Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-17618 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:17.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145326/Kickstarter-Clone-Script-2.0-SQL-Injection.html - https://www.exploit-db.com/exploits/43286/
CVE ID: CVE-2017-17619 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:17.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Laundry Booking Script 1.0 has SQL Injection via the /list city parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43288/ - https://packetstormsecurity.com/files/145328/Laundry-Booking-Script-1.0-SQL-Injection.html - https://packetstormsecurity.com/files/145330/Laundry-Booking-Script-1.0-SQL-Injection.html
CVE ID: CVE-2017-17620 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:16.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145332/Lawyer-Search-Script-1.1-SQL-Injection.html - https://www.exploit-db.com/exploits/43289/
CVE ID: CVE-2017-17621 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:17.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43290/ - https://packetstormsecurity.com/files/145333/Multivendor-Penny-Auction-Clone-Script-1.0-SQL-Injection.html - https://packetstormsecurity.com/files/145331/Multivendor-Penny-Auction-Clone-Script-1.0-SQL-Injection.html
CVE ID: CVE-2017-17622 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:17.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145329/Online-Exam-Test-Application-Script-1.6-SQL-Injection.html - https://packetstormsecurity.com/files/145334/Online-Exam-Test-Application-Script-1.6-SQL-Injection.html - https://www.exploit-db.com/exploits/43291/
CVE ID: CVE-2017-17623 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:16.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43292/ - https://packetstormsecurity.com/files/145335/Opensource-Classified-Ads-Script-3.2-SQL-Injection.html
CVE ID: CVE-2017-17624 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:17.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145336/PHP-Multivendor-Ecommerce-1.0-SQL-Injection.html - https://www.exploit-db.com/exploits/43293/
CVE ID: CVE-2017-17625 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:16.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Professional Service Script 1.0 has SQL Injection via the service-list city parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145337/Professional-Service-Script-1.0-SQL-Injection.html - https://www.exploit-db.com/exploits/43294/
CVE ID: CVE-2017-17626 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:17.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145338/Readymade-PHP-Classified-Script-3.3-SQL-Injection.html - https://www.exploit-db.com/exploits/43295/
CVE ID: CVE-2017-17627 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:16.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43296/ - https://packetstormsecurity.com/files/145339/Readymade-Video-Sharing-Script-3.2-SQL-Injection.html
CVE ID: CVE-2017-17628 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:17.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145340/Responsive-Realestate-Script-3.2-SQL-Injection.html - https://www.exploit-db.com/exploits/43297/
CVE ID: CVE-2017-17629 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:17.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the single_detail.php sid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43287/ - https://packetstormsecurity.com/files/145327/Secure-E-commerce-Script-2.0.1-SQL-Injection.html
CVE ID: CVE-2017-17630 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:16.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yoga Class Script 1.0 has SQL Injection via the /list city parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43282/ - https://packetstormsecurity.com/files/145322/Yoga-Class-Script-1.0-SQL-Injection.html
CVE ID: CVE-2017-17631 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:16.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145341/Multireligion-Responsive-Matrimonial-4.7.2-SQL-Injection.html - https://www.exploit-db.com/exploits/43299/
CVE ID: CVE-2017-17632 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:17.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145342/Responsive-Events-And-Movie-Ticket-Booking-Script-3.2.1-SQL-Injection.html - https://www.exploit-db.com/exploits/43300/
CVE ID: CVE-2017-17633 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:17.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43301/ - https://packetstormsecurity.com/files/145343/Multiplex-Movie-Theater-Booking-Script-3.1.5-SQL-Injection.html
CVE ID: CVE-2017-17634 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:17.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145344/Single-Theater-Booking-Script-3.2.1-SQL-Injection.html - https://www.exploit-db.com/exploits/43302/
CVE ID: CVE-2017-17635 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:17.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: MLM Forex Market Plan Script 2.0.4 has SQL Injection via the news_detail.php newid parameter or the event_detail.php eventid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43306/ - https://packetstormsecurity.com/files/145347/MLM-Forex-Market-Plan-Script-2.0.4-SQL-Injection.html
CVE ID: CVE-2017-17636 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:16.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43307/ - https://packetstormsecurity.com/files/145348/MLM-Forced-Matrix-2.0.9-SQL-Injection.html
CVE ID: CVE-2017-17637 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:16.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145349/Car-Rental-Script-2.0.4-SQL-Injection.html - https://www.exploit-db.com/exploits/43308/
CVE ID: CVE-2017-17638 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:17.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43309/ - https://packetstormsecurity.com/files/145350/Groupon-Clone-Script-3.01-SQL-Injection.html
CVE ID: CVE-2017-17639 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:17.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43310/ - https://packetstormsecurity.com/files/145351/Muslim-Matrimonial-Script-3.02-SQL-Injection.html
CVE ID: CVE-2017-17640 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:17.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145352/Advanced-World-Database-2.0.5-SQL-Injection.html - https://www.exploit-db.com/exploits/43311/
CVE ID: CVE-2017-17641 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:16.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145353/Resume-Clone-Script-2.0.5-SQL-Injection.html - https://www.exploit-db.com/exploits/43312/
CVE ID: CVE-2017-17642 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:59:17.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145354/Basic-Job-Site-Script-2.0.5-SQL-Injection.html - https://www.exploit-db.com/exploits/43314/
CVE ID: CVE-2017-17643 State: PUBLISHED Published: 2017-12-18T09:00:00 Last Updated: 2024-08-05T20:59:17.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145444/FS-Lynda-Clone-1.0-SQL-Injection.html - https://www.exploit-db.com/exploits/43335/
CVE ID: CVE-2017-17645 State: PUBLISHED Published: 2017-12-18T09:00:00 Last Updated: 2024-08-05T20:59:17.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145445/Bus-Booking-Script-1.0-SQL-Injection.html - https://www.exploit-db.com/exploits/43336/
CVE ID: CVE-2017-17648 State: PUBLISHED Published: 2017-12-13T16:00:00 Last Updated: 2024-08-05T20:59:17.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Entrepreneur Dating Script 2.0.1 has SQL Injection via the search_result.php marital, gender, country, or profileid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43278
CVE ID: CVE-2017-17649 State: PUBLISHED Published: 2017-12-18T09:00:00 Last Updated: 2024-08-05T20:59:17.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43333/ - https://packetstormsecurity.com/files/145438/Readymade-Video-Sharing-Script-3.2-HTML-Injection.html
CVE ID: CVE-2017-17651 State: PUBLISHED Published: 2017-12-18T09:00:00 Last Updated: 2024-08-05T20:59:17.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145439/Paid-To-Read-Script-2.0.5-SQL-Injection.html - https://www.exploit-db.com/exploits/43334/
CVE ID: CVE-2017-17652 State: PUBLISHED Published: 2018-02-08T18:00:00 Last Updated: 2024-08-05T20:59:17.628Z Vendors: Quest Products: Quest NetVault Backup Problem Types: CWE-89 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup Count method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI
queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4238. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-988
CVE ID: CVE-2017-17653 State: PUBLISHED Published: 2018-02-08T18:00:00 Last Updated: 2024-08-05T20:59:17.343Z Vendors: Quest Products: Quest NetVault Backup Problem Types: CWE-89 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupOptionSet Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database.
uct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4286. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-989
CVE ID: CVE-2017-17654 State: PUBLISHED Published: 2018-02-08T18:00:00 Last Updated: 2024-08-05T20:59:17.152Z Vendors: Quest Products: Quest NetVault Backup Problem Types: CWE-89 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup ClientList method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Wa
t SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4287. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-990
CVE ID: CVE-2017-17655 State: PUBLISHED Published: 2018-02-08T18:00:00 Last Updated: 2024-08-05T20:59:17.360Z Vendors: Quest Products: Quest NetVault Backup Problem Types: CWE-89 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup PluginList method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Wa
t SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4289. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-991
CVE ID: CVE-2017-17656 State: PUBLISHED Published: 2018-02-08T18:00:00 Last Updated: 2024-08-05T20:59:17.499Z Vendors: Quest Products: Quest NetVault Backup Problem Types: CWE-89 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup JobList method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was Z
QL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4292. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-992
CVE ID: CVE-2017-17657 State: PUBLISHED Published: 2018-02-08T18:00:00 Last Updated: 2024-08-05T20:59:17.274Z Vendors: Quest Products: Quest NetVault Backup Problem Types: CWE-89 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup TimeRange method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was
SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4294. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-993
CVE ID: CVE-2017-17658 State: PUBLISHED Published: 2018-02-08T18:00:00 Last Updated: 2024-08-05T20:59:17.378Z Vendors: Quest Products: Quest NetVault Backup Problem Types: CWE-89 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobDefinitions Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. W
ct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4316. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-994
CVE ID: CVE-2017-17659 State: PUBLISHED Published: 2018-02-08T18:00:00 Last Updated: 2024-08-05T20:59:17.466Z Vendors: Quest Products: Quest NetVault Backup Problem Types: CWE-89 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobHistory Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was Z
QL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4906. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-995
CVE ID: CVE-2017-17662 State: PUBLISHED Published: 2018-01-10T18:00:00 Last Updated: 2024-08-05T20:59:17.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal in the HTTP server on Yawcam 0.2.6 through 0.6.0 devices allows attackers to read arbitrary files through a sequence of the form '.x./' or '....\x/' where x is a pattern composed of one or more (zero or more for the second pattern) of either \ or ..\ -- for example a '.\./', '....\/' or '...\./' sequence. For files with no extension, a single dot needs to be appended to ensure the HTTP server does not alter the request, e.g., a "GET /.\./.\./.\./.\./.\./.\./.\./windows/system32/drivers/etc/hosts." request.
rver does not alter the request, e.g., a "GET /.\./.\./.\./.\./.\./.\./.\./windows/system32/drivers/etc/hosts." request. Additional Analyst Notes: - CVE Program Container: References: - http://www.yawcam.com/news.php - http://packetstormsecurity.com/files/145770/Yawcam-0.6.0-Directory-Traversal.html
CVE ID: CVE-2017-17663 State: PUBLISHED Published: 2018-02-06T17:00:00 Last Updated: 2024-08-05T20:59:17.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: The htpasswd implementation of mini_httpd before v1.28 and of thttpd before v2.28 is affected by a buffer overflow that can be exploited remotely to perform code execution. Additional Analyst Notes: - CVE Program Container: References: - http://acme.com/updates/archive/199.html
CVE ID: CVE-2017-17664 State: PUBLISHED Published: 2017-12-13T20:00:00 Last Updated: 2024-08-05T20:59:17.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7.4, and 15.x before 15.1.4 and Certified Asterisk before 13.13-cert9. Certain compound RTCP packets cause a crash in the RTCP Stack. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.digium.com/pub/security/AST-2017-012.html - https://issues.asterisk.org/jira/browse/ASTERISK-27429 - http://www.securityfocus.com/bid/102201 - http://www.securitytracker.com/id/1040009 - https://www.debian.org/security/