Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-13036 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:12.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/88b2dac837e81cf56dce05e6e7b5989332c0092d - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13037 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:11.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/2c2cfbd2b771ac888bc5c4a6d922f749d3822538 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13038 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:12.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://github.com/the-tcpdump-group/tcpdump/commit/7335163a6ef82d46ff18f3e6099a157747241629 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13039 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:12.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - https://github.com/the-tcpdump-group/tcpdump/commit/e0a5a02b0fc1900a69d6c37ed0aab36fb8494e6d - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13040 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:12.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/4c3aee4bb0294c232d56b6d34e9eeb74f630fe8c - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13041 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:11.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/f4b9e24c7384d882a7f434cc7413925bf871d63e - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13042 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:11.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/39582c04cc5e34054b2936b423072fb9df2ff6ef - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13043 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:11.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/d515b4b4a300479cdf1a6e0d1bb95bc1f9fee514 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13044 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:11.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/c2f6833dddecf2d5fb89c9c898eee9981da342ed - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13045 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:12.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/3b36ec4e713dea9266db11975066c425aa669b6c - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13046 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:12.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/d10a0f980fe8f9407ab1ffbd612641433ebe175e - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13047 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:11.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/331530a4076c69bbd2e3214db6ccbe834fb75640 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13048 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:11.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/3c8a2b0e91d8d8947e89384dacf6b54673083e71 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13049 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:11.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/aa0858100096a3490edf93034a80e66a4d61aad5 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13050 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:11.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/83c64fce3a5226b080e535f5131a8a318f30e79b - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-201
a5226b080e535f5131a8a318f30e79b - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13051 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:12.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/289c672020280529fd382f3502efab7100d638ec - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13052 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:11.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/5d340a5ca6e420a70297cdbdf777333f18bfdab7 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13053 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:12.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://github.com/the-tcpdump-group/tcpdump/commit/bd4e697ebd6c8457efa8f28f6831fc929b88a014 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13054 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:12.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://github.com/the-tcpdump-group/tcpdump/commit/e6511cc1a950fe1566b2236329d6b4bd0826cc7a - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13055 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:12.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/5d0d76e88ee2d3236d7e032589d6f1d4ec5f7b1e - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHE
76e88ee2d3236d7e032589d6f1d4ec5f7b1e - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13056 State: PUBLISHED Published: 2017-12-27T17:00:00 Last Updated: 2024-08-05T18:58:12.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: The launchURL function in PDF-XChange Viewer 2.5 (Build 314.0) might allow remote attackers to execute arbitrary code via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/143912/PDF-XChange-Viewer-2.5-Build-314.0-Code-Execution.html
CVE ID: CVE-2017-13058 State: PUBLISHED Published: 2017-08-22T06:00:00 Last Updated: 2024-08-05T18:58:11.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WritePCXImage in coders/pcx.c, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - http://www.securityfocus.com/bid/100468 - https://github.com/ImageMagick/ImageMagick/issues/666
CVE ID: CVE-2017-13059 State: PUBLISHED Published: 2017-08-22T06:00:00 Last Updated: 2024-08-05T18:58:11.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which allows attackers to cause a denial of service (WriteJNGImage memory consumption) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - http://www.securityfocus.com/bid/100457 - https://github.com/ImageMagick/ImageMagick/issues/667
CVE ID: CVE-2017-13060 State: PUBLISHED Published: 2017-08-22T06:00:00 Last Updated: 2024-08-05T18:58:11.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-5, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - https://github.com/ImageMagick/ImageMagick/issues/644 - http://www.securityfocus.com/bid/100469
CVE ID: CVE-2017-13061 State: PUBLISHED Published: 2017-08-22T06:00:00 Last Updated: 2024-08-05T18:58:11.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a denial of service (ReadPSDImage memory exhaustion) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/645 - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - http://www.securityfocus.com/bid/100481 - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.
lsa/201711-07 - http://www.securityfocus.com/bid/100481 - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-13062 State: PUBLISHED Published: 2017-08-22T06:00:00 Last Updated: 2024-08-05T18:58:12.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows attackers to cause a denial of service (WriteMETAImage memory consumption) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - https://github.com/ImageMagick/ImageMagick/issues/669
CVE ID: CVE-2017-13063 State: PUBLISHED Published: 2017-08-22T06:00:00 Last Updated: 2024-08-05T18:58:12.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:314:12. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - http://hg.code.sf.net/p/graphicsmagick/code/rev/54f48ab2d52a - https://sourceforge.net/p/graphicsmagick/bugs/434/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JD
ugs/434/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - https://usn.ubuntu.com/4222-1/
CVE ID: CVE-2017-13064 State: PUBLISHED Published: 2017-08-22T06:00:00 Last Updated: 2024-08-05T18:58:12.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:311:12. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - https://sourceforge.net/p/graphicsmagick/bugs/436/ - http://hg.code.sf.net/p/graphicsmagick/code/rev/54f48ab2d52a - http://www.securityfocus.com/bid/100474 - https://lists.fedoraproject.org/archives/list/package-announce%40li
8ab2d52a - http://www.securityfocus.com/bid/100474 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - https://usn.ubuntu.com/4222-1/
CVE ID: CVE-2017-13065 State: PUBLISHED Published: 2017-08-22T06:00:00 Last Updated: 2024-08-05T18:58:12.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: GraphicsMagick 1.3.26 has a NULL pointer dereference vulnerability in the function SVGStartElement in coders/svg.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - https://sourceforge.net/p/graphicsmagick/bugs/435/ - http://hg.code.sf.net/p/graphicsmagick/code/rev/54f48ab2d52a - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQ
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - https://usn.ubuntu.com/4222-1/
CVE ID: CVE-2017-13066 State: PUBLISHED Published: 2017-08-22T06:00:00 Last Updated: 2024-08-05T18:58:12.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: GraphicsMagick 1.3.26 has a memory leak vulnerability in the function CloneImage in magick/image.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/graphicsmagick/bugs/430/ - http://www.securityfocus.com/bid/100463
CVE ID: CVE-2017-13067 State: PUBLISHED Published: 2017-09-14T15:00:00Z Last Updated: 2024-09-17T02:47:14.046Z Vendors: QNAP Products: QTS Media Libary PRODUCT Problem Types: remote code execution Description: QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2.6 build 20170905 and QTS 4.3.3.0299 build 20170901. This particular vulnerability allows a remote attacker to execute commands on a QNAP NAS using a transcoding service on port 9251. A remote user does not require any privileges to successfully execute an attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-hk/releasenotes/
CVE ID: CVE-2017-13068 State: PUBLISHED Published: 2017-10-06T17:00:00Z Last Updated: 2024-09-16T22:51:27.527Z Vendors: QNAP Products: QNAP Helpdesk APP Problem Types: SQL Injection in HelpDesk Description: QNAP has already patched this vulnerability. This security concern allows a remote attacker to perform an SQL injection on the application and obtain Helpdesk application information. A remote attacker does not require any privileges to successfully execute this attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/nas-201709-29
CVE ID: CVE-2017-13069 State: PUBLISHED Published: 2017-10-06T18:00:00 Last Updated: 2024-08-05T18:58:11.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 (for QTS 4.2.x), 5.0.7 (for QTS 4.3.x), and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/nas-201710-05
CVE ID: CVE-2017-13070 State: PUBLISHED Published: 2017-12-11T16:00:00Z Last Updated: 2024-09-17T00:46:30.799Z Vendors: QNAP Products: Qsync for Windows (exe) Problem Types: DLL Hijacking Description: A DLL Hijacking vulnerability in QNAP Qsync for Windows (exe) version 4.2.2.0724 and earlier could allow remote attackers to execute arbitrary code on Windows machines. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/nas-201712-08
CVE ID: CVE-2017-13071 State: PUBLISHED Published: 2017-11-22T17:00:00Z Last Updated: 2024-09-16T19:52:19.436Z Vendors: QNAP Products: Video Station Problem Types: Command injection Description: QNAP has already patched this vulnerability. This security concern allows a remote attacker to run arbitrary commands on the QNAP Video Station 5.1.3 (for QTS 4.3.3), 5.2.0 (for QTS 4.3.4), and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/nas-201711-21