Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-11438 State: PUBLISHED Published: 2017-08-02T19:00:00 Last Updated: 2024-08-05T18:12:39.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab Community Edition (CE) and Enterprise Edition (EE) before 9.0.11, 9.1.8, 9.2.8 allow an authenticated user with the ability to create a group to add themselves to any project that is inside a subgroup. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2017/07/19/gitlab-9-dot-3-dot-8-released/
CVE ID: CVE-2017-11439 State: PUBLISHED Published: 2017-07-19T07:00:00 Last Updated: 2024-08-05T18:12:40.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter. Additional Analyst Notes: - CVE Program Container: References: - https://xc0re.net/2017/07/03/sitecore-cms-v-8-2-multiple-vulnerabilties/ - https://packetstormsecurity.com/files/143357/Sitecore-CMS-8.2-Cross-Site-Scripting-File-Disclosure.html
CVE ID: CVE-2017-11440 State: PUBLISHED Published: 2017-07-19T07:00:00 Last Updated: 2024-08-05T18:12:39.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi parameter and the admin/LinqScratchPad.aspx Reference parameter. Additional Analyst Notes: - CVE Program Container: References: - https://xc0re.net/2017/07/03/sitecore-cms-v-8-2-multiple-vulnerabilties/ - https://packetstormsecurity.com/files/143357/Sitecore-CMS-8.2-Cross-Site-Scripting-File-Disclosure.html
CVE ID: CVE-2017-11441 State: PUBLISHED Published: 2017-07-19T07:00:00 Last Updated: 2024-08-05T18:12:39.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a locale filename, aka SEC-297. Additional Analyst Notes: - CVE Program Container: References: - https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/
CVE ID: CVE-2017-11444 State: PUBLISHED Published: 2017-07-19T07:00:00 Last Updated: 2024-08-05T18:12:39.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET array. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/intelliants/subrion/issues/479
CVE ID: CVE-2017-11445 State: PUBLISHED Published: 2017-07-19T07:00:00 Last Updated: 2024-08-05T18:12:39.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $_POST array. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/intelliants/subrion/issues/480
CVE ID: CVE-2017-11446 State: PUBLISHED Published: 2017-07-19T07:00:00 Last Updated: 2024-08-05T18:12:39.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has an infinite loop vulnerability that can cause CPU exhaustion via a crafted PES file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99964 - https://github.com/ImageMagick/ImageMagick/issues/537 - https://www.debian.org/security/2017/dsa-4019 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
CVE ID: CVE-2017-11447 State: PUBLISHED Published: 2017-07-19T07:00:00 Last Updated: 2024-08-05T18:12:39.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadSCREENSHOTImage function in coders/screenshot.c in ImageMagick before 7.0.6-1 has memory leaks, causing denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/556 - http://www.securityfocus.com/bid/99948 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867897 - https://github.com/ImageMagick/ImageMagick/commit/72a50e400d98d7a2fd610caedfeb9af043dc5582
CVE ID: CVE-2017-11448 State: PUBLISHED Published: 2017-07-19T07:00:00 Last Updated: 2024-08-05T18:12:39.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867893 - https://github.com/ImageMagick/ImageMagick/issues/556 - https://github.com/ImageMagick/ImageMagick/commit/f6463ca9588579633bbaed9460899d892aa3c64a
CVE ID: CVE-2017-11449 State: PUBLISHED Published: 2017-07-19T07:00:00 Last Updated: 2024-08-05T18:12:39.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an image received from stdin. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/b007dd3a048097d8f58949297f5b434612e1e1a3 - https://github.com/ImageMagick/ImageMagick/issues/556 - http://www.securityfocus.com/bid/99958 - https://
434612e1e1a3 - https://github.com/ImageMagick/ImageMagick/issues/556 - http://www.securityfocus.com/bid/99958 - https://github.com/ImageMagick/ImageMagick/commit/529ff26b68febb2ac03062c58452ea0b4c6edbc1 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867896
CVE ID: CVE-2017-11450 State: PUBLISHED Published: 2017-07-19T07:00:00 Last Updated: 2024-08-05T18:12:39.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via JPEG data that is too short. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2017-11450 - https://github.com/ImageMagick/ImageMagick/issues/556 - https://github.com/ImageMagick/ImageMagick/commit/948356eec65aea91995d4b7cc487d197d2c5f602 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867894
CVE ID: CVE-2017-11455 State: PUBLISHED Published: 2017-08-29T15:00:00 Last Updated: 2024-08-05T18:12:40.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: diag.cgi in Pulse Connect Secure 8.2R1 through 8.2R5, 8.1R1 through 8.1R10 and Pulse Policy Secure 5.3R1 through 5.3R5, 5.2R1 through 5.2R8, and 5.1R1 through 5.1R10 allow remote attackers to hijack the authentication of administrators for requests to start tcpdump, related to the lack of anti-CSRF tokens. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039242 - http://www.securityfocus.com/bid/100530 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40793
CVE ID: CVE-2017-11456 State: PUBLISHED Published: 2017-07-19T07:00:00Z Last Updated: 2024-09-16T19:25:46.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Geneko GWR routers allow directory traversal sequences starting with a /../ substring, as demonstrated by unauthenticated read access to the configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.securiteam.com/index.php/archives/3317#more-3317
CVE ID: CVE-2017-11457 State: PUBLISHED Published: 2017-07-25T18:00:00 Last Updated: 2024-08-05T18:12:39.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in com.sap.km.cm.ice in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request, aka SAP Security Note 2387249. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97572 - https://erpscan.io/advisories/erpscan-17-018-sap-netweaver-java-7-5-xxe-com-sap-km-cm-ice/
CVE ID: CVE-2017-11458 State: PUBLISHED Published: 2017-07-25T18:00:00 Last Updated: 2024-08-05T18:12:39.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the ctcprotocol/Protocol servlet in SAP NetWeaver AS JAVA 7.3 allows remote attackers to inject arbitrary web script or HTML via the sessionID parameter, aka SAP Security Note 2406783. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-17-017-sap-netweaver-java-7-3-java-xss-ctcprotocolprotocol-servlet/ - http://www.securityfocus.com/bid/97566
CVE ID: CVE-2017-11459 State: PUBLISHED Published: 2017-07-25T18:00:00 Last Updated: 2024-08-05T18:12:39.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2) write to arbitrary files and consequently execute arbitrary code via an fdir command, aka SAP Security Note 2419592. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-17-019-sap-trex-rce/
CVE ID: CVE-2017-11460 State: PUBLISHED Published: 2017-07-25T18:00:00 Last Updated: 2024-08-05T18:12:39.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the DataArchivingService servlet in SAP NetWeaver Portal 7.4 allows remote attackers to inject arbitrary web script or HTML via the responsecode parameter to shp/shp_result.jsp, aka SAP Security Note 2308535. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-17-016-sap-netweaver-java-7-4-dataarchivingservice-servlet-xss/ - http://www.securityfocus.com/bid/97565 - http://www.securityfocus.com/bid/101826
CVE ID: CVE-2017-11461 State: PUBLISHED Published: 2017-11-09T19:00:00Z Last Updated: 2024-09-17T00:26:39.580Z Vendors: NetApp Products: OnCommand Unified Manager Problem Types: Clickjacking Description: NetApp OnCommand Unified Manager for 7-mode (core package) versions prior to 5.2.1 are susceptible to a clickjacking or "UI redress attack" which could be used to cause a user to perform an unintended action in the user interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101778 - https://security.netapp.com/advisory/ntap-20171107-0001/
CVE ID: CVE-2017-11462 State: PUBLISHED Published: 2017-09-13T16:00:00 Last Updated: 2024-08-05T18:12:39.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/krb5/krb5/commit/56f7b1bc95a2a3eeb420e069e7655fb181ade5cf - http://krbdev.mit.edu/rt/Ticket/Display.html?id=8598 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2FPRUP4YVOEBGEROUYWZFEQ64HTMGNED/ - https://bugzilla.redhat.com/
list/package-announce%40lists.fedoraproject.org/message/2FPRUP4YVOEBGEROUYWZFEQ64HTMGNED/ - https://bugzilla.redhat.com/show_bug.cgi?id=1488873
CVE ID: CVE-2017-11463 State: PUBLISHED Published: 2017-12-11T06:00:00 Last Updated: 2024-08-05T18:12:39.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ivanti Service Desk (formerly LANDESK Management Suite) versions between 2016.3 and 2017.3, an Unrestricted Direct Object Reference leads to referencing/updating objects belonging to other users. In other words, a normal user can send requests to a specific URI with the target user's username in an HTTP payload in order to retrieve a key/token and use it to access/update objects belonging to other users. Such objects could be user profiles, tickets, incidents, etc. Additional Analyst Notes: - CVE Program Container: Referen
Such objects could be user profiles, tickets, incidents, etc. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/lazyhack3r/439e92419c552b5dc82b2f5e832c8bfb - https://community.ivanti.com/docs/DOC-66252
CVE ID: CVE-2017-11464 State: PUBLISHED Published: 2017-07-19T21:00:00 Last Updated: 2024-08-05T18:12:39.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=783835 - https://git.gnome.org/browse/librsvg/commit/?id=ecf9267a24b2c3c0cd211dbdfa9ef2232511972a - http://www.securityfocus.com/bid/99956 - https://github.com/GNOME/librsvg/commit/ecf9267a24b2c3c0cd211dbdfa9ef2232511972a - h
//www.securityfocus.com/bid/99956 - https://github.com/GNOME/librsvg/commit/ecf9267a24b2c3c0cd211dbdfa9ef2232511972a - https://lists.debian.org/debian-lts-announce/2020/07/msg00016.html - https://usn.ubuntu.com/4436-1/
CVE ID: CVE-2017-11465 State: PUBLISHED Published: 2017-07-19T21:00:00Z Last Updated: 2024-09-16T17:15:26.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parser_yyerror function in the UTF-8 parser in Ruby 2.4.1 allows attackers to cause a denial of service (invalid write or read) or possibly have unspecified other impact via a crafted Ruby script, related to the parser_tokadd_utf8 function in parse.y. NOTE: this might have security relevance as a bypass of a $SAFE protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ruby-lang.org/issues/13742 - https://bugs.ruby-lang.org/projects/ruby-trunk/repository/revisions/59344
CVE ID: CVE-2017-11466 State: PUBLISHED Published: 2017-07-20T00:00:00 Last Updated: 2024-08-05T18:12:39.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remote authenticated administrators to upload .jsp files to arbitrary locations via directory traversal sequences in the fieldName parameter to servlets/ajax_file_upload. This results in arbitrary code execution by requesting the .jsp file at a /assets URI. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/33 - https://github.com/dotCMS/core/issues/12131
am Container: References: - http://seclists.org/fulldisclosure/2017/Jul/33 - https://github.com/dotCMS/core/issues/12131 - https://packetstormsecurity.com/files/143383/dotcms411-shell.txt
CVE ID: CVE-2017-11467 State: PUBLISHED Published: 2017-07-20T00:00:00 Last Updated: 2024-08-05T18:12:39.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.heavensec.org/?p=1703 - https://github.com/orientechnologies/orientdb/wiki/OrientDB-2.2-Release-Notes#2223---july-11-2017
CVE ID: CVE-2017-11468 State: PUBLISHED Published: 2017-07-20T23:00:00 Last Updated: 2024-08-05T18:12:39.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remote attackers to cause a denial of service (memory consumption) via the manifest endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:2603 - https://github.com/docker/distribution/releases/tag/v2.6.2 - https://github.com/docker/distribution/pull/2340 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00047.html
CVE ID: CVE-2017-11469 State: PUBLISHED Published: 2017-07-20T04:00:00 Last Updated: 2024-08-05T18:12:39.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the file_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.securiteam.com/index.php/archives/3223#more-3223
CVE ID: CVE-2017-11470 State: PUBLISHED Published: 2017-07-20T04:00:00 Last Updated: 2024-08-05T18:12:39.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.securiteam.com/index.php/archives/3223#more-3223
CVE ID: CVE-2017-11471 State: PUBLISHED Published: 2017-07-20T04:00:00 Last Updated: 2024-08-05T18:12:39.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.securiteam.com/index.php/archives/3223#more-3223
CVE ID: CVE-2017-11472 State: PUBLISHED Published: 2017-07-20T04:00:00 Last Updated: 2024-08-05T18:12:39.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: The acpi_ns_terminate() function in drivers/acpi/acpica/nsutils.c in the Linux kernel before 4.12 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3619-2/ - https://usn.ubuntu.com/3754-1/ - https://github.com/torvalds/linux/commit/3b2d69114fefa474fca542e5
.ubuntu.com/3619-2/ - https://usn.ubuntu.com/3754-1/ - https://github.com/torvalds/linux/commit/3b2d69114fefa474fca542e51119036dceb4aa6f - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3b2d69114fefa474fca542e51119036dceb4aa6f - https://github.com/acpica/acpica/commit/a23325b2e583556eae88ed3f764e457786bf4df6 - https://usn.ubuntu.com/3619-1/
CVE ID: CVE-2017-11473 State: PUBLISHED Published: 2017-07-20T04:00:00 Last Updated: 2024-08-05T18:12:40.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2 allows local users to gain privileges via a crafted ACPI table. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3754-1/ - https://source.android.com/security/bulletin/pixel/2018-01-01 - https://access.redhat.com/errata/RHSA-2018:0654 - http://www.securityfocus.com/bid/100010 - https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=dad5ab0db8deac535d03e3
rityfocus.com/bid/100010 - https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=dad5ab0db8deac535d03e3fe3d8f2892173fa6a4 - https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=70ac67826602edf8c0ccb413e5ba7eacf597a60c - https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=96301209473afd3f2f274b91cb7082d161b9be65
CVE ID: CVE-2017-11474 State: PUBLISHED Published: 2017-07-20T04:00:00 Last Updated: 2024-08-05T18:12:39.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer_softwareversion.class.php, exploitable via ajax/common.tabs.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/issues/2475
CVE ID: CVE-2017-11475 State: PUBLISHED Published: 2017-07-20T04:00:00 Last Updated: 2024-08-05T18:12:39.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/issues/2476
CVE ID: CVE-2017-11478 State: PUBLISHED Published: 2017-07-20T16:00:00Z Last Updated: 2024-09-17T02:00:40.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed DJVU image. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867826 - https://github.com/ImageMagick/ImageMagick/issues/528
CVE ID: CVE-2017-11479 State: PUBLISHED Published: 2017-09-28T19:00:00 Last Updated: 2024-08-05T18:12:39.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.elastic.co/t/x-pack-alerting-and-kibana-5-6-1-security-update/101884 - http://www.openwall.com/lists/oss-security/2019/10/24/1 - http://www.openwall.com/lists/oss-security/2019/10/29/3
CVE ID: CVE-2017-11480 State: PUBLISHED Published: 2017-12-08T18:00:00 Last Updated: 2024-08-05T18:12:39.898Z Vendors: Elastic Products: Packetbeat Problem Types: CWE-404 Description: Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening for PostgreSQL traffic and a user is able to send arbitrary network traffic to the monitored port, the attacker could prevent Packetbeat from properly logging other PostgreSQL traffic. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.elastic.co/t/beats-5-6-4-security-update/106739
CVE ID: CVE-2017-11481 State: PUBLISHED Published: 2017-12-08T18:00:00 Last Updated: 2024-08-05T18:12:39.948Z Vendors: Elastic Products: Kibana Problem Types: CWE-79 Description: Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.elastic.co/t/kibana-6-0-1-and-5-6-5-security-update/110571
CVE ID: CVE-2017-11482 State: PUBLISHED Published: 2017-12-08T18:00:00 Last Updated: 2024-08-05T18:12:39.856Z Vendors: Elastic Products: Kibana Problem Types: CWE-601 Description: The Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana versions before 6.0.1 and 5.6.5 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.elastic.co/t/kibana-6-0-1-and-5-6-5-security-update/110571
CVE ID: CVE-2017-11483 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-11484 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-11485 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-11486 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-11487 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-11488 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-11489 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-11490 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.