Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-13314 State: PUBLISHED Published: 2024-11-15T21:57:39.845Z Last Updated: 2024-11-19T16:05:33.399Z Vendors: Google Products: Android Description: In setAllowOnlyVpnForUids of NetworkManagementService.java, there is a possible security settings bypass due to a missing permission check. This could lead to local escalation of privilege allowing users to access non-VPN networks, when they are supposed to be restricted to the VPN networks, with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-05-01
CVE ID: CVE-2017-13315 State: PUBLISHED Published: 2024-11-19T17:50:22.454Z Last Updated: 2024-11-20T16:39:43.948Z Vendors: Google Products: Android Description: In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. This could lead to an elevation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-05-01
CVE ID: CVE-2017-13316 State: PUBLISHED Published: 2024-11-27T19:18:27.489Z Last Updated: 2024-11-29T21:45:02.130Z Vendors: Google Products: Android Description: In checkPermissions of RecognitionService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-05-01
CVE ID: CVE-2017-13317 State: PUBLISHED Published: 2025-01-28T16:50:03.206Z Last Updated: 2025-01-28T19:58:14.472Z Vendors: Google Products: Android Description: In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-05-01
CVE ID: CVE-2017-13318 State: PUBLISHED Published: 2025-01-28T16:51:05.070Z Last Updated: 2025-01-28T19:51:54.881Z Vendors: Google Products: Android Description: In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-05-01
CVE ID: CVE-2017-13319 State: PUBLISHED Published: 2024-11-27T19:55:01.605Z Last Updated: 2024-11-29T21:41:38.204Z Vendors: Google Products: Android Description: In pvmp3_get_main_data_size of pvmp3_get_main_data_size.cpp, there is a possible buffer overread due to a missing bounds check. This could lead to remote information disclosure of global static variables with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-05-01
CVE ID: CVE-2017-13320 State: PUBLISHED Published: 2024-11-27T21:24:30.387Z Last Updated: 2024-11-29T21:39:34.675Z Vendors: Google Products: Android Description: In impeg2d_bit_stream_flush() of libmpeg2dec there is a possible OOB read due to a missing bounds check. This could lead to Remote DoS with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-05-01
CVE ID: CVE-2017-13321 State: PUBLISHED Published: 2024-11-27T21:28:34.817Z Last Updated: 2024-11-29T21:38:44.970Z Vendors: Google Products: Android Description: In SensorService::isDataInjectionEnabled of frameworks/native/services/sensorservice/SensorService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-05-01
CVE ID: CVE-2017-13322 State: PUBLISHED Published: 2025-01-17T23:06:15.618Z Last Updated: 2025-03-13T13:22:22.833Z Vendors: Google Products: Android Description: In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-05-01
CVE ID: CVE-2017-13323 State: PUBLISHED Published: 2024-11-27T21:35:53.233Z Last Updated: 2024-11-29T21:42:26.397Z Vendors: Google Products: Android Description: In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-05-01
CVE ID: CVE-2017-13648 State: PUBLISHED Published: 2017-08-23T21:00:00 Last Updated: 2024-08-05T19:05:18.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GraphicsMagick 1.3.26, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/graphicsmagick/bugs/433/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/
CVE ID: CVE-2017-13649 State: PUBLISHED Published: 2017-08-23T21:00:00 Last Updated: 2024-08-05T19:05:18.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: UnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat /pathname`" command. NOTE: the vendor indicates that there is no common or recommended scenario in which a root script would execute this kill command. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.unrealircd.org/view.php?id=499
ll command. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.unrealircd.org/view.php?id=4990 - http://www.securityfocus.com/bid/100507
CVE ID: CVE-2017-13651 State: REJECTED Published: 2020-05-08T14:14:47 Last Updated: 2020-05-08T14:14:47 Description: No description available.
CVE ID: CVE-2017-13652 State: PUBLISHED Published: 2018-07-31T16:00:00Z Last Updated: 2024-09-16T22:19:58.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp OnCommand Insight version 7.3.0 and versions prior to 7.2.0 are susceptible to clickjacking attacks which could cause a user to perform an unintended action in the user interface. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20180731-0001/
CVE ID: CVE-2017-13653 State: REJECTED Published: 2020-05-08T15:10:12 Last Updated: 2020-05-08T15:10:12 Description: No description available.
CVE ID: CVE-2017-13654 State: REJECTED Published: 2020-05-08T15:09:30 Last Updated: 2020-05-08T15:09:30 Description: No description available.
CVE ID: CVE-2017-13655 State: REJECTED Published: 2020-05-08T14:41:03 Last Updated: 2020-05-08T14:41:03 Description: No description available.
CVE ID: CVE-2017-13656 State: REJECTED Published: 2020-05-08T14:40:14 Last Updated: 2020-05-08T14:40:14 Description: No description available.
CVE ID: CVE-2017-13657 State: REJECTED Published: 2020-05-08T14:13:08 Last Updated: 2020-05-08T14:13:08 Description: No description available.
CVE ID: CVE-2017-13658 State: PUBLISHED Published: 2017-08-24T06:00:00 Last Updated: 2024-08-05T19:05:19.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/e5c063a1007506ba69e97a35effcdef944421c89 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870019 - https://github.com/ImageMagick/ImageMagick/issues/598 -
89 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870019 - https://github.com/ImageMagick/ImageMagick/issues/598 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-13663 State: PUBLISHED Published: 2017-12-01T17:00:00 Last Updated: 2024-08-05T19:05:19.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to decrypt log files via an exposed key. Additional Analyst Notes: - CVE Program Container: References: - https://poppopretn.com/2017/11/30/public-disclosure-firmware-vulnerabilities-in-ismartalarm-cubeone/
CVE ID: CVE-2017-13664 State: PUBLISHED Published: 2017-12-01T17:00:00 Last Updated: 2024-08-05T19:05:19.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to execute arbitrary commands with administrative privileges by retrieving credentials from this file. Additional Analyst Notes: - CVE Program Container: References: - https://poppopretn.com/2017/11/30/public-disclosure-firmware-vulnerabilities-in-ismartalarm-cubeone/
CVE ID: CVE-2017-13666 State: PUBLISHED Published: 2017-08-24T06:00:00Z Last Updated: 2024-09-17T00:20:45.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.5, as used in libbpg and other products. A small height value can cause an integer underflow, which leads to a crash. This is a different vulnerability than CVE-2017-8906. Additional Analyst Notes: - CVE Program Container: References: - https://bitbucket.org/multicoreware/x265/issues/364/integer-overflow-and-affect-top-level
CVE ID: CVE-2017-13667 State: PUBLISHED Published: 2019-05-23T17:28:41 Last Updated: 2024-08-05T19:05:19.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF. Additional Analyst Notes: - CVE Program Container: References: - http://ox.com - https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html
CVE ID: CVE-2017-13668 State: PUBLISHED Published: 2019-05-23T15:15:31 Last Updated: 2024-08-05T19:05:19.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - http://ox.com - https://documentation.open-xchange.com/7.8.3/release-notes/release-notes.html
CVE ID: CVE-2017-13669 State: PUBLISHED Published: 2017-08-24T17:00:00 Last Updated: 2024-08-05T19:05:19.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bingtanguan/cve/blob/master/201701
CVE ID: CVE-2017-13670 State: PUBLISHED Published: 2017-08-31T04:00:00 Last Updated: 2024-08-05T19:05:19.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BlackCat CMS 1.2, remote authenticated users can upload any file via the media upload function in backend/media/ajax_upload.php, as demonstrated by a ZIP archive that contains a .php file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_RCE/blackcat_cms_RCE.md
CVE ID: CVE-2017-13671 State: PUBLISHED Published: 2017-08-24T19:00:00 Last Updated: 2024-08-05T19:05:19.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only impacts the users of the same instance because the comment field is not part of the MISP synchronisation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100533 - https://github.com/MISP/MISP/commit/6eba658d4a648b41b357025d864c19a67412b8aa
CVE ID: CVE-2017-13672 State: PUBLISHED Published: 2017-09-01T13:00:00 Last Updated: 2024-08-05T19:05:19.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2162 - https://lists.gnu.org/archive/html/qemu-devel/2017-08/msg04684.html - https://access.redhat.com/errata/RHSA-2018:0816 - http://www.debian.org/security/2017/dsa-3991 - https://access.redhat.
https://access.redhat.com/errata/RHSA-2018:0816 - http://www.debian.org/security/2017/dsa-3991 - https://access.redhat.com/errata/RHSA-2018:1104 - https://access.redhat.com/errata/RHSA-2018:1113 - https://usn.ubuntu.com/3575-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=1486560 - http://www.securityfocus.com/bid/100540 - http://www.openwall.com/lists/oss-security/2017/08/30/3 - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html
CVE ID: CVE-2017-13673 State: PUBLISHED Published: 2017-08-29T16:00:00 Last Updated: 2024-08-05T19:05:18.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service (assertion failure) in the cpu_physical_memory_snapshot_get_dirty function. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2017-08/msg04685.html - https://access.redhat.com/errata/RHSA-2018:1104 - http://www.securityfocus.com/bid/100527 - https://access.redhat.com/errata/RHSA-2018:1113 - https://git.qemu.org/gitweb.cgi?p=
/www.securityfocus.com/bid/100527 - https://access.redhat.com/errata/RHSA-2018:1113 - https://git.qemu.org/gitweb.cgi?p=qemu.git%3Ba=commit%3Bh=bfc56535f793c557aa754c50213fc5f882e6482d - http://www.openwall.com/lists/oss-security/2017/09/10/1 - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html
CVE ID: CVE-2017-13674 State: PUBLISHED Published: 2017-09-01T13:00:00Z Last Updated: 2024-09-16T23:16:06.195Z Vendors: Symantec Corporation Products: ProxyClient Problem Types: Privilege escalation Description: Symantec ProxyClient 3.4 for Windows is susceptible to a privilege escalation vulnerability. A malicious local Windows user can, under certain circumstances, exploit this vulnerability to escalate their privileges on the system and execute arbitrary code with LocalSystem privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security-center/network-protection-security-advisories/SA152 - http://www.securityfocus.com/bid/100554
CVE ID: CVE-2017-13675 State: PUBLISHED Published: 2017-10-10T19:00:00 Last Updated: 2024-08-05T19:05:19.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: A denial of service (DoS) attack in Symantec Endpoint Encryption before SEE 11.1.3HF2 allows remote attackers to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a specific host within a network. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171009_00 - http://www.securityfocus.com/bid/101089
CVE ID: CVE-2017-13676 State: PUBLISHED Published: 2017-09-27T15:00:00Z Last Updated: 2024-09-16T21:09:03.016Z Vendors: Symantec Corporation Products: Norton Remove & Reinstall Problem Types: DLL Preloading Description: Norton Remove & Reinstall can be susceptible to a DLL preloading vulnerability. These types of issues occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will generally follow a specific search path to locate the DLL. The vulnerability can be exploited by a simple file write (or potentially an over-write) which results in a foreign DLL running under the context
xploited by a simple file write (or potentially an over-write) which results in a foreign DLL running under the context of the application. A Norton Remove & Reinstall update, version 4.4.0.58, has been released which addresses the aforementioned vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170926_00 - http://www.securityfocus.com/bid/100939
CVE ID: CVE-2017-13677 State: PUBLISHED Published: 2018-04-11T14:00:00Z Last Updated: 2024-09-17T02:16:31.679Z Vendors: Symantec Corporation Products: Advanced Secure Gateway (ASG), ProxySG Problem Types: Denial of service Description: Denial-of-service (DoS) vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A remote attacker can use crafted HTTP/HTTPS requests to cause denial-of-service through management console application crashes. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security-center/network-protection-security-advisories/SA162 - http://www.securityfocus.com/bid/103685 - http://www.securitytrac
-center/network-protection-security-advisories/SA162 - http://www.securityfocus.com/bid/103685 - http://www.securitytracker.com/id/1040757
CVE ID: CVE-2017-13678 State: PUBLISHED Published: 2018-04-11T14:00:00Z Last Updated: 2024-09-16T23:40:33.730Z Vendors: Symantec Corporation Products: Advanced Secure Gateway (ASG), ProxySG Problem Types: Stored XSS Description: Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can inject arbitrary JavaScript code in the management console web client application. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security-center/network-protection-security-advisories/SA162 - http://www.securityfocus.com/bid/103685 - http://www.securitytracker.com/id/1040757
CVE ID: CVE-2017-13679 State: PUBLISHED Published: 2017-10-10T19:00:00 Last Updated: 2024-08-05T19:05:19.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: A denial of service (DoS) attack in Symantec Encryption Desktop before SED 10.4.1 MP2HF1 allows remote attackers to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a specific host within a network. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101090 - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171009_00
CVE ID: CVE-2017-13680 State: PUBLISHED Published: 2017-11-06T23:00:00Z Last Updated: 2024-09-16T17:42:54.111Z Vendors: Symantec Corporation Products: Symantec Endpoint Protection Problem Types: Arbitrary File Deletion Description: Prior to SEP 12.1 RU6 MP9 & SEP 14 RU1 Symantec Endpoint Protection Windows endpoint can encounter a situation whereby an attacker could use the product's UI to perform unauthorized file deletes on the resident file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101503 - http://www.securitytracker.com/id/1039775 - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&p
tytracker.com/id/1039775 - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00
CVE ID: CVE-2017-13681 State: PUBLISHED Published: 2017-11-06T23:00:00Z Last Updated: 2024-09-16T23:16:25.106Z Vendors: Symantec Corporation Products: Symantec Endpoint Protection Problem Types: Privilege Escalation Description: Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels. In the circumstances of this issue, the capability of exploit is limited by the need to perform multiple file and directory writes to the local filesystem and as such, is not feasible in a standard drive-by type attack. A
ple file and directory writes to the local filesystem and as such, is not feasible in a standard drive-by type attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039775 - http://www.securityfocus.com/bid/101504 - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00
CVE ID: CVE-2017-13682 State: PUBLISHED Published: 2017-10-23T20:00:00 Last Updated: 2024-08-05T19:05:19.111Z Vendors: Symantec Corporation Products: Symantec Encryption Desktop Problem Types: Kernel Memory Leak Description: In Symantec Encryption Desktop before SED 10.4.1 MP2HF1, a kernel memory leak is a type of resource leak that can occur when a computer program incorrectly manages memory allocations in such a way that memory which is no longer needed is not released. In object-oriented programming, a memory leak may happen when an object is stored in memory but cannot be accessed by the running code. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.c
be accessed by the running code. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171009_00 - http://www.securityfocus.com/bid/101497
CVE ID: CVE-2017-13683 State: PUBLISHED Published: 2017-10-23T20:00:00 Last Updated: 2024-08-05T19:05:18.959Z Vendors: Symantec Corporation Products: Symantec Endpoint Encryption Problem Types: Kernel Memory Leak Description: In Symantec Endpoint Encryption before SEE 11.1.3HF3, a kernel memory leak is a type of resource leak that can occur when a computer program incorrectly manages memory allocations in such a way that memory which is no longer needed is not released. In object-oriented programming, a memory leak may happen when an object is stored in memory but cannot be accessed by the running code. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com