Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-12877 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-05T18:51:06.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the DestroyImage function in image.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/08/16/2 - https://www.debian.org/security/2017/dsa-4040 - https://github.com/ImageMagick/ImageMagick/commit/04178de2247e353fc095846784b9a10fefdbf890 - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - https://www.debia
95846784b9a10fefdbf890 - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - https://www.debian.org/security/2017/dsa-4074 - https://blogs.gentoo.org/ago/2017/08/10/imagemagick-use-after-free-in-destroyimage-image-c/
CVE ID: CVE-2017-12879 State: PUBLISHED Published: 2017-08-24T19:00:00 Last Updated: 2024-08-05T18:51:07.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS-STORED) vulnerability in the DEVICES OR SENSORS functionality in Paessler PRTG Network Monitor before 17.3.33.2654 allows authenticated remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://www.paessler.com/prtg/history/preview - https://drive.google.com/open?id=0B6WbMqXSfqQFODZHUGtLdzU3eDA - https://www.paessler.com/prtg/history/stable - https://youtu.be/QOLdH2oey8Q
CVE ID: CVE-2017-12880 State: REJECTED Published: 2017-08-16T14:00:00 Last Updated: 2017-08-16T18:57:01 Description: No description available.
CVE ID: CVE-2017-12881 State: PUBLISHED Published: 2017-08-18T18:00:00 Last Updated: 2024-08-05T18:51:07.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/08/16/5 - http://www.securityfocus.com/bid/100410
CVE ID: CVE-2017-12882 State: PUBLISHED Published: 2017-08-18T18:00:00 Last Updated: 2024-08-05T18:51:06.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML via the file upload functionality. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/08/16/5 - http://www.securityfocus.com/bid/100410
CVE ID: CVE-2017-12883 State: PUBLISHED Published: 2017-09-19T18:00:00 Last Updated: 2024-08-05T18:51:06.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service (application crash) via a crafted regular expression with an invalid '\N{U+...}' escape. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3982 - http://www.securityfocus.com/bid/100852 - https://www.oracle.com/security-alerts/cpujul2020.html - https://perl5.git.perl.org
//www.securityfocus.com/bid/100852 - https://www.oracle.com/security-alerts/cpujul2020.html - https://perl5.git.perl.org/perl.git/log/refs/tags/v5.26.1-RC1 - https://perl5.git.perl.org/perl.git/log/refs/tags/v5.24.3-RC1 - https://security.netapp.com/advisory/ntap-20180426-0001/ - http://mirror.cucumberlinux.com/cucumber/cucumber-1.0/source/lang-base/perl/patches/CVE-2017-12883.patch - https://bugzilla.redhat.com/show_bug.cgi?id=1492093 - https://rt.perl.org/Public/Bug/Display.html?id=131598 - https://perl5.git.perl.org/perl.git/commitdiff/2be4edede4ae226e2eebd4eff28cedd2041f300f#patch1
CVE ID: CVE-2017-12884 State: PUBLISHED Published: 2019-05-10T15:32:33 Last Updated: 2024-08-05T18:51:07.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX Software GmbH App Suite 7.8.4 and earlier is affected by: Information Exposure. Additional Analyst Notes: - CVE Program Container: References: - http://ox.com - http://app.com - https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html
CVE ID: CVE-2017-12885 State: PUBLISHED Published: 2019-05-10T14:43:25 Last Updated: 2024-08-05T18:51:07.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX Software GmbH App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - http://ox.com - http://app.com - https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html
CVE ID: CVE-2017-12892 State: PUBLISHED Published: 2017-08-16T21:00:00 Last Updated: 2024-08-05T18:51:06.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit PDF Compressor installers from versions from 7.0.0.183 to 7.7.2.10 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securityfocus.com/bid/100414
CVE ID: CVE-2017-12893 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/6f5ba2b651cd9d4b7fa8ee5c4f94460645877c45 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12894 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/730fc35968c5433b9e2a829779057f4f9495dc51 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHE
c35968c5433b9e2a829779057f4f9495dc51 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12895 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/2b62d1dda41590db29368ec7ba5f4faf3464765a - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12896 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:06.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/f76e7feb41a4327d2b0978449bbdafe98d4a3771 - https://github.com/the-tcpdump-group/tcpdump/commit/4e430c6b0d8b7e77c7abca7e7afb0c3e727502f
7d2b0978449bbdafe98d4a3771 - https://github.com/the-tcpdump-group/tcpdump/commit/4e430c6b0d8b7e77c7abca7e7afb0c3e727502f2 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12897 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/1dcd10aceabbc03bf571ea32b892c522cbe923de - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12898 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/19d25dd8781620cd41bf178a5e2e27fc1cf242d0 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12899 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/c6e0531b5def26ecf912e8de6ade86cbdaed3751 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/f96003b21e2abfbba59b926b10a7f9bc7d11e36c - http
ker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/f96003b21e2abfbba59b926b10a7f9bc7d11e36c - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12900 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705 - https://github.com/the-tcpdump-group/tcpdump/commit/0318fa8b61bd6c837641129d585f1a73c652
hat.com/errata/RHEA-2018:0705 - https://github.com/the-tcpdump-group/tcpdump/commit/0318fa8b61bd6c837641129d585f1a73c652b1e0
CVE ID: CVE-2017-12901 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705 - https://github.com/the-tcpdump-group/tcpdump/commit/de981e6070d168b58ec1bb0713ded77ed4ad87f4
CVE ID: CVE-2017-12902 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://github.com/the-tcpdump-group/tcpdump/commit/6ec0c6fa63412c7a07a5bcb790a529c3563b4173 - https://github.com/the-tcpdump-group/tcpdump/commi
pdump-group/tcpdump/commit/6ec0c6fa63412c7a07a5bcb790a529c3563b4173 - https://github.com/the-tcpdump-group/tcpdump/commit/d17507ffa3e9742199b02a66aa940e79ababfa30 - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12904 State: PUBLISHED Published: 2017-08-23T14:00:00 Last Updated: 2024-08-05T18:51:07.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item that includes shell code in its title and/or URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/akrennmair/newsbeuter/issues/591 - https://github.com/akrennmair/newsbeuter/commit/96e9506ae9e252c548665152d1b8968297128307 - https://groups.google.com/forum/#%21topic/newsbeuter/i
mair/newsbeuter/commit/96e9506ae9e252c548665152d1b8968297128307 - https://groups.google.com/forum/#%21topic/newsbeuter/iFqSE7Vz-DE - http://www.debian.org/security/2017/dsa-3947 - https://usn.ubuntu.com/4585-1/
CVE ID: CVE-2017-12905 State: PUBLISHED Published: 2017-09-25T17:00:00 Last Updated: 2024-08-05T18:51:07.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Sep/47
CVE ID: CVE-2017-12906 State: PUBLISHED Published: 2017-09-07T13:00:00 Last Updated: 2024-08-05T18:51:07.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in NexusPHP allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) cheaters.php or (2) confirm_resend.php. Additional Analyst Notes: - CVE Program Container: References: - http://loid.online/cve/cve.txt - http://www.sstrunk.com/cve/confirm_resend.html
CVE ID: CVE-2017-12907 State: PUBLISHED Published: 2017-08-17T20:00:00 Last Updated: 2024-08-05T18:51:07.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the url path to usersearch.php. Additional Analyst Notes: - CVE Program Container: References: - http://lu4n.com/cve/7.txt
CVE ID: CVE-2017-12908 State: PUBLISHED Published: 2017-08-17T20:00:00 Last Updated: 2024-08-05T18:51:07.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lu4n.com/cve/8.txt
CVE ID: CVE-2017-12909 State: PUBLISHED Published: 2017-08-17T20:00:00 Last Updated: 2024-08-05T18:51:07.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lu4n.com/cve/9.txt
CVE ID: CVE-2017-12910 State: PUBLISHED Published: 2017-08-17T20:00:00 Last Updated: 2024-08-05T18:51:07.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lu4n.com/cve/10.txt
CVE ID: CVE-2017-12911 State: PUBLISHED Published: 2017-09-07T14:00:00 Last Updated: 2024-08-05T18:51:07.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "apetag.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a stack memory corruption when opening a crafted MP3 file. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=0B9DojFnTUSNGeS1hZlJkeGVkYlU - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00030.html
CVE ID: CVE-2017-12912 State: PUBLISHED Published: 2017-09-07T14:00:00 Last Updated: 2024-08-05T18:51:07.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "mpglibDBL/layer3.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a read access violation when opening a crafted MP3 file. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=0B9DojFnTUSNGeS1hZlJkeGVkYlU
CVE ID: CVE-2017-12919 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-05T18:51:07.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service via a crafted fpx image. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/08/09/libfpx-heap-based-buffer-overflow-in-olestreamwritevt_lpstr-olestrm-cpp/ - http://www.openwall.com/lists/oss-security/2017/08/17/13
CVE ID: CVE-2017-12920 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-05T18:51:07.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/08/09/libfpx-null-pointer-dereference-in-cdirectorygetdirentry-dir-cxx/ - http://www.openwall.com/lists/oss-security/2017/08/17/12
CVE ID: CVE-2017-12921 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-05T18:51:07.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: PFileFlashPixView::GetGlobalInfoProperty in f_fpxvw.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/08/09/libfpx-null-pointer-dereference-in-pfileflashpixviewgetglobalinfoproperty-f_fpxvw-cpp/ - http://www.openwall.com/lists/oss-security/2017/08/17/10
CVE ID: CVE-2017-12922 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-05T18:51:07.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: wchar.c in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/08/17/11 - https://blogs.gentoo.org/ago/2017/08/09/libfpx-null-pointer-dereference-in-wchar-c/
CVE ID: CVE-2017-12923 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-05T18:51:07.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/08/09/libfpx-null-pointer-dereference-in-olestreamwritevt_lpstr-olestrm-cpp/ - http://www.openwall.com/lists/oss-security/2017/08/17/9
CVE ID: CVE-2017-12924 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-05T18:51:07.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: CDirVector::GetTable in dirfunc.hxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted fpx image. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/08/17/8 - https://blogs.gentoo.org/ago/2017/08/09/libfpx-divide-by-zero-in-cdirvectorgettable-dirfunc-hxx/
CVE ID: CVE-2017-12925 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-05T18:51:07.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service via a crafted fpx image. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/08/17/14 - https://blogs.gentoo.org/ago/2017/08/09/libfpx-double-free-in-dffromlb-docfile-cxx/
CVE ID: CVE-2017-12927 State: PUBLISHED Published: 2017-08-18T02:00:00 Last Updated: 2024-08-05T18:51:07.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting vulnerability exists in Cacti 1.1.17 in the method parameter in spikekill.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cacti/cacti/issues/907 - http://www.securityfocus.com/bid/100490 - http://www.securitytracker.com/id/1039208 - https://github.com/Cacti/cacti/commit/a032ce0be6a4ea47862c594e40a619ac8de1ef99
CVE ID: CVE-2017-12928 State: PUBLISHED Published: 2017-09-21T16:00:00 Last Updated: 2024-08-05T18:51:07.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: A hard-coded password of tecn0visi0n for the dlxuser account in TecnoVISION DLX Spot Player4 (all known versions) allows remote attackers to log in via SSH and escalate privileges to root access with the same credentials. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/144259/DlxSpot-Hardcoded-Password.html
CVE ID: CVE-2017-12929 State: PUBLISHED Published: 2017-09-21T16:00:00 Last Updated: 2024-08-05T18:51:07.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version >1.5.10 allows remote authenticated users to upload arbitrary files leading to Remote Command Execution. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/144258/DlxSpot-Shell-Upload.html
CVE ID: CVE-2017-12930 State: PUBLISHED Published: 2017-09-21T16:00:00 Last Updated: 2024-08-05T18:51:07.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as administrator via a crafted password. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/144257/DlxSpot-SQL-Injection.html