Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-20017 State: PUBLISHED Published: 2022-06-05T05:10:10.000Z Last Updated: 2025-04-15T14:32:47.576Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: The Next Generation of Genealogy Sitebuilding Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in The Next Generation of Genealogy Sitebuilding up to 11.1.0. This issue affects some unknown processing of the file /timeline2.php. The manipulation of the argument primaryID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 11.1.1 is ab
y be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 11.1.1 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.105833
CVE ID: CVE-2017-20018 State: PUBLISHED Published: 2022-06-09T22:35:49.000Z Last Updated: 2025-04-15T14:30:37.707Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: XAMPP Problem Types: CWE-427 Description: A vulnerability was found in XAMPP 7.1.1-0-VC14. It has been classified as problematic. Affected is an unknown function of the component Installer. The manipulation leads to privilege escalation. It is possible to launch the attack remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/142406/xampp-dllhijack.txt - https://vuldb.com/?id.100950
CVE ID: CVE-2017-20019 State: PUBLISHED Published: 2022-06-09T22:35:51.000Z Last Updated: 2025-04-15T14:30:27.726Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Solare Products: Solar-Log Problem Types: CWE-200 Description: A vulnerability classified as problematic was found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this vulnerability is an unknown functionality of the component Config Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CIS
his issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/58 - https://vuldb.com/?id.98929
CVE ID: CVE-2017-20020 State: PUBLISHED Published: 2022-06-09T22:35:52.000Z Last Updated: 2025-04-15T14:30:16.399Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Solare Products: Solar-Log Problem Types: CWE-352 Description: A vulnerability, which was classified as problematic, has been found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this issue is some unknown functionality. The manipulation leads to cross site request forgery. The attack may be launched remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/58 - https://vuldb.com/?id.98930
CVE ID: CVE-2017-20021 State: PUBLISHED Published: 2022-06-09T22:35:54.000Z Last Updated: 2025-04-15T14:29:58.849Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Solare Products: Solar-Log Problem Types: CWE-269 Description: A vulnerability, which was classified as critical, was found in Solare Solar-Log 2.8.4-56/3.5.2-85. This affects an unknown part of the component File Upload. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
s recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/58 - https://vuldb.com/?id.98931
CVE ID: CVE-2017-20022 State: PUBLISHED Published: 2022-06-09T22:35:55.000Z Last Updated: 2025-04-15T13:06:28.566Z Vendors: Solare Products: Solar-Log Problem Types: CWE-200 Description: A vulnerability has been found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to information disclosure. The attack can be initiated remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/58 - https://vuldb.com/?id.98932
CVE ID: CVE-2017-20023 State: PUBLISHED Published: 2022-06-09T22:35:57.000Z Last Updated: 2025-04-15T14:29:43.295Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Solare Products: Solar-Log Problem Types: CWE-269 Description: A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as critical. This issue affects some unknown processing of the component Network Config. The manipulation leads to privilege escalation. The attack may be initiated remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichme
recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/58 - https://vuldb.com/?id.98933
CVE ID: CVE-2017-20024 State: PUBLISHED Published: 2022-06-09T22:35:58.000Z Last Updated: 2025-04-15T14:29:30.573Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Solare Products: Solar-Log Problem Types: CWE-404 Description: A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://s
e affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/58 - https://vuldb.com/?id.98934
CVE ID: CVE-2017-20025 State: PUBLISHED Published: 2022-06-09T22:36:00.000Z Last Updated: 2025-04-15T14:29:19.711Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Solare Products: Solar-Log Problem Types: CWE-269 Description: A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Flash Memory. The manipulation leads to privilege escalation. The attack can be launched remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - C
this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/58 - https://vuldb.com/?id.98935
CVE ID: CVE-2017-20026 State: PUBLISHED Published: 2022-06-09T22:36:02.000Z Last Updated: 2025-04-15T14:29:11.794Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: HumHub Problem Types: CWE-80 Description: A vulnerability has been found in HumHub up to 1.0.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting (Reflected). The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes:
sion 1.1.1 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/47 - https://vuldb.com/?id.98923
CVE ID: CVE-2017-20027 State: PUBLISHED Published: 2022-06-09T22:36:03.000Z Last Updated: 2025-04-15T14:29:02.038Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: HumHub Problem Types: CWE-80 Description: A vulnerability was found in HumHub up to 1.0.1 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting (DOM). The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Co
e to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/47 - https://vuldb.com/?id.98924
CVE ID: CVE-2017-20028 State: PUBLISHED Published: 2022-06-09T22:36:05.000Z Last Updated: 2025-04-15T14:28:51.461Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: HumHub Problem Types: CWE-269 Description: A vulnerability was found in HumHub 0.20.1/1.0.0-beta.3. It has been classified as critical. This affects an unknown part. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. Upgrading to version 1.0.0 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.or
component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/48 - https://vuldb.com/?id.98925
CVE ID: CVE-2017-20029 State: PUBLISHED Published: 2022-06-10T09:30:28.000Z Last Updated: 2025-04-15T14:28:38.803Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: PHPList Problem Types: CWE-89 Description: A vulnerability was found in PHPList 3.2.6 and classified as critical. This issue affects some unknown processing of the file /lists/index.php of the component Edit Subscription. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. Additiona
Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/45 - https://vuldb.com/?id.98915
CVE ID: CVE-2017-20030 State: PUBLISHED Published: 2022-06-10T09:30:30.000Z Last Updated: 2025-04-15T14:28:27.362Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: PHPList Problem Types: CWE-89 Description: A vulnerability was found in PHPList 3.2.6. It has been classified as critical. Affected is an unknown function of the file /lists/admin/ of the component Sending Campain. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. Additi
d. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/45 - https://vuldb.com/?id.98916
CVE ID: CVE-2017-20031 State: PUBLISHED Published: 2022-06-10T09:30:31.000Z Last Updated: 2025-04-15T14:28:16.792Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: unspecified Products: PHPList Problem Types: CWE-200 Description: A vulnerability was found in PHPList 3.2.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument sortby with the input password leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected com
and may be used. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/45 - https://vuldb.com/?id.98917
CVE ID: CVE-2017-20032 State: PUBLISHED Published: 2022-06-10T09:30:33.000Z Last Updated: 2025-04-15T14:28:07.054Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: PHPList Problem Types: CWE-89 Description: A vulnerability was found in PHPList 3.2.6. It has been rated as critical. Affected by this issue is some unknown functionality of the component Subscription. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: -
n 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/45 - https://vuldb.com/?id.98918
CVE ID: CVE-2017-20033 State: PUBLISHED Published: 2022-06-10T09:30:34.000Z Last Updated: 2025-04-15T14:27:56.847Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: PHPList Problem Types: CWE-80 Description: A vulnerability classified as problematic has been found in PHPList 3.2.6. This affects an unknown part of the file /lists/admin/. The manipulation of the argument page with the input send\'\";><script>alert(8)</script> leads to cross site scripting (Reflected). It is possible to initiate the attack remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. Additional Analy
ng to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/46 - https://vuldb.com/?id.98919
CVE ID: CVE-2017-20034 State: PUBLISHED Published: 2022-06-10T09:30:36.000Z Last Updated: 2025-04-15T14:27:44.687Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: PHPList Problem Types: CWE-80 Description: A vulnerability classified as problematic was found in PHPList 3.2.6. This vulnerability affects unknown code of the file /lists/admin/ of the component List Name. The manipulation leads to cross site scripting (Persistent). The attack can be initiated remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnr
It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/46 - https://vuldb.com/?id.98920
CVE ID: CVE-2017-20035 State: PUBLISHED Published: 2022-06-10T09:30:37.000Z Last Updated: 2025-04-15T14:27:36.677Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: PHPList Problem Types: CWE-80 Description: A vulnerability, which was classified as problematic, has been found in PHPList 3.2.6. This issue affects some unknown processing of the file /lists/admin/ of the component Subscribe. The manipulation leads to cross site scripting (Persistent). The attack may be initiated remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Contain
address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/46 - https://vuldb.com/?id.98921
CVE ID: CVE-2017-20036 State: PUBLISHED Published: 2022-06-10T09:30:39.000Z Last Updated: 2025-04-15T14:27:25.674Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: PHPList Problem Types: CWE-80 Description: A vulnerability, which was classified as problematic, was found in PHPList 3.2.6. Affected is an unknown function of the file /lists/admin/ of the component Bounce Rule. The manipulation leads to cross site scripting (Persistent). It is possible to launch the attack remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: -
s this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/46 - https://vuldb.com/?id.98922
CVE ID: CVE-2017-20037 State: PUBLISHED Published: 2022-06-11T10:00:21.000Z Last Updated: 2025-04-15T14:27:16.117Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SICUNET Products: Access Controller Problem Types: CWE-269 Description: A vulnerability has been found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument c leads to privilege escalation. The attack can be launched remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/25 - https://vuldb.com/?id.98905
CVE ID: CVE-2017-20038 State: PUBLISHED Published: 2022-06-11T10:00:23.000Z Last Updated: 2025-04-15T14:27:05.409Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SICUNET Products: Access Controller Problem Types: CWE-269 Description: A vulnerability was found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this issue is some unknown functionality of the file card_scan_decoder.php. The manipulation of the argument No/door leads to privilege escalation. The attack may be launched remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/25 - htt
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/25 - https://vuldb.com/?id.98906
CVE ID: CVE-2017-20039 State: PUBLISHED Published: 2022-06-11T10:00:24.000Z Last Updated: 2025-04-15T14:26:55.035Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SICUNET Products: Access Controller Problem Types: CWE-259 Description: A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been classified as very critical. This affects an unknown part. The manipulation leads to weak authentication. It is possible to initiate the attack remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/25 - https://vuldb.com/?id.98907
CVE ID: CVE-2017-20040 State: PUBLISHED Published: 2022-06-11T10:00:26.000Z Last Updated: 2025-04-15T14:26:44.752Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SICUNET Products: Access Controller Problem Types: CWE-312 Description: A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been declared as problematic. This vulnerability affects unknown code of the component Password Storage. The manipulation leads to weak encryption. Attacking locally is a requirement. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/25 - https://vuldb.com/?id.98908
CVE ID: CVE-2017-20041 State: PUBLISHED Published: 2022-06-13T06:50:19.000Z Last Updated: 2025-04-15T14:25:56.127Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Ucweb Products: UC Browser Problem Types: CWE-1021 Description: A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title leads to improper restriction of rendered ui layers (URL). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
en disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/36 - https://vuldb.com/?id.98214
CVE ID: CVE-2017-20042 State: PUBLISHED Published: 2022-06-13T06:50:21.000Z Last Updated: 2025-04-15T14:25:48.274Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Navetti Products: PricePoint Problem Types: CWE-89 Description: A vulnerability has been found in Navetti PricePoint 4.6.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection (Blind). The attack can be launched remotely. Upgrading to version 4.7.0.0 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
rade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/24 - https://vuldb.com/?id.97861
CVE ID: CVE-2017-20043 State: PUBLISHED Published: 2022-06-13T06:50:23.000Z Last Updated: 2025-04-15T14:25:40.842Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Navetti Products: PricePoint Problem Types: CWE-80 Description: A vulnerability was found in Navetti PricePoint 4.6.0.0 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting (Persistent). The attack may be launched remotely. Upgrading to version 4.7.0.0 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
ded to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Mar/24 - https://vuldb.com/?id.97862