Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
p://downloads.avaya.com/css/P8/documents/101044086 - http://hyp3rlinx.altervista.org/advisories/AVAYA-OFFICE-IP-%28IPO%29-v9.1.0-10.1-SOFT-CONSOLE-REMOTE-BUFFER-OVERFLOW-0DAY.txt
CVE ID: CVE-2017-11310 State: PUBLISHED Published: 2017-07-13T18:00:00 Last Updated: 2024-08-05T18:05:30.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_user_chunk_callback function in coders\png.c in ImageMagick 7.0.6-1 Q16 2017-06-21 (beta) has memory leak vulnerabilities via crafted PNG files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/8ca35831e91c3db8c6d281d09b605001003bec08 - http://www.securityfocus.com/bid/99585 - https://github.com/ImageMagick/ImageMagick/issues/517
CVE ID: CVE-2017-11311 State: PUBLISHED Published: 2017-07-13T20:00:00 Last Updated: 2024-08-05T18:05:30.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that triggers use of the same sample slot for two samples. Additional Analyst Notes: - CVE Program Container: References: - https://source.openmpt.org/browse/openmpt/trunk/?rev=6800 - https://source.openmpt.org/browse/openmpt/branches/OpenMPT-1.26/?op=revision&rev=8438 - https://bugs.debian.org/867579 - https://lib.openmpt.org/libopenmpt/md_
pt/branches/OpenMPT-1.26/?op=revision&rev=8438 - https://bugs.debian.org/867579 - https://lib.openmpt.org/libopenmpt/md_announce-2017-07-07.html
CVE ID: CVE-2017-11317 State: PUBLISHED Published: 2017-08-23T17:00:00.000Z Last Updated: 2025-10-21T23:55:35.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/43874/ - http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/unrestricted-file-upload - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0006 - h
pload-%28async%29/details/unrestricted-file-upload - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0006 - http://packetstormsecurity.com/files/159653/Telerik-UI-ASP.NET-AJAX-RadAsyncUpload-Deserialization.html
CVE ID: CVE-2017-11318 State: PUBLISHED Published: 2017-07-14T05:00:00 Last Updated: 2024-08-05T18:05:30.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks when the master server is spoofed. In addition, the attacker can execute system commands remotely by abusing pre-backup events. Additional Analyst Notes: - CVE Program Container: References: - https://www.tarlogic.com/advisories/Tarlogic-2017-002.txt
CVE ID: CVE-2017-11319 State: PUBLISHED Published: 2017-12-11T17:00:00 Last Updated: 2024-08-05T18:05:30.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and missing cross server side checking mechanisms. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43210/ - http://packetstormsecurity.com/files/145230/Perspective-ICM-Investigation-And-Case-5.1.1.16-Privilege-Escalation.html
CVE ID: CVE-2017-11320 State: PUBLISHED Published: 2017-08-03T08:00:00 Last Updated: 2024-08-05T18:05:30.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Persistent XSS through the SSID of nearby Wi-Fi devices on Technicolor TC7337 routers 08.89.17.20.00 allows an attacker to cause DNS Poisoning and steal credentials from the router. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Aug/3 - https://www.exploit-db.com/exploits/42427/
CVE ID: CVE-2017-11321 State: PUBLISHED Published: 2017-10-02T17:00:00 Last Updated: 2024-08-05T18:05:30.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admin' privileges via shell metacharacters in the less command. Additional Analyst Notes: - CVE Program Container: References: - https://sysdream.com/news/lab/2017-09-29-cve-2017-11321-ucopia-wireless-appliance-5-1-8-restricted-shell-escape/ - https://www.exploit-db.com/exploits/42937/
CVE ID: CVE-2017-11322 State: PUBLISHED Published: 2017-10-02T17:00:00 Last Updated: 2024-08-05T18:05:30.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileges via a dollar sign ($) metacharacter in the argument to chroothole_client. Additional Analyst Notes: - CVE Program Container: References: - https://sysdream.com/news/lab/2017-09-29-cve-2017-11322-ucopia-wireless-appliance-5-1-8-privileges-escalation/ - https://www.exploit-db.com/exploits/42936/
CVE ID: CVE-2017-11323 State: PUBLISHED Published: 2017-08-19T16:00:00 Last Updated: 2024-08-05T18:05:30.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a crafted MS-DOS device file, as demonstrated by use of "AUX" as the initial substring of a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.altools.com/ALTools/ALZip/Version-History.aspx - http://exploit.kitploit.com/2017/08/alzip-851-buffer-overflow.html
CVE ID: CVE-2017-11324 State: PUBLISHED Published: 2017-07-24T13:00:00 Last Updated: 2024-08-05T18:05:30.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Tilde CMS 1.0.1. Due to missing escaping of the backtick character, a SELECT query in class.SystemAction.php is vulnerable to SQL Injection. The vulnerability can be triggered via a POST request to /actionphp/action.input.php with the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/
CVE ID: CVE-2017-11325 State: PUBLISHED Published: 2017-07-24T13:00:00 Last Updated: 2024-08-05T18:05:30.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Tilde CMS 1.0.1. Arbitrary files can be read via a file=../ attack on actionphp/download.File.php. Additional Analyst Notes: - CVE Program Container: References: - https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/
CVE ID: CVE-2017-11326 State: PUBLISHED Published: 2017-07-24T13:00:00 Last Updated: 2024-08-05T18:05:30.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Tilde CMS 1.0.1. It is possible to bypass the implemented restrictions on arbitrary file upload via a filename.+php manipulation. Additional Analyst Notes: - CVE Program Container: References: - https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/
CVE ID: CVE-2017-11327 State: PUBLISHED Published: 2017-07-24T13:00:00 Last Updated: 2024-08-05T18:05:30.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Tilde CMS 1.0.1. It is possible to retrieve sensitive data by using direct references. A low-privileged user can load PHP resources such as admin/content.php and admin/content.php?method=ftp_upload. Additional Analyst Notes: - CVE Program Container: References: - https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/
CVE ID: CVE-2017-11328 State: PUBLISHED Published: 2017-07-14T05:00:00 Last Updated: 2024-08-05T18:05:30.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VirusTotal/yara/commit/4a342f01e5439b9bb901aff1c6c23c536baeeb3f
CVE ID: CVE-2017-11329 State: PUBLISHED Published: 2017-07-14T16:00:00Z Last Updated: 2024-09-16T18:03:33.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entity_restrict parameter that is not a list of integers. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/issues/2456 - https://github.com/glpi-project/glpi/releases/tag/9.1.5
CVE ID: CVE-2017-11330 State: PUBLISHED Published: 2017-07-31T13:00:00 Last Updated: 2024-08-05T18:05:30.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DivFixppCore::avi_header_fix function in DivFix++Core.cpp in DivFix++ v0.34 allows remote attackers to cause a denial of service (invalid memory write and application crash) via a crafted avi file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42396/ - http://seclists.org/fulldisclosure/2017/Jul/79
CVE ID: CVE-2017-11331 State: PUBLISHED Published: 2017-07-31T13:00:00 Last Updated: 2024-08-05T18:05:30.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocation error) via a crafted wav file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42397/ - http://seclists.org/fulldisclosure/2017/Jul/80
CVE ID: CVE-2017-11332 State: PUBLISHED Published: 2017-07-31T13:00:00 Last Updated: 2024-08-05T18:05:30.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: The startread function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted wav file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42398/ - https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html - http://seclists.org/fulldisclosure/2017/Jul/81 - https://security.gentoo.org/glsa/201810-02 - https://lists.debian.org/debian-lts-announce/2019/03/msg00007.html
CVE ID: CVE-2017-11333 State: PUBLISHED Published: 2017-07-31T13:00:00 Last Updated: 2024-08-05T18:05:30.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/82 - https://www.exploit-db.com/exploits/42399/ - https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html - https://lists.debian.org/debian-lts-announce/2019/12/msg00021.html
CVE ID: CVE-2017-11334 State: PUBLISHED Published: 2017-08-02T19:00:00 Last Updated: 2024-08-05T18:05:30.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:3473 - https://bugzilla.redhat.com/show_bug.cgi?id=1471638 - https://access.redhat.com/errata/RHSA-2017:3470 - https://access.redhat.com/errata/RHSA-2017:34
how_bug.cgi?id=1471638 - https://access.redhat.com/errata/RHSA-2017:3470 - https://access.redhat.com/errata/RHSA-2017:3472 - http://www.openwall.com/lists/oss-security/2017/07/17/4 - https://lists.gnu.org/archive/html/qemu-devel/2017-07/msg03775.html - https://access.redhat.com/errata/RHSA-2017:3474 - https://usn.ubuntu.com/3575-1/ - https://access.redhat.com/errata/RHSA-2017:3471 - http://www.securityfocus.com/bid/99895 - https://access.redhat.com/errata/RHSA-2017:3466 - https://access.redhat.com/errata/RHSA-2017:3369 - http://www.debian.org/security/2017/dsa-3925
CVE ID: CVE-2017-11335 State: PUBLISHED Published: 2017-07-16T04:00:00 Last Updated: 2024-08-05T18:05:30.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8 via a PlanarConfig=Contig image, which causes a more than one hundred bytes out-of-bounds write (related to the ZIPDecode function in tif_zip.c). A crafted input may lead to a remote denial of service attack or an arbitrary code execution attack. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3602-1/ - https://www.debian.org/security/2018/dsa-4100 - http://bugzilla.maptools.org/show_bug.cgi?id=2715
CVE ID: CVE-2017-11336 State: PUBLISHED Published: 2017-07-16T04:00:00Z Last Updated: 2024-09-17T01:32:08.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1470729
CVE ID: CVE-2017-11337 State: PUBLISHED Published: 2017-07-16T04:00:00Z Last Updated: 2024-09-16T16:28:59.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1470737
CVE ID: CVE-2017-11338 State: PUBLISHED Published: 2017-07-16T04:00:00Z Last Updated: 2024-09-16T22:20:04.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1470913
CVE ID: CVE-2017-11339 State: PUBLISHED Published: 2017-07-16T04:00:00Z Last Updated: 2024-09-16T23:47:01.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1470946
CVE ID: CVE-2017-11340 State: PUBLISHED Published: 2017-07-16T04:00:00Z Last Updated: 2024-09-17T01:01:29.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1470950
CVE ID: CVE-2017-11341 State: PUBLISHED Published: 2017-07-16T04:00:00Z Last Updated: 2024-09-16T20:06:37.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1470714
CVE ID: CVE-2017-11342 State: PUBLISHED Published: 2017-07-16T04:00:00Z Last Updated: 2024-09-17T00:02:02.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1470722
CVE ID: CVE-2017-11343 State: PUBLISHED Published: 2017-07-16T21:00:00 Last Updated: 2024-08-05T18:05:30.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in O(n) lookup time. Additional Analyst Notes: - CVE Program Container: References: - http://lists.gnu.org/archive/html/chicken-announce/2017-07/msg00000.html
CVE ID: CVE-2017-11344 State: PUBLISHED Published: 2017-07-16T23:00:00 Last Updated: 2024-08-05T18:05:30.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to write shellcode at any address in the heap; this can be used to execute arbitrary code on the
allows remote attackers to write shellcode at any address in the heap; this can be used to execute arbitrary code on the router by hosting a crafted device description XML document at a URL specified within a Location header in an SSDP response. Additional Analyst Notes: - CVE Program Container: References: - https://asuswrt.lostrealm.ca/changelog - http://www.openwall.com/lists/oss-security/2017/07/14/3
CVE ID: CVE-2017-11345 State: PUBLISHED Published: 2017-07-16T23:00:00 Last Updated: 2024-08-05T18:05:30.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to execute arbitrary code on the router by hosting a crafted device description XML document (tha
llows remote attackers to execute arbitrary code on the router by hosting a crafted device description XML document (that includes a serviceType element) at a URL specified within a Location header in an SSDP response. Additional Analyst Notes: - CVE Program Container: References: - https://asuswrt.lostrealm.ca/changelog - http://www.openwall.com/lists/oss-security/2017/07/14/3
CVE ID: CVE-2017-11346 State: PUBLISHED Published: 2017-07-16T23:00:00 Last Updated: 2024-08-05T18:05:30.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/desktop-central/remote-code-execution.html - https://www.exploit-db.com/exploits/42358/
CVE ID: CVE-2017-11347 State: PUBLISHED Published: 2017-07-16T23:00:00Z Last Updated: 2024-09-16T19:04:18.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authenticated Code Execution Vulnerability in MetInfo 5.3.17 allows a remote authenticated attacker to generate a PHP script with the content of a malicious image, related to admin/include/common.inc.php and admin/app/physical/physical.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/imp0wd3r/MetInfo_Vuln/blob/master/README.md
CVE ID: CVE-2017-11348 State: PUBLISHED Published: 2017-07-17T00:00:00 Last Updated: 2024-08-05T18:05:30.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted NuGet package, potentially overwriting other packages or modifying system files. This is a directory traversal in the PackageId value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/3654
CVE ID: CVE-2017-11349 State: PUBLISHED Published: 2017-07-17T00:00:00 Last Updated: 2024-08-05T18:05:30.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for purposes such as sending e-mail messages or making outbound connections to FTP servers for uploading data. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/nullku7/status/859238295959609344 - https://nullku7.github.io/stuff/exposure/industrial/2017/05/02/Thermofisher-dataTaker.html
CVE ID: CVE-2017-11350 State: PUBLISHED Published: 2017-09-13T08:00:00 Last Updated: 2024-08-05T18:05:30.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Request Forgery (CSRF) exists in cgi-bin/ConfigSet on Axesstel MU553S MU55XS-V1.14 devices. Additional Analyst Notes: - CVE Program Container: References: - https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-axesstel.html
CVE ID: CVE-2017-11351 State: PUBLISHED Published: 2017-09-13T08:00:00 Last Updated: 2024-08-05T18:05:30.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Axesstel MU553S MU55XS-V1.14 devices have a default password of admin for the admin account. Additional Analyst Notes: - CVE Program Container: References: - https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-axesstel.html
CVE ID: CVE-2017-11352 State: PUBLISHED Published: 2017-07-17T01:00:00 Last Updated: 2024-08-05T18:05:30.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9144. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4040 - https://usn.ubuntu.com/3681-1/ - https://bugs.debian.org/868469 - http://www.securityfocus.com/bid/99600 - https://github.com/ImageMagick/ImageMagick/issues/502
CVE ID: CVE-2017-11353 State: PUBLISHED Published: 2017-07-17T01:00:00 Last Updated: 2024-08-05T18:05:30.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: yadm (yet another dotfile manager) 1.10.0 has a race condition (related to the behavior of git commands in setting permissions for new files and directories), which potentially allows access to SSH and PGP keys. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TheLocehiliosan/yadm/issues/74 - https://bugs.debian.org/868300
CVE ID: CVE-2017-11354 State: PUBLISHED Published: 2017-07-17T06:00:00 Last Updated: 2024-08-05T18:05:30.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/app_article/sys_article.php via the name parameter in editing or adding a tag name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FiyoCMS/FiyoCMS/issues/4