Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-6183 State: PUBLISHED Published: 2017-03-30T17:00:00 Last Updated: 2024-08-05T15:25:47.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active Directory servers was vulnerable to remote command injection, aka NSWA-1314. Additional Analyst Notes: - CVE Program Container: References: - http://wsa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.1.2.html - http://www.securityfocus.com/bid/97261 - https://community.sophos.com/products/web-appliance/b/blog/posts/release-of-swa-v4-3-1-2
CVE ID: CVE-2017-6184 State: PUBLISHED Published: 2017-03-30T17:00:00 Last Updated: 2024-08-05T15:25:48.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via the token parameter, aka NSWA-1303. Additional Analyst Notes: - CVE Program Container: References: - http://wsa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.1.2.html - http://www.securityfocus.com/bid/97261 - https://community.sophos.com/products/web-appliance/b/blog/posts/release-of-swa-v4-3-1-2
CVE ID: CVE-2017-6186 State: PUBLISHED Published: 2017-03-21T16:00:00 Last Updated: 2024-08-05T15:25:47.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code injection vulnerability in Bitdefender Total Security 12.0 (and earlier), Internet Security 12.0 (and earlier), and Antivirus Plus 12.0 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Bitdefender process via a "DoubleAgent" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Opt
ature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack. Additional Analyst Notes: - CVE Program Container: References: - http://cybellum.com/doubleagent-taking-full-control-antivirus/ - http://www.securityfocus.com/bid/97024 - http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/
CVE ID: CVE-2017-6187 State: PUBLISHED Published: 2017-02-22T23:00:00 Last Updated: 2024-08-05T15:25:47.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary code via a long URI in a GET request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41436/ - http://www.securityfocus.com/bid/96401
CVE ID: CVE-2017-6188 State: PUBLISHED Published: 2017-02-22T19:00:00 Last Updated: 2024-08-05T15:25:47.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upper_limit GET parameters allows overwriting any file accessible to the www-data user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96399 - https://bugs.debian.org/855705 - https://www.debian.org/security/2017/dsa-3794 - https://security.gentoo.org/glsa/201710-05 - https://github.com/munin-monitoring/munin/issues/721
CVE ID: CVE-2017-6189 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-05T15:25:47.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96476 - http://seclists.org/fulldisclosure/2017/Feb/71 - http://packetstormsecurity.com/files/141366/Amazon-Kindle-DLL-Hijacking.html
CVE ID: CVE-2017-6190 State: PUBLISHED Published: 2017-04-10T14:00:00 Last Updated: 2024-08-05T15:25:47.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web interface on the D-Link DWR-116 device with firmware before V1.05b09 allows remote attackers to read arbitrary files via a .. (dot dot) in a "GET /uir/" request. Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/blad/WLB-2017040033 - https://www.exploit-db.com/exploits/41840/ - http://www.securityfocus.com/bid/97620
CVE ID: CVE-2017-6191 State: PUBLISHED Published: 2017-03-23T16:00:00 Last Updated: 2024-08-05T15:25:47.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in APNGDis 2.8 and below allows a remote attacker to execute arbitrary code via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - https://www.onvio.nl/nieuws/cve-2017-6191-apngdis-filename-buffer-overflow - http://www.securityfocus.com/bid/97053 - https://www.exploit-db.com/exploits/41670/
CVE ID: CVE-2017-6192 State: PUBLISHED Published: 2018-02-20T16:00:00 Last Updated: 2024-08-05T15:25:48.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in APNGDis 2.8 and earlier allows a remote attackers to cause denial of service and possibly execute arbitrary code via a crafted image containing a malformed chunk size descriptor. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41668/ - https://www.onvio.nl/nieuws/cve-2017-6191-apngdis-chunk-size-descriptor-buffer-overflow - http://www.securityfocus.com/bid/97053 - https://www.exploit-db.com/exploits/41669/
CVE ID: CVE-2017-6193 State: PUBLISHED Published: 2018-02-20T16:00:00 Last Updated: 2024-08-05T15:25:48.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in APNGDis 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted image containing a malformed image size descriptor in the IHDR chunk. Additional Analyst Notes: - CVE Program Container: References: - https://www.onvio.nl/nieuws/cve-2017-6192-apngdis-width-height-buffer-overflow - https://www.exploit-db.com/exploits/41668/ - http://www.securityfocus.com/bid/97053 - https://www.exploit-db.com/exploits/41669/
CVE ID: CVE-2017-6194 State: PUBLISHED Published: 2017-04-03T05:44:00 Last Updated: 2024-08-05T15:25:48.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: The relocs function in libr/bin/p/bin_bflt.c in radare2 1.2.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97299 - https://github.com/radare/radare2/issues/6829 - https://github.com/radare/radare2/commit/72794dc3523bbd5bb370de3c5857cb736c387e18
CVE ID: CVE-2017-6195 State: PUBLISHED Published: 2017-05-18T06:13:00 Last Updated: 2024-08-05T15:25:49.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ipswitch MOVEit Transfer (formerly DMZ) allows pre-authentication blind SQL injection. The fixed versions are MOVEit Transfer 2017 9.0.0.201, MOVEit DMZ 8.3.0.30, and MOVEit DMZ 8.2.0.20. Additional Analyst Notes: - CVE Program Container: References: - http://ft.ipswitch.com/rs/751-HBN-596/images/Ipswitch-Security-Bulletin-FT-Vulnerability.pdf - https://www.siberas.de/assets/papers/ssa-1705_IPSWITCH_SQLinjection.txt
CVE ID: CVE-2017-6196 State: PUBLISHED Published: 2017-02-24T04:23:00 Last Updated: 2024-08-05T15:25:49.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple use-after-free vulnerabilities in the gx_image_enum_begin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739d9b1a283 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PostScript document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037899 - http://www.securityfocus.com/bid/96428 - http://git.ghostscript.com/?p=ghostpdl.git%3Bh=ecceafe3abba2714ef9b432035fe
9 - http://www.securityfocus.com/bid/96428 - http://git.ghostscript.com/?p=ghostpdl.git%3Bh=ecceafe3abba2714ef9b432035fe0739d9b1a283 - https://security.gentoo.org/glsa/201708-06 - https://bugs.ghostscript.com/show_bug.cgi?id=697596
CVE ID: CVE-2017-6197 State: PUBLISHED Published: 2017-02-24T04:23:00 Last Updated: 2024-08-05T15:25:47.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: The r_read_* functions in libr/include/r_endian.h in radare2 1.2.1 allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted binary file, as demonstrated by the r_read_le32 function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/issues/6816 - https://github.com/radare/radare2/commit/1ea23bd6040441a21fbcfba69dce9a01af03f989 - http://www.securityfocus.com/bid/96433
CVE ID: CVE-2017-6198 State: PUBLISHED Published: 2018-02-06T16:00:00 Last Updated: 2024-08-05T15:25:48.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Supervisor in Sandstorm doesn't set and enforce the resource limits of a process. This allows remote attackers to cause a denial of service by launching a fork bomb in the sandbox, or by using a large amount of disk space. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sandstorm-io/sandstorm/blob/v0.202/src/sandstorm/supervisor.c++#L824 - https://devco.re/blog/2018/01/26/Sandstorm-Security-Review-CVE-2017-6200-en/
CVE ID: CVE-2017-6199 State: PUBLISHED Published: 2018-02-06T16:00:00 Last Updated: 2024-08-05T15:25:47.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote attacker could bypass the Sandstorm organization restriction before build 0.203 via a comma in an email-address field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sandstorm-io/sandstorm/commit/37bd9a7f4eb776cdc2d3615f0bfea1254b66f59d - https://github.com/sandstorm-io/sandstorm/blob/v0.202/shell/packages/sandstorm-db/db.js#L1112 - https://sandstorm.io/news/2017-03-02-security-review - https://devco.re/blog/2018/01/26/Sandstorm-Security-Review-CVE-2017-6200-en/
CVE ID: CVE-2017-6200 State: PUBLISHED Published: 2018-02-06T16:00:00 Last Updated: 2024-08-05T15:25:49.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sandstorm before build 0.203 allows remote attackers to read any specified file under /etc or /run via the sandbox backup function. The root cause is that the findFilesToZip function doesn't filter Line Feed (\n) characters in a directory name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sandstorm-io/sandstorm/commit/4ea8df7403381d9b657b121b3c98d8081b27414d - https://github.com/sandstorm-io/sandstorm/commit/6e8572ea8bb56d0216bb1b410e5040edc051b120 - https://github.com/sandstorm-io/sandst
thub.com/sandstorm-io/sandstorm/commit/6e8572ea8bb56d0216bb1b410e5040edc051b120 - https://github.com/sandstorm-io/sandstorm/blob/v0.202/src/sandstorm/backup.c%2B%2B#L271 - https://sandstorm.io/news/2017-03-02-security-review - https://devco.re/blog/2018/01/26/Sandstorm-Security-Review-CVE-2017-6200-en/
CVE ID: CVE-2017-6201 State: PUBLISHED Published: 2018-02-06T16:00:00 Last Updated: 2024-08-05T15:25:49.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203. A remote attacker may exploit this issue by providing a URL. It could bypass access control such as firewalls that prevent the attackers from accessing the URLs directly. Additional Analyst Notes: - CVE Program Container: References: - https://sandstorm.io/news/2017-03-02-security-review - https://github.com/sandstorm-io/sandstorm/commit/164997fb958effbc90c5328c166706280a84aaa1 - https://devco.re/blog/2018/01/26/Sands
thub.com/sandstorm-io/sandstorm/commit/164997fb958effbc90c5328c166706280a84aaa1 - https://devco.re/blog/2018/01/26/Sandstorm-Security-Review-CVE-2017-6200-en/
CVE ID: CVE-2017-6205 State: PUBLISHED Published: 2017-02-23T06:16:00 Last Updated: 2024-08-05T15:25:47.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 allow attackers to conduct Unauthenticated Command Bypass attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10070 - http://www.securityfocus.com/bid/96397
CVE ID: CVE-2017-6206 State: PUBLISHED Published: 2017-02-23T06:16:00 Last Updated: 2024-08-05T15:25:48.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 allow attackers to conduct Unauthenticated Information Disclosure attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41662/ - http://www.securityfocus.com/bid/96393 - http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10070 - https://github.com/varangamin/CVE-2017-62
supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10070 - https://github.com/varangamin/CVE-2017-6206
CVE ID: CVE-2017-6207 State: REJECTED Published: 2017-02-23T15:00:00 Last Updated: 2017-02-23T14:57:01 Description: No description available.
CVE ID: CVE-2017-6209 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:25:48.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the parse_identifier function in tgsi_text.c in the TGSI auxiliary module in the Gallium driver in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to parsing properties. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201707-06 - https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html - https://cgit.freedesktop.o
7-06 - https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html - https://cgit.freedesktop.org/virglrenderer/commit/?id=e534b51ca3c3cd25f3990589932a9ed711c59b27 - http://www.securityfocus.com/bid/96437 - http://www.openwall.com/lists/oss-security/2017/02/23/20 - https://bugzilla.redhat.com/show_bug.cgi?id=1426149
CVE ID: CVE-2017-6210 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:25:48.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vrend_decode_reset function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (NULL pointer dereference and QEMU process crash) by destroying context 0 (zero). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1426170 - https://security.gentoo.org/glsa/201707-06 - https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html - http://www.securityfocus.com/bid/96439 - http://www.openwall.c
/archives/virglrenderer-devel/2017-February/000145.html - http://www.securityfocus.com/bid/96439 - http://www.openwall.com/lists/oss-security/2017/02/23/21 - https://cgit.freedesktop.org/virglrenderer/commit/?id=0a5dff15912207b83018485f83e067474e818bab
CVE ID: CVE-2017-6211 State: PUBLISHED Published: 2017-12-05T19:00:00Z Last Updated: 2024-09-16T19:15:19.309Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Input Validation in MMCP Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the processing of a downlink supplementary services message, a buffer overflow can occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-12-01 - http://www.securityfocus.com/bid/102072
CVE ID: CVE-2017-6212 State: REJECTED Published: 2017-08-07T20:00:00 Last Updated: 2017-08-07T19:57:01 Description: No description available.
CVE ID: CVE-2017-6213 State: PUBLISHED Published: 2018-08-02T21:00:00 Last Updated: 2024-08-05T15:25:48.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/paypal/invoice-sdk-php/issues/13
CVE ID: CVE-2017-6214 State: PUBLISHED Published: 2017-02-23T17:00:00 Last Updated: 2024-08-05T15:25:49.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service (infinite loop and soft lockup) via vectors involving a TCP packet with the URG flag. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-09-01 - http://www.securityfocus.com/bid/96421 - https://access.redhat.com/errata/RHSA-2017:1615 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ccf7abb93af09ad0868ae903
rata/RHSA-2017:1615 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ccf7abb93af09ad0868ae9033d1ca8108bdaec82 - https://access.redhat.com/errata/RHSA-2017:1647 - https://access.redhat.com/errata/RHSA-2017:1616 - https://access.redhat.com/errata/RHSA-2017:1372 - http://www.securitytracker.com/id/1037897 - http://www.debian.org/security/2017/dsa-3804 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11 - https://github.com/torvalds/linux/commit/ccf7abb93af09ad0868ae9033d1ca8108bdaec82
CVE ID: CVE-2017-6215 State: PUBLISHED Published: 2018-08-02T21:00:00 Last Updated: 2024-08-05T15:25:48.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verification_code parameter, resulting in code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/paypal/permissions-sdk-php/issues/19
CVE ID: CVE-2017-6216 State: PUBLISHED Published: 2019-07-03T16:31:17 Last Updated: 2024-08-05T15:25:48.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: novaksolutions/infusionsoft-php-sdk v2016-10-31 is vulnerable to a reflected XSS in the leadscoring.php resulting code execution Additional Analyst Notes: - CVE Program Container: References: - https://github.com/novaksolutions/infusionsoft-php-sdk/issues/111
CVE ID: CVE-2017-6217 State: PUBLISHED Published: 2019-07-10T14:15:31 Last Updated: 2024-08-05T15:25:48.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution Additional Analyst Notes: - CVE Program Container: References: - https://github.com/paypal/adaptivepayments-sdk-php/issues/87
CVE ID: CVE-2017-6223 State: PUBLISHED Published: 2017-10-13T17:00:00Z Last Updated: 2024-09-16T21:04:13.663Z Vendors: Brocade Communications Systems, Inc. Products: Zone Director Controller Firmware Problem Types: Authenticated Root Command Injection Description: Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in the ping functionality that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system. Additional Analyst Notes: - CVE Program Container: References: - https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advis
nalyst Notes: - CVE Program Container: References: - https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt
CVE ID: CVE-2017-6224 State: PUBLISHED Published: 2017-10-13T17:00:00Z Last Updated: 2024-09-16T18:34:15.776Z Vendors: Brocade Communications Systems, Inc. Products: Zone Director Controller and Unleashed AP Firmware Problem Types: Authenticated Root Command Injection. Description: Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system by appending those commands in t
cated users to execute arbitrary privileged commands on the underlying operating system by appending those commands in the Common Name field in the Certificate Generation Request. Additional Analyst Notes: - CVE Program Container: References: - https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt
CVE ID: CVE-2017-6225 State: PUBLISHED Published: 2018-02-08T22:00:00Z Last Updated: 2024-09-16T23:36:49.141Z Vendors: Brocade Communications Systems, Inc. Products: Brocade FABRIC OS Problem Types: Cross-site scripting (XSS) Description: Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could allow remote attackers to execute arbitrary code or access sensitive browser-based information. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2
References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-525 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03851en_us
CVE ID: CVE-2017-6227 State: PUBLISHED Published: 2018-02-08T22:00:00Z Last Updated: 2024-09-16T19:10:54.251Z Vendors: Brocade Communications Systems, Inc. Products: Brocade FABRIC OS Problem Types: DOS Description: A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could allow an attacker to cause a denial of service (CPU consumption and device hang) condition by sending crafted Router Advertisement (RA) messages to a targeted system. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisor
er: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-526
CVE ID: CVE-2017-6229 State: PUBLISHED Published: 2018-02-14T19:00:00Z Last Updated: 2024-09-16T23:55:41.500Z Vendors: Brocade Communications Systems, Inc. Products: Ruckus Networks Unleashed APs and Zone Director Problem Types: Authenticated command injection in CLI interface of ZD/Unleashed software. Description: Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems. Additional Analyst Notes: - CVE Progra