Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-14954 State: PUBLISHED Published: 2017-10-01T03:00:00Z Last Updated: 2024-09-17T00:50:43.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: The waitid implementation in kernel/exit.c in the Linux kernel through 4.13.4 accesses rusage data structures in unintended cases, which allows local users to obtain sensitive information, and bypass the KASLR protection mechanism, via a crafted system call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/6c85501f2fabcfc4fc6ed976543d252c4eaf4be9 - https://grsecurity.net/~spender/exploits/wait_for_kaslr_to_be_effective.c - https://twitter.com/grsecurity/status/91407986
tps://grsecurity.net/~spender/exploits/wait_for_kaslr_to_be_effective.c - https://twitter.com/grsecurity/status/914079864478666753 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6c85501f2fabcfc4fc6ed976543d252c4eaf4be9 - https://twitter.com/_argp/status/914021130712870912
CVE ID: CVE-2017-14955 State: PUBLISHED Published: 2017-10-01T05:00:00 Last Updated: 2024-08-05T19:42:22.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote attackers to obtain sensitive user information by reading a GUI crash report. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43021/ - http://mathias-kettner.com/check_mk_werks.php?edition_id=raw&branch=1.2.8 - https://mathias-kettner.de/check_mk_werks.php?werk_id=5208&HTML=yes
CVE ID: CVE-2017-14956 State: PUBLISHED Published: 2017-10-18T18:00:00 Last Updated: 2024-08-05T19:42:22.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: AlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting generated reports via the "/ossim/report/wizard_email.php" script. Besides offering an export via a local download, the script also offers the possibility to send out any report via email to a given address (either in PDF or XLS format). Since there is no anti-CSRF token protecting this functionality, it is vulnerable to Cross-Site Request Forgery attacks. Additional Analyst Notes: - CVE Program Container: References: - http://packetst
to Cross-Site Request Forgery attacks. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/144617/AlienVault-USM-5.4.2-Cross-Site-Request-Forgery.html - https://www.exploit-db.com/exploits/42988/ - https://www.rcesecurity.com/2017/10/cve-2017-14956-alienvault-usm-leaks-sensitive-compliance-information-via-csrf/ - http://www.securityfocus.com/bid/101284 - http://seclists.org/fulldisclosure/2017/Oct/32 - http://www.securityfocus.com/archive/1/541342/100/0/threaded
CVE ID: CVE-2017-14957 State: PUBLISHED Published: 2017-10-01T15:00:00 Last Updated: 2024-08-05T19:42:22.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS vulnerability via a comment in inc/conv.php in BlogoText before 3.7.6 allows an unauthenticated attacker to inject JavaScript. If the victim is an administrator, an attacker can (for example) change global settings or create/delete posts. It is also possible to execute JavaScript against unauthenticated users of the blog. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BlogoText/blogotext/issues/318 - https://github.com/BlogoText/blogotext/pull/320/commits/1a283cc8ad2cda37e0a6aff
hub.com/BlogoText/blogotext/issues/318 - https://github.com/BlogoText/blogotext/pull/320/commits/1a283cc8ad2cda37e0a6aff8f4558b98ecbfd9c2 - https://github.com/BlogoText/blogotext/releases/tag/3.7.6 - http://openwall.com/lists/oss-security/2017/10/01/1
CVE ID: CVE-2017-14958 State: PUBLISHED Published: 2017-10-01T15:00:00 Last Updated: 2024-08-05T19:42:22.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib.php in PivotX 2.3.11 does not properly block uploads of dangerous file types by admin users, which allows remote PHP code execution via an upload of a .php file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/pivot-weblog/code/4490/
CVE ID: CVE-2017-14960 State: PUBLISHED Published: 2018-01-04T17:00:00 Last Updated: 2024-08-05T19:42:22.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: xDashboard in OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 has SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43422/ - http://seclists.org/fulldisclosure/2018/Jan/6 - http://www.securityfocus.com/bid/102419
CVE ID: CVE-2017-14961 State: PUBLISHED Published: 2017-11-15T16:00:00 Last Updated: 2024-08-05T19:42:22.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300000c. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/144955/IKARUS-AntiVirus-2.16.7-Privilege-Escalation.html - https://theevilbit.blogspot.co.uk/2017/11/turning-cve-2017-14961-ikarus-antivirus.html - https://www.exploit-db.com/exploits/43139/ - https://www.ikarussecurity.com/about-ikarus/security-blog/vulnerability-in-windo
://www.exploit-db.com/exploits/43139/ - https://www.ikarussecurity.com/about-ikarus/security-blog/vulnerability-in-windows-antivirus-products-ik-sa-2017-0002/
CVE ID: CVE-2017-14962 State: PUBLISHED Published: 2017-12-20T18:00:00 Last Updated: 2024-08-05T19:42:22.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Out of Bounds Write vulnerability because of not validating input values from IOCtl 0x83000058, a related issue to CVE-2017-17112. Additional Analyst Notes: - CVE Program Container: References: - http://www.greyhathacker.net/?p=995
CVE ID: CVE-2017-14963 State: PUBLISHED Published: 2017-12-20T18:00:00 Last Updated: 2024-08-05T19:42:22.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x83000058. Additional Analyst Notes: - CVE Program Container: References: - http://www.greyhathacker.net/?p=995
CVE ID: CVE-2017-14964 State: PUBLISHED Published: 2017-12-20T18:00:00 Last Updated: 2024-08-05T19:42:22.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300005c. Additional Analyst Notes: - CVE Program Container: References: - http://www.greyhathacker.net/?p=995
CVE ID: CVE-2017-14965 State: PUBLISHED Published: 2017-12-20T18:00:00 Last Updated: 2024-08-05T19:42:22.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x830000cc. Additional Analyst Notes: - CVE Program Container: References: - http://www.greyhathacker.net/?p=995
CVE ID: CVE-2017-14966 State: PUBLISHED Published: 2017-12-20T18:00:00 Last Updated: 2024-08-05T19:42:22.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x830000c0. Additional Analyst Notes: - CVE Program Container: References: - http://www.greyhathacker.net/?p=995
CVE ID: CVE-2017-14967 State: PUBLISHED Published: 2017-12-20T18:00:00 Last Updated: 2024-08-05T19:42:22.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x83000080. Additional Analyst Notes: - CVE Program Container: References: - http://www.greyhathacker.net/?p=995
CVE ID: CVE-2017-14968 State: PUBLISHED Published: 2017-12-20T18:00:00 Last Updated: 2024-08-05T19:42:22.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x830000c4, a related issue to CVE-2017-17113. Additional Analyst Notes: - CVE Program Container: References: - http://www.greyhathacker.net/?p=995
CVE ID: CVE-2017-14969 State: PUBLISHED Published: 2017-12-20T18:00:00 Last Updated: 2024-08-05T19:42:22.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x83000084, a related issue to CVE-2017-17114. Additional Analyst Notes: - CVE Program Container: References: - http://www.greyhathacker.net/?p=995
CVE ID: CVE-2017-14970 State: PUBLISHED Published: 2017-10-01T20:00:00 Last Updated: 2024-08-05T19:42:22.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow group mod messages. NOTE: the vendor disputes the relevance of this report, stating "it can only be triggered by an OpenFlow controller, but OpenFlow controllers have much more direct and powerful ways to force Open vSwitch to allocate memory, such as by inserting flows into the flow table." Additional Analyst Notes: - CVE Program Container: References: - https://mail.openvswitch.org/pipermail/ovs-dev/2017-Se
Additional Analyst Notes: - CVE Program Container: References: - https://mail.openvswitch.org/pipermail/ovs-dev/2017-September/339085.html - https://mail.openvswitch.org/pipermail/ovs-dev/2017-September/339086.html
CVE ID: CVE-2017-14971 State: PUBLISHED Published: 2017-10-09T05:00:00 Last Updated: 2024-08-05T19:42:22.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted Microsoft Office document containing a link that has a UNC pathname associated with an attacker-controller server. In one specific scenario, the attacker provides an Excel spreadsheet, and the attacker-controller server receives the victim's NetNTLMv2 hash. Additional Analyst Notes: - CVE Program Container: References: - https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/InFocus%20Mond
ogram Container: References: - https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/InFocus%20Mondopad%20%3C%202.2.08%20-%20CVE-2017-14971
CVE ID: CVE-2017-14972 State: PUBLISHED Published: 2017-10-09T05:00:00 Last Updated: 2024-08-05T19:42:22.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-Delete, and then using Task Manager to reach a file. Additional Analyst Notes: - CVE Program Container: References: - https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/InFocus%20Mondopad%20%3C%202.2.08%20-%20CVE-2017-14972
CVE ID: CVE-2017-14973 State: PUBLISHED Published: 2017-10-09T05:00:00 Last Updated: 2024-08-05T19:42:22.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: IDenticard Two-Reader Controller Configuration Manager 1.18.8 (396) is vulnerable to Stored Cross-Site Scripting (XSS) via the notes field in /~user_handler?file=logged_in.shtm (aka the edit user page). Additional Analyst Notes: - CVE Program Container: References: - https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/IDenticard%20Two-Reader%20Controller%20%3C%201.18.8%20-%20CVE-2017-14973
CVE ID: CVE-2017-14974 State: PUBLISHED Published: 2017-10-01T23:00:00Z Last Updated: 2024-09-16T18:55:33.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain canonicalization step, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=22163 - https://sourceware.org/git/gitweb.cgi?p=bin
ainer: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=22163 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=e70c19e3a4c26e9c1ebf0c9170d105039b56d7cf
CVE ID: CVE-2017-14975 State: PUBLISHED Published: 2017-10-01T23:00:00 Last Updated: 2024-08-05T19:42:22.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability because a data structure is not initialized, which allows an attacker to launch a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.freedesktop.org/show_bug.cgi?id=102653 - https://www.debian.org/security/2018/dsa-4079 - https://lists.debian.org/debian-lts-announce/2017/11/msg00023.html
CVE ID: CVE-2017-14976 State: PUBLISHED Published: 2017-10-01T23:00:00 Last Updated: 2024-08-05T19:42:22.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a heap-based buffer over-read vulnerability if an out-of-bounds font dictionary index is encountered, which allows an attacker to launch a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://cgit.freedesktop.org/poppler/poppler/commit/?id=da63c35549e8852a410946ab016a3f25ac701bdf - https://www.debian.org/security/2018/dsa-4079 - https://bugzilla.freedesktop.org/show_bug.cgi?id=102724 - https://lists.deb
ps://www.debian.org/security/2018/dsa-4079 - https://bugzilla.freedesktop.org/show_bug.cgi?id=102724 - https://lists.debian.org/debian-lts-announce/2017/11/msg00023.html
CVE ID: CVE-2017-14977 State: PUBLISHED Published: 2017-10-01T23:00:00 Last Updated: 2024-08-05T19:42:22.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table pointer, which allows an attacker to launch a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4079 - https://bugs.freedesktop.org/show_bug.cgi?id=103045 - https://lists.debian.org/debian-lts-announce/2017/11/msg00023.html
CVE ID: CVE-2017-14979 State: PUBLISHED Published: 2017-10-02T17:00:00 Last Updated: 2024-08-05T19:42:22.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gxlcms uses an unsafe character-replacement approach in an attempt to restrict access, which allows remote attackers to read arbitrary files via modified pathnames in the s parameter to index.php, related to Lib/Admin/Action/TplAction.class.php and Lib/Admin/Common/function.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Blck4/blck4/blob/master/Gxlcms%20POC.php
CVE ID: CVE-2017-14980 State: PUBLISHED Published: 2017-10-09T14:00:00 Last Updated: 2024-08-05T19:42:22.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/144452/Sync-Breeze-Enterprise-10.0.28-Buffer-Overflow.html
CVE ID: CVE-2017-14981 State: PUBLISHED Published: 2017-10-02T01:00:00Z Last Updated: 2024-09-17T00:06:38.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) was discovered in ATutor before 2.2.3. The vulnerability exists due to insufficient filtration of data (url in /mods/_standard/rss_feeds/edit_feed.php). An attacker could inject arbitrary HTML and script code into a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/atutor/ATutor/issues/135 - https://github.com/atutor/ATutor/commit/9292360c8b3898d0990983269f110cef21729090
CVE ID: CVE-2017-14983 State: PUBLISHED Published: 2017-10-02T05:00:00 Last Updated: 2024-08-05T19:42:22.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the object parameter to module/admin_conf/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_conf_index%20xss
CVE ID: CVE-2017-14984 State: PUBLISHED Published: 2017-10-02T05:00:00 Last Updated: 2024-08-05T19:42:22.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the bp_name parameter to /module/admin_bp/add_services.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_bp_add_services_XSS
CVE ID: CVE-2017-14985 State: PUBLISHED Published: 2017-10-02T05:00:00 Last Updated: 2024-08-05T19:42:22.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the url parameter to module/module_frame/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jsj730sos/cve/blob/master/Eonweb_module_module_frame_module_frame.php%20xss
CVE ID: CVE-2017-14988 State: PUBLISHED Published: 2017-10-02T05:00:00 Last Updated: 2024-08-05T19:42:22.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openexr/openexr/issues/248 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00063.html
CVE ID: CVE-2017-14989 State: PUBLISHED Published: 2017-10-02T05:00:00 Last Updated: 2024-08-05T19:42:22.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FT_Done_Glyph function (from FreeType 2) is called at an incorrect place in the ImageMagick code. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4040 - https://usn.ubuntu.com/3681-1/ - https://www.debian.org/security/2017/dsa-4032 - https://github.com/ImageMagick/ImageMagick/issues/781
CVE ID: CVE-2017-14990 State: PUBLISHED Published: 2017-10-02T17:00:00 Last Updated: 2024-08-05T19:42:22.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress 4.8.2 stores cleartext wp_signups.activation_key values (but stores the analogous wp_users.user_activation_key values as hashes), which might make it easier for remote attackers to hijack unactivated user accounts by leveraging database read access (such as access gained through an unspecified SQL injection vulnerability). Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-3997 - http://www.securitytracker.com/id/1039554 - https://core.trac.wordpress.org/ticket/
.debian.org/security/2017/dsa-3997 - http://www.securitytracker.com/id/1039554 - https://core.trac.wordpress.org/ticket/38474
CVE ID: CVE-2017-14991 State: PUBLISHED Published: 2017-10-03T07:00:00 Last Updated: 2024-08-05T19:42:22.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4 allows local users to obtain sensitive information from uninitialized kernel heap-memory locations via an SG_GET_REQUEST_TABLE ioctl call for /dev/sg0. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.4 - https://github.com/torvalds/linux/commit/3e0097499839e0fe3af380410eababe5a47c4cf9 - http://www.securityfocus.com/bid/101187 - https://usn.ubuntu.com/3754-1/ - http://git.kern
0fe3af380410eababe5a47c4cf9 - http://www.securityfocus.com/bid/101187 - https://usn.ubuntu.com/3754-1/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3e0097499839e0fe3af380410eababe5a47c4cf9
CVE ID: CVE-2017-14992 State: PUBLISHED Published: 2017-11-01T17:00:00 Last Updated: 2024-08-05T19:42:22.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0, 1.10.3, 17.03.0, 17.03.1, 17.03.2, 17.06.0, 17.06.1, 17.06.2, 17.09.0, and earlier allows a remote attacker to cause a Denial of Service via a crafted image layer payload, aka gzip bombing. Additional Analyst Notes: - CVE Program Container: References: - https://blog.cloudpassage.com/2017/10/13/discovering-docker-cve-2017-14992/ - https://github.com/moby/moby/issues/35075
CVE ID: CVE-2017-14993 State: PUBLISHED Published: 2018-02-20T23:00:00 Last Updated: 2024-08-05T19:42:22.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: OXID eShop Community Edition before 6.0.0 RC3 (development), 4.10.x before 4.10.6 (maintenance), and 4.9.x before 4.9.11 (legacy), Enterprise Edition before 6.0.0 RC3 (development), 5.2.x before 5.2.11 (legacy), and 5.3.x before 5.3.6 (maintenance), and Professional Edition before 6.0.0 RC3 (development), 4.9.x before 4.9.11 (legacy) and 4.10.x before 4.10.6 (maintenance) allow remote attackers to crawl specially crafted URLs (aka "forced browsing") in order to overflow the database of the shop and consequently make it stop w
ially crafted URLs (aka "forced browsing") in order to overflow the database of the shop and consequently make it stop working. Prerequisite: the shop allows rendering empty categories to the storefront via an admin option. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.oxid-esales.com/view.php?id=6678 - https://oxidforge.org/en/security-bulletin-2017-002.html
CVE ID: CVE-2017-14994 State: PUBLISHED Published: 2017-10-03T07:00:00 Last Updated: 2024-08-05T19:42:22.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: ReadDCMImage in coders/dcm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted DICOM image, related to the ability of DCM_ReadNonNativeImages to yield an image list with zero frames. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/graphicsmagick/bugs/512/ - http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=b3eca3eaa264 - http://www.securityfocus.com/bid/101182 - https://www.debian.org/security/2018