Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-8338 State: PUBLISHED Published: 2017-05-18T06:13:00 Last Updated: 2024-08-05T16:34:22.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of UDP packets on port 500 (used for L2TP over IPsec), preventing the affected router from accepting new connections; all devices will be disconnected from the router and all logs removed automatically. Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2017050062 - https://www.vulnerability-lab.com/get_content.php?id=2064 - http://seclists.org/fulldis
urity.com/issue/WLB-2017050062 - https://www.vulnerability-lab.com/get_content.php?id=2064 - http://seclists.org/fulldisclosure/2017/May/59 - https://packetstormsecurity.com/files/142538/MikroTik-RouterBoard-6.38.5-Denial-Of-Service.html
CVE ID: CVE-2017-8339 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:34:22.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: PSKMAD.sys in Panda Free Antivirus 18.0 allows local users to cause a denial of service (BSoD) via a crafted DeviceIoControl request to \\.\PSMEMDriver. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41945/ - http://www.securityfocus.com/bid/98367 - http://saptech-erp.com.au/resources/panda_bsod.zip
CVE ID: CVE-2017-8340 State: PUBLISHED Published: 2019-05-22T19:15:24 Last Updated: 2024-08-05T16:34:22.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - http://ox.com - http://open-xchange.com - https://documentation.open-xchange.com/7.10.0/release-notes/release-notes.html
CVE ID: CVE-2017-8341 State: PUBLISHED Published: 2019-05-22T19:10:16 Last Updated: 2024-08-05T16:34:22.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing. Additional Analyst Notes: - CVE Program Container: References: - http://ox.com - http://open-xchange.com - https://documentation.open-xchange.com/7.10.0/release-notes/release-notes.html
CVE ID: CVE-2017-8342 State: PUBLISHED Published: 2017-04-30T15:00:00 Last Updated: 2024-08-05T16:34:22.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Radicale before 1.1.2 and 2.x before 2.0.0rc2 is prone to timing oracles and simple brute-force attacks when using the htpasswd authentication method. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Kozea/Radicale/blob/1.1.2/NEWS.rst - https://github.com/Kozea/Radicale/commit/059ba8dec1f22ccbeab837e288b3833a099cee2d - https://github.com/Kozea/Radicale/commit/190b1dd795f0c552a4992445a231da760211183b - https://bugs.debian.org/861514 - https://lists.debian.org/debian-lts-announce/2020/04/msg000
2a4992445a231da760211183b - https://bugs.debian.org/861514 - https://lists.debian.org/debian-lts-announce/2020/04/msg00019.html
CVE ID: CVE-2017-8343 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:34:22.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-5, the ReadAAIImage function in aai.c allows attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98132 - http://www.debian.org/security/2017/dsa-3863 - https://github.com/ImageMagick/ImageMagick/issues/444
CVE ID: CVE-2017-8344 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:34:22.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-5, the ReadPCXImage function in pcx.c allows attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/446 - http://www.securityfocus.com/bid/98136 - http://www.debian.org/security/2017/dsa-3863
CVE ID: CVE-2017-8345 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:34:22.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-5, the ReadMNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/442 - http://www.securityfocus.com/bid/98138 - http://www.debian.org/security/2017/dsa-3863
CVE ID: CVE-2017-8346 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:34:22.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-5, the ReadDCMImage function in dcm.c allows attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/440 - http://www.securityfocus.com/bid/98346 - http://www.debian.org/security/2017/dsa-3863
CVE ID: CVE-2017-8347 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:34:22.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-5, the ReadEXRImage function in exr.c allows attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/441 - http://www.securityfocus.com/bid/98363 - http://www.debian.org/security/2017/dsa-3863
CVE ID: CVE-2017-8348 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:34:22.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-5, the ReadMATImage function in mat.c allows attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98364 - https://github.com/ImageMagick/ImageMagick/issues/445 - http://www.debian.org/security/2017/dsa-3863
CVE ID: CVE-2017-8349 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:34:22.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-5, the ReadSFWImage function in sfw.c allows attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/443 - http://www.securityfocus.com/bid/98370 - http://www.debian.org/security/2017/dsa-3863
CVE ID: CVE-2017-8350 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:34:22.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-5, the ReadJNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/447 - http://www.securityfocus.com/bid/98373 - http://www.debian.org/security/2017/dsa-3863
CVE ID: CVE-2017-8351 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:34:22.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-5, the ReadPCDImage function in pcd.c allows attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98371 - https://github.com/ImageMagick/ImageMagick/issues/448 - http://www.debian.org/security/2017/dsa-3863
CVE ID: CVE-2017-8352 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:34:22.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-5, the ReadXWDImage function in xwd.c allows attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98372 - https://github.com/ImageMagick/ImageMagick/issues/452 - http://www.debian.org/security/2017/dsa-3863
CVE ID: CVE-2017-8353 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:34:22.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-5, the ReadPICTImage function in pict.c allows attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98377 - https://github.com/ImageMagick/ImageMagick/issues/454 - http://www.debian.org/security/2017/dsa-3863
CVE ID: CVE-2017-8354 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:34:23.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-5, the ReadBMPImage function in bmp.c allows attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/451 - http://www.securityfocus.com/bid/98374 - http://www.debian.org/security/2017/dsa-3863
CVE ID: CVE-2017-8355 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:34:22.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c allows attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/450 - http://www.securityfocus.com/bid/98380 - http://www.debian.org/security/2017/dsa-3863
CVE ID: CVE-2017-8356 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:34:22.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c allows attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/449 - http://www.debian.org/security/2017/dsa-3863 - http://www.securityfocus.com/bid/98378
CVE ID: CVE-2017-8357 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:34:22.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-5, the ReadEPTImage function in ept.c allows attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98388 - https://github.com/ImageMagick/ImageMagick/issues/453 - http://www.debian.org/security/2017/dsa-3863
CVE ID: CVE-2017-8358 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:34:22.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreOffice/core/commit/6e6e54f944a5ebb49e9110bdeff844d00a96c56c - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=889 - http://www.securityfocus.com/bid/98395
CVE ID: CVE-2017-8359 State: PUBLISHED Published: 2017-04-30T17:00:00 Last Updated: 2024-08-05T16:34:22.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function in core/lib/surface/call.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=726 - http://www.securityfocus.com/bid/98280 - https://github.com/grpc/grpc/pull/10353
CVE ID: CVE-2017-8360 State: PUBLISHED Published: 2017-05-12T06:54:00 Last Updated: 2024-08-05T16:34:22.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Conexant Systems mictray64 task, as used on HP Elite, EliteBook, ProBook, and ZBook systems, leaks sensitive data (keystrokes) to any process. In mictray64.exe (mic tray icon) 1.0.0.46, a LowLevelKeyboardProc Windows hook is used to capture keystrokes. This data is leaked via unintended channels: debug messages accessible to any process that is running in the current user session, and filesystem access to C:\Users\Public\MicTray.log by any process. Additional Analyst Notes: - CVE Program Container: References: - https://www.mo
Users\Public\MicTray.log by any process. Additional Analyst Notes: - CVE Program Container: References: - https://www.modzero.ch/modlog/archives/2017/05/11/en_keylogger_in_hewlett-packard_audio_driver/index.html - http://www.securitytracker.com/id/1038527 - https://www.modzero.ch/advisories/MZ-17-01-Conexant-Keylogger.txt
CVE ID: CVE-2017-8361 State: PUBLISHED Published: 2017-04-30T19:00:00 Last Updated: 2024-08-05T16:34:22.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/04/29/libsndfile-global-buffer-overflow-in-flac_buffer_copy-flac-c/ - https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html - https://security.gentoo.org/glsa/201811-23
CVE ID: CVE-2017-8362 State: PUBLISHED Published: 2017-04-30T19:00:00 Last Updated: 2024-08-05T16:34:22.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/04/29/libsndfile-invalid-memory-read-in-flac_buffer_copy-flac-c/ - https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html - https://security.gentoo.org/glsa/201811-23
CVE ID: CVE-2017-8363 State: PUBLISHED Published: 2017-04-30T19:00:00 Last Updated: 2024-08-05T16:34:22.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/04/29/libsndfile-heap-based-buffer-overflow-in-flac_buffer_copy-flac-c/ - https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html - https://security.gentoo.org/glsa/201811-23
CVE ID: CVE-2017-8364 State: PUBLISHED Published: 2017-04-30T19:00:00 Last Updated: 2024-08-05T16:34:22.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_buf function in stream.c in rzip 2.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted archive. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/04/29/rzip-heap-based-buffer-overflow-in-read_buf-stream-c/ - https://lists.debian.org/debian-lts-announce/2020/04/msg00022.html
CVE ID: CVE-2017-8365 State: PUBLISHED Published: 2017-04-30T19:00:00 Last Updated: 2024-08-05T16:34:22.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/04/29/libsndfile-global-buffer-overflow-in-i2les_array-pcm-c/ - https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html - https://security.gentoo.org/glsa/201811-23
CVE ID: CVE-2017-8366 State: PUBLISHED Published: 2017-04-30T19:00:00 Last Updated: 2024-08-05T16:34:22.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: The strescape function in ec_strings.c in Ettercap 0.8.2 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted filter that is mishandled by etterfilter. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/04/29/ettercap-etterfilter-heap-based-buffer-overflow-write/ - http://www.debian.org/security/2017/dsa-3874
CVE ID: CVE-2017-8367 State: PUBLISHED Published: 2017-04-30T19:00:00 Last Updated: 2024-08-05T16:34:22.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Ether Software Easy MOV Converter 1.4.24, Easy DVD Creator, Easy MPEG/AVI/DIVX/WMV/RM to DVD, Easy Avi/Divx/Xvid to DVD Burner, Easy MPEG to DVD Burner, Easy WMV/ASF/ASX to DVD Burner, Easy RM RMVB to DVD Burner, Easy CD DVD Copy, MP3/AVI/MPEG/WMV/RM to Audio CD Burner, MP3/WAV/OGG/WMA/AC3 to CD Burner, MP3 WAV to CD Burner, My Video Converter, Easy AVI DivX Converter, Easy Video to iPod Converter, Easy Video to PSP Converter, Easy Video to 3GP Converter, Easy Video to MP4 Converter, and Easy Video to iPod/M
nverter, Easy Video to PSP Converter, Easy Video to 3GP Converter, Easy Video to MP4 Converter, and Easy Video to iPod/MP4/PSP/3GP Converter allows local attackers to cause a denial of service (SEH overwrite) or possibly have unspecified other impact via a long username. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41911/ - https://github.com/offensive-security/exploit-database/blob/master/platforms/windows/dos/41911.py
CVE ID: CVE-2017-8368 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T16:34:22.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sublime Text 3 Build 3126 allows user-assisted attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mkv file. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands, as demonstrated by Ctrl-A, Delete, and Ctrl-Z. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SublimeTextIssues/Core/issues/1700 - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8368
CVE ID: CVE-2017-8369 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T16:34:22.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) has a "Data from Faulting Address controls Branch Selection starting at USER32!wvsprintfA+0x00000000000002f3" issue, which might allow attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8369 - http://www.irfanview.com/plugins.htm
CVE ID: CVE-2017-8370 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T16:34:22.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.45 allows remote attackers to execute arbitrary code or cause a denial of service (Heap Corruption and application crash) in processing a FlashPix (.FPX) file, a different vulnerability than CVE-2017-7721. Additional Analyst Notes: - CVE Program Container: References: - http://www.irfanview.com/plugins.htm - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8370
CVE ID: CVE-2017-8371 State: PUBLISHED Published: 2017-04-30T20:00:00Z Last Updated: 2024-09-16T20:11:21.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schneider Electric StruxureWare Data Center Expert before 7.4.0 uses cleartext RAM storage for passwords, which might allow remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2016-343-01 - http://www.datacenterdynamics.com/content-tracks/security-risk/schneider-patches-critical-vulnerability-in-struxureware-dcim/97738.fullarticle
CVE ID: CVE-2017-8372 State: PUBLISHED Published: 2017-05-01T01:00:00 Last Updated: 2024-08-05T16:34:22.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/04/30/libmad-assertion-failure-in-layer3-c/ - https://www.debian.org/security/2018/dsa-4192 - https://lists.debian.org/debian-lts-announce/2018/05/msg00011.html
CVE ID: CVE-2017-8373 State: PUBLISHED Published: 2017-05-01T01:00:00 Last Updated: 2024-08-05T16:34:22.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4192 - https://blogs.gentoo.org/ago/2017/04/30/libmad-heap-based-buffer-overflow-in-mad_layer_iii-layer3-c/ - https://lists.debian.org/debian-lts-announce/2018/05/msg00011.html
CVE ID: CVE-2017-8374 State: PUBLISHED Published: 2017-05-01T01:00:00 Last Updated: 2024-08-05T16:34:22.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mad_bit_skip function in bit.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/04/30/libmad-heap-based-buffer-overflow-in-mad_bit_skip-bit-c/ - https://www.debian.org/security/2018/dsa-4192 - https://lists.debian.org/debian-lts-announce/2018/05/msg00011.html
CVE ID: CVE-2017-8376 State: PUBLISHED Published: 2017-05-01T16:00:00 Last Updated: 2024-08-05T16:34:22.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: GeniXCMS 1.0.2 has XSS triggered by an authenticated comment that is mishandled during a mouse operation by an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/semplon/GeniXCMS/issues/72
CVE ID: CVE-2017-8377 State: PUBLISHED Published: 2017-05-01T16:00:00 Last Updated: 2024-08-05T16:34:22.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/semplon/GeniXCMS/issues/72
CVE ID: CVE-2017-8378 State: PUBLISHED Published: 2017-05-01T01:00:00 Last Updated: 2024-08-05T16:34:22.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors related to m_offsets.size. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xiangxiaobo/poc_and_report/tree/master/podofo_heapoverflow_PdfParser.ReadObjects