Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-14664 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14665 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14666 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14667 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14668 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14669 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14670 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14671 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14672 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14673 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14674 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14675 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14676 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14677 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14678 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14679 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14680 State: PUBLISHED Published: 2017-09-21T22:00:00Z Last Updated: 2024-09-16T18:23:34.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2017/Sep/20 - http://seclists.org/fulldisclosure/2017/Sep/39
CVE ID: CVE-2017-14681 State: PUBLISHED Published: 2017-09-21T22:00:00Z Last Updated: 2024-09-17T02:26:20.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: The daemon in P3Scan 3.0_rc1 and earlier creates a p3scan.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for p3scan.pid modification before a root script executes a "kill `cat /pathname/p3scan.pid`" command, as demonstrated by etc/init.d/p3scan. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/p3scan/bugs/33/
CVE ID: CVE-2017-14682 State: PUBLISHED Published: 2017-09-21T22:00:00 Last Updated: 2024-08-05T19:34:40.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted SVG document, a different vulnerability than CVE-2017-10928. Additional Analyst Notes: - CVE Program Container: References: - https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=32726 - https://www.debian.org/security/2017/dsa-4040 - https://usn.ubuntu.com/3681-1/ - https://www.debian.org/security/201
6 - https://www.debian.org/security/2017/dsa-4040 - https://usn.ubuntu.com/3681-1/ - https://www.debian.org/security/2017/dsa-4032
CVE ID: CVE-2017-14683 State: PUBLISHED Published: 2017-09-25T08:00:00 Last Updated: 2024-08-05T19:34:39.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: geminabox (aka Gem in a Box) before 0.13.7 has CSRF, as demonstrated by an unintended gem upload. Additional Analyst Notes: - CVE Program Container: References: - http://baraktawily.blogspot.co.il/2017/09/gem-in-box-xss-vulenrability-cve-2017.html - https://github.com/geminabox/geminabox/blob/master/CHANGELOG.md
CVE ID: CVE-2017-14684 State: PUBLISHED Published: 2017-09-22T01:00:00 Last Updated: 2024-08-05T19:34:39.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service (memory consumption in ResizeMagickMemory in MagickCore/memory.c) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/770
CVE ID: CVE-2017-14685 State: PUBLISHED Published: 2017-09-22T06:00:00 Last Updated: 2024-08-05T19:34:39.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016aa61" on Windows. This occurs because xps_load_links_in_glyphs in xps/xps-link.c does not verify that an xps font could be loaded. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14685 - http://www.debian.org/security/
References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14685 - http://www.debian.org/security/2017/dsa-4006 - https://bugs.ghostscript.com/show_bug.cgi?id=698539 - http://git.ghostscript.com/?p=mupdf.git%3Bh=ab1a420613dec93c686acbee2c165274e922f82a
CVE ID: CVE-2017-14686 State: PUBLISHED Published: 2017-09-22T06:00:00 Last Updated: 2024-08-05T19:34:39.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artifex MuPDF 1.11 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d" on Windows. This occurs because read_zip_dir_imp in fitz/unzip.c does not check whether size fields in a ZIP entry are negative numbers. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-4006 - http://git.ghostscript.com/?p=mupdf.git%3Bh=0f0fbc07d9be31f5e83ec
nces: - http://www.debian.org/security/2017/dsa-4006 - http://git.ghostscript.com/?p=mupdf.git%3Bh=0f0fbc07d9be31f5e83ec5328d7311fdfd8328b1 - https://bugs.ghostscript.com/show_bug.cgi?id=698540 - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14686
CVE ID: CVE-2017-14687 State: PUBLISHED Published: 2017-09-22T06:00:00 Last Updated: 2024-08-05T19:34:39.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016cb4f" on Windows. This occurs because of mishandling of XML tag name comparisons. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-4006 - http://git.ghostscript.com/?p=mupdf.git%3Bh=2b16dbd8f73269cb15ca61ece75cf8d2d196ed28 - https://bugs.ghostscr
/dsa-4006 - http://git.ghostscript.com/?p=mupdf.git%3Bh=2b16dbd8f73269cb15ca61ece75cf8d2d196ed28 - https://bugs.ghostscript.com/show_bug.cgi?id=698558 - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14687 - https://lists.debian.org/debian-lts-announce/2017/11/msg00007.html
CVE ID: CVE-2017-14688 State: PUBLISHED Published: 2017-09-22T08:00:00 Last Updated: 2024-08-05T19:34:39.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a "Read Access Violation starting at STDUDjVuFile!DllUnregisterServer+0x000000000000d917." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14688
CVE ID: CVE-2017-14689 State: PUBLISHED Published: 2017-09-22T08:00:00 Last Updated: 2024-08-05T19:34:40.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at STDUDjVuFile!DllUnregisterServer+0x000000000000328e." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14689
CVE ID: CVE-2017-14690 State: PUBLISHED Published: 2017-09-22T08:00:00 Last Updated: 2024-08-05T19:34:39.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x00000000000064e7." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14690
CVE ID: CVE-2017-14691 State: PUBLISHED Published: 2017-09-22T08:00:00 Last Updated: 2024-08-05T19:34:39.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_773a0000!RtlAddAccessAllowedAce+0x000000000000027a." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14691
CVE ID: CVE-2017-14692 State: PUBLISHED Published: 2017-09-22T08:00:00 Last Updated: 2024-08-05T19:34:39.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x000000000000653b." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14692
CVE ID: CVE-2017-14693 State: PUBLISHED Published: 2017-09-22T08:00:00 Last Updated: 2024-08-05T19:34:39.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address controls Branch Selection starting at DJVU!GetPlugInInfo+0x000000000001c613." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14693 - http://www.irfanview.net/main_history.htm
CVE ID: CVE-2017-14694 State: PUBLISHED Published: 2017-09-22T19:00:00 Last Updated: 2024-08-05T19:34:39.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit Reader 8.3.2.25013 and earlier and Foxit PhantomPDF 8.3.2.25013 and earlier, when running in single instance mode, allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at tiptsf!CPenInputPanel::FinalRelease+0x000000000000002f.". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040038 - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.se
http://www.securitytracker.com/id/1040038 - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securityfocus.com/bid/101009 - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14694
CVE ID: CVE-2017-14695 State: PUBLISHED Published: 2017-10-24T17:00:00 Last Updated: 2024-08-05T19:34:39.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12791. Additional Analyst Notes: - CVE Program Container: References: - https://docs.saltstack.com/en/latest/topics/releases/2016.3.8.html - http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html
saltstack.com/en/latest/topics/releases/2016.3.8.html - http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html - http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html - https://bugzilla.redhat.com/show_bug.cgi?id=1500748 - https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html - https://docs.saltstack.com/en/latest/topics/releases/2016.11.8.html - https://github.com/saltstack/salt/commit/80d90307b07b3703428ecbb7c8bb468e28a9ae6d
CVE ID: CVE-2017-14696 State: PUBLISHED Published: 2017-10-24T17:00:00 Last Updated: 2024-08-05T19:34:39.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request. Additional Analyst Notes: - CVE Program Container: References: - https://docs.saltstack.com/en/latest/topics/releases/2016.3.8.html - http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html - http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html - https://github.com/saltstack/salt/commit/5f8b5e1a0f23fe0f2be5b3c3e04199b57a53db5b -
suse-updates/2017-10/msg00073.html - https://github.com/saltstack/salt/commit/5f8b5e1a0f23fe0f2be5b3c3e04199b57a53db5b - https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html - https://docs.saltstack.com/en/latest/topics/releases/2016.11.8.html - https://bugzilla.redhat.com/show_bug.cgi?id=1500742
CVE ID: CVE-2017-14698 State: PUBLISHED Published: 2018-01-29T16:00:00 Last Updated: 2024-08-05T19:34:39.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1, DSL-N12E C1, DSL-N14U, DSL-N14U-B1, DSL-N16, DSL-N16U, DSL-N17U, DSL-N66U, and DSL-AC750 routers allow remote attackers to change passwords of arbitrary users via the http_passwd parameter to mod_login.asp. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityartwork.es/2018/01/25/some-vulnerability-in-asus-routers/ - https://www.asus.com/Networking/DSL-N14U-B1/HelpDesk_BIOS/
CVE ID: CVE-2017-14699 State: PUBLISHED Published: 2018-01-29T16:00:00 Last Updated: 2024-08-05T19:34:39.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple XML external entity (XXE) vulnerabilities in the AiCloud feature on ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1, DSL-N12E C1, DSL-N14U, DSL-N14U-B1, DSL-N16, DSL-N16U, DSL-N17U, DSL-N66U, and DSL-AC750 routers allow remote authenticated users to read arbitrary files via a crafted DTD in (1) an UPDATEACCOUNT or (2) a PROPFIND request. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityartwork.es/2018/01/25/some-vulnerability-in-asu
nalyst Notes: - CVE Program Container: References: - https://www.securityartwork.es/2018/01/25/some-vulnerability-in-asus-routers/ - https://www.asus.com/Networking/DSL-N14U-B1/HelpDesk_BIOS/
CVE ID: CVE-2017-14702 State: PUBLISHED Published: 2017-09-29T14:00:00 Last Updated: 2024-08-05T19:34:39.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: ERS Data System 1.8.1.0 allows remote attackers to execute arbitrary code, related to "com.branaghgroup.ecers.update.UpdateRequest" object deserialization. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42952/ - https://github.com/wshepherd0010/advisories/blob/master/CVE-2017-14702.md
CVE ID: CVE-2017-14703 State: PUBLISHED Published: 2017-09-26T13:00:00 Last Updated: 2024-08-05T19:34:40.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cash Back Comparison Script 1.0 allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to search/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42772/
CVE ID: CVE-2017-14704 State: PUBLISHED Published: 2017-09-26T14:00:00 Last Updated: 2024-08-05T19:34:39.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unrestricted file upload vulnerabilities in the (1) imageSubmit and (2) proof_submit functions in Claydip Laravel Airbnb Clone 1.0 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/profile. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42773/
CVE ID: CVE-2017-14705 State: PUBLISHED Published: 2017-09-22T18:00:00Z Last Updated: 2024-09-17T01:01:55.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: DenyAll WAF before 6.4.1 allows unauthenticated remote command execution via TCP port 3001 because shell metacharacters can be inserted into the type parameter to the tailDateFile function in /webservices/stream/tail.php. An iToken authentication parameter is required but can be obtained by exploiting CVE-2017-14706. This affects DenyAll i-Suite LTS 5.5.0 through 5.5.12, i-Suite 5.6, Web Application Firewall 5.7, and Web Application Firewall 6.x before 6.4.1, with On Premises or AWS/Azure cloud deployments. Additional Analys
l 5.7, and Web Application Firewall 6.x before 6.4.1, with On Premises or AWS/Azure cloud deployments. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rapid7/metasploit-framework/pull/8980 - https://pentest.blog/advisory-denyall-web-application-firewall-unauthenticated-remote-code-execution/ - https://www.denyall.com/blog/advisories/advisory-unauthenticated-remote-code-execution-denyall-web-application-firewall/
CVE ID: CVE-2017-14706 State: PUBLISHED Published: 2017-09-22T18:00:00Z Last Updated: 2024-09-16T17:14:42.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.php, and then reading the iToken field in the reply. This affects DenyAll i-Suite LTS 5.5.0 through 5.5.12, i-Suite 5.6, Web Application Firewall 5.7, and Web Application Firewall 6.x before 6.4.1, with On Premises or AWS/Azure cloud deployments. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rapid7/metasploit-framework/pull/
s. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rapid7/metasploit-framework/pull/8980 - https://pentest.blog/advisory-denyall-web-application-firewall-unauthenticated-remote-code-execution/ - https://www.denyall.com/blog/advisories/advisory-unauthenticated-remote-code-execution-denyall-web-application-firewall/
CVE ID: CVE-2017-14709 State: PUBLISHED Published: 2018-07-12T16:00:00 Last Updated: 2024-08-05T19:34:39.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: The komoot GmbH "Komoot - Cycling & Hiking Maps" app before 9.3.2 -- aka komoot-cycling-hiking-maps/id447374873 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://www.crissyfield.de/blog/2017/12/14/missing-certificate-validation/
CVE ID: CVE-2017-14710 State: PUBLISHED Published: 2018-07-12T16:00:00 Last Updated: 2024-08-05T19:34:39.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Shein Group Ltd. "SHEIN - Fashion Shopping" app -- aka shein fashion-shopping/id878577184 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://www.crissyfield.de/blog/2017/12/14/missing-certificate-validation/
CVE ID: CVE-2017-14711 State: PUBLISHED Published: 2017-11-13T09:00:00 Last Updated: 2024-08-05T19:34:39.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Kickbase GmbH "Kickbase Bundesliga Manager" app before 2.2.1 -- aka kickbase-bundesliga-manager/id678241305 -- for iOS is vulnerable to a credentials leak due to transmitting a username and password in cleartext from client to server during registration and authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.crissyfield.de/2017/11/09/sniffing-kickbase-traffic
CVE ID: CVE-2017-14712 State: PUBLISHED Published: 2017-09-22T19:00:00 Last Updated: 2024-08-05T19:34:39.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830 - https://www.exploit-db.com/exploits/42950/
CVE ID: CVE-2017-14713 State: PUBLISHED Published: 2017-09-22T19:00:00Z Last Updated: 2024-09-17T00:42:03.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter. Additional Analyst Notes: - CVE Program Container: References: - https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830
CVE ID: CVE-2017-14714 State: PUBLISHED Published: 2017-09-22T19:00:00Z Last Updated: 2024-09-16T17:38:08.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter. Additional Analyst Notes: - CVE Program Container: References: - https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830
CVE ID: CVE-2017-14715 State: PUBLISHED Published: 2017-09-22T19:00:00Z Last Updated: 2024-09-16T20:36:25.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830
CVE ID: CVE-2017-14716 State: PUBLISHED Published: 2017-09-22T19:00:00Z Last Updated: 2024-09-17T04:24:11.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830
CVE ID: CVE-2017-14717 State: PUBLISHED Published: 2017-09-22T19:00:00 Last Updated: 2024-08-05T19:34:39.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter. Additional Analyst Notes: - CVE Program Container: References: - https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830 - https://www.exploit-db.com/exploits/42950/