Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-2237 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.355Z Vendors: Toshiba Lighting & Technology Corporation Products: Toshiba Home gateway HEM-GW16A, Toshiba Home gateway HEM-GW26A Problem Types: OS Command Injection Description: Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN85901441/index.html
CVE ID: CVE-2017-2238 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:05.058Z Vendors: Toshiba Lighting & Technology Corporation Products: Toshiba Home gateway HEM-GW16A, Toshiba Home gateway HEM-GW26A Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier and Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN85901441/index.html
CVE ID: CVE-2017-2239 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.332Z Vendors: Yuki Hattori Products: Marp Problem Types: Improper Access Control Description: Marp versions v0.0.10 and earlier may allow an attacker to access local resources and files using JavaScript. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN21174546/index.html
CVE ID: CVE-2017-2240 State: PUBLISHED Published: 2017-07-14T16:00:00 Last Updated: 2024-08-05T13:48:05.058Z Vendors: Hammock Corporation Products: AssetView for MacOS Problem Types: Directory traversal Description: Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read arbitrary files via "File Transfer Web Service". Additional Analyst Notes: - CVE Program Container: References: - https://www.hammock.jp/assetview/info/170714.html - http://jvn.jp/en/vu/JVNVU93377948/index.html
CVE ID: CVE-2017-2241 State: PUBLISHED Published: 2017-07-14T16:00:00 Last Updated: 2024-08-05T13:48:04.260Z Vendors: Hammock Corporation Products: AssetView for MacOS Problem Types: SQL Injection Description: SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service". Additional Analyst Notes: - CVE Program Container: References: - https://www.hammock.jp/assetview/info/170714.html - http://jvn.jp/en/vu/JVNVU93377948/index.html
CVE ID: CVE-2017-2242 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T13:48:04.361Z Vendors: NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION Products: Flets Setsuzoku Tool for Windows Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Flets Setsuzoku Tool for Windows all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN22272314/index.html - http://flets-w.com/topics/setsuzoku_tool_vulnerability/
CVE ID: CVE-2017-2243 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.331Z Vendors: dFactory Products: Responsive Lightbox Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99463 - http://jvn.jp/en/jp/JVN39819446/index.html - https://wordpress.org/plugins/responsive-lightbox/#developers
CVE ID: CVE-2017-2244 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.400Z Vendors: BROTHER INDUSTRIES, LTD. Products: MFC-J960DWN Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.brother.co.jp/j/s/support/vul_info/JVN95996423/index.html - http://jvn.jp/en/jp/JVN95996423/index.html
CVE ID: CVE-2017-2245 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.300Z Vendors: Vladimir Anokhin Products: Shortcodes Ultimate Problem Types: Directory traversal Description: Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset/1684377/#file217 - http://www.securityfocus.com/bid/99495 - https://jvn.jp/en/jp/JVN63249051/index.html - https://wordpress.org/plugins/shortcodes-ultimate/#developers
CVE ID: CVE-2017-2246 State: PUBLISHED Published: 2017-07-14T16:00:00 Last Updated: 2024-08-05T13:48:04.440Z Vendors: Chitora soft Products: Installer of Lhaz Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer of Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN21369452/index.html - http://chitora.com/jvn21369452.html
CVE ID: CVE-2017-2247 State: PUBLISHED Published: 2017-07-14T16:00:00 Last Updated: 2024-08-05T13:48:05.089Z Vendors: Chitora soft Products: Self-extracting archive files created by Lhaz Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Self-extracting archive files created by Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN21369452/index.html - http://chitora.com/jvn21369452.html
CVE ID: CVE-2017-2248 State: PUBLISHED Published: 2017-07-14T16:00:00 Last Updated: 2024-08-05T13:48:04.158Z Vendors: Chitora soft Products: Installer of Lhaz+ Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer of Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN21369452/index.html - http://chitora.com/jvn21369452.html
CVE ID: CVE-2017-2249 State: PUBLISHED Published: 2017-07-14T16:00:00 Last Updated: 2024-08-05T13:48:04.492Z Vendors: Chitora soft Products: Self-extracting archive files created by Lhaz+ Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Self-extracting archive files created by Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN21369452/index.html - http://chitora.com/jvn21369452.html
CVE ID: CVE-2017-2252 State: PUBLISHED Published: 2017-07-14T16:00:00 Last Updated: 2024-08-05T13:48:04.478Z Vendors: SOURCENEXT CORPORATION Products: Self-extracting archive files created by File Compact Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in self-extracting archive files created by File Compact Ver.5 version 5.10 and earlier, Ver.6 version 6.02 and earlier, Ver.7 version 7.02 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN29939155/index.html
CVE ID: CVE-2017-2253 State: PUBLISHED Published: 2017-07-14T16:00:00 Last Updated: 2024-08-05T13:48:05.054Z Vendors: Yahoo Japan Corporation Products: Installer of Yahoo! Toolbar (for Internet explorer) Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer of Yahoo! Toolbar (for Internet explorer) v8.0.0.6 and earlier, with its timestamp prior to June 13, 2017, 18:18:55 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN02852421/index.html
CVE ID: CVE-2017-2254 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T13:48:05.059Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Denial-of-service (DoS) Description: Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9751 - https://jvn.jp/en/jp/JVN63564682/index.html
CVE ID: CVE-2017-2255 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T13:48:04.391Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Space". Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9746 - https://jvn.jp/en/jp/JVN63564682/index.html
CVE ID: CVE-2017-2256 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T13:48:05.058Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Memo". Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9744 - https://jvn.jp/en/jp/JVN63564682/index.html
CVE ID: CVE-2017-2257 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T13:48:05.086Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9765 - https://jvn.jp/en/jp/JVN63564682/index.html
CVE ID: CVE-2017-2258 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-05T13:48:05.178Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Directory traversal Description: Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon SOAP API "WorkflowHandleApplications". Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9846 - https://jvn.jp/en/jp/JVN63564682/index.html
CVE ID: CVE-2017-2265 State: PUBLISHED Published: 2017-07-14T16:00:00 Last Updated: 2024-08-05T13:48:05.162Z Vendors: Tomoki Fuke Products: FileCapsule Deluxe Portable Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://resumenext.blog.fc2.com/blog-entry-30.html - https://jvn.jp/en/jp/JVN42031953/index.html
CVE ID: CVE-2017-2266 State: PUBLISHED Published: 2017-07-14T16:00:00 Last Updated: 2024-08-05T13:48:05.134Z Vendors: Tomoki Fuke Products: Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://resumenext.blog.fc2.com/blog-entry-30.html - https://jvn.jp/en/jp/JVN42031953/index.html
CVE ID: CVE-2017-2267 State: PUBLISHED Published: 2017-07-14T16:00:00 Last Updated: 2024-08-05T13:48:05.167Z Vendors: Tomoki Fuke Products: FileCapsule Deluxe Portable Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://resumenext.blog.fc2.com/blog-entry-30.html - https://jvn.jp/en/jp/JVN42031953/index.html
CVE ID: CVE-2017-2268 State: PUBLISHED Published: 2017-07-14T16:00:00 Last Updated: 2024-08-05T13:48:05.207Z Vendors: Tomoki Fuke Products: Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://resumenext.blog.fc2.com/blog-entry-30.html - https://jvn.jp/en/jp/JVN42031953/index.html
CVE ID: CVE-2017-2269 State: PUBLISHED Published: 2017-07-14T16:00:00 Last Updated: 2024-08-05T13:48:05.152Z Vendors: Tomoki Fuke Products: FileCapsule Deluxe Portable Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://resumenext.blog.fc2.com/blog-entry-30.html - https://jvn.jp/en/jp/JVN42031953/index.html
CVE ID: CVE-2017-2270 State: PUBLISHED Published: 2017-07-14T16:00:00 Last Updated: 2024-08-05T13:48:05.089Z Vendors: Tomoki Fuke Products: Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://resumenext.blog.fc2.com/blog-entry-30.html - https://jvn.jp/en/jp/JVN42031953/index.html
CVE ID: CVE-2017-2271 State: PUBLISHED Published: 2017-07-14T16:00:00 Last Updated: 2024-08-05T13:48:05.212Z Vendors: HiBARA Software Products: Self-extracting encrypted files created by AttacheCase Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.2.8.3.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN61502349/index.html
CVE ID: CVE-2017-2272 State: PUBLISHED Published: 2017-07-14T16:00:00 Last Updated: 2024-08-05T13:48:05.201Z Vendors: HiBARA Software Products: Self-extracting encrypted files created by AttacheCase Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.3.2.2.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN61502349/index.html
CVE ID: CVE-2017-2273 State: PUBLISHED Published: 2017-07-22T00:00:00 Last Updated: 2024-08-05T13:48:05.234Z Vendors: BUFFALO INC. Products: WMR-433, WMR-433W Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://buffalo.jp/support_s/s20170606.html - https://jvn.jp/en/jp/JVN48413726/index.html
CVE ID: CVE-2017-2274 State: PUBLISHED Published: 2017-07-22T00:00:00 Last Updated: 2024-08-05T13:48:05.230Z Vendors: BUFFALO INC. Products: WMR-433, WMR-433W Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://buffalo.jp/support_s/s20170606.html - https://jvn.jp/en/jp/JVN48413726/index.html
CVE ID: CVE-2017-2275 State: PUBLISHED Published: 2017-07-22T00:00:00 Last Updated: 2024-08-05T13:48:05.214Z Vendors: Sony Corporation Products: WG-C10 Problem Types: OS Command Injection Description: WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN14151222/index.html - https://esupport.sony.com/US/p/news-item.pl?news_id=527&mdl=WGC10
CVE ID: CVE-2017-2276 State: PUBLISHED Published: 2017-07-22T00:00:00 Last Updated: 2024-08-05T13:48:05.104Z Vendors: Sony Corporation Products: WG-C10 Problem Types: Buffer Overflow Description: Buffer overflow in WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN14151222/index.html - https://esupport.sony.com/US/p/news-item.pl?news_id=527&mdl=WGC10
CVE ID: CVE-2017-2277 State: PUBLISHED Published: 2017-07-22T00:00:00 Last Updated: 2024-08-05T13:48:05.108Z Vendors: Sony Corporation Products: WG-C10 Problem Types: Fails to restrict access Description: WG-C10 v3.0.79 and earlier allows an attacker to bypass access restrictions to obtain or alter information stored in the external storage connected to the product via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN77412145/index.html - https://esupport.sony.com/US/p/news-item.pl?news_id=527&mdl=WGC10
CVE ID: CVE-2017-2278 State: PUBLISHED Published: 2017-08-02T16:00:00 Last Updated: 2024-08-05T13:48:05.219Z Vendors: IID, Inc. Products: RBB SPEED TEST App for Android, RBB SPEED TEST App for iOS Problem Types: Fails to verify SSL certificates Description: The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.iid.co.jp/information/170714.html - https://jvn.jp/en/jp/JVN24238648/index.html
CVE ID: CVE-2017-2279 State: PUBLISHED Published: 2017-08-02T16:00:00 Last Updated: 2024-08-05T13:48:05.216Z Vendors: Kiri Products: Tween Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Tween Ver1.6.6.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN17523256/index.html
CVE ID: CVE-2017-2280 State: PUBLISHED Published: 2017-08-02T16:00:00 Last Updated: 2024-08-05T13:48:05.156Z Vendors: I-O DATA DEVICE, INC. Products: WN-AX1167GR Problem Types: Use of Hard-coded Credentials Description: WN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN01312667/index.html - http://www.iodata.jp/support/information/2017/wn-ax1167gr/
CVE ID: CVE-2017-2281 State: PUBLISHED Published: 2017-08-02T16:00:00 Last Updated: 2024-08-05T13:48:05.162Z Vendors: I-O DATA DEVICE, INC. Products: WN-AX1167GR Problem Types: OS Command Injection Description: WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN01312667/index.html - http://www.iodata.jp/support/information/2017/wn-ax1167gr/
CVE ID: CVE-2017-2282 State: PUBLISHED Published: 2017-08-02T16:00:00 Last Updated: 2024-08-05T13:48:05.168Z Vendors: I-O DATA DEVICE, INC. Products: WN-AX1167GR Problem Types: Buffer Overflow Description: Buffer overflow in WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN01312667/index.html - http://www.iodata.jp/support/information/2017/wn-ax1167gr/
CVE ID: CVE-2017-2283 State: PUBLISHED Published: 2017-08-02T16:00:00 Last Updated: 2024-08-05T13:48:05.199Z Vendors: I-O DATA DEVICE, INC. Products: WN-G300R3 Problem Types: Use of Hard-coded Credentials Description: WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN51410509/index.html - http://www.iodata.jp/support/information/2017/wn-g300r3_2/
CVE ID: CVE-2017-2284 State: PUBLISHED Published: 2017-08-02T16:00:00 Last Updated: 2024-08-05T13:48:05.202Z Vendors: Popup Maker Products: Popup Maker Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset/1697216/#file3 - https://jvn.jp/en/jp/JVN92921024/index.html - https://wordpress.org/plugins/popup-maker/#developers - https://wpvulndb.com/vulnerabilities/8878
CVE ID: CVE-2017-2285 State: PUBLISHED Published: 2017-08-02T16:00:00.000Z Last Updated: 2025-05-06T14:57:53.425Z Vendors: SilkyPress Products: Simple Custom CSS and JS Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Simple Custom CSS and JS prior to version 3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpvulndb.com/vulnerabilities/8879 - https://jvn.jp/en/jp/JVN31459091/index.html - https://wordpress.org/plugins/custom-css-js/#developers - https://plugins.trac.wordpress.org/changeset/1695440/#file6
CVE ID: CVE-2017-2286 State: PUBLISHED Published: 2017-08-02T16:00:00 Last Updated: 2024-08-05T13:48:05.273Z Vendors: Sony Corporation Products: NFC Port Software (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S), NFC Port Software (for RC-S320, RC-S310/J1C, RC-S310/ED4C), PC/SC Activator for Type B, SFCard Viewer 2, NFC Net Installer Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S), NFC Port Software Version 5.3.6.7 and earlier (for RC-S320, RC-S310/J1C, RC-S310/ED4C), PC/SC Activator for Type B Ver.1.2.1.0 and earlier, S