Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-11631 State: PUBLISHED Published: 2017-07-26T08:00:00 Last Updated: 2024-08-05T18:12:40.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: dapur/app/app_user/controller/status.php in Fiyo CMS 2.0.7 has SQL injection via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FiyoCMS/FiyoCMS/issues/7
CVE ID: CVE-2017-11632 State: PUBLISHED Published: 2018-02-26T22:00:00 Last Updated: 2024-08-05T18:12:40.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Wireless IP Camera 360 devices. A root account with a known SHA-512 password hash exists, which makes it easier for remote attackers to obtain administrative access via a TELNET session. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eloygn/IT_Security_Research_WirelessIP_camera_family
CVE ID: CVE-2017-11633 State: PUBLISHED Published: 2018-02-26T22:00:00 Last Updated: 2024-08-05T18:12:40.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover RTSP credentials by connecting to TCP port 9527 and reading the InsertConnect field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eloygn/IT_Security_Research_WirelessIP_camera_family
CVE ID: CVE-2017-11634 State: PUBLISHED Published: 2018-02-26T22:00:00 Last Updated: 2024-08-05T18:12:40.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover a weakly encoded admin password by connecting to TCP port 9527 and reading the password field of the debugging information, e.g., nTBCS19C corresponds to a password of 123456. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eloygn/IT_Security_Research_WirelessIP_camera_family
CVE ID: CVE-2017-11635 State: PUBLISHED Published: 2018-02-26T22:00:00 Last Updated: 2024-08-05T18:12:40.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Wireless IP Camera 360 devices. Attackers can read recordings by navigating to /mnt/idea0 or /mnt/idea1 on the SD memory card. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eloygn/IT_Security_Research_WirelessIP_camera_family
CVE ID: CVE-2017-11636 State: PUBLISHED Published: 2017-07-26T08:00:00 Last Updated: 2024-08-05T18:12:40.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: GraphicsMagick 1.3.26 has a heap overflow in the WriteRGBImage() function in coders/rgb.c when processing multiple frames that have non-identical widths. Additional Analyst Notes: - CVE Program Container: References: - http://hg.code.sf.net/p/graphicsmagick/code/rev/39961adf974c - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - http://www.securityfocus.com/bid/99978 - https://usn.ubuntu.com/4206-1/
CVE ID: CVE-2017-11637 State: PUBLISHED Published: 2017-07-26T08:00:00 Last Updated: 2024-08-05T18:12:40.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: GraphicsMagick 1.3.26 has a NULL pointer dereference in the WritePCLImage() function in coders/pcl.c during writes of monochrome images. Additional Analyst Notes: - CVE Program Container: References: - http://hg.code.sf.net/p/graphicsmagick/code/rev/f3ffc5541257 - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - https://usn.ubuntu.com/4206-1/
CVE ID: CVE-2017-11638 State: PUBLISHED Published: 2017-07-26T08:00:00 Last Updated: 2024-08-05T18:12:40.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: GraphicsMagick 1.3.26 has a segmentation violation in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11642. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - http://hg.code.sf.net/p/graphicsmagick/code/rev/29550606d8b9 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF
e/rev/29550606d8b9 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - https://usn.ubuntu.com/4222-1/
CVE ID: CVE-2017-11639 State: PUBLISHED Published: 2017-07-26T08:00:00 Last Updated: 2024-08-05T18:12:40.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteCIPImage() function in coders/cip.c, related to the GetPixelLuma function in MagickCore/pixel-accessor.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/588 - http://www.securityfocus.com/bid/100013 - https://usn.ubuntu.com/3681-1/ - https://www.debian.org/security/2017/dsa-4019 - https://www.debian.org/security/2018/dsa-4204
CVE ID: CVE-2017-11640 State: PUBLISHED Published: 2017-07-26T08:00:00 Last Updated: 2024-08-05T18:12:40.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage() function in coders/tiff.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/584 - http://www.securityfocus.com/bid/99989 - https://www.debian.org/security/2017/dsa-4040 - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - https://www.debian.org/security/2017/dsa-4019
CVE ID: CVE-2017-11641 State: PUBLISHED Published: 2017-07-26T08:00:00 Last Updated: 2024-08-05T18:12:40.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: GraphicsMagick 1.3.26 has a Memory Leak in the PersistCache function in magick/pixel_cache.c during writing of Magick Persistent Cache (MPC) files. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4321 - http://hg.code.sf.net/p/graphicsmagick/code/rev/db732abd9318 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - https://usn.ubuntu.com/4222-1/
CVE ID: CVE-2017-11642 State: PUBLISHED Published: 2017-07-26T08:00:00 Last Updated: 2024-08-05T18:12:40.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: GraphicsMagick 1.3.26 has a NULL pointer dereference in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11638. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100395 - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - http://hg.code.sf.net/p/graphicsmagick/code/rev/29550606d8b9 - https://lists.fedoraproject.org/archives/list/package-a
- http://hg.code.sf.net/p/graphicsmagick/code/rev/29550606d8b9 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - https://usn.ubuntu.com/4222-1/
CVE ID: CVE-2017-11643 State: PUBLISHED Published: 2017-07-26T08:00:00 Last Updated: 2024-08-05T18:12:40.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: GraphicsMagick 1.3.26 has a heap overflow in the WriteCMYKImage() function in coders/cmyk.c when processing multiple frames that have non-identical widths. Additional Analyst Notes: - CVE Program Container: References: - http://hg.code.sf.net/p/graphicsmagick/code/rev/d00b74315a71 - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - http://www.securityfocus.com/bid/100357 - https://usn.ubuntu.com/4222-1/
CVE ID: CVE-2017-11644 State: PUBLISHED Published: 2017-07-26T08:00:00 Last Updated: 2024-08-05T18:12:40.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100014 - https://github.com/ImageMagick/ImageMagick/issues/587
CVE ID: CVE-2017-11645 State: PUBLISHED Published: 2017-07-28T05:00:00 Last Updated: 2024-08-05T18:12:40.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 do not require authentication for logfile.html, status.html, or system_config.html. Additional Analyst Notes: - CVE Program Container: References: - https://iscouncil.blogspot.com/2017/07/access-violation-vulnerability-in.html
CVE ID: CVE-2017-11646 State: PUBLISHED Published: 2017-07-28T05:00:00 Last Updated: 2024-08-05T18:12:40.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to CSRF attacks, as demonstrated by using administration.html to disable the firewall. They does not contain any token that can mitigate CSRF vulnerabilities within the device. Additional Analyst Notes: - CVE Program Container: References: - https://iscouncil.blogspot.com/2017/07/cross-site-request-forgery.html
CVE ID: CVE-2017-11647 State: PUBLISHED Published: 2017-07-28T05:00:00 Last Updated: 2024-08-05T18:12:40.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored cross-site scripting attacks. Creating an SSID with an XSS payload results in successful exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://iscouncil.blogspot.com/2017/07/cross-site-scripting-vulnerability-in.html
CVE ID: CVE-2017-11648 State: PUBLISHED Published: 2017-07-31T23:00:00 Last Updated: 2024-08-05T18:12:40.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Techroutes TR 1803-3G Wireless Cellular Router/Modem 2.4.25 devices do not possess any protection against a CSRF vulnerability, as demonstrated by a goform/BasicSettings request to disable port filtering. Additional Analyst Notes: - CVE Program Container: References: - https://iscouncil.blogspot.com/2017/07/cross-site-request-forgery_31.html
CVE ID: CVE-2017-11649 State: PUBLISHED Published: 2018-03-06T22:00:00 Last Updated: 2024-08-05T18:12:40.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to hijack the authentication of unspecified users for requests that enable SNMP on the remote device via vectors involving goform/setSnmp. Additional Analyst Notes: - CVE Program Container: References: - https://iscouncil.blogspot.in/2018/03/dray-tek-vigor-ap910c-multiple.html
CVE ID: CVE-2017-11650 State: PUBLISHED Published: 2018-03-06T22:00:00 Last Updated: 2024-08-05T18:12:40.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to inject arbitrary web script or HTML via vectors involving home.asp. Additional Analyst Notes: - CVE Program Container: References: - https://iscouncil.blogspot.in/2018/03/dray-tek-vigor-ap910c-multiple.html
CVE ID: CVE-2017-11651 State: PUBLISHED Published: 2017-07-26T08:00:00 Last Updated: 2024-08-05T18:12:40.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: NexusPHP V1.5 has XSS via a javascript: or data: URL in a UBBCode url tag. Additional Analyst Notes: - CVE Program Container: References: - http://118.89.230.52/about/details.docx
CVE ID: CVE-2017-11652 State: PUBLISHED Published: 2017-08-18T17:00:00 Last Updated: 2024-08-05T18:12:40.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users to gain privileges via a Trojan horse dbghelp.dll file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/143516/Razer-Synapse-2.20-DLL-Hijacking.html
CVE ID: CVE-2017-11653 State: PUBLISHED Published: 2017-08-18T17:00:00 Last Updated: 2024-08-05T18:12:40.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the Devices directory, which allows local users to gain privileges via a Trojan horse (1) RazerConfigNative.dll or (2) RazerConfigNativeLOC.dll file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/143516/Razer-Synapse-2.20-DLL-Hijacking.html
CVE ID: CVE-2017-11654 State: PUBLISHED Published: 2017-07-26T14:00:00 Last Updated: 2024-08-05T18:12:40.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traffic, because 0x00 termination of a payload array was mishandled. A remote attacker could potentially use this flaw to crash the sipdump process by generating specially crafted SIP traffic. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/07/26/1 - http://www.securityfocus.com/bid/100023
CVE ID: CVE-2017-11655 State: PUBLISHED Published: 2017-07-26T14:00:00 Last Updated: 2024-08-05T18:12:40.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak was found in the way SIPcrack 0.2 handled processing of SIP traffic, because a lines array was mismanaged. A remote attacker could potentially use this flaw to crash long-running sipdump network sniffing sessions. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/07/26/1 - http://www.securityfocus.com/bid/100024
CVE ID: CVE-2017-11657 State: PUBLISHED Published: 2017-08-04T14:00:00 Last Updated: 2024-08-05T18:12:40.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dashlane might allow local users to gain privileges by placing a Trojan horse WINHTTP.dll in the %APPDATA%\Dashlane directory. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.securiteam.com/index.php/archives/3357
CVE ID: CVE-2017-11658 State: PUBLISHED Published: 2017-07-26T15:00:00 Last Updated: 2024-08-05T18:12:40.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the WP Rocket plugin 2.9.3 for WordPress, the Local File Inclusion mitigation technique is to trim traversal characters (..) -- however, this is insufficient to stop remote attacks and can be bypassed by using 0x00 bytes, as demonstrated by a .%00.../.%00.../ attack. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/Shinkurt/157dbb3767c9489f3d754f79b183a890 - https://wp-rocket.me/changelog - https://wpvulndb.com/vulnerabilities/8872
CVE ID: CVE-2017-11661 State: PUBLISHED Published: 2017-08-17T16:00:00 Last Updated: 2024-08-05T18:12:40.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42433/ - http://seclists.org/fulldisclosure/2017/Aug/12
CVE ID: CVE-2017-11662 State: PUBLISHED Published: 2017-08-17T16:00:00 Last Updated: 2024-08-05T18:12:40.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42433/ - http://seclists.org/fulldisclosure/2017/Aug/12
CVE ID: CVE-2017-11663 State: PUBLISHED Published: 2017-08-17T16:00:00 Last Updated: 2024-08-05T18:12:40.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42433/ - http://seclists.org/fulldisclosure/2017/Aug/12
CVE ID: CVE-2017-11664 State: PUBLISHED Published: 2017-08-17T16:00:00 Last Updated: 2024-08-05T18:12:40.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42433/ - http://seclists.org/fulldisclosure/2017/Aug/12 - https://github.com/Mindwerks/wildmidi/commit/ad6d7cf88d6673167ca1f517248af9409a9f1be1
CVE ID: CVE-2017-11665 State: PUBLISHED Published: 2017-07-27T12:00:00 Last Updated: 2024-08-05T18:12:40.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_amf_get_field_value function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service (Segmentation Violation and application crash) via a crafted stream. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/ffcc82219cef0928bed2d558b19ef6ea35634130 - http://www.debian.org/security/2017/dsa-3957 - http://www.securityfocus.com/bid/100017
CVE ID: CVE-2017-11666 State: PUBLISHED Published: 2017-07-26T17:00:00Z Last Updated: 2024-09-16T18:34:24.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in js/ViewerPanel.js in the file previewer plugin in Kopano WebApp versions 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a specially crafted previewable file. Additional Analyst Notes: - CVE Program Container: References: - https://stash.kopano.io/projects/KWA/repos/filepreviewer/commits/85d2b5c2d27f461bba12e9491fcc4b0d8fde771a
CVE ID: CVE-2017-11667 State: PUBLISHED Published: 2017-07-26T20:00:00Z Last Updated: 2024-09-16T18:18:09.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenProject before 6.1.6 and 7.x before 7.0.3 mishandles session expiry, which allows remote attackers to perform APIv3 requests indefinitely by leveraging a hijacked session. Additional Analyst Notes: - CVE Program Container: References: - https://www.openproject.org/openproject-6-1-6-released-security-fix/ - https://www.openproject.org/openproject-7-0-3-released/ - https://github.com/opf/openproject/commit/0fdd7578909d2ec50abc275fc4962e99566437ee
CVE ID: CVE-2017-11668 State: PUBLISHED Published: 2017-07-31T17:00:00 Last Updated: 2024-08-05T18:12:40.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:134 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash the eapmd5pass process under certain circumstances by generating specially crafted network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/07/31/3
CVE ID: CVE-2017-11669 State: PUBLISHED Published: 2017-07-31T17:00:00 Last Updated: 2024-08-05T18:12:40.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:211 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash the eapmd5pass process under certain circumstances by generating specially crafted network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/07/31/3
CVE ID: CVE-2017-11670 State: PUBLISHED Published: 2017-07-31T17:00:00 Last Updated: 2024-08-05T18:12:40.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: A length validation (leading to out-of-bounds read and write) flaw was found in the way eapmd5pass 1.4 handled network traffic in the extract_eapusername function. A remote attacker could potentially use this flaw to crash the eapmd5pass process by generating specially crafted network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/07/31/3
CVE ID: CVE-2017-11671 State: PUBLISHED Published: 2017-07-26T21:00:00 Last Updated: 2024-08-05T18:12:40.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-sec
om number generation. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/07/27/2 - http://www.securityfocus.com/bid/100018 - https://access.redhat.com/errata/RHSA-2018:0849 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=80180 - https://gcc.gnu.org/ml/gcc-patches/2017-03/msg01349.html
CVE ID: CVE-2017-11672 State: PUBLISHED Published: 2018-06-13T18:00:00 Last Updated: 2024-08-05T18:12:40.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OPC Foundation Local Discovery Server (LDS) before 1.03.367 is installed as a Windows Service without adding double quotes around the opcualds.exe executable path, which might allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2017-11672.pdf
CVE ID: CVE-2017-11673 State: PUBLISHED Published: 2017-07-27T06:00:00 Last Updated: 2024-08-05T18:12:40.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reporter.exe in Acunetix 8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed PRE file, related to a "User Mode Write AV starting at reporter!madTraceProcess." Additional Analyst Notes: - CVE Program Container: References: - http://code610.blogspot.com/2017/07/readwrite-access-violation-acunetix.html
CVE ID: CVE-2017-11674 State: PUBLISHED Published: 2017-07-27T06:00:00 Last Updated: 2024-08-05T18:19:37.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reporter.exe in Acunetix 8 allows remote attackers to cause a denial of service (application crash) via a malformed PRE file, related to a "Read Access Violation starting at reporter!madTraceProcess." Additional Analyst Notes: - CVE Program Container: References: - http://code610.blogspot.com/2017/07/readwrite-access-violation-acunetix.html