Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-6145 State: PUBLISHED Published: 2017-10-20T15:00:00Z Last Updated: 2024-09-16T23:10:40.872Z Vendors: F5 Networks, Inc. Products: F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe Problem Types: Cookie verification vulnerability Description: iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 through 12.1.2 and 13.0.0 includes a service to convert authorization BIGIPAuthCookie cookies to X-F5-Auth-Token tokens. This service does not properly re-validate cookies when making that conversion, allowing once-valid but now expired cookies to be converted to valid tokens. Additional Analyst Note
ng that conversion, allowing once-valid but now expired cookies to be converted to valid tokens. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K22317030
CVE ID: CVE-2017-6146 State: REJECTED Published: 2018-07-26T20:00:00 Last Updated: 2018-07-26T19:57:01 Description: No description available.
CVE ID: CVE-2017-6147 State: PUBLISHED Published: 2017-09-18T17:00:00Z Last Updated: 2024-09-17T02:15:57.177Z Vendors: F5 Networks, Inc. Products: F5 BIG-IP Problem Types: TMM SSL Forward Proxy Description: In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when "SSL Forward Proxy" setting is enabled in both the Client and Server SSL profiles assigned to a BIG-IP Virtual Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100981 - https://support.f5.com/csp/article/K43945001
CVE ID: CVE-2017-6148 State: PUBLISHED Published: 2018-04-13T13:00:00Z Last Updated: 2024-09-17T00:06:49.247Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, APM, ASM, Link Controller, PEM, WebSafe) Problem Types: DoS Description: Responses to SOCKS proxy requests made through F5 BIG-IP version 13.0.0, 12.0.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5 may cause a disruption of services provided by TMM. The data plane is impacted and exposed only when a SOCKS proxy profile is attached to a Virtual Server. The control plane is not impacted by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K55225440
CVE ID: CVE-2017-6149 State: REJECTED Published: 2018-07-26T20:00:00 Last Updated: 2018-07-26T19:57:01 Description: No description available.
CVE ID: CVE-2017-6150 State: PUBLISHED Published: 2018-03-01T16:00:00Z Last Updated: 2024-09-17T00:06:49.713Z Vendors: F5 Networks, Inc. Products: BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe Problem Types: DoS Description: Under certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble IP Fragments option is disabled (default), some specific large fragmented packets may restart the Traffic Management Microkernel (TMM). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103235 - https://support.f5.com/csp/article/K62712037
CVE ID: CVE-2017-6151 State: PUBLISHED Published: 2017-12-21T17:00:00Z Last Updated: 2024-09-16T18:24:04.117Z Vendors: F5 Networks, Inc. Products: BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe Problem Types: Denial of Service Description: In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, undisclosed requests made to BIG-IP virtual servers which make use of the "HTTP/2 profile" may result in a disruption of service to TMM. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040052 - h
e to TMM. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040052 - https://support.f5.com/csp/article/K07369970
CVE ID: CVE-2017-6152 State: PUBLISHED Published: 2018-03-08T14:00:00Z Last Updated: 2024-09-16T17:28:33.142Z Vendors: F5 Networks, Inc. Products: BIG-IQ Centralized Management Problem Types: Privilege Escalation Description: A local user on F5 BIG-IQ Centralized Management 5.1.0-5.2.0 with the Access Manager role has privileges to change the passwords of other users on the system, including the local admin account password. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K35195140 - http://www.securityfocus.com/bid/103441
CVE ID: CVE-2017-6153 State: PUBLISHED Published: 2018-06-01T14:00:00Z Last Updated: 2024-09-16T17:04:13.540Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: DoS Description: Features in F5 BIG-IP 13.0.0-13.1.0.3, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 system that utilizes inflate functionality directly, via an iRule, or via the inflate code from PEM module are subjected to a service disruption via a "Zip Bomb" attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041024 - https://support.f5.com/csp/articl
es: - CVE Program Container: References: - http://www.securitytracker.com/id/1041024 - https://support.f5.com/csp/article/K52167636
CVE ID: CVE-2017-6154 State: PUBLISHED Published: 2018-03-01T16:00:00Z Last Updated: 2024-09-16T22:03:38.585Z Vendors: F5 Networks, Inc. Products: BIG-IP ASM Problem Types: DoS Description: On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed types of data on systems with 48 or more CPU cores. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103233 - https://support.f5.com/csp/article/K38243073
CVE ID: CVE-2017-6155 State: PUBLISHED Published: 2018-04-13T13:00:00Z Last Updated: 2024-09-17T03:33:51.738Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, APM, ASM, Edge Gateway, Link Controller, PEM, PSM, WebAccelerator, WebSafe) Problem Types: DoS Description: On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM. Data plane is only exposed when a SPDY or HTTP/2 profile is attached to a virtual server. There is no control plane exposure. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K10930474
CVE ID: CVE-2017-6156 State: PUBLISHED Published: 2018-04-13T13:00:00Z Last Updated: 2024-09-16T19:15:00.313Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) Problem Types: DoS Description: When the F5 BIG-IP 12.1.0-12.1.1, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 system is configured with a wildcard IPSec tunnel endpoint, it may allow a remote attacker to disrupt or impersonate the tunnels that have completed phase 1 IPSec negotiations. The attacker must possess the necessary credentials to negotiate the phase 1 of the IPSec exchange to exploit this vulnerability; in many environment this
sary credentials to negotiate the phase 1 of the IPSec exchange to exploit this vulnerability; in many environment this limits the attack surface to other endpoints under the same administration. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K05263202
CVE ID: CVE-2017-6157 State: PUBLISHED Published: 2017-10-27T14:00:00Z Last Updated: 2024-09-17T03:22:54.063Z Vendors: F5 Networks, Inc. Products: BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, Websafe Problem Types: remote command-execution Description: In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.5.0 - 11.5.4, virtual servers with a configuration using the HTTP Explicit Proxy functionality and/or SOCKS profile are vulnerable to an unauthenticated, remote attack that allows modification of BIG-IP system configuration, extraction of sensitive system files, and/or possible remote comm
at allows modification of BIG-IP system configuration, extraction of sensitive system files, and/or possible remote command execution on the BIG-IP system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101634 - http://www.securitytracker.com/id/1039672 - https://support.f5.com/csp/article/K02692210
CVE ID: CVE-2017-6158 State: PUBLISHED Published: 2018-04-13T13:00:00Z Last Updated: 2024-09-17T03:38:50.163Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) Problem Types: DoS Description: In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling of invalid IP addresses. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K19361245
CVE ID: CVE-2017-6159 State: PUBLISHED Published: 2017-10-27T14:00:00Z Last Updated: 2024-09-17T02:46:34.159Z Vendors: F5 Networks, Inc. Products: BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe Problem Types: denial of service Description: F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 are vulnerable to a denial of service attack when the MPTCP option is enabled on a virtual server. Data plane is vulnerable when using the MPTCP option of a TCP profile. There is no control plane exposure. An attacker may be able to disrupt services by causing TMM to restart hence temp
le. There is no control plane exposure. An attacker may be able to disrupt services by causing TMM to restart hence temporarily failing to process traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039669 - http://www.securityfocus.com/bid/101633 - https://support.f5.com/csp/article/K10002335
CVE ID: CVE-2017-6160 State: PUBLISHED Published: 2017-10-27T14:00:00Z Last Updated: 2024-09-16T20:52:51.782Z Vendors: F5 Networks, Inc. Products: BIG-IP AAM, PEM Problem Types: denial of service Description: In F5 BIG-IP AAM and PEM software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.4.1 to 11.5.4, a remote attacker may create maliciously crafted HTTP request to cause Traffic Management Microkernel (TMM) to restart and temporarily fail to process traffic. This issue is exposed on virtual servers using a Policy Enforcement profile or a Web Acceleration profile. Systems that do not have BIG-IP AAM module provisioned are not vulnerable. The Traffic Management Microkernel (TMM) may restart
that do not have BIG-IP AAM module provisioned are not vulnerable. The Traffic Management Microkernel (TMM) may restart and temporarily fail to process traffic. Systems that do not have BIG-IP AAM or PEM module provisioned are not vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K19430431 - http://www.securitytracker.com/id/1039670 - http://www.securityfocus.com/bid/101632
CVE ID: CVE-2017-6161 State: PUBLISHED Published: 2017-10-27T14:00:00Z Last Updated: 2024-09-16T20:31:33.873Z Vendors: F5 Networks, Inc. Products: BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator Problem Types: denial of service Description: In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSync is configured, attackers on adjacent networks may be able to bypass the TLS protections usually used to encrypted and authenticate connections to mcpd. This vulnerability may allow remote attackers to
ctions usually used to encrypted and authenticate connections to mcpd. This vulnerability may allow remote attackers to cause a denial-of-service (DoS) attack via resource exhaustion. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K62279530 - http://www.securitytracker.com/id/1039676 - http://www.securityfocus.com/bid/101636 - http://www.securitytracker.com/id/1039675
CVE ID: CVE-2017-6162 State: PUBLISHED Published: 2017-10-27T14:00:00Z Last Updated: 2024-09-16T17:23:25.794Z Vendors: F5 Networks, Inc. Products: BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe Problem Types: denial of service Description: In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, 11.2.1, in some cases TMM may crash when processing TCP traffic. This vulnerability affects TMM via a virtual server configured with TCP profile. Traffic processing is disrupted while Traffic Management Microkernel (TMM) restarts. If th
configured with TCP profile. Traffic processing is disrupted while Traffic Management Microkernel (TMM) restarts. If the affected BIG-IP system is configured to be part of a device group, it will trigger a failover to the peer device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101635 - http://www.securitytracker.com/id/1039673 - https://support.f5.com/csp/article/K13421245
CVE ID: CVE-2017-6163 State: PUBLISHED Published: 2017-10-27T14:00:00Z Last Updated: 2024-09-16T20:37:49.159Z Vendors: F5 Networks, Inc. Products: BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM Problem Types: denial of service Description: In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, when a virtual server uses the standard configuration of HTTP/2 or SPDY profile with Client SSL profile, and the client initiates a number of concurrent streams beyond the advertised limit can cause a disruption of service. Remote client initiating stream beyond the advertised limit can cause a disruption of serv
ause a disruption of service. Remote client initiating stream beyond the advertised limit can cause a disruption of service. The Traffic Management Microkernel (TMM) data plane is exposed to this issue; the control plane is not exposed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039671 - http://www.securityfocus.com/bid/101606 - https://support.f5.com/csp/article/K22541983
CVE ID: CVE-2017-6164 State: PUBLISHED Published: 2017-12-21T17:00:00Z Last Updated: 2024-09-17T04:13:51.645Z Vendors: F5 Networks, Inc. Products: BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe Problem Types: Denial of Service and Remote Code Execution Description: In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, 12.0.0 - 12.1.2, 11.6.0 - 11.6.1 and 11.5.0 - 11.5.4, in some circumstances, Traffic Management Microkernel (TMM) does not properly handle certain malformed TLS1.2 records, which allows remote attackers to cause a denial-
kernel (TMM) does not properly handle certain malformed TLS1.2 records, which allows remote attackers to cause a denial-of-service (DoS) or possible remote command execution on the BIG-IP system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040054 - https://support.f5.com/csp/article/K02714910
CVE ID: CVE-2017-6165 State: PUBLISHED Published: 2017-10-20T15:00:00 Last Updated: 2024-08-05T15:18:49.774Z Vendors: F5 Networks, Inc. Products: F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, WebSafe Problem Types: Information leakage via logfile Description: In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM configuration elements between blades in a clustered deployment will log the HSM partition password in cleartext to the "/var/log/ltm" log file.
tween blades in a clustered deployment will log the HSM partition password in cleartext to the "/var/log/ltm" log file. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K74759095 - http://www.securitytracker.com/id/1039638 - http://www.securityfocus.com/bid/101543
CVE ID: CVE-2017-6166 State: PUBLISHED Published: 2017-11-22T16:00:00Z Last Updated: 2024-09-16T19:36:14.016Z Vendors: F5 Networks, Inc. Products: BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe Problem Types: denial of service Description: In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel (TMM) may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4 profile. Traffic processing is disrupted while TMM restarts. If the affected BIG-IP system is configured as part of a device group,
affic processing is disrupted while TMM restarts. If the affected BIG-IP system is configured as part of a device group, it will trigger a failover to the peer device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102264 - https://support.f5.com/csp/article/K65615624 - http://www.securitytracker.com/id/1039949
CVE ID: CVE-2017-6167 State: PUBLISHED Published: 2017-12-21T17:00:00Z Last Updated: 2024-09-17T03:58:35.655Z Vendors: F5 Networks, Inc. Products: BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe Problem Types: Privilege Escalation Description: In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, race conditions in iControl REST may lead to commands being executed with different privilege levels than expected. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K24465120 - http://www.securitytracker.com/id/1040053
CVE ID: CVE-2017-6168 State: PUBLISHED Published: 2017-11-17T19:00:00 Last Updated: 2024-08-05T15:18:49.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (fixed in 13.0.0 HF3) a virtual server configured with a Client SSL profile may be vulnerable to an Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) against RSA, which when exploited, may result in plaintext recovery of encrypted messages and/or a Man-in-the-middle (MiTM) attack, despite the attacker not having gained access to the server's private key itself, aka a ROBOT attack. Additional Analyst
despite the attacker not having gained access to the server's private key itself, aka a ROBOT attack. Additional Analyst Notes: - CVE Program Container: References: - https://robotattack.org/ - https://support.f5.com/csp/article/K21905460 - http://www.securityfocus.com/bid/101901 - https://www.kb.cert.org/vuls/id/144389 - http://www.securitytracker.com/id/1039839
CVE ID: CVE-2017-6169 State: PUBLISHED Published: 2018-02-06T13:00:00Z Last Updated: 2024-09-17T01:51:56.273Z Vendors: F5 Networks, Inc. Products: BIG-IP PEM Problem Types: Denial of Service Description: In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel (TMM) to produce a core file when it receives malformed URLs during categorization. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K31404801 - http://www.securitytracker.com/id/1040332
CVE ID: CVE-2017-6170 State: REJECTED Published: 2018-07-26T20:00:00 Last Updated: 2018-07-26T19:57:01 Description: No description available.
CVE ID: CVE-2017-6171 State: REJECTED Published: 2018-07-26T20:00:00 Last Updated: 2018-07-26T19:57:01 Description: No description available.
CVE ID: CVE-2017-6172 State: REJECTED Published: 2018-07-26T20:00:00 Last Updated: 2018-07-26T19:57:01 Description: No description available.
CVE ID: CVE-2017-6173 State: REJECTED Published: 2018-07-26T20:00:00 Last Updated: 2018-07-26T19:57:01 Description: No description available.
CVE ID: CVE-2017-6174 State: REJECTED Published: 2018-07-26T20:00:00 Last Updated: 2018-07-26T19:57:01 Description: No description available.
CVE ID: CVE-2017-6175 State: REJECTED Published: 2018-07-26T20:00:00 Last Updated: 2018-07-26T19:57:01 Description: No description available.
CVE ID: CVE-2017-6176 State: REJECTED Published: 2018-07-26T20:00:00 Last Updated: 2018-07-26T19:57:01 Description: No description available.
CVE ID: CVE-2017-6177 State: REJECTED Published: 2018-07-26T20:00:00 Last Updated: 2018-07-26T19:57:01 Description: No description available.
CVE ID: CVE-2017-6178 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:18:49.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IofCallDriver function in USBPcap 1.1.0.0 allows local users to gain privileges via a crafted 0x00090028 IOCTL call, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/141526/USBPcap-1.1.0.0-Privilege-Escalation.html - https://www.exploit-db.com/exploits/41542/ - http://www.securityfocus.com/bid/97026
CVE ID: CVE-2017-6180 State: PUBLISHED Published: 2017-03-13T06:14:00 Last Updated: 2024-08-05T15:25:47.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Keekoon KK002 devices 1.8.12 HD have a Cross Site Request Forgery Vulnerability affecting goform/formChnUserPwd and goform/formUserMng (and the entire set of other pages). Additional Analyst Notes: - CVE Program Container: References: - https://hsw69.wordpress.com/2015/10/22/keekoon-kk002-ip-camera-csrf-exploitation/
CVE ID: CVE-2017-6181 State: PUBLISHED Published: 2017-04-03T05:44:00 Last Updated: 2024-08-05T15:25:47.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse_char_class function in regparse.c in the Onigmo (aka Oniguruma-mod) regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service (deep recursion and application crash) via a crafted regular expression. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ruby-lang.org/issues/13234 - https://bugs.ruby-lang.org/projects/ruby-trunk/repository/revisions/57660 - http://www.securityfocus.com/bid/97304
CVE ID: CVE-2017-6182 State: PUBLISHED Published: 2017-03-30T17:00:00 Last Updated: 2024-08-05T15:25:47.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via functions, aka NSWA-1304. Additional Analyst Notes: - CVE Program Container: References: - http://wsa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.1.2.html - http://www.securityfocus.com/bid/97261 - https://www.exploit-db.com/exploits/42332/ - https://community.sophos.com/products/web-appliance/b/blog/posts/release-of-swa-v4-3-1-2