Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-14620 State: PUBLISHED Published: 2017-09-29T15:00:00 Last Updated: 2024-08-05T19:34:39.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmarterStats Version 11.3.6347 will Render the Referer Field of HTTP Logfiles from URL /Data/Reports/ReferringURLsWithQueries resulting in Stored Cross Site Scripting. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42923/ - http://xss.cx/cve/2017/14620/smarterstats.v11-3-6347.html
CVE ID: CVE-2017-14621 State: PUBLISHED Published: 2017-09-20T23:00:00 Last Updated: 2024-08-05T19:34:38.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portus 2.2.0 has XSS via the Team field, related to typeahead. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SUSE/Portus/pull/1425
CVE ID: CVE-2017-14622 State: PUBLISHED Published: 2017-09-27T17:00:00 Last Updated: 2024-08-05T19:34:38.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the 2kb Amazon Affiliates Store plugin before 2.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter or (2) kbAction parameter in the kbAmz page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101050 - https://packetstormsecurity.com/files/144261/WordPress-2kb-Amazon-Affiliates-Store-2.1.0-Cross-Site-Scripting.html - https://wordpress.org/plugins/
.com/files/144261/WordPress-2kb-Amazon-Affiliates-Store-2.1.0-Cross-Site-Scripting.html - https://wordpress.org/plugins/2kb-amazon-affiliates-store/#developers
CVE ID: CVE-2017-14623 State: PUBLISHED Published: 2017-09-20T23:00:00Z Last Updated: 2024-09-17T00:00:49.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the ldap.v2 (aka go-ldap) package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: (1) it relies only on the return error of the Bind function call to determine whether a user is authorized (i.e., a nil return value is interpreted as successful authorization) and (2) it is used with an LDAP server allowing unauthenticated bind. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/g
ver allowing unauthenticated bind. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/go-ldap/ldap/pull/126 - https://github.com/go-ldap/ldap/commit/95ede1266b237bf8e9aa5dce0b3250e51bfefe66
CVE ID: CVE-2017-14624 State: PUBLISHED Published: 2017-09-21T05:00:00 Last Updated: 2024-08-05T19:34:39.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - http://www.securityfocus.com/bid/100940 - https://github.com/ImageMagick/ImageMagick/issues/722 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-14625 State: PUBLISHED Published: 2017-09-21T05:00:00 Last Updated: 2024-08-05T19:34:39.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixel.c. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - http://www.securityfocus.com/bid/100941 - https://github.com/ImageMagick/ImageMagick/issues/721 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-14626 State: PUBLISHED Published: 2017-09-21T05:00:00 Last Updated: 2024-08-05T19:34:39.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/720 - http://www.securityfocus.com/bid/100943 - https://github.com/ImageMagick/ImageMagick/issues/721 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-14627 State: PUBLISHED Published: 2017-09-23T20:00:00 Last Updated: 2024-08-05T19:34:38.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside the TEXT tag) parameter in an lpp project file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42777/ - https://www.exploit-db.com/exploits/45985/ - https://blog.spentera.com/2017/09/19/unicode-stack-based-buffer-overflow-on-
ttps://www.exploit-db.com/exploits/45985/ - https://blog.spentera.com/2017/09/19/unicode-stack-based-buffer-overflow-on-cyberlink-labelprint-2-5/
CVE ID: CVE-2017-14628 State: PUBLISHED Published: 2017-09-21T07:00:00Z Last Updated: 2024-09-16T19:41:20.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pts/sam2p/issues/14
CVE ID: CVE-2017-14629 State: PUBLISHED Published: 2017-09-21T07:00:00Z Last Updated: 2024-09-17T04:19:08.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: In sam2p 0.49.3, the in_xpm_reader function in in_xpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pts/sam2p/issues/14
CVE ID: CVE-2017-14630 State: PUBLISHED Published: 2017-09-21T07:00:00Z Last Updated: 2024-09-16T23:56:51.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: In sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp, leading to an invalid write operation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pts/sam2p/issues/14
CVE ID: CVE-2017-14631 State: PUBLISHED Published: 2017-09-21T07:00:00Z Last Updated: 2024-09-16T17:14:24.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: In sam2p 0.49.3, the pcxLoadRaster function in in_pcx.cpp has an integer signedness error leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pts/sam2p/issues/14
CVE ID: CVE-2017-14632 State: PUBLISHED Published: 2017-09-21T07:00:00 Last Updated: 2024-08-05T19:34:39.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3569-1/ - https://www.debian.org/security/2018/dsa-4113 - https://gitlab.xiph.org/xiph/vorbis/issues/2328 - https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html
CVE ID: CVE-2017-14633 State: PUBLISHED Published: 2017-09-21T07:00:00 Last Updated: 2024-08-05T19:34:40.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis(). Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3569-1/ - https://www.debian.org/security/2018/dsa-4113 - https://gitlab.xiph.org/xiph/vorbis/issues/2329 - https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html - https://lists.debian.org/debian-lts-announce/2019/12/
tps://lists.debian.org/debian-lts-announce/2018/04/msg00033.html - https://lists.debian.org/debian-lts-announce/2019/12/msg00021.html
CVE ID: CVE-2017-14634 State: PUBLISHED Published: 2017-09-21T07:00:00 Last Updated: 2024-08-05T19:34:38.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to DoS when playing a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/erikd/libsndfile/issues/318 - https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html - https://security.gentoo.org/glsa/201811-23 - https://usn.ubuntu.com/4013-1/ - https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html
CVE ID: CVE-2017-14635 State: PUBLISHED Published: 2017-09-21T13:00:00 Last Updated: 2024-08-05T19:34:39.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4021 - https://www.otrs.com/security-advisory-2017-04-security-update-otrs-versions/
CVE ID: CVE-2017-14636 State: PUBLISHED Published: 2017-09-22T07:00:00 Last Updated: 2024-08-05T19:34:39.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d[0xfffffffe] array element. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pts/sam2p/issues/14
CVE ID: CVE-2017-14637 State: PUBLISHED Published: 2017-09-22T07:00:00 Last Updated: 2024-08-05T19:34:39.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: In sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp. However, this can also cause a write to an illegal address. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pts/sam2p/issues/14
CVE ID: CVE-2017-14638 State: PUBLISHED Published: 2017-09-21T17:00:00 Last Updated: 2024-08-05T19:34:39.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL pointer dereference, segmentation fault, and application crash in AP4_Atom::SetType in Core/Ap4Atom.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/commit/be7185faf7f52674028977dcf501c6039ff03aa5 - https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_atomsettype-ap4atom-h/ - https://github.com/axiomatic-
.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_atomsettype-ap4atom-h/ - https://github.com/axiomatic-systems/Bento4/issues/182
CVE ID: CVE-2017-14639 State: PUBLISHED Published: 2017-09-21T17:00:00 Last Updated: 2024-08-05T19:34:39.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underflow and out-of-bounds write, leading to denial of service (application crash) or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/09/14/bento4-stack-based-buffer-underflow-in-ap4_visualsampleentryreadfields-ap4sampleentry-cpp/ - https://github.com/axiomatic-systems/Bento4/issues/190 - ht
low-in-ap4_visualsampleentryreadfields-ap4sampleentry-cpp/ - https://github.com/axiomatic-systems/Bento4/issues/190 - https://github.com/axiomatic-systems/Bento4/commit/03d1222ab9c2ce779cdf01bdb96cdd69cbdcfeda
CVE ID: CVE-2017-14640 State: PUBLISHED Published: 2017-09-21T17:00:00 Last Updated: 2024-08-05T19:34:39.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference was discovered in AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/183 - https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_atomsampletablegetsample-ap4atomsampletable-cpp/ - https://github.com/axiomatic-syst
to4-null-pointer-dereference-in-ap4_atomsampletablegetsample-ap4atomsampletable-cpp/ - https://github.com/axiomatic-systems/Bento4/commit/2f267f89f957088197f4b1fc254632d1645b415d
CVE ID: CVE-2017-14641 State: PUBLISHED Published: 2017-09-21T17:00:00 Last Updated: 2024-08-05T19:34:39.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference was discovered in the AP4_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/184 - https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_dataatomap4_dataatom-ap4metadata-cpp/ - https://github.com/axiomatic-systems/Bento4/commit/41ca
inter-dereference-in-ap4_dataatomap4_dataatom-ap4metadata-cpp/ - https://github.com/axiomatic-systems/Bento4/commit/41cad602709436628f07b4c4f64e9ff7a611f687
CVE ID: CVE-2017-14642 State: PUBLISHED Published: 2017-09-21T17:00:00 Last Updated: 2024-08-05T19:34:39.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash in AP4_StdcFileByteStream::ReadPartial in System/StdC/Ap4StdCFileByteStream.cpp, which leads to remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/185 - https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_stdcfilebytestreamreadpartial-ap4stdcfileby
tps://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_stdcfilebytestreamreadpartial-ap4stdcfilebytestream-cpp/ - https://github.com/axiomatic-systems/Bento4/commit/22192de5367fa0cee985917f092be4060b7c00b0
CVE ID: CVE-2017-14643 State: PUBLISHED Published: 2017-09-21T17:00:00 Last Updated: 2024-08-05T19:34:39.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based buffer over-read and application crash in AP4_BytesToUInt32BE in Core/Ap4Utils.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/187 - https://github.com/axiomatic-systems/Bento4/commit/5eb8cf89d724ccb0b4ce5f24171ec7c11f0a7647 - https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_bytestouint32b
ce5f24171ec7c11f0a7647 - https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_bytestouint32be-ap4utils-h/
CVE ID: CVE-2017-14644 State: PUBLISHED Published: 2017-09-21T17:00:00 Last Updated: 2024-08-05T19:34:39.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_hdlratomap4_hdlratom-ap4hdlratom-cpp/
CVE ID: CVE-2017-14645 State: PUBLISHED Published: 2017-09-21T17:00:00 Last Updated: 2024-08-05T19:34:39.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnerability causes an application crash, which leads to remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_bitstreamreadbytes-ap4bitstream-cpp/
CVE ID: CVE-2017-14646 State: PUBLISHED Published: 2017-09-21T17:00:00 Last Updated: 2024-08-05T19:34:39.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AP4_AvccAtom and AP4_HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a heap-based buffer over-read and application crash in AP4_DataBuffer::SetData in Core/Ap4DataBuffer.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_databuffersetdata-ap4databuffer-cpp/ - https://github.com/axiomatic-systems/Bento4/commit/53499d8d4c69142137c7c7f0097a444783fdeb90 - https://github.com/axiomatic
tps://github.com/axiomatic-systems/Bento4/commit/53499d8d4c69142137c7c7f0097a444783fdeb90 - https://github.com/axiomatic-systems/Bento4/issues/188
CVE ID: CVE-2017-14647 State: PUBLISHED Published: 2017-09-21T17:00:00 Last Updated: 2024-08-05T19:34:39.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/09/14/bento4-stack-based-buffer-overflow-in-ap4_visualsampleentryreadfields-ap4sampleentry-cpp/
CVE ID: CVE-2017-14648 State: PUBLISHED Published: 2017-09-21T17:00:00 Last Updated: 2024-08-05T19:34:39.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: A global buffer overflow was discovered in the iteration_loop function in loop.c in BladeEnc version 0.94.2. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/09/19/bladeenc-global-buffer-overflow-in-iteration_loop-loop-c/ - https://security.gentoo.org/glsa/202107-18
CVE ID: CVE-2017-14649 State: PUBLISHED Published: 2017-09-21T17:00:00 Last Updated: 2024-08-05T19:34:39.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denial of service (assertion failure in magick/pixel_cache.c, and application crash). Additional Analyst Notes: - CVE Program Container: References: - http://hg.code.sf.net/p/graphicsmagick/code/rev/358608a46f0a - https://sourceforge.net/p/graphicsmagick/bugs/439/ - http://www.securityfocus.com/bid/100958 - https://blogs.gentoo.org/ago/2017/09/19/graphicsmagick-assertion-failure-in-pixel_cache-c/ - https://lists.
bid/100958 - https://blogs.gentoo.org/ago/2017/09/19/graphicsmagick-assertion-failure-in-pixel_cache-c/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - https://usn.ubuntu.com/4232-1/
CVE ID: CVE-2017-14650 State: PUBLISHED Published: 2017-09-21T17:00:00 Last Updated: 2024-08-05T19:34:39.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applications using the Horde_Image library might be affected. This vulnerability affects all versions of Horde_Image from 2.0.0 to 2.5.1, and is fixed in 2.5.2. The problem is missing input validation of the index field in _raw() during constr
.0.0 to 2.5.1, and is fixed in 2.5.2. The problem is missing input validation of the index field in _raw() during construction of an ImageMagick command line. Additional Analyst Notes: - CVE Program Container: References: - https://marc.info/?l=horde-announce&m=150600299528079&w=2 - https://www.debian.org/security/2018/dsa-4276 - https://github.com/horde/horde/commit/eb3afd14c22c77ae0d29e2848f5ac726ef6e7c5b - http://www.openwall.com/lists/oss-security/2017/09/21/4
CVE ID: CVE-2017-14651 State: PUBLISHED Published: 2017-09-21T18:00:00 Last Updated: 2024-08-05T19:34:39.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cybersecurityworks/Disclosed/issues/15 - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2017-0265 - https://cybersecurityworks.com/zerodays/cve-2017-14651-wso2.html
CVE ID: CVE-2017-14652 State: PUBLISHED Published: 2017-09-21T19:00:00 Last Updated: 2024-08-05T19:34:39.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before 4.5.8 for MyBB allows an unauthenticated remote attacker to inject arbitrary SQL commands via an XML-RPC encoded document sent as part of the user registration process. Additional Analyst Notes: - CVE Program Container: References: - https://www.tapatalk.com/groups/tapatalksupport/tapatalk-for-mybb-plugin-release-announcement-and--t5877-s50.html#p187116 - http://adrianhayter.com/exploits.php
CVE ID: CVE-2017-14653 State: PUBLISHED Published: 2017-09-22T07:00:00 Last Updated: 2024-08-05T19:34:39.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: member/Orderinfo.asp in ASP4CMS AspCMS 2.7.2 allows remote authenticated users to read arbitrary order information via a modified OrderNo parameter. Additional Analyst Notes: - CVE Program Container: References: - http://asdedc.bid/aspcms.html
CVE ID: CVE-2017-14655 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14656 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14657 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14658 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14659 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14660 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14661 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14662 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14663 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.