Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-5464 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.303Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Memory corruption with accessibility and DOM manipulation Description: During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1347075 - https://access.redhat
tes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1347075 - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5465 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.672Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Out-of-bounds read in ConvolvePixel Description: An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/a
VE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1347617 - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.exploit-db.com/exploits/42072/ - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5466 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.760Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Origin confusion when reloading isolated data:text/html URL Description: If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, triggering a reload will run the reloaded "data:text/html" page with its origin set incorrectly. This allows for a cross-site scripting (XSS) attack. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/err
< 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1353975 - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5467 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.669Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Memory corruption when drawing Skia content Description: A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.
ww.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://bugzilla.mozilla.org/show_bug.cgi?id=1347262 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5468 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.734Z Vendors: Mozilla Products: Firefox Problem Types: Incorrect ownership model for Private Browsing information Description: An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools. This can result in a non-exploitable crash when manually triggered during debugging. This vulnerability affects Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1329521 - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - http://www.securi
- https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - http://www.securitytracker.com/id/1038320
CVE ID: CVE-2017-5469 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.693Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Potential Buffer overflow in flex-generated code Description: Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://bugzilla.moz
a.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1292534 - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5470 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.617Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2 Description: Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2017-15/ - https://
nalyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2017-15/ - https://www.debian.org/security/2017/dsa-3918 - http://www.securitytracker.com/id/1038689 - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1359639%2C1349595%2C1352295%2C1352556%2C1342552%2C1342567%2C1346012%2C1366140%2C1368732%2C1297111%2C1362590%2C1357462%2C1363280%2C1349266%2C1352093%2C1348424%2C1347748%2C1356025%2C1325513%2C1367692 - https://www.debian.org/security/2017/dsa-3881 - https://access.redhat.com/errata/RHSA-2017:1440 - https://access.redhat.com/errata/RHSA-2017:1561 - https://www.mozilla.org/security/advisories/mfsa2017-17/ - http://www.securityfocus.com/bid/99041 -
ta/RHSA-2017:1561 - https://www.mozilla.org/security/advisories/mfsa2017-17/ - http://www.securityfocus.com/bid/99041 - https://www.mozilla.org/security/advisories/mfsa2017-16/
CVE ID: CVE-2017-5471 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.637Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 54 Description: Memory safety bugs were reported in Firefox 53. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 54. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99042 - https://www.mozilla.org/security/advisories/mfsa2017-15/ - http://www.securitytracker.com/id/1038689 - https://bugzilla.mozilla.org/buglis
a.org/security/advisories/mfsa2017-15/ - http://www.securitytracker.com/id/1038689 - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1349604%2C1318645%2C1361098%2C1361100%2C1341026%2C1349421%2C1360852%2C1299147%2C1352073%2C1354853%2C1366446%2C1342181%2C1343069
CVE ID: CVE-2017-5472 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.834Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Use-after-free using destroyed node when regenerating trees Description: A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no longer exists. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2017-15/ - https://ww
lyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2017-15/ - https://www.debian.org/security/2017/dsa-3918 - http://www.securitytracker.com/id/1038689 - https://www.debian.org/security/2017/dsa-3881 - https://bugzilla.mozilla.org/show_bug.cgi?id=1365602 - http://www.securityfocus.com/bid/99040 - https://access.redhat.com/errata/RHSA-2017:1440 - https://access.redhat.com/errata/RHSA-2017:1561 - https://www.mozilla.org/security/advisories/mfsa2017-17/ - https://www.mozilla.org/security/advisories/mfsa2017-16/
CVE ID: CVE-2017-5473 State: PUBLISHED Published: 2017-01-14T06:56:00 Last Updated: 2024-08-05T15:04:14.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in ntopng through 2.4 allows remote attackers to hijack the authentication of arbitrary users, as demonstrated by admin/add_user.lua, admin/change_user_prefs.lua, admin/delete_user.lua, and admin/password_reset.lua. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ntop/ntopng/commit/f91fbe3d94c8346884271838ae3406ae633f6f15 - https://www.exploit-db.com/exploits/41141/ - http://www.securityfocus.com/bid/95654 - https://github.com/ntop/ntopng/commi
tps://www.exploit-db.com/exploits/41141/ - http://www.securityfocus.com/bid/95654 - https://github.com/ntop/ntopng/commit/1b2ceac8f578a246af6351c4f476e3102cdf21b3
CVE ID: CVE-2017-5474 State: PUBLISHED Published: 2017-01-14T06:56:00 Last Updated: 2024-08-05T15:04:14.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in comment.php in Serendipity through 2.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/s9y/Serendipity/commit/6285933470bab2923e4573b5d54ba9a32629b0cd - http://www.securityfocus.com/bid/95652
CVE ID: CVE-2017-5475 State: PUBLISHED Published: 2017-01-14T06:56:00 Last Updated: 2024-08-05T15:04:15.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: comment.php in Serendipity through 2.0.5 allows CSRF in deleting any comments. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/s9y/Serendipity/issues/439 - http://www.securityfocus.com/bid/95656
CVE ID: CVE-2017-5476 State: PUBLISHED Published: 2017-01-14T06:56:00 Last Updated: 2024-08-05T15:04:14.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Serendipity through 2.0.5 allows CSRF for the installation of an event plugin or a sidebar plugin. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/s9y/Serendipity/issues/439 - http://www.securityfocus.com/bid/95659
CVE ID: CVE-2017-5480 State: PUBLISHED Published: 2017-01-15T22:00:00 Last Updated: 2024-08-05T15:04:14.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows remote authenticated users to read or delete arbitrary files by leveraging back-office access to provide a .. (dot dot) in the fm_selected array parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95454 - https://github.com/b2evolution/b2evolution/commit/26841d9c81f27ad23b2f6e4bd5eaec7f2f58dfe0 - https://github.com/b2evolution/b2evolution/issues/35
CVE ID: CVE-2017-5481 State: PUBLISHED Published: 2017-05-03T20:00:00 Last Updated: 2024-08-05T15:04:15.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro OfficeScan 11.0 before SP1 CP 6325 and XG before CP 1352 allows remote authenticated users to gain privileges by leveraging a leak of an encrypted password during a web-console operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98007 - https://success.trendmicro.com/solution/1117204
CVE ID: CVE-2017-5482 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-05T15:04:14.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2016-8575. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2017-5483 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-05T15:04:14.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1_parse(). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2017-5484 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-05T15:04:14.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_print(). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2017-5485 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-05T15:04:14.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup_nsap(). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2017-5486 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-05T15:04:14.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print(). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2017-5487 State: PUBLISHED Published: 2017-01-15T02:00:00 Last Updated: 2024-08-05T15:04:14.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41497/ - https://wpvulndb.com/vulnerabilities/8715 - https://codex.wordpress.org/Version_4.7.1 - https://github.com/WordPress/WordPress/commit/daf358983cc
erabilities/8715 - https://codex.wordpress.org/Version_4.7.1 - https://github.com/WordPress/WordPress/commit/daf358983cc1ce0c77bf6d2de2ebbb43df2add60 - http://www.openwall.com/lists/oss-security/2017/01/14/6 - https://www.wordfence.com/blog/2016/12/wordfence-blocks-username-harvesting-via-new-rest-api-wp-4-7/ - http://www.securitytracker.com/id/1037591 - https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/ - http://www.securityfocus.com/bid/95391
CVE ID: CVE-2017-5488 State: PUBLISHED Published: 2017-01-15T02:00:00 Last Updated: 2024-08-05T15:04:14.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/update-core.php in WordPress before 4.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) version header of a plugin. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95397 - http://www.debian.org/security/2017/dsa-3779 - https://wpvulndb.com/vulnerabilities/8716 - https://codex.wordpress.org/Version_4.7.1 - http://www.openwall.com/lists/oss-security/2017/01/14/6 - http://www.se
16 - https://codex.wordpress.org/Version_4.7.1 - http://www.openwall.com/lists/oss-security/2017/01/14/6 - http://www.securitytracker.com/id/1037591 - https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/ - https://github.com/WordPress/WordPress/commit/c9ea1de1441bb3bda133bf72d513ca9de66566c2
CVE ID: CVE-2017-5489 State: PUBLISHED Published: 2017-01-15T02:00:00 Last Updated: 2024-08-05T15:04:14.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims via vectors involving a Flash file upload. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95399 - http://www.debian.org/security/2017/dsa-3779 - https://wpvulndb.com/vulnerabilities/8717 - https://codex.wordpress.org/Version_4.7.1 - http://www.openwall.com/lists/oss-security/2017/01/14/6 - http://www.securitytracker.com/id/103759
s.org/Version_4.7.1 - http://www.openwall.com/lists/oss-security/2017/01/14/6 - http://www.securitytracker.com/id/1037591 - https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/
CVE ID: CVE-2017-5490 State: PUBLISHED Published: 2017-01-15T02:00:00 Last Updated: 2024-08-05T15:04:14.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the theme-name fallback functionality in wp-includes/class-wp-theme.php in WordPress before 4.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted directory name of a theme, related to wp-admin/includes/class-theme-installer-skin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95402 - http://www.debian.org/security/2017/dsa-3779 - https://wpvulndb.com/vulnerabilities/8718 - https://www.mehmetince.net/l
http://www.debian.org/security/2017/dsa-3779 - https://wpvulndb.com/vulnerabilities/8718 - https://www.mehmetince.net/low-severity-wordpress/ - https://github.com/WordPress/WordPress/commit/ce7fb2934dd111e6353784852de8aea2a938b359 - https://codex.wordpress.org/Version_4.7.1 - http://www.openwall.com/lists/oss-security/2017/01/14/6 - http://www.securitytracker.com/id/1037591 - https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/
CVE ID: CVE-2017-5491 State: PUBLISHED Published: 2017-01-15T02:00:00 Last Updated: 2024-08-05T15:04:14.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95406 - https://github.com/WordPress/WordPress/commit/061e8788814ac87706d8b95688df276fe3c8596a - http://www.debian.org/security/2017/dsa-3779 - https://wpvulndb.com/vulnerabilities/8719 - https://codex.wordpress.org/Version_4.7.1 - http://www.openwall.com/lists/oss-sec
://wpvulndb.com/vulnerabilities/8719 - https://codex.wordpress.org/Version_4.7.1 - http://www.openwall.com/lists/oss-security/2017/01/14/6 - http://www.securitytracker.com/id/1037591 - https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/
CVE ID: CVE-2017-5492 State: PUBLISHED Published: 2017-01-15T02:00:00 Last Updated: 2024-08-05T15:04:14.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims for requests that perform a widgets-access action, related to wp-admin/includes/class-wp-screen.php and wp-admin/widgets.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WordPress/WordPress/commit/03e5c0314aeffe6b27f4b98fef842bf0fb00c733 - http://www.debian.org/security/2017/dsa-3779 - https:
dPress/WordPress/commit/03e5c0314aeffe6b27f4b98fef842bf0fb00c733 - http://www.debian.org/security/2017/dsa-3779 - https://wpvulndb.com/vulnerabilities/8720 - http://www.securityfocus.com/bid/95407 - https://codex.wordpress.org/Version_4.7.1 - http://www.openwall.com/lists/oss-security/2017/01/14/6 - http://www.securitytracker.com/id/1037591 - https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/