Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-16759 State: PUBLISHED Published: 2017-11-09T22:00:00 Last Updated: 2024-08-05T20:35:21.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php. Additional Analyst Notes: - CVE Program Container: References: - https://blog.librenms.org/2017/08/22/librenms-security-fix-during-the-installation-process/ - https://github.com/librenms/librenms/commit/d3094fa6578b29dc34fb5a7d0bd6deab49ecc911 - https://github.com/librenms/librenms/commit/7887b2e1c7158204ac69ca43beafce66e4d3a3b4 - https://github.com/librenms/librenms/pull/7184
CVE ID: CVE-2017-16760 State: PUBLISHED Published: 2017-11-10T09:00:00 Last Updated: 2024-08-05T20:35:20.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inedo BuildMaster before 5.8.2 has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://inedo.myjetbrains.com/youtrack/issue/BM-3100 - https://inedo.com/blog/buildmaster-582-released
CVE ID: CVE-2017-16761 State: PUBLISHED Published: 2017-11-10T09:00:00 Last Updated: 2024-08-05T20:35:20.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites. Additional Analyst Notes: - CVE Program Container: References: - https://inedo.com/blog/buildmaster-582-released - https://inedo.com/buildmaster/versions#v5.8 - https://inedo.myjetbrains.com/youtrack/issue/BM-3101
CVE ID: CVE-2017-16762 State: PUBLISHED Published: 2017-11-10T09:00:00 Last Updated: 2024-08-05T20:35:21.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/channelcat/sanic/releases/tag/0.5.1 - https://github.com/channelcat/sanic/issues/633
CVE ID: CVE-2017-16763 State: PUBLISHED Published: 2017-11-10T09:00:00 Last Updated: 2024-08-05T20:35:20.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable vulnerability exists in the YAML parsing functionality in config.py in Confire 0.2.0. Due to the user-specific configuration being loaded from "~/.confire.yaml" using the yaml.load function, a YAML parser can execute arbitrary Python commands resulting in command execution. An attacker can insert Python into loaded YAML to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bbengfort/confire/issues/24 - https://joel-malwarebenchmark.github.io/blog/2017
tainer: References: - https://github.com/bbengfort/confire/issues/24 - https://joel-malwarebenchmark.github.io/blog/2017/11/12/cve-2017-16763-configure-loaded-through-confire/ - https://github.com/bbengfort/confire/commit/8cc86a5ec2327e070f1d576d61bbaadf861597ea
CVE ID: CVE-2017-16764 State: PUBLISHED Published: 2017-11-10T09:00:00 Last Updated: 2024-08-05T20:35:21.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable vulnerability exists in the YAML parsing functionality in the read_yaml_file method in io_utils.py in django_make_app 0.1.3. A YAML parser can execute arbitrary Python commands resulting in command execution. An attacker can insert Python into loaded YAML to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/illagrenan/django-make-app/issues/5 - https://joel-malwarebenchmark.github.io/blog/2017/11/12/cve-2017-16764-vulnerability-in-django-make-app/
CVE ID: CVE-2017-16765 State: PUBLISHED Published: 2017-11-10T16:00:00 Last Updated: 2024-08-05T20:35:21.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists on D-Link DWR-933 1.00(WW)B17 devices via cgi-bin/gui.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/shiham101/d8f98d4ce302c12576f39af2ad2448ca
CVE ID: CVE-2017-16766 State: PUBLISHED Published: 2017-12-22T14:00:00Z Last Updated: 2024-09-17T03:53:49.536Z Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-284 Description: An improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM) before 6.1.4-15217 and before 6.0.3-8754-6 allows local users to inject arbitrary web script or HTML via the -fn option. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_17_74
CVE ID: CVE-2017-16767 State: PUBLISHED Published: 2018-02-27T15:00:00Z Last Updated: 2024-09-16T23:26:42.916Z Vendors: Synology Products: Surveillance Station Problem Types: CWE-79 Description: Cross-site scripting (XSS) vulnerability in User Profile in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to inject arbitrary web script or HTML via the userDesc parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_17_77
CVE ID: CVE-2017-16768 State: PUBLISHED Published: 2017-12-27T17:00:00 Last Updated: 2024-08-05T20:35:20.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in User Policy editor in Synology MailPlus Server before 1.4.0-0415 allows remote authenticated users to inject arbitrary HTML via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_17_81
CVE ID: CVE-2017-16769 State: PUBLISHED Published: 2018-02-23T22:00:00Z Last Updated: 2024-09-17T00:36:17.171Z Vendors: Synology Products: Synology Photo Station Problem Types: CWE-359 Description: Exposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1-3458 allows remote attackers to obtain metadata from password-protected photographs via the map viewer mode. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_17_76
CVE ID: CVE-2017-16770 State: PUBLISHED Published: 2018-02-27T15:00:00Z Last Updated: 2024-09-16T19:30:32.292Z Vendors: Synology Products: Surveillance Station Problem Types: CWE-538 Description: File and directory information exposure vulnerability in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to obtain other user's sensitive files via the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_17_77
CVE ID: CVE-2017-16771 State: PUBLISHED Published: 2018-03-22T14:00:00Z Last Updated: 2024-09-16T18:38:52.712Z Vendors: Synology Products: Photo Station Problem Types: CWE-79 Description: Cross-site scripting (XSS) vulnerability in Log Viewer in Synology Photo Station before 6.8.3-3463 and before 6.3-2971 allows remote attackers to inject arbitrary web script or HTML via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_18_02
CVE ID: CVE-2017-16772 State: PUBLISHED Published: 2018-03-22T14:00:00Z Last Updated: 2024-09-17T04:23:49.491Z Vendors: Synology Products: Photo Station Problem Types: CWE-434 Description: Improper input validation vulnerability in SYNOPHOTO_Flickr_MultiUpload in Synology Photo Station before 6.8.3-3463 and before 6.3-2971 allows remote authenticated users to execute arbitrary codes via the prog_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_18_02
CVE ID: CVE-2017-16773 State: PUBLISHED Published: 2018-07-05T13:00:00Z Last Updated: 2024-09-17T00:10:52.432Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Synology Products: Universal Search Problem Types: CWE-285 Description: Improper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0.5-0135 allows remote authenticated users to bypass permission checks for directories in POSIX mode. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_18_27
CVE ID: CVE-2017-16774 State: PUBLISHED Published: 2019-04-01T14:24:13.925794Z Last Updated: 2024-09-16T18:18:02.621Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-79 Description: Cross-site scripting (XSS) vulnerability in SYNO.Core.PersonalNotification.Event in Synology DiskStation Manager (DSM) before 6.1.4-15217-3 allows remote authenticated users to inject arbitrary web script or HTML via the package parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_26
CVE ID: CVE-2017-16775 State: PUBLISHED Published: 2019-04-01T14:25:15.494166Z Last Updated: 2024-09-17T02:11:38.210Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Synology Products: SSO Server Problem Types: CWE-1021 Description: Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-0129 allows remote attackers to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_28
CVE ID: CVE-2017-16776 State: PUBLISHED Published: 2017-12-15T18:00:00 Last Updated: 2024-08-05T20:35:21.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Security researchers discovered an authentication bypass vulnerability in version 2.0.2 of the Conserus Workflow Intelligence application by McKesson Medical Imaging Company, which is now a Change Healthcare company. The attacker must send a malicious HTTP GET request to exploit the vulnerability. The vulnerability allows an attacker to bypass authentication and escalate privileges of valid users. An unauthenticated attacker can exploit the vulnerability and be granted limited access to other accounts. An authenticated attack
nticated attacker can exploit the vulnerability and be granted limited access to other accounts. An authenticated attacker can exploit the vulnerability and be granted access reserved for higher privilege users. Additional Analyst Notes: - CVE Program Container: References: - https://technical.nttsecurity.com/post/102emjm/conserus-workflow-intelligence-authentication-bypass-vulnerability
CVE ID: CVE-2017-16777 State: PUBLISHED Published: 2017-11-16T15:00:00 Last Updated: 2024-08-05T20:35:21.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake application directory and exploit the suid sudo helper in order to escalate to root. Additional Analyst Notes: - CVE Program Container: References: - https://m4.rkw.io/blog/cve201716777-local-root-privesc-in-hashicorp-vagrantvmwarefusion-503.html - https://www.exploit-db.com/exploits/43219/
CVE ID: CVE-2017-16778 State: PUBLISHED Published: 2019-12-24T13:54:56 Last Updated: 2024-08-05T20:35:20.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control weakness in the DTMF tone receiver of Fermax Outdoor Panel allows physical attackers to inject a Dual-Tone-Multi-Frequency (DTMF) tone to invoke an access grant that would allow physical access to a restricted floor/level. By design, only a residential unit owner may allow such an access grant. However, due to incorrect access control, an attacker could inject it via the speaker unit to perform an access grant to gain unauthorized access, as demonstrated by a loud DTMF tone representing '1' and a long '#' (6
form an access grant to gain unauthorized access, as demonstrated by a loud DTMF tone representing '1' and a long '#' (697 Hz and 1209 Hz, followed by 941 Hz and 1477 Hz). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/breaktoprotect/CVE-2017-16778-Intercom-DTMF-Injection
CVE ID: CVE-2017-16780 State: PUBLISHED Published: 2017-11-10T23:00:00 Last Updated: 2024-08-05T20:35:20.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://blog.mybb.com/2017/11/07/mybb-1-8-13-released-security-maintenance-release/ - https://www.exploit-db.com/exploits/43136/
CVE ID: CVE-2017-16781 State: PUBLISHED Published: 2017-11-10T23:00:00 Last Updated: 2024-08-05T20:35:21.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installer in MyBB before 1.8.13 has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://blog.mybb.com/2017/11/07/mybb-1-8-13-released-security-maintenance-release/ - https://www.exploit-db.com/exploits/43137/
CVE ID: CVE-2017-16782 State: PUBLISHED Published: 2017-11-10T23:00:00 Last Updated: 2024-08-05T20:35:21.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/home-assistant/home-assistant-polymer/pull/514
CVE ID: CVE-2017-16783 State: PUBLISHED Published: 2017-11-10T23:00:00 Last Updated: 2024-08-05T20:35:21.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.netsparker.com/web-applications-advisories/ns-17-032-server-side-template-injection-vulnerability-in-cms-made-simple/ - http://packetstormsecurity.com/files/159690/CMS-Made-Simple-2.1.6-Server-Side-Template-Injection.html
CVE ID: CVE-2017-16784 State: PUBLISHED Published: 2017-11-10T23:00:00 Last Updated: 2024-08-05T20:35:21.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.netsparker.com/web-applications-advisories/ns-17-031-reflected-xss-vulnerability-in-cms-made-simple/
CVE ID: CVE-2017-16785 State: PUBLISHED Published: 2017-11-10T23:00:00 Last Updated: 2024-08-05T20:35:21.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cacti 1.1.27 has reflected XSS via the PATH_INFO to host.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cacti/cacti/issues/1071 - http://www.securitytracker.com/id/1039774
CVE ID: CVE-2017-16786 State: PUBLISHED Published: 2017-12-19T15:00:00 Last Updated: 2024-08-05T20:35:20.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with certain privileges to read arbitrary files via (1) the ntpclientcounterlogfile parameter to cgi-bin/mainv2 or (2) vectors involving curl support of the "file" schema in the firmware update functionality. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/145388/Meinberg-LANTIME-Web-Configuration-Utility-6.16.008-Arbitrary-File-Read.html - http://secli
ormsecurity.com/files/145388/Meinberg-LANTIME-Web-Configuration-Utility-6.16.008-Arbitrary-File-Read.html - http://seclists.org/fulldisclosure/2017/Dec/50
CVE ID: CVE-2017-16787 State: PUBLISHED Published: 2017-12-15T18:00:00 Last Updated: 2024-08-05T20:35:21.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote attackers to read arbitrary files by leveraging failure to restrict URL access. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Dec/33 - https://www.exploit-db.com/exploits/43332/
CVE ID: CVE-2017-16788 State: PUBLISHED Published: 2017-12-15T18:00:00 Last Updated: 2024-08-05T20:35:21.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the "Upload Groupkey" functionality in the Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with Admin-User access to write to arbitrary files and consequently gain root privileges by uploading a file, as demonstrated by storing a file in the cron.d directory. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Dec/32
CVE ID: CVE-2017-16789 State: PUBLISHED Published: 2017-12-11T02:00:00 Last Updated: 2024-08-05T20:35:21.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Integration Matters nJAMS 3 before 3.2.0 Hotfix 7, as used in TIBCO BusinessWorks Process Monitor through 3.0.1.3 and other products, allows remote authenticated administrators to inject arbitrary web script or HTML via the users management panel of the web interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.on-x.com/sites/default/files/on-x_-_security_advisory_-_njams3_-_cve-2017-16789.pdf - https://pastebin.com/AxvP1v2Z - https://www.integration
t/files/on-x_-_security_advisory_-_njams3_-_cve-2017-16789.pdf - https://pastebin.com/AxvP1v2Z - https://www.integrationmatters.com/cms/upload/Resources/nJAMS_SecurityUpdate_CVE-2017-16789.pdf
CVE ID: CVE-2017-16790 State: PUBLISHED Published: 2018-08-06T21:00:00 Last Updated: 2024-08-05T20:35:21.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. When a form is submitted by the user, the request handler classes of the Form component merge POST data and uploaded files data into one array. This big array forms the data that are then bound to the form. At this stage there is no difference anymore between submitted POST data and uploaded files. A user can send a crafted HTTP request where the value of a "FileType" is sent as normal POST data that could be interpreted as a l
send a crafted HTTP request where the value of a "FileType" is sent as normal POST data that could be interpreted as a local file path on the server-side (for example, "file:///etc/passwd"). If the application did not perform any additional checks about the value submitted to the "FileType", the contents of the given file on the server could have been exposed to the attacker. Additional Analyst Notes: - CVE Program Container: References: - https://symfony.com/blog/cve-2017-16790-ensure-that-submitted-data-are-uploaded-files - https://www.debian.org/security/2018/dsa-4262
CVE ID: CVE-2017-16792 State: PUBLISHED Published: 2017-11-13T09:00:00 Last Updated: 2024-08-05T20:35:21.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject arbitrary web script via the "homepage" value of a ".gemspec" file, related to views/gem.erb and views/index.erb. Additional Analyst Notes: - CVE Program Container: References: - https://rubygems.org/gems/geminabox/versions/0.13.10 - https://github.com/geminabox/geminabox/blob/master/CHANGELOG.md - https://github.com/geminabox/geminabox/commit/f8429a9e364658459add170e4ebc7a5d3b4759e7
CVE ID: CVE-2017-16793 State: PUBLISHED Published: 2017-11-12T05:00:00Z Last Updated: 2024-09-17T03:32:47.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wav_convert2mono function in lib/wav.c in SWFTools 0.9.2 does not properly validate WAV data, which allows remote attackers to cause a denial of service (incorrect malloc and heap-based buffer overflow) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/47
CVE ID: CVE-2017-16794 State: PUBLISHED Published: 2017-11-12T05:00:00Z Last Updated: 2024-09-16T23:01:16.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: The png_load function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an erroneous png_load call that occurs because of incorrect integer data types in png2swf. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/50
CVE ID: CVE-2017-16796 State: PUBLISHED Published: 2017-11-12T18:00:00 Last Updated: 2024-08-05T20:35:21.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SWFTools 0.9.2, the png_load function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of service (invalid write and application crash) or possibly have unspecified other impact via vectors involving an IDAT tag in a crafted PNG file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/51
CVE ID: CVE-2017-16797 State: PUBLISHED Published: 2017-11-12T18:00:00 Last Updated: 2024-08-05T20:35:21.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SWFTools 0.9.2, the png_load function in lib/png.c does not properly validate an alloclen_64 multiplication of width and height values, which allows remote attackers to cause a denial of service (integer overflow, heap-based buffer overflow, and application crash) or possibly have unspecified other impact via a crafted PNG file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/51
CVE ID: CVE-2017-16798 State: PUBLISHED Published: 2017-11-12T18:00:00 Last Updated: 2024-08-05T20:35:21.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CMS Made Simple 2.2.3.1, the is_file_acceptable function in modules/FileManager/action.upload.php only blocks file extensions that begin or end with a "php" substring, which allows remote attackers to bypass intended access restrictions or trigger XSS via other extensions, as demonstrated by .phtml, .pht, .html, or .svg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bsmali4/cve/blob/master/CMS%20Made%20Simple%20UPLOAD%20FILE%20XSS.md
CVE ID: CVE-2017-16799 State: PUBLISHED Published: 2017-11-12T18:00:00 Last Updated: 2024-08-05T20:35:21.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CMS Made Simple 2.2.3.1, in modules/New/action.addcategory.php, stored XSS is possible via the m1_name parameter to admin/moduleinterface.php during addition of a category, a related issue to CVE-2010-3882. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bsmali4/cve/blob/master/CMS%20Made%20Simple%20Stored%20XSS.md
CVE ID: CVE-2017-16801 State: PUBLISHED Published: 2017-11-13T09:00:00 Last Updated: 2024-08-05T20:35:20.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Octopus Deploy 3.7.0-3.17.13 (fixed in 3.17.14) allows remote authenticated users to inject arbitrary web script or HTML via the Step Template Name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/3915