Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-15345 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T19:50:16.684Z Vendors: Huawei Technologies Co., Ltd. Products: LON-L29D Problem Types: DoS Description: Huawei Smartphones with software LON-L29DC721B186 have a denial of service vulnerability. An attacker could make an loop exit condition that cannot be reached by sending the crafted 3GPP message. Successful exploit could cause the device to reboot. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-smartphone-en
CVE ID: CVE-2017-15346 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T19:50:16.560Z Vendors: Huawei Technologies Co., Ltd. Products: S12700, S1700,S3700,S5700,S6700,S7700, S9700, eCNS210_TD Problem Types: DoS Description: XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S6700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005C02, V200R008C00, V200R009C00, V200R010C00,S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C
CVE ID: CVE-2017-15347 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T19:50:16.674Z Vendors: Huawei Technologies Co., Ltd. Products: Mate 9 Pro Problem Types: UAF Description: Huawei Mate 9 Pro mobile phones with software of versions earlier than LON-AL00BC00B235 have a use after free (UAF) vulnerability. An attacker tricks a user into installing a malicious application, and the application can riggers access memory after free it. A local attacker may exploit this vulnerability to cause the mobile phone to crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-phone-en
CVE ID: CVE-2017-15348 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T19:50:16.590Z Vendors: Huawei Technologies Co., Ltd. Products: IPS Module,NGFW Module,NIP6300,NIP6600,Secospace USG6300,Secospace USG6500,Secospace USG6600,USG9500, Problem Types: Insufficient Input Validation Description: Huawei IPS Module V500R001C00, NGFW Module V500R001C00, NIP6300 V500R001C00, NIP6600 V500R001C00, Secospace USG6300 V500R001C00, Secospace USG6500 V500R001C00, Secospace USG6600 V500R001C00, USG9500 V500R001C00 have an insufficient input validation vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to ins
y. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-routers-en
CVE ID: CVE-2017-15349 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T19:50:16.501Z Vendors: Huawei Technologies Co., Ltd. Products: CloudEngine 12800,CloudEngine 5800,CloudEngine 6800,CloudEngine 7800, Problem Types: memory leak Description: Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 6800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 7800 V100R003C00, V100R005C00, V100R005C10, V100R006C00 have a memory leak vulnerability. An unauthenticated attacker may send specific Resource ReServation Protocol (RSVP) packets to the affected products.
y. An unauthenticated attacker may send specific Resource ReServation Protocol (RSVP) packets to the affected products. Due to not release the memory to handle the packets, successful exploit will result in memory leak of the affected products and lead to a DoS condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-router-en
CVE ID: CVE-2017-15350 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T19:57:25.468Z Vendors: Huawei Technologies Co., Ltd. Products: DP300,IPS Module,NGFW Module,NIP6300,NIP6600,NIP6800,RP200,SVN5600,SVN5800,SVN5800-C,Secospace USG6300,Secospace USG6500,Secospace USG6600,TE30,TE40,TE50,TE60,TP3206,USG9500, Problem Types: buffer overflow Description: The Common Open Policy Service Protocol (COPS) module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50,
001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10,SVN5800-C V200R003C00, V200R003C10, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R0
C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3206 V100R002C00, V100R002C10,USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50 haa a buffer overflow vulnerability. An unauthenticated, remote attacker could exploit this vulnerability by sending specially crafted message to the affected products. The vulnerability is due to insufficient input validation of the message, which could result in a buffer overflow. Successful exploit may cause some services abnormal. Additional An
the message, which could result in a buffer overflow. Successful exploit may cause some services abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-buffer-en
CVE ID: CVE-2017-15351 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T19:57:25.496Z Vendors: Huawei Technologies Co., Ltd. Products: Honor V9 play Problem Types: authentication bypass Description: The 'Find Phone' function in Huawei Honor V9 play smart phones with versions earlier than Jimmy-AL00AC00B135 has an authentication bypass vulnerability. Due to improper authentication realization in the 'Find Phone' function. An attacker may exploit the vulnerability to bypass the 'Find Phone' function in order to use the phone normally. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171122-01
t Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171122-01-smartphone-en
CVE ID: CVE-2017-15352 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T19:57:25.538Z Vendors: Huawei Technologies Co., Ltd. Products: OceanStor 2800 V3,OceanStor 5300 V3,OceanStor 5500 V3,OceanStor 5600 V3,OceanStor 5800 V3 Problem Types: Improper Access Control Description: Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5600 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5800 V3, V300R003C00, V300R003C10, V300R003C20 have an improper access control vulnerability. Due to incorrectly restrict access to a resource, an attacker with hi
C20 have an improper access control vulnerability. Due to incorrectly restrict access to a resource, an attacker with high privilege may exploit the vulnerability to query some information or send specific message to cause some service abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171122-01-oceanstor-en
CVE ID: CVE-2017-15353 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T19:57:25.431Z Vendors: Huawei Technologies Co., Ltd. Products: DP300,RP200,RSE6500,TE30,TE40,TE50,TE60,TX50,VP9660,ViewPoint 8660,ViewPoint 9030,Viewpoint 8660, Problem Types: out-of-bounds read Description: Huawei DP300, V500R002C00, RP200, V500R002C00, V600R006C00, RSE6500, V500R002C00, TE30, V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00, V600R006C00, TE60, V100R001C01, V100R001C10, V500R002C00, V600R006C00, TX50, V500R002C00, V600R006C00, VP9660, V500R002C00, V500R002C10, ViewPoint 8660, V100R008C03, ViewPoint 9030, V100R011C02, V100R011C0
C00, V600R006C00, VP9660, V500R002C00, V500R002C10, ViewPoint 8660, V100R008C03, ViewPoint 9030, V100R011C02, V100R011C03, Viewpoint 8660, V100R008C03 have an out-of-bounds read vulnerability. An attacker has to control the peer device and send specially crafted messages to the affected products. Due to insufficient input validation, successful exploit may cause some service abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-h323-en
CVE ID: CVE-2017-15354 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T19:57:25.463Z Vendors: Huawei Technologies Co., Ltd. Products: DP300,RP200,TE30,TE40,TE50,TE60,TX50 Problem Types: buffer overflow Description: Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vulnerability. An attacker may send specially crafted HTTP messages to the affected products. Due insufficient input validation of three different parameters in the messages, successful exploit may cause some
ucts. Due insufficient input validation of three different parameters in the messages, successful exploit may cause some service abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-02-http-en
CVE ID: CVE-2017-15355 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T19:57:25.693Z Vendors: Huawei Technologies Co., Ltd. Products: DP300,RP200,TE30,TE40,TE50,TE60,TX50 Problem Types: buffer overflow Description: Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vulnerability. An attacker may send specially crafted HTTP messages to the affected products. Due insufficient input validation of three different parameters in the messages, successful exploit may cause some
CVE ID: CVE-2017-15356 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T19:57:25.474Z Vendors: Huawei Technologies Co., Ltd. Products: DP300,RP200,TE30,TE40,TE50,TE60,TX50 Problem Types: buffer overflow Description: Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vulnerability. An attacker may send specially crafted HTTP messages to the affected products. Due insufficient input validation of three different parameters in the messages, successful exploit may cause some
CVE ID: CVE-2017-15357 State: PUBLISHED Published: 2017-12-01T17:00:00 Last Updated: 2024-08-05T19:57:25.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to gain root privileges via a symlink attack on the updater binary itself. Additional Analyst Notes: - CVE Program Container: References: - https://m4.rkw.io/blog/cve201715357-local-root-privesc-in-arq-backup--596.html - https://www.exploit-db.com/exploits/43218/ - https://www.arqbackup.com/download/arq5_release_notes.html
CVE ID: CVE-2017-15358 State: PUBLISHED Published: 2018-08-03T18:00:00 Last Updated: 2024-08-05T19:57:25.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the Charles Proxy Settings suid binary in Charles Proxy before 4.2.1 allows local users to gain privileges via vectors involving the --self-repair option. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45107/ - https://m4.rkw.io/blog/cve201715358-local-root-privesc-in-charles-proxy-42.html
CVE ID: CVE-2017-15359 State: PUBLISHED Published: 2017-10-18T18:00:00 Last Updated: 2024-08-05T19:57:25.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the 3CX Phone System 15.5.3554.1, the Management Console typically listens to port 5001 and is prone to a directory traversal attack: "/api/RecordingList/DownloadRecord?file=" and "/api/SupportInfo?file=" are the vulnerable parameters. An attacker must be authenticated to exploit this issue to access sensitive information to aid in subsequent attacks. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Oct/37 - https://www.exploit-db.com/exploits/42991/
CVE ID: CVE-2017-15360 State: PUBLISHED Published: 2017-10-15T17:00:00Z Last Updated: 2024-09-17T03:48:00.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect error handling for an HTML encoded script. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b
CVE ID: CVE-2017-15361 State: PUBLISHED Published: 2017-10-16T17:00:00 Last Updated: 2024-08-05T19:57:25.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various cryptographic protection mechanisms via targeted attacks, aka ROCA. Examples of affected technologies include BitLocker with TPM 1.2, YubiKey 4 (before 4.3.5) PGP key generation, and the Cached User Data encryption feature in Chrome OS. Addi
ith TPM 1.2, YubiKey 4 (before 4.3.5) PGP key generation, and the Cached User Data encryption feature in Chrome OS. Additional Analyst Notes: - CVE Program Container: References: - https://www.infineon.com/cms/en/product/promopages/tpm-update/?redirId=59160 - https://dan.enigmabridge.com/roca-vulnerability-impact-on-gemalto-idprime-net-smart-cards/ - https://blog.cr.yp.to/20171105-infineon.html - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03801en_us - https://monitor.certipath.com/rsatest - https://ics-cert.us-cert.gov/advisories/ICSA-18-058-01 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV170012 - https://crocs.fi.muni.cz/pu
A-18-058-01 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV170012 - https://crocs.fi.muni.cz/public/papers/rsa_ccs17 - https://arstechnica.com/information-technology/2017/10/crypto-failure-cripples-millions-of-high-security-keys-750k-estonian-ids/ - http://support.lenovo.com/us/en/product_security/LEN-15552 - https://security.netapp.com/advisory/ntap-20171024-0001/ - https://github.com/iadgov/Detect-CVE-2017-15361-TPM - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00104.html - https://www.kb.cert.org/vuls/id/307015 - https://github.com/crocs-muni/roca - https://sites.google.com/a/chromium.org/dev/chromium-os/tpm_firmware_update - https://
ps://github.com/crocs-muni/roca - https://sites.google.com/a/chromium.org/dev/chromium-os/tpm_firmware_update - https://cert-portal.siemens.com/productcert/pdf/ssa-470231.pdf - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03789en_us - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00148.html - https://www.yubico.com/support/security-advisories/ysa-2017-01/ - http://www.securityfocus.com/bid/101484 - https://keychest.net/roca
CVE ID: CVE-2017-15362 State: PUBLISHED Published: 2017-10-16T01:00:00 Last Updated: 2024-08-05T19:57:25.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish communication channels, etc. The vulnerability is present after login into the application. This affects a different tickets.php file than CVE-2015-1176. Additional Analyst Notes: - CVE Program Container: References: - https://becomepentester.blogspot.a
than CVE-2015-1176. Additional Analyst Notes: - CVE Program Container: References: - https://becomepentester.blogspot.ae/2017/10/osTicket-XSS-CVE-2017-15362.html
CVE ID: CVE-2017-15363 State: PUBLISHED Published: 2017-10-15T19:00:00 Last Updated: 2024-08-05T19:57:25.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to read arbitrary files via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://extensions.typo3.org/extension/restler/ - https://extensions.typo3.org/extension/download/restler/1.7.1/zip/
CVE ID: CVE-2017-15364 State: PUBLISHED Published: 2017-10-15T19:00:00Z Last Updated: 2025-01-06T21:55:25.405713Z Vendors: n/a Products: n/a Problem Types: n/a Description: The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact via a crafted file. NOTE: This has been disputed and it is argued that this is not present in version 1.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/evan/ccsv/issues/15 - https://github.com/evan/ccsv/commit/24e0b9b94c44a15b23475e821366239d53764dbd - https://github.com/evan/ccsv/commit/c59d960ffa6b742a0
ub.com/evan/ccsv/commit/24e0b9b94c44a15b23475e821366239d53764dbd - https://github.com/evan/ccsv/commit/c59d960ffa6b742a0616a209442618462142e6c1#diff-e39824a4819928ff248d5e90a12d1b311db2923907171cdc0ad7058da12244d9R224
CVE ID: CVE-2017-15365 State: PUBLISHED Published: 2018-01-25T16:00:00 Last Updated: 2024-08-05T19:57:25.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x before 5.7.19-29.22-3 allows remote authenticated users with SQL access to bypass intended access restrictions and replicate data definition language (DDL) statements to cluster nodes by leveraging incorrect ordering of DDL replication and ACL checking. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MariaDB/server/commit/0b5a5258abbeaf8a0c3a18c7e753699787
otes: - CVE Program Container: References: - https://github.com/MariaDB/server/commit/0b5a5258abbeaf8a0c3a18c7e753699787fdf46e - https://www.debian.org/security/2018/dsa-4341 - https://mariadb.com/kb/en/library/mariadb-10210-release-notes/ - https://bugzilla.redhat.com/show_bug.cgi?id=1524234 - https://www.percona.com/doc/percona-xtradb-cluster/LATEST/release-notes/Percona-XtraDB-Cluster-5.7.19-29.22-3.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ELCZV46WIYSJ6VMC65GMNN3A3QDRUJGK/ - https://www.percona.com/blog/2017/10/30/percona-xtradb-cluster-5-6-37-26-21-3-is-now-available/ - https://mariadb.com/kb/en/library/mariadb-10130-release-
10/30/percona-xtradb-cluster-5-6-37-26-21-3-is-now-available/ - https://mariadb.com/kb/en/library/mariadb-10130-release-notes/ - https://access.redhat.com/errata/RHSA-2019:1258
CVE ID: CVE-2017-15366 State: PUBLISHED Published: 2017-10-26T20:00:00 Last Updated: 2024-08-05T19:57:25.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Before Thornberry NDoc version 8.0, laptop clients and the server have default database (Cache) users set up with a single password. This password is left behind in a cleartext log file during client installation on laptops. This password can be used to gain full admin/system access to client devices (if no firewall is present) or the NDoc server itself. Once the password is known to an attacker, local access is not required. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/emptythevoid
s is not required. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/emptythevoid/84248daccce8737f1cdd5b395cf6f32c
CVE ID: CVE-2017-15367 State: PUBLISHED Published: 2018-03-07T20:00:00 Last Updated: 2024-08-05T19:57:25.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server. Additional Analyst Notes: - CVE Program Container: References: - http://bacula-web.org/download/articles/bacula-web-8-0-0-rc2.html - https://www.exploit-db.com/exploits/44272/ - http://bugs.bacula-web.org/view.php?id=211 - https://github.com/bacula-web/bacula-web/commit/90d4c44a0dd0d65c6fb3ab2417b83d700c8413ae
CVE ID: CVE-2017-15368 State: PUBLISHED Published: 2017-10-16T01:00:00Z Last Updated: 2024-09-17T01:46:40.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted WASM file that triggers an incorrect r_hex_bin2str call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/issues/8673 - https://github.com/radare/radare2/commit/52b1526443c1f433087928291d1c3d37a5600515
CVE ID: CVE-2017-15369 State: PUBLISHED Published: 2017-10-16T01:00:00Z Last Updated: 2024-09-17T01:35:48.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: The build_filter_chain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a variable may reside in a register, which allows remote attackers to cause a denial of service (Fitz fz_drop_imp use-after-free and application crash) or possibly have unspecified other impact via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://git.ghostscript.com/?p=mupdf.git%3Bh=c2663e51238ec8256da7fc61ad580db891d9fe9a - https://bugs.ghostscript.com/show_bug
://git.ghostscript.com/?p=mupdf.git%3Bh=c2663e51238ec8256da7fc61ad580db891d9fe9a - https://bugs.ghostscript.com/show_bug.cgi?id=698592