer in the domain struct. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX227185 - https://www.debian.org/security/2017/dsa-4050 - http://www.securitytracker.com/id/1039349 - http://xenbits.xen.org/xsa/advisory-232.html - http://www.securityfocus.com/bid/100817
CVE ID: CVE-2017-14319 State: PUBLISHED Published: 2017-09-12T15:00:00 Last Updated: 2024-08-05T19:20:41.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: A grant unmapping issue was discovered in Xen through 4.9.x. When removing or replacing a grant mapping, the x86 PV specific path needs to make sure page table entries remain in sync with other accounting done. Although the identity of the page frame was validated correctly, neither the presence of the mapping nor page writability were taken into account. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039351 - https://support.citrix.com/article/CTX227185 - https://www.debia
ferences: - http://www.securitytracker.com/id/1039351 - https://support.citrix.com/article/CTX227185 - https://www.debian.org/security/2017/dsa-4050 - http://www.securityfocus.com/bid/100819 - https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html - http://xenbits.xen.org/xsa/advisory-234.html
CVE ID: CVE-2017-14320 State: PUBLISHED Published: 2017-09-21T16:00:00 Last Updated: 2024-08-05T19:20:41.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mirasvit Helpdesk MX before 1.5.3 might allow remote attackers to execute arbitrary code by leveraging failure to filter uploaded files. Additional Analyst Notes: - CVE Program Container: References: - https://www.webshield.hu/vulnerabilities-found-webshield.html
CVE ID: CVE-2017-14321 State: PUBLISHED Published: 2017-09-21T16:00:00 Last Updated: 2024-08-05T19:20:41.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) customer name or (2) subject in a ticket. Additional Analyst Notes: - CVE Program Container: References: - https://www.webshield.hu/vulnerabilities-found-webshield.html
CVE ID: CVE-2017-14322 State: PUBLISHED Published: 2017-10-18T18:00:00 Last Updated: 2024-08-05T19:20:41.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEM_CookieLogin cookie with a specially crafted value. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44513/ - http://seclists.org/fulldisclosure/2017/Oct/39 - https://security.infoteam.ch/en/blog/posts/narrative-of-an-incident-response-from-compromise-
lldisclosure/2017/Oct/39 - https://security.infoteam.ch/en/blog/posts/narrative-of-an-incident-response-from-compromise-to-the-publication-of-the-weakness.html
CVE ID: CVE-2017-14323 State: PUBLISHED Published: 2018-04-10T15:00:00 Last Updated: 2024-08-05T19:20:41.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSRF (Server Side Request Forgery) in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the upfile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Apr/16
CVE ID: CVE-2017-14324 State: PUBLISHED Published: 2017-09-12T08:00:00 Last Updated: 2024-08-05T19:20:41.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100863 - https://github.com/ImageMagick/ImageMagick/issues/739
CVE ID: CVE-2017-14325 State: PUBLISHED Published: 2017-09-12T08:00:00 Last Updated: 2024-08-05T19:20:41.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allows attackers to cause a denial of service (memory consumption in ReadMPCImage in coders/mpc.c) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/741 - http://www.securityfocus.com/bid/100874
CVE ID: CVE-2017-14326 State: PUBLISHED Published: 2017-09-12T08:00:00 Last Updated: 2024-08-05T19:20:41.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/740 - https://usn.ubuntu.com/3681-1/
CVE ID: CVE-2017-14327 State: PUBLISHED Published: 2017-10-23T08:00:00 Last Updated: 2024-08-05T19:20:41.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://extremeportal.force.com/ExtrArticleDetail?n=000017719
CVE ID: CVE-2017-14328 State: PUBLISHED Published: 2017-10-23T08:00:00 Last Updated: 2024-08-05T19:20:41.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot. Additional Analyst Notes: - CVE Program Container: References: - https://extremeportal.force.com/ExtrArticleDetail?n=000017765
CVE ID: CVE-2017-14329 State: PUBLISHED Published: 2017-10-23T08:00:00 Last Updated: 2024-08-05T19:20:41.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving an exsh debug shell. Additional Analyst Notes: - CVE Program Container: References: - https://extremeportal.force.com/ExtrArticleDetail?n=000017719
CVE ID: CVE-2017-14330 State: PUBLISHED Published: 2017-10-23T08:00:00 Last Updated: 2024-08-05T19:20:41.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process. Additional Analyst Notes: - CVE Program Container: References: - https://extremeportal.force.com/ExtrArticleDetail?n=000017719
CVE ID: CVE-2017-14331 State: PUBLISHED Published: 2017-10-23T08:00:00 Last Updated: 2024-08-05T19:20:41.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell" protection mechanism and obtain an interactive shell. Additional Analyst Notes: - CVE Program Container: References: - https://extremeportal.force.com/ExtrArticleDetail?n=000017719
CVE ID: CVE-2017-14332 State: PUBLISHED Published: 2017-10-23T08:00:00 Last Updated: 2024-08-05T19:20:41.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to hijack sessions by determining SessionID values. Additional Analyst Notes: - CVE Program Container: References: - https://extremeportal.force.com/ExtrArticleDetail?n=000017765
CVE ID: CVE-2017-14333 State: PUBLISHED Published: 2017-09-12T08:00:00 Last Updated: 2024-08-05T19:20:41.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, and hang because of a time-consuming loop) or possibly have unspecified other impact via a crafted binary file with invalid values of ent.vn_next, during "readelf -a" execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201801-01 - https://sourceware.org/bugzilla/show_bug.cgi?id=21990
CVE ID: CVE-2017-14335 State: PUBLISHED Published: 2017-09-12T08:00:00 Last Updated: 2024-08-05T19:20:41.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.securiteam.com/index.php/archives/3420
CVE ID: CVE-2017-14337 State: PUBLISHED Published: 2017-09-12T16:00:00 Last Updated: 2024-08-05T19:20:41.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: When MISP before 2.4.80 is configured with X.509 certificate authentication (CertAuth) in conjunction with a non-MISP external user management ReST API, if an external user provides X.509 certificate authentication and this API returns an empty value, the unauthenticated user can be granted access as an arbitrary user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/be111a470204a974c50682054c9c7d4b94396ed9 - https://www.circl.lu/advisory/CVE-2017-14337/
CVE ID: CVE-2017-14339 State: PUBLISHED Published: 2017-09-20T16:00:00 Last Updated: 2024-08-05T19:20:41.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yadifa/yadifa/blob/v2.2.6/ChangeLog - https://www.tarlogic.com/blog/fuzzing-yadifa-dns/ - http://www.debian.org/security/2017/dsa-4001
CVE ID: CVE-2017-14340 State: PUBLISHED Published: 2017-09-15T11:00:00 Last Updated: 2024-08-05T19:20:41.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XFS_IS_REALTIME_INODE macro in fs/xfs/xfs_linux.h in the Linux kernel before 4.13.2 does not verify that a filesystem has a realtime device, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via vectors related to setting an RHINHERIT flag on a directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100851 - https://access.redhat.com/errata/RHSA-2017:2918 - https://bugzilla.redhat.com/show_bug.cgi?id=1491344 - https://github.com/t
s://access.redhat.com/errata/RHSA-2017:2918 - https://bugzilla.redhat.com/show_bug.cgi?id=1491344 - https://github.com/torvalds/linux/commit/b31ff3cdf540110da4572e3e29bd172087af65cc - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b31ff3cdf540110da4572e3e29bd172087af65cc - http://www.debian.org/security/2017/dsa-3981 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.2 - http://seclists.org/oss-sec/2017/q3/436
CVE ID: CVE-2017-14341 State: PUBLISHED Published: 2017-09-12T17:00:00 Last Updated: 2024-08-05T19:20:41.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in coders/wpg.c, causing CPU exhaustion via a crafted wpg image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/654 - https://usn.ubuntu.com/3681-1/ - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html - https://github.com/ImageMagick/ImageMagick/commit/7d63315a64267c565d1f34b9cb523a14616fed24
CVE ID: CVE-2017-14342 State: PUBLISHED Published: 2017-09-12T17:00:00 Last Updated: 2024-08-05T19:20:41.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/650
CVE ID: CVE-2017-14343 State: PUBLISHED Published: 2017-09-12T17:00:00 Last Updated: 2024-08-05T19:20:41.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/649
CVE ID: CVE-2017-14344 State: PUBLISHED Published: 2017-09-12T18:00:00 Last Updated: 2024-08-05T19:20:41.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x95382673 by the windrvr1240 kernel driver. The issue lies in the failure to properly validate user-supplied data which can result in a kernel pool overflow. An attacker can leverage this vulnerability to execute arbitrary code under th
ich can result in a kernel pool overflow. An attacker can leverage this vulnerability to execute arbitrary code under the context of kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42665/ - http://srcincite.io/advisories/src-2017-0027/
CVE ID: CVE-2017-14345 State: PUBLISHED Published: 2017-09-12T18:00:00Z Last Updated: 2024-09-17T00:47:00.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/imsebao/404team/blob/master/tianchoy-blog-sql.md