Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
cted system. Successful exploitation could allow the attacker to read entries in some database tables. Cisco Bug IDs: CSCvg30333. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-prime - http://www.securityfocus.com/bid/102004 - http://www.securitytracker.com/id/1039926
CVE ID: CVE-2017-12365 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:56.333Z Vendors: n/a Products: Cisco WebEx Event Center Problem Types: CWE-200 Description: A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information. The vulnerability is due to a design flaw in the product. An attacker could execute a query on an Event Center site to view scheduled meetings. A successful query would show both listed and unlisted meetings in the displayed information. An attacker could use this information to attend meetings that are not available for their attendance. Cisco Bug IDs: CSCvg33629. Additional
e this information to attend meetings that are not available for their attendance. Cisco Bug IDs: CSCvg33629. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101999 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex4 - http://www.securitytracker.com/id/1039920
CVE ID: CVE-2017-12366 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:56.308Z Vendors: n/a Products: Cisco WebEx Meeting Center Problem Types: CWE-79 Description: A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful expl
llow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf78635,, CSCvg52440. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039918 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex5 - http://www.securityfocus.com/bid/101984
CVE ID: CVE-2017-12367 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:55.859Z Vendors: n/a Products: Cisco WebEx Recording Format and Advanced Recording Format Players Problem Types: CWE-119 Description: A "Cisco WebEx Network Recording Player Denial of Service Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution
e. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. Cisco Bug IDs: CSCve11545, CSCve02843, CSCve11548. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102017 - http://www.securitytracker.com/id/1039895 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players
CVE ID: CVE-2017-12368 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:56.316Z Vendors: n/a Products: Cisco WebEx Recording Format and Advanced Recording Format Players Problem Types: CWE-119 Description: A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execu
file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. Cisco Bug IDs: CSCve10584, CSCve10591, CSCve11503, CSCve10658, CSCve11507, CSCve10749, CSCve10744, CSCve11532, CSCve10762, CSCve10764, CSCve11538. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102017 - http://www.securitytracker.com/id/1039895 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players
CVE ID: CVE-2017-12369 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:56.064Z Vendors: n/a Products: Cisco WebEx Recording Format and Advanced Recording Format Players Problem Types: CWE-119 Description: A "Cisco WebEx Network Recording Player Out-of-Bounds Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on
xploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. Cisco Bug IDs: CSCve30208, CSCve30214, CSCve30268. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102017 - http://www.securitytracker.com/id/1039895 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players
CVE ID: CVE-2017-12370 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:56.347Z Vendors: n/a Products: Cisco WebEx Recording Format and Advanced Recording Format Players Problem Types: CWE-119 Description: A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execu
file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. Cisco Bug IDs: CSCvf38060, CSCvg54836, CSCvf38077, CSCvg54843, CSCvf38084, CSCvg54850. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102017 - http://www.securitytracker.com/id/1039895 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players
CVE ID: CVE-2017-12371 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:56.010Z Vendors: n/a Products: Cisco WebEx Recording Format and Advanced Recording Format Players Problem Types: CWE-119 Description: A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execu
file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. Cisco Bug IDs: CSCvf49650, CSCvg54853, CSCvg54856, CSCvf49697, CSCvg54861, CSCvf49707, CSCvg54867. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102017 - http://www.securitytracker.com/id/1039895 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players
CVE ID: CVE-2017-12372 State: PUBLISHED Published: 2017-11-30T09:00:00 Last Updated: 2024-08-05T18:36:56.100Z Vendors: n/a Products: Cisco WebEx Recording Format and Advanced Recording Format Players Problem Types: CWE-119 Description: A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execu
file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. Cisco Bug IDs: CSCvf57234, CSCvg54868, CSCvg54870. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102017 - http://www.securitytracker.com/id/1039895 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players
CVE ID: CVE-2017-12373 State: PUBLISHED Published: 2017-12-15T20:00:00 Last Updated: 2024-08-05T18:36:56.096Z Vendors: n/a Products: Cisco legacy ASA 5500 products TLS protocol implementation Problem Types: CWE-200 Description: A vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series (ASA 5505, 5510, 5520, 5540, and 5550) devices could allow an unauthenticated, remote attacker to access sensitive information, aka a Return of Bleichenbacher's Oracle Threat (ROBOT) attack. An attacker could iteratively query a server running a vulnerable TLS stack implementation to perform cryptanalytic operations that may allow decryption of previously captured TLS sessions. Cisco Bu
plementation to perform cryptanalytic operations that may allow decryption of previously captured TLS sessions. Cisco Bug IDs: CSCvg97652. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102170 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171212-bleichenbacher
CVE ID: CVE-2017-12374 State: PUBLISHED Published: 2018-01-26T20:00:00 Last Updated: 2024-12-02T21:26:51.050Z Vendors: n/a Products: ClamAV AntiVirus software versions 0.99.2 and prior Problem Types: use-after-free Description: The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of input validation checking mechanisms during certain mail parsing operations (mbox.c operations on bounce messages). If successfully exploited, the ClamAV software could allow a variable pointing to the mail body which could cause a u
). If successfully exploited, the ClamAV software could allow a variable pointing to the mail body which could cause a used after being free (use-after-free) instance which may lead to a disruption of services on an affected device to include a denial of service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://usn.ubuntu.com/3550-1/ - https://usn.ubuntu.com/3550-2/ - https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html - http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html - https://bugzilla.clamav.net/show_bug.cgi?id=11939
CVE ID: CVE-2017-12375 State: PUBLISHED Published: 2018-01-26T20:00:00 Last Updated: 2024-12-02T21:26:40.248Z Vendors: n/a Products: ClamAV AntiVirus software versions 0.99.2 and prior Problem Types: buffer overflow Description: The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of input validation checking mechanisms during certain mail parsing functions (the rfc2047 function in mbox.c). An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. Thi
unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. This action could cause a buffer overflow condition when ClamAV scans the malicious email, allowing the attacker to potentially cause a DoS condition on an affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://usn.ubuntu.com/3550-1/ - https://usn.ubuntu.com/3550-2/ - https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html - https://bugzilla.clamav.net/show_bug.cgi?id=11940 - http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
CVE ID: CVE-2017-12376 State: PUBLISHED Published: 2018-01-26T20:00:00 Last Updated: 2024-12-02T21:26:25.387Z Vendors: n/a Products: ClamAV AntiVirus software versions 0.99.2 and prior Problem Types: buffer overflow Description: ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a
df) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause a handle_pdfname (in pdf.c) buffer overflow when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition or potentially execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://usn.ubuntu.com/3550-1/ - https://usn.ubuntu.com/3550-2/ - https://bugzilla.clamav.net/show_bug.cgi?id=11942 - https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html - http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
CVE ID: CVE-2017-12377 State: PUBLISHED Published: 2018-01-26T20:00:00 Last Updated: 2024-12-02T21:26:06.662Z Vendors: n/a Products: ClamAV AntiVirus software versions 0.99.2 and prior Problem Types: heap overflow Description: ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking mechanisms in mew packet files sent to an affected device. A successful exploit could cause a heap-based buffer over-read condition in mew.c when ClamAV scans the malicious fi
ce. A successful exploit could cause a heap-based buffer over-read condition in mew.c when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition or potentially execute arbitrary code on the affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://usn.ubuntu.com/3550-1/ - https://usn.ubuntu.com/3550-2/ - https://bugzilla.clamav.net/show_bug.cgi?id=11943 - https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html - http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
CVE ID: CVE-2017-12378 State: PUBLISHED Published: 2018-01-26T20:00:00 Last Updated: 2024-12-02T21:25:49.850Z Vendors: n/a Products: ClamAV AntiVirus software versions 0.99.2 and prior Problem Types: buffer over-read Description: ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms of .tar (Tape Archive) files sent to an affected device. A successful exploit could cause a checksum buffer over-read condition when ClamAV scans the malicious .tar file, potentially allowing the att
ould cause a checksum buffer over-read condition when ClamAV scans the malicious .tar file, potentially allowing the attacker to cause a DoS condition on the affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://usn.ubuntu.com/3550-1/ - https://usn.ubuntu.com/3550-2/ - https://bugzilla.clamav.net/show_bug.cgi?id=11946 - https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html - http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
CVE ID: CVE-2017-12379 State: PUBLISHED Published: 2018-01-26T20:00:00 Last Updated: 2024-12-02T21:25:35.443Z Vendors: n/a Products: ClamAV AntiVirus software versions 0.99.2 and prior Problem Types: buffer overflow Description: ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking mechanisms in the message parsing function on an affected system. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affe
cted system. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. This action could cause a messageAddArgument (in message.c) buffer overflow condition when ClamAV scans the malicious email, allowing the attacker to potentially cause a DoS condition or execute arbitrary code on an affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://usn.ubuntu.com/3550-1/ - https://usn.ubuntu.com/3550-2/ - https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html - http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html - https://bugzilla.clamav.net/show_bug.cgi?
035.html - http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html - https://bugzilla.clamav.net/show_bug.cgi?id=11944
CVE ID: CVE-2017-12380 State: PUBLISHED Published: 2018-01-26T20:00:00 Last Updated: 2024-12-02T21:25:19.745Z Vendors: n/a Products: ClamAV AntiVirus software versions 0.99.2 and prior Problem Types: NULL pointer dereference Description: ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms in mbox.c during certain mail parsing functions of the ClamAV software. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device.
An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. An exploit could trigger a NULL pointer dereference condition when ClamAV scans the malicious email, which may result in a DoS condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://usn.ubuntu.com/3550-1/ - https://usn.ubuntu.com/3550-2/ - https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html - http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html - https://bugzilla.clamav.net/show_bug.cgi?id=11945
CVE ID: CVE-2017-12410 State: PUBLISHED Published: 2018-03-26T21:00:00 Last Updated: 2024-08-05T18:36:56.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: It is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning a race condition when Kaseya Virtual System Administrator agent 9.3.0.11 and earlier tries to execute its binaries from working and/or temporary folders. Successful exploitation results in the execution of arbitrary programs with "NT AUTHORITY\SYSTEM" privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/541884/100/0/threaded
CVE ID: CVE-2017-12412 State: PUBLISHED Published: 2018-02-07T17:00:00 Last Updated: 2024-08-05T18:36:56.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: ccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-dependent attackers to have unspecified impact via a crafted file, which triggers infinite recursion and a stack overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0 - https://github.com/cn-uofbasel/ccn-lite/issues/128
CVE ID: CVE-2017-12413 State: PUBLISHED Published: 2017-08-04T13:00:00 Last Updated: 2024-08-05T18:36:56.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: AXIS 2100 devices 2.43 have XSS via the URI, possibly related to admin/admin.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/143657/Axis-2100-Network-Camera-2.43-Cross-Site-Scripting.html
CVE ID: CVE-2017-12414 State: PUBLISHED Published: 2017-08-03T15:00:00Z Last Updated: 2024-09-16T23:25:52.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.kth.ninja/2017/08/format-factory-dll-hijacking.html
CVE ID: CVE-2017-12415 State: PUBLISHED Published: 2018-02-20T23:00:00 Last Updated: 2024-08-05T18:36:56.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: OXID eShop Community Edition before 6.0.0 RC2 (development), 4.10.x before 4.10.5 (maintenance), and 4.9.x before 4.9.10 (legacy), Enterprise Edition before 6.0.0 RC2 (development), 5.2.x before 5.2.10 (legacy), and 5.3.x before 5.3.5 (maintenance), and Professional Edition before 6.0.0 RC2 (development), 4.9.x before 4.9.10 (legacy) and 4.10.x before 4.10.5 (maintenance) allow remote attackers to hijack the cart session of a client via Cross-Site Request Forgery (CSRF) if the following pre-conditions are met: (1) the attacke
cart session of a client via Cross-Site Request Forgery (CSRF) if the following pre-conditions are met: (1) the attacker knows which shop is presently used by the client, (2) the attacker knows the exact time when the customer will add product items to the cart, (3) the attacker knows which product items are already in the cart (has to know their article IDs), and (4) the attacker would be able to trick user into clicking a button (submit form) of an e-mail or remote site within the period of visiting the shop and placing an order. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.oxid-esales.com/view.php?id=6674 - https://oxidforge.org/en/security-bulletin-2017-
ontainer: References: - https://bugs.oxid-esales.com/view.php?id=6674 - https://oxidforge.org/en/security-bulletin-2017-001.html