Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-15842 State: PUBLISHED Published: 2018-06-12T20:00:00Z Last Updated: 2024-09-17T00:26:03.948Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Audio. Description: Buffer might get used after it gets freed due to unlocking the mutex before freeing the buffer in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE ID: CVE-2017-15843 State: PUBLISHED Published: 2018-06-12T20:00:00Z Last Updated: 2024-09-17T01:41:04.754Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Double Free in msm_bus_floor_vote_context() Description: Due to a race condition in a bus driver, a double free in msm_bus_floor_vote_context() can potentially occur in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE ID: CVE-2017-15844 State: PUBLISHED Published: 2018-09-18T18:00:00 Last Updated: 2024-08-05T20:04:50.351Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Over-read in Boot Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the function for writing device values into flash, uninitialized memory can be written to flash. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=19622514c69e798d91e7908090b3d79dfdb14715 - https://www.codeaurora.org/security-bulletin/2018/09/04/september
/commit/?id=19622514c69e798d91e7908090b3d79dfdb14715 - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE ID: CVE-2017-15845 State: PUBLISHED Published: 2018-01-10T22:00:00Z Last Updated: 2024-09-16T16:43:42.250Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Integer Underflow in WLAN Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an invalid input of firmware size (negative value) from user space can potentially lead to the memory leak or buffer overflow during the WLAN cal data store operation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-01-01
CVE ID: CVE-2017-15846 State: PUBLISHED Published: 2018-03-30T21:00:00Z Last Updated: 2024-09-17T00:21:35.665Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Untrusted Pointer Dereference in Camera Description: In the video_ioctl2() function in the camera driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-09-16, an untrusted pointer dereference may potentially occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=9fdbd92ec9196ba3629f68f4c22342aa6eedc960 - https://source.android.com/security/bulletin/pixel/2018-02-01
CVE ID: CVE-2017-15847 State: PUBLISHED Published: 2018-01-10T22:00:00Z Last Updated: 2024-09-16T16:13:43.584Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Time-of-check Time-of-use (TOCTOU) Race Condition in Core Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the SPCom kernel driver, a race condition exists when creating a channel. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-01-01
CVE ID: CVE-2017-15848 State: PUBLISHED Published: 2018-01-10T22:00:00Z Last Updated: 2024-09-16T17:03:27.061Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy Without Checking Size of Input ("Classic Buffer Overflow") in Multimedia Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the fastrpc kernel driver, a buffer overflow vulnerability from userspace may potentially exist. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-01-01
CVE ID: CVE-2017-15849 State: PUBLISHED Published: 2018-01-10T19:00:00Z Last Updated: 2024-09-17T02:52:16.811Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Display Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a LayerStack can be destroyed in between Validate and Commit by the application resulting in a Use After Free condition. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-01-01 - http://www.securityfocus.com/bid/102413 - http://www.securitytracker.com/id/1040106
CVE ID: CVE-2017-15850 State: PUBLISHED Published: 2018-01-10T22:00:00Z Last Updated: 2024-09-16T23:20:46.121Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Information Exposure in Audio Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, userspace can read values from audio codec registers. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-01-01
CVE ID: CVE-2017-15851 State: PUBLISHED Published: 2018-07-06T19:00:00Z Last Updated: 2024-09-17T02:57:07.210Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Input Validation in Automotive Multimedia Description: Lack of copy_from_user and information leak in function "msm_ois_subdev_do_ioctl, file msm_ois.c can lead to a camera crash in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-07-01#qualcomm-components - https://www.vulnerabilitycenter.com/#%21vul=8735
ce.android.com/security/bulletin/pixel/2018-07-01#qualcomm-components - https://www.vulnerabilitycenter.com/#%21vul=87351
CVE ID: CVE-2017-15852 State: PUBLISHED Published: 2018-03-30T21:00:00Z Last Updated: 2024-09-17T00:46:31.271Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Information Exposure in Camera Description: Information leak of the ISPIF base address in Android for MSM, Firefox OS for MSM, and QRD Android can occur in the camera driver. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-02-01
CVE ID: CVE-2017-15853 State: PUBLISHED Published: 2018-04-03T17:00:00Z Last Updated: 2024-09-17T00:52:23.244Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Over-read in WLAN Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing PTT commands, ptt_sock_send_msg_to_app() is invoked without validating the packet length. If the packet length is invalid, then a buffer over-read can occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel
cur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2017-15854 State: PUBLISHED Published: 2018-06-12T20:00:00Z Last Updated: 2024-09-17T02:11:43.560Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Interger Overflow to Buffer Overflow in WLAN Description: The value of fix_param->num_chans is received from firmware and if it is too large, an integer overflow can occur in wma_radio_chan_stats_event_handler() for the derived length len leading to a subsequent buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bul
e Linux Kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE ID: CVE-2017-15855 State: PUBLISHED Published: 2018-05-17T22:00:00Z Last Updated: 2024-09-17T03:13:51.389Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in Camera Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, the camera application triggers "user-memory-access" issue as the Camera CPP module Linux driver directly accesses the application provided buffer, which resides in user space. An unchecked userspace value (ioctl_ptr->len) is used to copy contents to a kernel bu
ffer, which resides in user space. An unchecked userspace value (ioctl_ptr->len) is used to copy contents to a kernel buffer which can lead to kernel buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/03/29/march-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2017-15856 State: PUBLISHED Published: 2018-07-06T17:00:00Z Last Updated: 2024-09-16T23:11:51.559Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Double Free in WLAN Description: Due to a race condition while processing the power stats debug file to read status, a double free condition can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.android.com/securit
codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=ed02c0ccd6f7461a69d64903738372eaf21babcd
CVE ID: CVE-2017-15857 State: PUBLISHED Published: 2018-06-12T20:00:00 Last Updated: 2024-08-05T20:04:50.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the camera driver, an out-of-bounds access can occur due to an error in copying region params from user space in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE ID: CVE-2017-15859 State: PUBLISHED Published: 2018-03-30T21:00:00Z Last Updated: 2024-09-17T00:42:38.582Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy without Checking Size of Input in WLAN Description: While processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB vendor command, in which attribute QCA_WLAN_VENDOR_ATTR_TXPOWER_SCALE_DECR_DB contains fewer than 1 byte, in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-08-11 a buffer overrun occurs. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-02-01 - https://source.codea
VE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-02-01 - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=88dcc44ea8fbe158d1dee3ea197e47794bf4449d
CVE ID: CVE-2017-15860 State: PUBLISHED Published: 2018-02-23T23:00:00Z Last Updated: 2024-09-16T19:20:58.906Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Stack-based Buffer Overflow in WLAN Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing an encrypted authentication management frame, a stack buffer overflow may potentially occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-02-01
CVE ID: CVE-2017-15861 State: PUBLISHED Published: 2018-02-23T23:00:00Z Last Updated: 2024-09-16T20:02:57.610Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Input Validation Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wma_roam_synch_event_handler, vdev_id is received from firmware and used to access an array without validation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-02-01
CVE ID: CVE-2017-15862 State: PUBLISHED Published: 2018-02-23T23:00:00Z Last Updated: 2024-09-17T01:06:58.897Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Integer Overflow to Buffer Overflow in WLAN Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in wma_unified_link_radio_stats_event_handler(), the number of radio channels coming from firmware is not properly validated, potentially leading to an integer overflow vulnerability followed by a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-02-01
CVE ID: CVE-2017-15863 State: PUBLISHED Published: 2017-10-24T18:00:00Z Last Updated: 2024-09-16T19:20:53.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.openwall.net/full-disclosure/2017/06/02/3 - https://wordpress.org/plugins/wp-noexternallinks/#developers
CVE ID: CVE-2017-15864 State: PUBLISHED Published: 2017-11-16T15:00:00 Last Updated: 2024-08-05T20:04:50.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4047 - https://www.otrs.com/security-advisory-2017-06-security-update-otrs-3-3/ - https://lists.debian.org/debian-lts-announce/2017/12/msg00015.html
CVE ID: CVE-2017-15865 State: PUBLISHED Published: 2017-11-08T20:00:00 Last Updated: 2024-08-05T20:04:50.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes because of a mishandled attribute length, aka RN-690 (CM-18492). Additional Analyst Notes: - CVE Program Container: References: - https://lists.cumulusnetworks.com/pipermail/cumulus-security-announce/2017-November/000009.html - http
er: References: - https://lists.cumulusnetworks.com/pipermail/cumulus-security-announce/2017-November/000009.html - https://support.cumulusnetworks.com/hc/en-us/articles/115014778107-CVE-2017-15865-Malformed-BGP-UPDATE-Triggers-Information-Disclosure - https://frrouting.org/community/security.html - http://www.securityfocus.com/bid/101794 - https://support.cumulusnetworks.com/hc/en-us/articles/115014754307#rn690
CVE ID: CVE-2017-15867 State: PUBLISHED Published: 2017-10-24T19:00:00 Last Updated: 2024-08-05T20:04:50.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the user-login-history plugin through 1.5.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) date_from, (2) date_to, (3) user_id, (4) username, (5) country_name, (6) browser, (7) operating_system, or (8) ip_address parameter to admin/partials/listing/listing.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/faiyazalam/WordPress-plugin-user-login-history/commit/519341a7dece59e2c589b908a636e6cf12a
ferences: - https://github.com/faiyazalam/WordPress-plugin-user-login-history/commit/519341a7dece59e2c589b908a636e6cf12a61741 - https://wpvulndb.com/vulnerabilities/8939
CVE ID: CVE-2017-15868 State: PUBLISHED Published: 2017-12-05T23:00:00 Last Updated: 2024-08-05T20:04:50.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bnep_add_connection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2cap socket is available, which allows local users to gain privileges via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4082 - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=71bb99a02b32b4cc4265118e85f6035ca72923f0 - https://usn.ubun
rnel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=71bb99a02b32b4cc4265118e85f6035ca72923f0 - https://usn.ubuntu.com/3583-2/ - http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html - https://usn.ubuntu.com/3583-1/ - https://source.android.com/security/bulletin/pixel/2017-12-01 - https://patchwork.kernel.org/patch/9882449/ - https://github.com/torvalds/linux/commit/71bb99a02b32b4cc4265118e85f6035ca72923f0 - http://www.securityfocus.com/bid/102084
CVE ID: CVE-2017-15869 State: PUBLISHED Published: 2018-01-18T14:00:00 Last Updated: 2024-08-05T20:04:50.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows remote attackers to inject arbitrary web script or HTML via the search-for parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/541688/100/0/threaded - https://www.livezilla.net/changelog/en/ - https://www.pallas.com/advisories/cve-2017-15869-livezilla-xss-knowledgebase
CVE ID: CVE-2017-15870 State: PUBLISHED Published: 2017-12-11T17:00:00 Last Updated: 2024-08-05T20:04:50.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on the local station to gain SYSTEM privileges via vectors involving "image path execution hijacking." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102083 - https://security.paloaltonetworks.com/CVE-2017-15870
CVE ID: CVE-2017-15871 State: PUBLISHED Published: 2017-10-24T20:00:00 Last Updated: 2024-08-05T20:04:50.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: The deserialize function in serialize-to-js through 1.1.1 allows attackers to cause a denial of service via vectors involving an Immediately Invoked Function Expression "function()" substring, as demonstrated by a "function(){console.log(" call or a simple infinite loop. NOTE: the vendor agrees that denial of service can occur but notes that deserialize is explicitly listed as "harmful" within the README.md file Additional Analyst Notes: - CVE Program Container: References: - https://kay-malwarebenchmark.github.io/blog/cve-20
file Additional Analyst Notes: - CVE Program Container: References: - https://kay-malwarebenchmark.github.io/blog/cve-2017-15871-dos-through-iife/ - https://github.com/commenthol/serialize-to-js/issues/3
CVE ID: CVE-2017-15872 State: PUBLISHED Published: 2017-10-24T20:00:00Z Last Updated: 2024-09-16T16:38:00.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpwcms 1.8.9 has XSS in include/inc_tmpl/admin.edituser.tmpl.php and include/inc_tmpl/admin.newuser.tmpl.php via the username (aka new_login) field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slackero/phpwcms/commit/90ee94a474b37919161f8112f9e36c53ad70492f - https://github.com/slackero/phpwcms/commit/62c7c4a7a7de5effa0a82c89e77e53795a82e11d
CVE ID: CVE-2017-15873 State: PUBLISHED Published: 2017-10-24T20:00:00.000Z Last Updated: 2025-06-09T15:27:22.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.busybox.net/busybox/commit/?id=0402cb32df015d9372578e3db27db47b33d5c7b0 - https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html - https://bugs.busybox.net/show_bug.cgi?id=10431 - https://usn.ubuntu.com/3935-1/ - https://lists.debian.org/debian-lts-announ
s://bugs.busybox.net/show_bug.cgi?id=10431 - https://usn.ubuntu.com/3935-1/ - https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html
CVE ID: CVE-2017-15874 State: PUBLISHED Published: 2017-10-24T20:00:00.000Z Last Updated: 2025-06-09T15:24:50.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.busybox.net/show_bug.cgi?id=10436
CVE ID: CVE-2017-15875 State: PUBLISHED Published: 2017-12-18T17:00:00 Last Updated: 2024-08-05T20:04:50.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to execute arbitrary SQL commands via the "checkemail" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.augustopereira.com.br/blog/seguranca-gpweb-8-4-61-multiplas-falhas-sqli-manipulacao-de-privilegios-uploads-sem-restricoes-exposicao-de-informacao-sensivel
CVE ID: CVE-2017-15876 State: PUBLISHED Published: 2017-12-18T17:00:00 Last Updated: 2024-08-05T20:04:50.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted File Upload vulnerability in GPWeb 8.4.61 allows remote authenticated users to upload any type of file, including a PHP shell. Additional Analyst Notes: - CVE Program Container: References: - https://www.augustopereira.com.br/blog/seguranca-gpweb-8-4-61-multiplas-falhas-sqli-manipulacao-de-privilegios-uploads-sem-restricoes-exposicao-de-informacao-sensivel
CVE ID: CVE-2017-15877 State: PUBLISHED Published: 2017-12-18T17:00:00 Last Updated: 2024-08-05T20:04:50.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers to view the password and user database. Additional Analyst Notes: - CVE Program Container: References: - https://www.augustopereira.com.br/blog/seguranca-gpweb-8-4-61-multiplas-falhas-sqli-manipulacao-de-privilegios-uploads-sem-restricoes-exposicao-de-informacao-sensivel