Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-3193 State: PUBLISHED Published: 2017-12-15T14:00:00 Last Updated: 2024-08-05T14:16:28.328Z Vendors: D-Link Products: DIR-850L and potentially others Problem Types: CWE-121 Description: Multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 contain a stack-based buffer overflow vulnerability in the web administration interface HNAP service. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/305448 - https://twitter.com/NCCGroupInfosec/status/845269159277723649 - https://www.nccgroup.trust/uk/our-research/d-link-dir-850l-web-admin-interface-vulnerable-to-stack-based-buffer-overflow/?research=Technica
p.trust/uk/our-research/d-link-dir-850l-web-admin-interface-vulnerable-to-stack-based-buffer-overflow/?research=Technical+advisories - http://www.securityfocus.com/bid/96747 - https://tools.cisco.com/security/center/viewAlert.x?alertId=52967
CVE ID: CVE-2017-3194 State: PUBLISHED Published: 2017-12-15T14:00:00 Last Updated: 2024-08-05T14:16:28.250Z Vendors: Pandora Media, Inc. Products: Pandora iOS App Problem Types: CWE-295 Description: Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/342303 - https://exchange.xforce.ibmcloud.com/collection/XFTAS-Daily-Threat-Assessment-for-March-29-2017-0d704f6eb8163d995bbaf57bbf35a018 - http://www.securityfocus.com/bid/97158 - https://www.scmagazine.com/pandora
h-29-2017-0d704f6eb8163d995bbaf57bbf35a018 - http://www.securityfocus.com/bid/97158 - https://www.scmagazine.com/pandora-apple-app-vulnerable-to-mitm-attacks/article/647106/
CVE ID: CVE-2017-3195 State: PUBLISHED Published: 2017-12-15T14:00:00 Last Updated: 2024-08-05T14:16:28.351Z Vendors: Commvault Products: Service Pack 6 Problem Types: CWE-121 Description: Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflow vulnerability that could lead to arbitrary code execution with administrative privileges. Additional Analyst Notes: - CVE Program Container: References: - http://kb.commvault.com/article/SEC0013 - http://redr2e.com/commvault-edge-cve-2017-3195/ - https://www.exploit-db.com/exploits/41823/ - https://www.kb.cert.org/vuls/id/214283 - http://www.securityfocus.com/bid/96
ttps://www.exploit-db.com/exploits/41823/ - https://www.kb.cert.org/vuls/id/214283 - http://www.securityfocus.com/bid/96941
CVE ID: CVE-2017-3196 State: PUBLISHED Published: 2017-12-15T14:00:00 Last Updated: 2024-08-05T14:16:28.231Z Vendors: Printing Communications Assoc., Inc. (PCAUSA) Products: ASUS PCE-AC56 WLAN Card Utilities Problem Types: CWE-119 Description: PCAUSA Rawether framework does not properly validate BPF data, allowing a crafted malicious BPF program to perform operations on memory outside of its typical bounds on the driver's receipt of network packets. Local attackers can exploit this issue to execute arbitrary code with SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - http://blog.rewolf.pl/blog/?p=1778 - https://www.itsecuritynews.info/vuln-printing-communica
am Container: References: - http://blog.rewolf.pl/blog/?p=1778 - https://www.itsecuritynews.info/vuln-printing-communications-association-rawether-cve-2017-3196-local-privilege-escalation-vulnerability/ - https://www.kb.cert.org/vuls/id/600671 - http://www.securityfocus.com/bid/96993/discuss
CVE ID: CVE-2017-3197 State: PUBLISHED Published: 2018-07-09T19:00:00 Last Updated: 2024-08-05T14:16:28.250Z Vendors: GIGABYTE Products: GB-BSi7H-6500, GB-BXi7-5775 Problem Types: CWE-693 Description: GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-001.md - https://github.com/CylanceVulnResearch/disclosures/blob/master/C
nResearch/disclosures/blob/master/CLVA-2017-01-001.md - https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-002.md - https://www.kb.cert.org/vuls/id/507496 - http://www.securityfocus.com/bid/97294 - https://www.cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.html
CVE ID: CVE-2017-3198 State: PUBLISHED Published: 2018-07-09T19:00:00 Last Updated: 2024-08-05T14:16:28.250Z Vendors: GIGABYTE Products: GB-BSi7H-6500, GB-BXi7-5775 Problem Types: CWE-345 Description: GIGABYTE BRIX UEFI firmware does not cryptographically validate images prior to updating the system firmware. Additionally, the firmware updates are served over HTTP. An attacker can make arbitrary modifications to firmware images without being detected. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/507496 - http://www.securityfocus.com/bid/97294 - https://www.cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.html
CVE ID: CVE-2017-3199 State: PUBLISHED Published: 2018-06-11T17:00:00 Last Updated: 2024-08-05T14:16:28.247Z Vendors: GraniteDS Products: Framework Problem Types: CWE-502 Description: The Java implementation of GraniteDS, version 3.1.1.GA, AMF3 deserializers derives class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97382 - https://codewhitesec.blogspo
lyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97382 - https://codewhitesec.blogspot.com/2017/04/amf.html - https://www.kb.cert.org/vuls/id/307983 - http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution
CVE ID: CVE-2017-3200 State: PUBLISHED Published: 2018-06-11T17:00:00 Last Updated: 2024-08-05T14:16:28.479Z Vendors: GraniteDS Products: Framework Problem Types: CWE-913 Description: The Java implementation of AMF3 deserializers used in GraniteDS, version 3.1.1.G, may allow instantiation of arbitrary classes via their public parameter-less constructor and subsequently call arbitrary Java Beans setter methods. The ability to exploit this vulnerability depends on the availability of classes in the class path that make use of deserialization. A remote attacker with the ability to spoof or control information may be able to send serialized Java objects with pre-set properties that result in arb
y to spoof or control information may be able to send serialized Java objects with pre-set properties that result in arbitrary code execution when deserialized. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97382 - https://codewhitesec.blogspot.com/2017/04/amf.html - https://www.kb.cert.org/vuls/id/307983 - http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution
CVE ID: CVE-2017-3201 State: PUBLISHED Published: 2018-06-11T17:00:00 Last Updated: 2024-08-05T14:16:28.344Z Vendors: Exadel Products: Flamingo amf-serializer Problem Types: CWE-502 Description: The Java implementation of AMF3 deserializers used in Flamingo amf-serializer by Exadel, version 2.2.0 derives class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized. Additional Analyst Notes: - CVE Program Container: References: - https://codewhitesec.blogspot.
code when deserialized. Additional Analyst Notes: - CVE Program Container: References: - https://codewhitesec.blogspot.com/2017/04/amf.html - https://www.kb.cert.org/vuls/id/307983 - http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution - http://www.securityfocus.com/bid/97380
CVE ID: CVE-2017-3202 State: PUBLISHED Published: 2018-06-11T17:00:00 Last Updated: 2024-08-05T14:16:28.241Z Vendors: Exadel Products: Flamingo amf-serializer Problem Types: CWE-913 Description: The Java implementation of AMF3 deserializers used in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instantiation of arbitrary classes via their public parameter-less constructor and subsequently call arbitrary Java Beans setter methods. The ability to exploit this vulnerability depends on the availability of classes in the class path that make use of deserialization. A remote attacker with the ability to spoof or control information may be able to send serialized Java objects with pre-
A remote attacker with the ability to spoof or control information may be able to send serialized Java objects with pre-set properties that result in arbitrary code execution when deserialized. Additional Analyst Notes: - CVE Program Container: References: - https://codewhitesec.blogspot.com/2017/04/amf.html - https://www.kb.cert.org/vuls/id/307983 - http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution - http://www.securityfocus.com/bid/97380
CVE ID: CVE-2017-3203 State: PUBLISHED Published: 2018-06-11T17:00:00 Last Updated: 2024-08-05T14:16:28.225Z Vendors: Pivotal/Spring Products: Spring-flex Problem Types: CWE-502 Description: The Java implementations of AMF3 deserializers in Pivotal/Spring Spring-flex derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized. Additional Analyst Notes: - CVE Program Container: References: - https://codewhitesec.blogspot.com/2017/04/amf.html - https://
onal Analyst Notes: - CVE Program Container: References: - https://codewhitesec.blogspot.com/2017/04/amf.html - https://www.kb.cert.org/vuls/id/307983 - http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution - https://www.securityfocus.com/bid/97376
CVE ID: CVE-2017-3204 State: PUBLISHED Published: 2017-04-04T14:00:00 Last Updated: 2024-08-05T14:16:28.305Z Vendors: Go Products: SSH library Problem Types: CWE-310 Description: The Go SSH library (x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks. Default behavior changed in commit e4e2799 to require explicitly registering a hostkey verification mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://godoc.org/golang.org/x/crypto/ssh - https://github.com/golang/go/issues/19767 - https://bridge.grumpy-troll.org/2017/04/golang-ssh-security/ - https://github.com/golang/crypto/commit/e4e2799dd7aab89f583e1d898300d96367750991 -
ll.org/2017/04/golang-ssh-security/ - https://github.com/golang/crypto/commit/e4e2799dd7aab89f583e1d898300d96367750991 - http://www.securityfocus.com/bid/97481
CVE ID: CVE-2017-3206 State: PUBLISHED Published: 2018-06-11T17:00:00 Last Updated: 2024-08-05T14:16:28.245Z Vendors: Exadel Products: Flamingo amf-serializer Problem Types: CWE-611 Description: The Java implementation of AMF3 deserializers used by Flamingo amf-serializer by Exadel, version 2.2.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages. If the XML parsing is handled incorrectly it could potentially expose sensitive data on the server, denial of service, or server side request forgery. Additional Analyst Notes: - CVE Program Container: References: - https://codewhitesec.blogspot.com/2017/04/amf.html - https://www.kb.cert.org/vuls/id/307983 -
Container: References: - https://codewhitesec.blogspot.com/2017/04/amf.html - https://www.kb.cert.org/vuls/id/307983 - http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution - http://www.securityfocus.com/bid/97380
CVE ID: CVE-2017-3207 State: PUBLISHED Published: 2018-06-11T17:00:00 Last Updated: 2024-08-05T14:16:28.311Z Vendors: Midnight Coders Products: WebORB for Java Problem Types: CWE-502 Description: The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized. Additional Analyst Notes: - CVE Program Container: References: - https://codewhitesec.blogspot.
code when deserialized. Additional Analyst Notes: - CVE Program Container: References: - https://codewhitesec.blogspot.com/2017/04/amf.html - https://www.kb.cert.org/vuls/id/307983 - http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution - http://www.securityfocus.com/bid/97384
CVE ID: CVE-2017-3208 State: PUBLISHED Published: 2018-06-11T17:00:00 Last Updated: 2024-08-05T14:16:28.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages. If the XML parsing is handled incorrectly it could potentially expose sensitive data on the server, denial of service, or server side request forgery. Additional Analyst Notes: - CVE Program Container: References: - https://codewhitesec.blogspot.com/2017/04/amf.html - https://www.kb.cert.org/vuls/id/307983 - http://www.securityweek.
- https://codewhitesec.blogspot.com/2017/04/amf.html - https://www.kb.cert.org/vuls/id/307983 - http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution - http://www.securityfocus.com/bid/97384
CVE ID: CVE-2017-3209 State: PUBLISHED Published: 2018-07-24T15:00:00 Last Updated: 2024-08-05T14:16:28.416Z Vendors: DBPOWER Products: U818A WiFi Quadcopter Drone Problem Types: CWE-276 Description: The DBPOWER U818A WIFI quadcopter drone provides FTP access over its own local access point, and allows full file permissions to the anonymous user. The DBPower U818A WIFI quadcopter drone runs an FTP server that by default allows anonymous access without a password, and provides full filesystem read/write permissions to the anonymous user. A remote user within range of the open access point on the drone may utilize the anonymous user of the FTP server to read arbitrary files, such as images and
n access point on the drone may utilize the anonymous user of the FTP server to read arbitrary files, such as images and video recorded by the device, or to replace system files such as /etc/shadow to gain further access to the device. Furthermore, the DBPOWER U818A WIFI quadcopter drone uses BusyBox 1.20.2, which was released in 2012, and may be vulnerable to other known BusyBox vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/97564 - https://www.kb.cert.org/vuls/id/334207 - https://dl.acm.org/citation.cfm?id=3139943
CVE ID: CVE-2017-3210 State: PUBLISHED Published: 2018-07-24T15:00:00 Last Updated: 2024-08-05T14:16:28.262Z Vendors: Portrait Display Products: SDK Problem Types: CWE-276 Description: Applications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations which allow arbitrary code execution. A number of applications developed using the Portrait Displays SDK do not use secure permissions when running. These applications run the component pdiservice.exe with NT AUTHORITY/SYSTEM permissions. This component is also read/writable by all Authenticated Users. This allows local authenticated attackers to run arbitrary code with SYSTEM privileges. The f
y all Authenticated Users. This allows local authenticated attackers to run arbitrary code with SYSTEM privileges. The following applications have been identified by Portrait Displays as affected: Fujitsu DisplayView Click: Version 6.0 and 6.01. The issue was fixed in Version 6.3. Fujitsu DisplayView Click Suite: Version 5. The issue is addressed by patch in Version 5.9. HP Display Assistant: Version 2.1. The issue was fixed in Version 2.11. HP My Display: Version 2.0. The issue was fixed in Version 2.1. Philips Smart Control Premium: Versions 2.23, 2.25. The issue was fixed in Version 2.26. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/98
d in Version 2.26. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/98006 - https://www.kb.cert.org/vuls/id/219739
CVE ID: CVE-2017-3211 State: PUBLISHED Published: 2020-01-15T17:05:26.627530Z Last Updated: 2024-09-17T03:12:29.706Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Centire Products: Yopify Problem Types: CWE-213 Description: Yopify, an e-commerce notification plugin, up to April 06, 2017, leaks the first name, last initial, city, and recent purchase data of customers, all without user authorization. Additional Analyst Notes: - CVE Program Container: References: - https://blog.rapid7.com/2017/05/31/r7-2017-05-centire-yopify-information-disclosure-cve-2017-3211/
CVE ID: CVE-2017-3212 State: PUBLISHED Published: 2017-05-05T07:04:00 Last Updated: 2024-08-05T14:16:28.244Z Vendors: n/a Products: Space Coast Credit Union Mobile Problem Types: lack of X.509 certificate validation Description: The Space Coast Credit Union Mobile app 2.2 for iOS and 2.1.0.1104 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/556600 - http://www.securityfocus.com/bid/98307 - https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vuln
0 - http://www.securityfocus.com/bid/98307 - https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f
CVE ID: CVE-2017-3213 State: PUBLISHED Published: 2017-05-05T07:04:00 Last Updated: 2024-08-05T14:16:28.486Z Vendors: n/a Products: Think Mutual Bank Mobile Banking Problem Types: lack of X.509 certificate validation Description: The Think Mutual Bank Mobile Banking app 3.1.5 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f - http://www.securityfocus.com/bid/9830
s-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f - http://www.securityfocus.com/bid/98308 - http://www.kb.cert.org/vuls/id/276408
CVE ID: CVE-2017-3214 State: PUBLISHED Published: 2017-06-20T00:00:00 Last Updated: 2024-08-05T14:16:28.243Z Vendors: Milwaukee Tool Products: ONE-KEY Problem Types: CWE-312 Description: The Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk binary. Additional Analyst Notes: - CVE Program Container: References: - https://duo.com/blog/bug-hunting-drilling-into-the-internet-of-things-iot
CVE ID: CVE-2017-3215 State: PUBLISHED Published: 2017-06-20T00:00:00 Last Updated: 2024-08-05T14:16:28.255Z Vendors: Milwaukee Tool Products: ONE-KEY Problem Types: CWE-613 Description: The Milwaukee ONE-KEY Android mobile application uses bearer tokens with an expiration of one year. This bearer token, in combination with a user_id can be used to perform user actions. Additional Analyst Notes: - CVE Program Container: References: - https://duo.com/blog/bug-hunting-drilling-into-the-internet-of-things-iot
CVE ID: CVE-2017-3216 State: PUBLISHED Published: 2017-06-20T00:00:00 Last Updated: 2024-08-05T14:16:28.271Z Vendors: Huawei Technologies, Green Packet, ZTE, ZyXEL, MADA Products: BM2022, HES-309M, HES-319M, HES-319M2W, HES-339M, OX350, OX-330P, MAX218M, MAX218M1W, MAX218MW, MAX308M, MAX318M, MAX338M, Soho Wireless Router Problem Types: CWE-306 Description: WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to gain administrator access to the device by performing an administrator password change on the device via a crafted POST request. Additional Analyst Notes: - CVE Program C
ing an administrator password change on the device via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - http://blog.sec-consult.com/2017/06/ghosts-from-past-authentication-bypass.html - https://sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170607-0_Various_WiMAX_CPEs_Authentication_Bypass_v10.txt - http://www.kb.cert.org/vuls/id/350135
CVE ID: CVE-2017-3217 State: PUBLISHED Published: 2018-07-24T15:00:00 Last Updated: 2024-08-05T14:16:28.327Z Vendors: CalAmp Products: LMU 3030 OBD-II Problem Types: CWE-306 Description: CalAmp LMU 3030 series OBD-II CDMA and GSM devices has an SMS (text message) interface that can be deployed where no password is configured for this interface by the integrator / reseller. This interface must be password protected, otherwise, the attacker only needs to know the phone number of the device (via an IMSI Catcher, for example) to send administrative commands to the device. These commands can be used to provide ongoing, real-time access to the device and can configure parameters such as IP address
commands can be used to provide ongoing, real-time access to the device and can configure parameters such as IP addresses, firewall rules, and passwords. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/98964 - https://www.kb.cert.org/vuls/id/251927
CVE ID: CVE-2017-3218 State: PUBLISHED Published: 2017-06-21T20:00:00 Last Updated: 2024-08-05T14:16:28.240Z Vendors: Samsung Products: Magician Problem Types: CWE-295, CWE-311 Description: Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung Magician uses HTTP for software updates. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99081 - https://www.kb.cert.org/vuls/id/846320
CVE ID: CVE-2017-3219 State: PUBLISHED Published: 2017-06-21T20:00:00 Last Updated: 2024-08-05T14:16:28.231Z Vendors: Acronis Products: True Image Problem Types: CWE-311 Description: Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP. Downloaded updates are only verified using a server-provided MD5 hash. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99128 - https://www.kb.cert.org/vuls/id/489392
CVE ID: CVE-2017-3221 State: PUBLISHED Published: 2017-07-22T20:00:00 Last Updated: 2024-08-05T14:16:28.273Z Vendors: Inmarsat Products: AmosConnect Problem Types: CWE-89 Description: Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/ - http://www.securityfocus.com/bid/99899 - https://twitter.com/mkolsek/status/923988845783322625 - https://www.kb.cert.org/vuls/id/586501