rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-5781 
A CSRF vulnerability in HPE Matrix Operating Environment version v7.6 was found.
Problem types: description: CSRF
Affected products: vendor: Hewlett Packard Enterprise
product: Matrix Operating Environment
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5782 
A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found.
Problem types: description: missing HSTS Header
Affected products: vendor: Hewlett Packard Enterprise
product: Matrix Operating Environment
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5783 
A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found.
Problem types: description: clickjacking
Affected products: vendor: Hewlett Packard Enterprise
product: Matrix Operating Environment
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5784 
A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found.
Problem types: description: missing HSTS Header
Affected products: vendor: Hewlett Packard Enterprise
product: Matrix Operating Environment
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5785 
A remote information disclosure vulnerability in HPE Matrix Operating Environment version v7.6 was found.
Problem types: description: remote Information Disclosure
Affected products: vendor: Hewlett Packard Enterprise
product: Matrix Operating Environment
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5786 
A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14
Problem types: description: Local Unauthorized Data Modification
Affected products: vendor: Hewlett Packard Enterprise
product: OfficeConnect Network Switches
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5787 
A remote denial of service vulnerability in HPE Version Control Repository Manager (VCRM) in all versions prior to 7.6 was found.
Problem types: description: remote denial of service
Affected products: vendor: Hewlett Packard Enterprise
product: Version Control Repository Manager (VCRM)
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5788 
A Local Disclosure of Sensitive Information vulnerability in HPE NonStop Software Essentials version T0894 T0894H02 through T0894H02^AAI was found.
Problem types: description: Local Disclosure of Sensitive Information
Affected products: vendor: Hewlett Packard Enterprise
product: NonStop Software Essentials
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5789 
HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. At least in LoadRunner, this is a libxdrutil.dll mxdr_string heap-based buffer overflow.
Problem types: description: Remote Code Execution
Affected products: vendor: n/a
product: HPE LoadRunner and Performance Center
Published: 2017-10-13T02:00:00.000Z
CVE-2017-5790 
A remote deserialization of untrusted data vulnerability in HPE Intelligent Management Center (IMC) PLAT version 7.2 E0403P06 was found.
Problem types: description: remote deserialization of untrusted data
Affected products: vendor: Hewlett Packard Enterprise
product: Intelligent Management Center (IMC) PLAT
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5791 
The doFilter method in UrlAccessController in HPE Intelligent Management Center (iMC) PLAT 7.2 E0403P06 allows remote bypass of authentication via unspecified strings in a URI.
Problem types: description: Remote Authentication Bypass
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2017-10-13T02:00:00.000Z
CVE-2017-5792 
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found.
Problem types: description: Remote Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: Intelligent Management Center (iMC) PLAT
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5793 
A Remote Arbitrary Code Execution vulnerability in HPE Intelligent Management Center (IMC) PLAT version 7.2 E0403P06 was found.
Problem types: description: Remote Arbitrary Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: Intelligent Management Center (IMC) PLAT
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5794 
A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center (IMC) PLAT version 7.2 E0403P06 was found.
Problem types: description: Remote Arbitrary File Download
Affected products: vendor: Hewlett Packard Enterprise
product: Intelligent Management Center (IMC) PLAT
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5795 
A Local Arbitrary File Download vulnerability in HPE Intelligent Management Center (IMC) version PLAT 7.2 E0403P06 was found.
Problem types: description: Local Arbitrary File Download
Affected products: vendor: Hewlett Packard Enterprise
product: Intelligent Management Center (IMC) PLAT
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5796 
A Remote Cross Site Request Forgery (CSRF) vulnerability in HPE 2620 Series Network Switches version RA.15.05.0006 was found.
Problem types: description: Remote Cross Site Request Forgery (CSRF)
Affected products: vendor: Hewlett Packard Enterprise
product: 2620 Series Network Switches
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5797 
A Remote Unauthenticated Disclosure of Information vulnerability in HPE Intelligent Management Center (IMC) SOM version v7.3 (E0501) was found.
Problem types: description: Remote Unauthenticated Disclosure of Information
Affected products: vendor: Hewlett Packard Enterprise
product: Intelligent Management Center (IMC)
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5798 
A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x).
Problem types: description: Remote Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: OpenCall Media Platform (OCMP)
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5799 
A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x), all versions prior to 4.4.7 RP702 (for OCMP 4.x).
Problem types: description: Remote Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: OpenCall Media Platform (OCMP)
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5800 
A Remote Cross-Site Scripting (XSS) vulnerability in HPE Operations Bridge Analytics version v3.0 was found.
Problem types: description: Remote Cross-Site Scripting (XSS)
Affected products: vendor: Hewlett Packard Enterprise
product: Operations Bridge Analytics
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5801 
A Remote Unauthorized Access to Data vulnerability in HPE Business Process Monitor version v09.2x, v09.30 was found.
Problem types: description: Remote Unauthorized Access to Data
Affected products: vendor: Hewlett Packard Enterprise
product: Business Process Monitor
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5802 
A Remote Gain Privileged Access vulnerability in HPE Vertica Analytics Platform version v4.1 and later was found.
Problem types: description: Remote Gain Privileged Access
Affected products: vendor: Hewlett Packard Enterprise
product: Vertica Analytics Platform
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5803 
A Remote Disclosure of Information vulnerability in HPE NonStop Servers using SSH Service version L series: T0801L02 through T0801L02^ABX; J and H series: T0801H01 through T0801H01^ACA was found.
Problem types: description: Remote Disclosure of Information
Affected products: vendor: Hewlett Packard Enterprise
product: NonStop Servers using SSH Service
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5804 
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.
Problem types: description: Remote Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: Intelligent Management Center (iMC) PLAT
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5805 
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.
Problem types: description: Remote Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: Intelligent Management Center (iMC) PLAT
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5806 
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.
Problem types: description: Remote Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: Intelligent Management Center (iMC) PLAT
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5807 
A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.
Problem types: description: Remote Arbitrary Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: Data Protector
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5808 
A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.
Problem types: description: Remote Arbitrary Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: Data Protector
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5809 
A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.
Problem types: description: Remote Arbitrary Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: Data Protector
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5810 
A remote sql injection vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.
Problem types: description: remote sql injection
Affected products: vendor: Hewlett Packard Enterprise
product: Network Automation
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5811 
A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.
Problem types: description: remote code execution
Affected products: vendor: Hewlett Packard Enterprise
product: Network Automation
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5812 
A remote sql information disclosure vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.
Problem types: description: remote information disclosure
Affected products: vendor: Hewlett Packard Enterprise
product: Network Automation
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5813 
A remote unauthenticated access vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.
Problem types: description: remote unauthenticated access
Affected products: vendor: Hewlett Packard Enterprise
product: Network Automation
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5814 
A remote sql injection authentication bypass in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.
Problem types: description: remote authentication bypass
Affected products: vendor: Hewlett Packard Enterprise
product: Network Automation
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5815 
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
Problem types: description: Remote Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: Intelligent Management Center (iMC) PLAT
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5816 
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
Problem types: description: Remote Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: Intelligent Management Center (iMC) PLAT
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5817 
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
Problem types: description: Remote Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: Intelligent Management Center (iMC) PLAT
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5818 
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
Problem types: description: Remote Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: Intelligent Management Center (iMC) PLAT
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5819 
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
Problem types: description: Remote Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: Intelligent Management Center (iMC) PLAT
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5820 
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
Problem types: description: Remote Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: Intelligent Management Center (iMC) PLAT
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5821 
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
Problem types: description: Remote Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: Intelligent Management Center (iMC) PLAT
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5822 
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
Problem types: description: Remote Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: Intelligent Management Center (iMC) PLAT
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5823 
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
Problem types: description: Remote Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: Intelligent Management Center (iMC) PLAT
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5824 
An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.
Problem types: description: unathenticated remote code execution
Affected products: vendor: Hewlett Packard Enterprise
product: Aruba ClearPass Policy Manager
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5825 
A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.
Problem types: description: privilage escalation
Affected products: vendor: Hewlett Packard Enterprise
product: Aruba ClearPass Policy Manager
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5826 
An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.
Problem types: description: authenticated remote code execution
Affected products: vendor: Hewlett Packard Enterprise
product: Aruba ClearPass Policy Manager
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5827 
A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.
Problem types: description: reflected cross site scripting
Affected products: vendor: Hewlett Packard Enterprise
product: Aruba ClearPass Policy Manager
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5828 
An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.
Problem types: description: arbitrary command execution
Affected products: vendor: Hewlett Packard Enterprise
product: Aruba ClearPass Policy Manager
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5829 
An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.
Problem types: description: access restriction bypass
Affected products: vendor: Hewlett Packard Enterprise
product: Aruba ClearPass Policy Manager
Published: 2018-02-15T22:00:00.000Z
CVE-2017-5830 
Revive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized data in the cookies related to the delivery scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2017-5831 
Session fixation vulnerability in the forgot password mechanism in Revive Adserver before 4.0.1, when setting a new password, allows remote attackers to hijack web sessions via the session ID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2017-5832 
Cross-site scripting (XSS) vulnerability in Revive Adserver before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the user's email address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2017-5833 
Cross-site scripting (XSS) vulnerability in the invocation code generation for interstitial zones in Revive Adserver before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2017-5834 
The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2017-5835 
libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2017-5836 
The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2017-5837 
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T15:00:00.000Z
CVE-2017-5838 
The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed datetime string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T15:00:00.000Z
CVE-2017-5839 
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service (stack overflow and crash) via vectors involving nested WAVEFORMATEX.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T15:00:00.000Z
CVE-2017-5840 
The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving the current stts index.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T15:00:00.000Z
CVE-2017-5841 
The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving ncdt tags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T15:00:00.000Z
CVE-2017-5842 
The html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted SMI file, as demonstrated by OneNote_Manager.smi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T15:00:00.000Z
CVE-2017-5843 
Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_update_essence_tracks functions in GStreamer before 1.10.3 allow remote attackers to cause a denial of service (crash) via vectors involving stream tags, as demonstrated by 02785736.mxf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T15:00:00.000Z
CVE-2017-5844 
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted ASF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T15:00:00.000Z
CVE-2017-5845 
The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a ncdt sub-tag that "goes behind" the surrounding tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T15:00:00.000Z
CVE-2017-5846 
The gst_asf_demux_process_ext_stream_props function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors related to the number of languages in a video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T15:00:00.000Z
CVE-2017-5847 
The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving extended content descriptors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T15:00:00.000Z
CVE-2017-5848 
The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors involving PSM parsing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T15:00:00.000Z
CVE-2017-5849 
tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted tiff image file, related to transposing width and height values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T19:00:00.000Z
CVE-2017-5850 
httpd in OpenBSD allows remote attackers to cause a denial of service (memory consumption) via a series of requests for a large file using an HTTP Range header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-27T15:00:00.000Z
CVE-2017-5851 
The free_options function in options_manager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.  NOTE: this typically has no risk; this crash of this command-line program has no further consequences for availability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-01T15:00:00.000Z
CVE-2017-5852 
The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-01T15:00:00.000Z
CVE-2017-5853 
Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-01T15:00:00.000Z