Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-14756 State: PUBLISHED Published: 2017-10-02T17:00:00 Last Updated: 2024-08-05T19:34:39.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Cross-Site Scripting: /xAdmin/html/Deployment (cat_id). Additional Analyst Notes: - CVE Program Container: References: - https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774 - http://seclists.org/fulldisclosure/2017/Sep/96
CVE ID: CVE-2017-14757 State: PUBLISHED Published: 2017-10-02T17:00:00 Last Updated: 2024-08-05T19:34:40.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Injection: /xDashboard/html/jobhistory/downloadSupportFile.action, parameter: jobRunId. In order for this vulnerability to be exploited, an attacker must authenticate to the application first. Additional Analyst Notes: - CVE Program Container: References: - https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774 - https://www.exploit-db.com/exploits/42939/ - htt
- https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774 - https://www.exploit-db.com/exploits/42939/ - http://seclists.org/fulldisclosure/2017/Oct/8
CVE ID: CVE-2017-14758 State: PUBLISHED Published: 2017-10-02T17:00:00 Last Updated: 2024-08-05T19:34:39.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Injection: /xAdmin/html/cm_doclist_view_uc.jsp, parameter: documentId. In order for this vulnerability to be exploited, an attacker must authenticate to the application first. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42940/ - https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774 - http://seclists.org/
ploit-db.com/exploits/42940/ - https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774 - http://seclists.org/fulldisclosure/2017/Oct/23
CVE ID: CVE-2017-14759 State: PUBLISHED Published: 2017-10-02T17:00:00 Last Updated: 2024-08-05T19:34:39.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to an XML External Entity vulnerability: /xFramework/services/QuickDoc.QuickDocHttpSoap11Endpoint/. An unauthenticated user is able to read directory listings or system files, or cause SSRF or Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774 - http://seclists.org/fulldisclosure/2
References: - https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774 - http://seclists.org/fulldisclosure/2017/Sep/97
CVE ID: CVE-2017-14760 State: PUBLISHED Published: 2017-09-27T08:00:00 Last Updated: 2024-08-05T19:34:39.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in /includes/event-management/index.php in the event-espresso-free (aka Event Espresso Lite) plugin v3.1.37.12.L for WordPress via the recurrence_id parameter to /wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.sstrunk.com/cve/wp_event-espresso-free.html
CVE ID: CVE-2017-14761 State: PUBLISHED Published: 2017-09-27T08:00:00 Last Updated: 2024-08-05T19:34:40.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/
CVE ID: CVE-2017-14762 State: PUBLISHED Published: 2017-09-27T08:00:00 Last Updated: 2024-08-05T19:34:39.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/
CVE ID: CVE-2017-14763 State: PUBLISHED Published: 2017-09-27T08:00:00 Last Updated: 2024-08-05T19:34:39.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Install Themes page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a theme. Additional Analyst Notes: - CVE Program Container: References: - http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/
CVE ID: CVE-2017-14764 State: PUBLISHED Published: 2017-09-27T08:00:00 Last Updated: 2024-08-05T19:34:39.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module. Additional Analyst Notes: - CVE Program Container: References: - http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/
CVE ID: CVE-2017-14765 State: PUBLISHED Published: 2017-09-27T08:00:00 Last Updated: 2024-08-05T19:34:39.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request. Additional Analyst Notes: - CVE Program Container: References: - http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/
CVE ID: CVE-2017-14766 State: PUBLISHED Published: 2017-09-27T08:00:00 Last Updated: 2024-08-05T19:34:39.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Simple Student Result plugin before 1.6.4 for WordPress has an Authentication Bypass vulnerability because the fn_ssr_add_st_submit() function and fn_ssr_del_st_submit() function in functions.php only require knowing the student id number. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8920 - https://limbenjamin.com/articles/simple-student-result-auth-bypass.html - https://wordpress.org/plugins/simple-student-result/#developers
CVE ID: CVE-2017-14767 State: PUBLISHED Published: 2017-09-27T08:00:00 Last Updated: 2024-08-05T19:34:39.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sdp_parse_fmtp_config_h264 function in libavformat/rtpdec_h264.c in FFmpeg before 3.3.4 mishandles empty sprop-parameter-sets values, which allows remote attackers to cause a denial of service (heap buffer overflow) or possibly have unspecified other impact via a crafted sdp file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/c42a1388a6d1bfd8001bf6a4241d8ca27e49326d - http://www.securityfocus.com/bid/101019 - https://lists.debian.org/debian-lts-announce/2019/01/ms
f6a4241d8ca27e49326d - http://www.securityfocus.com/bid/101019 - https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html - http://www.debian.org/security/2017/dsa-3996
CVE ID: CVE-2017-14770 State: PUBLISHED Published: 2017-10-02T21:00:00 Last Updated: 2024-08-05T19:34:39.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skybox Manager Client Application prior to 8.5.501 is prone to an information disclosure vulnerability of user password hashes. A local authenticated attacker can access the password hashes in a debugger-pause state during the authentication process. Additional Analyst Notes: - CVE Program Container: References: - https://lp.skyboxsecurity.com/rs/440-MPQ-510/images/Skybox_Product_Security_Advisory_9_28_17.pdf - http://www.securityfocus.com/bid/101069
CVE ID: CVE-2017-14771 State: PUBLISHED Published: 2017-10-02T21:00:00 Last Updated: 2024-08-05T19:34:39.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skybox Manager Client Application prior to 8.5.501 is prone to an arbitrary file upload vulnerability due to insufficient input validation of user-supplied files path when uploading files via the application. During a debugger-pause state, a local authenticated attacker can upload an arbitrary file and overwrite existing files within the scope of the affected application. Additional Analyst Notes: - CVE Program Container: References: - https://lp.skyboxsecurity.com/rs/440-MPQ-510/images/Skybox_Product_Security_Advisory_9_28_1
ram Container: References: - https://lp.skyboxsecurity.com/rs/440-MPQ-510/images/Skybox_Product_Security_Advisory_9_28_17.pdf - http://www.securityfocus.com/bid/101069
CVE ID: CVE-2017-14772 State: PUBLISHED Published: 2017-10-02T21:00:00 Last Updated: 2024-08-05T19:34:39.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skybox Manager Client Application is prone to information disclosure via a username enumeration attack. A local unauthenticated attacker could exploit the flaw to obtain valid usernames, by analyzing error messages upon valid and invalid account login attempts. Additional Analyst Notes: - CVE Program Container: References: - https://lp.skyboxsecurity.com/rs/440-MPQ-510/images/Skybox_Product_Security_Advisory_9_28_17.pdf - http://www.securityfocus.com/bid/101069
CVE ID: CVE-2017-14773 State: PUBLISHED Published: 2017-10-02T21:00:00 Last Updated: 2024-08-05T19:34:39.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skybox Manager Client Application prior to 8.5.501 is prone to an elevation of privileges vulnerability during authentication of a valid user in a debugger-pause state. The vulnerability can only be exploited by a local authenticated attacker. Additional Analyst Notes: - CVE Program Container: References: - https://lp.skyboxsecurity.com/rs/440-MPQ-510/images/Skybox_Product_Security_Advisory_9_28_17.pdf - http://www.securityfocus.com/bid/101069
CVE ID: CVE-2017-14775 State: PUBLISHED Published: 2017-09-27T16:00:00Z Last Updated: 2024-09-17T01:56:34.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/laravel/framework/releases/tag/v5.5.10 - https://github.com/laravel/framework/pull/21320 - https://laravel-news.com/laravel-v5-5-11
CVE ID: CVE-2017-14776 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14777 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14778 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14779 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14780 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14781 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14782 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14783 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14784 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14785 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14786 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14787 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14788 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14789 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14790 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14791 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14792 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14793 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14794 State: REJECTED Published: 2018-05-22T20:00:00 Last Updated: 2018-05-22T19:57:01 Description: No description available.
CVE ID: CVE-2017-14795 State: PUBLISHED Published: 2017-09-27T17:00:00 Last Updated: 2024-08-05T19:34:39.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with hls_pcm_sample in hevc.c in libavcodec in FFmpeg and put_pcm_var in hevcdsp_template.c in libavcodec in FFmpeg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/leonzhao7/vulnerability/blob/master/An%20Out-of-Bounds%20Read%20%28DoS%29%20Vu
ntainer: References: - https://github.com/leonzhao7/vulnerability/blob/master/An%20Out-of-Bounds%20Read%20%28DoS%29%20Vulnerability%20in%20hevc.c%20of%20libbpg.md
CVE ID: CVE-2017-14796 State: PUBLISHED Published: 2017-09-27T17:00:00 Last Updated: 2024-08-05T19:34:39.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (integer underflow and application crash) or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with copy_CTB_to_hv in hevc_filter.c in libavcodec in FFmpeg and sao_filter_CTB in hevc_filter.c in libavcodec in FFmpeg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/leonzhao7/vulnerability/blob/master/An%20integer%20underflow%20vulnerabili
m Container: References: - https://github.com/leonzhao7/vulnerability/blob/master/An%20integer%20underflow%20vulnerability%20in%20sao_filter_CTB%20of%20libbpg.md
CVE ID: CVE-2017-14797 State: PUBLISHED Published: 2017-09-30T03:00:00 Last Updated: 2024-08-05T19:34:39.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lack of Transport Encryption in the public API in Philips Hue Bridge BSB002 SW 1707040932 allows remote attackers to read API keys (and consequently bypass the pushlink protection mechanism, and obtain complete control of the connected accessories) by leveraging the ability to sniff HTTP traffic on the local intranet network. Additional Analyst Notes: - CVE Program Container: References: - https://www.tiferrei.com/philips-we-need-to-talk
CVE ID: CVE-2017-14798 State: PUBLISHED Published: 2018-03-01T19:00:00Z Last Updated: 2024-09-16T19:20:37.635Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: suse Products: postgresql-init Problem Types: creation of directory could follow symlinks, CWE-61 Description: A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45184/ - https://bugzilla.suse.com/show_bug.cgi?id=1062722 - https://www.suse.com/de-de/security/cve/CVE-2017-14798/ - http://lists.suse.com/piperm
use.com/show_bug.cgi?id=1062722 - https://www.suse.com/de-de/security/cve/CVE-2017-14798/ - http://lists.suse.com/pipermail/sle-security-updates/2017-November/003420.html
CVE ID: CVE-2017-14799 State: PUBLISHED Published: 2018-03-01T19:00:00Z Last Updated: 2024-09-16T17:23:57.367Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: NetIQ Products: Access Manager Problem Types: cross site scripting attack in the login parameter handling due to incorrect quoting Description: A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be used to inject javascript code into the login page. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7022358
CVE ID: CVE-2017-14800 State: PUBLISHED Published: 2018-03-01T19:00:00Z Last Updated: 2024-09-16T20:31:45.697Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: NetIQ Products: Access Manager Problem Types: reflected cross site scripting attack Description: A reflected cross site scripting attack in the NetIQ Access Manager before 4.3.3 using the "typecontainerid" parameter of the policy editor could allowed code injection into pages of authenticated users. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7022356
CVE ID: CVE-2017-14801 State: PUBLISHED Published: 2018-03-02T20:00:00Z Last Updated: 2024-09-17T03:03:50.688Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: NetIQ Products: Access Manager Problem Types: Reflected cross site scripting, CWE-79 Description: Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7022357
CVE ID: CVE-2017-14802 State: PUBLISHED Published: 2018-03-02T20:00:00Z Last Updated: 2024-09-17T02:41:52.181Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: NetIQ Products: Access Manager Problem Types: redirect to untrusted sites, CWE-601 Description: Novell Access Manager Admin Console and IDP servers before 4.3.3 have a URL that could be used by remote attackers to trigger unvalidated redirects to third party sites. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7022360
CVE ID: CVE-2017-14803 State: PUBLISHED Published: 2018-01-20T00:00:00Z Last Updated: 2024-09-16T23:06:39.488Z Vendors: Micro Focus Products: NetIQ Access Manager Problem Types: Directory Traversal Information Disclosure Vulnerability Description: In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO connector plugins on IE11 where an attacker can execute arbitrary code on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7022443
CVE ID: CVE-2017-14804 State: PUBLISHED Published: 2018-03-01T19:00:00Z Last Updated: 2024-09-16T22:03:14.200Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: SUSE Products: build Problem Types: Insufficient pathname checking could use to bypass directory restrictions., CWE-22 Description: The build package before 20171128 did not check directory names during extraction of build results that allowed untrusted builds to write outside of the target system,allowing escape out of buildroots. Additional Analyst Notes: - CVE Program Container: References: - https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00024.html - https://lists.opensuse.org/o
References: - https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00024.html - https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00030.html - https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00025.html
CVE ID: CVE-2017-14806 State: PUBLISHED Published: 2020-01-27T09:45:15.863260Z Last Updated: 2024-09-16T16:48:59.649Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: SUSE Products: Studio onsite Problem Types: CWE-295 Description: A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version 1.3.17-56.6.3 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1
r versions. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1065397
CVE ID: CVE-2017-14807 State: PUBLISHED Published: 2020-01-27T09:45:16.257539Z Last Updated: 2024-09-17T02:27:16.714Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: SUSE Products: Studio onsite Problem Types: CWE-89 Description: An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in susestudio-ui-server of SUSE Studio onsite allows remote attackers with admin privileges in Studio to alter SQL statements, allowing for extraction and modification of data. This issue affects: SUSE Studio onsite susestudio-ui-server version 1.3.17-56.6.3 and prior versions. Additional Analyst Notes: - CVE Program Container: Refere
susestudio-ui-server version 1.3.17-56.6.3 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1065396
CVE ID: CVE-2017-14808 State: REJECTED Published: 2019-01-02T19:00:00 Last Updated: 2021-01-06T16:15:28 Description: No description available.
CVE ID: CVE-2017-14809 State: REJECTED Published: 2019-01-02T19:00:00 Last Updated: 2021-01-06T16:16:04 Description: No description available.
CVE ID: CVE-2017-14810 State: REJECTED Published: 2019-01-02T19:00:00 Last Updated: 2021-01-06T16:15:38 Description: No description available.
CVE ID: CVE-2017-14811 State: REJECTED Published: 2019-01-02T19:00:00 Last Updated: 2021-01-06T16:15:59 Description: No description available.
CVE ID: CVE-2017-14812 State: REJECTED Published: 2019-01-02T19:00:00 Last Updated: 2021-01-06T16:15:33 Description: No description available.
CVE ID: CVE-2017-14813 State: REJECTED Published: 2019-01-02T19:00:00 Last Updated: 2021-01-06T16:15:30 Description: No description available.
CVE ID: CVE-2017-14814 State: REJECTED Published: 2019-01-02T19:00:00 Last Updated: 2021-01-06T16:15:27 Description: No description available.
CVE ID: CVE-2017-14815 State: REJECTED Published: 2019-01-02T19:00:00 Last Updated: 2021-01-06T16:15:26 Description: No description available.
CVE ID: CVE-2017-14816 State: REJECTED Published: 2019-01-02T19:00:00 Last Updated: 2021-01-06T16:15:58 Description: No description available.
CVE ID: CVE-2017-14817 State: REJECTED Published: 2019-01-02T19:00:00 Last Updated: 2021-01-06T16:15:31 Description: No description available.
CVE ID: CVE-2017-14818 State: PUBLISHED Published: 2017-12-20T14:00:00 Last Updated: 2024-08-05T19:34:40.146Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPEG2000 images embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in con