rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-11285 
Adobe ColdFusion has a cross-site scripting (XSS) vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.
Problem types: description: Cross-Site Scripting (XSS)
Affected products: vendor: n/a
product: Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11.
Published: 2017-12-01T08:00:00.000Z
CVE-2017-11286 
Adobe ColdFusion has an XML external entity (XXE) injection vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.
Problem types: description: XML External Entity (XXE) Injection
Affected products: vendor: n/a
product: Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11.
Published: 2017-12-01T08:00:00.000Z
CVE-2017-11287 
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.
Problem types: description: Reflected cross-site scripting
Affected products: vendor: n/a
product: Adobe Connect 9.6.2 and earlier versions
Published: 2017-12-09T06:00:00.000Z
CVE-2017-11288 
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.
Problem types: description: Reflected cross-site scripting
Affected products: vendor: n/a
product: Adobe Connect 9.6.2 and earlier versions
Published: 2017-12-09T06:00:00.000Z
CVE-2017-11289 
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.
Problem types: description: Reflected cross-site scripting
Affected products: vendor: n/a
product: Adobe Connect 9.6.2 and earlier versions
Published: 2017-12-09T06:00:00.000Z
CVE-2017-11290 
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress (or Clickjacking) vulnerability exists. This issue has been resolved by adding a feature that enables Connect administrators to protect users from UI redressing (or clickjacking) attacks.
Problem types: description: UI Redress (or Clickjacking)
Affected products: vendor: n/a
product: Adobe Connect 9.6.2 and earlier versions
Published: 2017-12-09T06:00:00.000Z
CVE-2017-11291 
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery (SSRF) vulnerability exists that could be abused to bypass network access controls.
Problem types: description: Server-side Request Forgery (SSRF)
Affected products: vendor: n/a
product: Adobe Connect 9.6.2 and earlier versions
Published: 2017-12-09T06:00:00.000Z
CVE-2017-11292 
Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution.
Problem types: description: arbitrary code execution
Affected products: vendor: n/a
product: Adobe Flash Player version 27.0.0.159 and earlier
Published: 2017-10-21T05:00:00.000Z
CVE-2017-11293 
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Out-of-bounds Read
Affected products: vendor: n/a
product: Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions
Published: 2017-12-09T06:00:00.000Z
CVE-2017-11294 
An issue was discovered in Adobe Shockwave 12.2.9.199 and earlier. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Memory Corruption
Affected products: vendor: n/a
product: Adobe Shockwave 12.2.9.199 and earlier
Published: 2017-12-09T06:00:00.000Z
CVE-2017-11295 
An issue was discovered in Adobe DNG Converter 9.12.1 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Memory Corruption
Affected products: vendor: n/a
product: Adobe DNG Converter 9.12.1 and earlier versions
Published: 2017-12-09T06:00:00.000Z
CVE-2017-11296 
An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. A cross-site scripting vulnerability in Apache Sling Servlets Post 2.3.20 has been resolved in Adobe Experience Manager.
Problem types: description: Cross-site scripting
Affected products: vendor: n/a
product: Adobe Experience Manager 6.3, 6.2, 6.1, 6.0
Published: 2017-12-09T06:00:00.000Z
CVE-2017-11297 
An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclosure of memory addresses.
Problem types: description: Out-of-bounds Read
Affected products: vendor: n/a
product: Adobe Digital Editions 4.5.6 and earlier versions
Published: 2017-12-09T06:00:00.000Z
CVE-2017-11298 
An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclosure of memory addresses.
Problem types: description: Out-of-bounds Read
Affected products: vendor: n/a
product: Adobe Digital Editions 4.5.6 and earlier versions
Published: 2017-12-09T06:00:00.000Z
CVE-2017-11299 
An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclosure of memory addresses.
Problem types: description: Out-of-bounds Read
Affected products: vendor: n/a
product: Adobe Digital Editions 4.5.6 and earlier versions
Published: 2017-12-09T06:00:00.000Z
CVE-2017-11300 
An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclosure of memory addresses.
Problem types: description: Out-of-bounds Read
Affected products: vendor: n/a
product: Adobe Digital Editions 4.5.6 and earlier versions
Published: 2017-12-09T06:00:00.000Z
CVE-2017-11301 
An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclosure of memory addresses.
Problem types: description: Memory Corruption
Affected products: vendor: n/a
product: Adobe Digital Editions 4.5.6 and earlier versions
Published: 2017-12-09T06:00:00.000Z
CVE-2017-11302 
An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Memory Corruption
Affected products: vendor: n/a
product: Adobe InDesign 12.1.0 and earlier versions
Published: 2017-12-09T06:00:00.000Z
CVE-2017-11303 
An issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Memory Corruption
Affected products: vendor: n/a
product: Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions
Published: 2017-12-09T06:00:00.000Z
CVE-2017-11304 
An issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. An exploitable use-after-free vulnerability exists. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use After Free
Affected products: vendor: n/a
product: Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions
Published: 2017-12-09T06:00:00.000Z
CVE-2017-11305 
A regression affecting Adobe Flash Player version 27.0.0.187 (and earlier versions) causes the unintended reset of the global settings preference file when a user clears browser data.
Problem types: description: Business Logic Error
Affected products: vendor: n/a
product: Adobe Flash Player 27.0.0.187 and earlier versions
Published: 2017-12-13T21:00:00.000Z
CVE-2017-11306 
Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Problem types: description: Out-of-bounds read
Affected products: vendor: n/a
product: Adobe Acrobat and Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions
Published: 2018-05-19T17:00:00.000Z
CVE-2017-11307 
Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Problem types: description: Out-of-bounds read
Affected products: vendor: n/a
product: Adobe Acrobat and Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions
Published: 2018-05-19T17:00:00.000Z
CVE-2017-11308 
Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Problem types: description: Heap Overflow
Affected products: vendor: n/a
product: Adobe Acrobat and Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions
Published: 2018-05-19T17:00:00.000Z
CVE-2017-11309 
Buffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers to execute arbitrary code via a long response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-09T19:00:00.000Z
CVE-2017-11310 
The read_user_chunk_callback function in coders\png.c in ImageMagick 7.0.6-1 Q16 2017-06-21 (beta) has memory leak vulnerabilities via crafted PNG files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-13T18:00:00.000Z
CVE-2017-11311 
soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that triggers use of the same sample slot for two samples.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-13T20:00:00.000Z
CVE-2017-11317 
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-23T17:00:00.000Z
CVE-2017-11318 
Cobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks when the master server is spoofed. In addition, the attacker can execute system commands remotely by abusing pre-backup events.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-14T05:00:00.000Z
CVE-2017-11319 
Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and missing cross server side checking mechanisms.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T17:00:00.000Z
CVE-2017-11320 
Persistent XSS through the SSID of nearby Wi-Fi devices on Technicolor TC7337 routers 08.89.17.20.00 allows an attacker to cause DNS Poisoning and steal credentials from the router.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-03T08:00:00.000Z
CVE-2017-11321 
The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admin' privileges via shell metacharacters in the less command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T17:00:00.000Z
CVE-2017-11322 
The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileges via a dollar sign ($) metacharacter in the argument to chroothole_client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T17:00:00.000Z
CVE-2017-11323 
Stack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a crafted MS-DOS device file, as demonstrated by use of "AUX" as the initial substring of a filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-19T16:00:00.000Z
CVE-2017-11324 
An issue was discovered in Tilde CMS 1.0.1. Due to missing escaping of the backtick character, a SELECT query in class.SystemAction.php is vulnerable to SQL Injection. The vulnerability can be triggered via a POST request to /actionphp/action.input.php with the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-24T13:00:00.000Z
CVE-2017-11325 
An issue was discovered in Tilde CMS 1.0.1. Arbitrary files can be read via a file=../ attack on actionphp/download.File.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-24T13:00:00.000Z
CVE-2017-11326 
An issue was discovered in Tilde CMS 1.0.1. It is possible to bypass the implemented restrictions on arbitrary file upload via a filename.+php manipulation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-24T13:00:00.000Z
CVE-2017-11327 
An issue was discovered in Tilde CMS 1.0.1. It is possible to retrieve sensitive data by using direct references. A low-privileged user can load PHP resources such as admin/content.php and admin/content.php?method=ftp_upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-24T13:00:00.000Z
CVE-2017-11328 
Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-14T05:00:00.000Z
CVE-2017-11329 
GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entity_restrict parameter that is not a list of integers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-14T16:00:00.000Z
CVE-2017-11330 
The DivFixppCore::avi_header_fix function in DivFix++Core.cpp in DivFix++ v0.34 allows remote attackers to cause a denial of service (invalid memory write and application crash) via a crafted avi file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-31T13:00:00.000Z
CVE-2017-11331 
The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocation error) via a crafted wav file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-31T13:00:00.000Z
CVE-2017-11332 
The startread function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted wav file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-31T13:00:00.000Z
CVE-2017-11333 
The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-31T13:00:00.000Z
CVE-2017-11334 
The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T19:00:00.000Z
CVE-2017-11335 
There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8 via a PlanarConfig=Contig image, which causes a more than one hundred bytes out-of-bounds write (related to the ZIPDecode function in tif_zip.c). A crafted input may lead to a remote denial of service attack or an arbitrary code execution attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-16T04:00:00.000Z
CVE-2017-11336 
There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-16T04:00:00.000Z
CVE-2017-11337 
There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-16T04:00:00.000Z
CVE-2017-11338 
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-16T04:00:00.000Z
CVE-2017-11339 
There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-16T04:00:00.000Z
CVE-2017-11340 
There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-16T04:00:00.000Z
CVE-2017-11341 
There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-16T04:00:00.000Z
CVE-2017-11342 
There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-16T04:00:00.000Z
CVE-2017-11343 
Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, when inserted into the symbol table, will result in O(n) lookup time.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-16T21:00:00.000Z
CVE-2017-11344 
Global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to write shellcode at any address in the heap; this can be used to execute arbitrary code on the router by hosting a crafted device description XML document at a URL specified within a Location header in an SSDP response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-16T23:00:00.000Z
CVE-2017-11345 
Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to execute arbitrary code on the router by hosting a crafted device description XML document (that includes a serviceType element) at a URL specified within a Location header in an SSDP response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-16T23:00:00.000Z
CVE-2017-11346 
Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-16T23:00:00.000Z
CVE-2017-11347 
Authenticated Code Execution Vulnerability in MetInfo 5.3.17 allows a remote authenticated attacker to generate a PHP script with the content of a malicious image, related to admin/include/common.inc.php and admin/app/physical/physical.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-16T23:00:00.000Z
CVE-2017-11348 
In Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted NuGet package, potentially overwriting other packages or modifying system files. This is a directory traversal in the PackageId value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T00:00:00.000Z
CVE-2017-11349 
dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for purposes such as sending e-mail messages or making outbound connections to FTP servers for uploading data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T00:00:00.000Z
CVE-2017-11350 
Cross-Site Request Forgery (CSRF) exists in cgi-bin/ConfigSet on Axesstel MU553S MU55XS-V1.14 devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-13T08:00:00.000Z
CVE-2017-11351 
Axesstel MU553S MU55XS-V1.14 devices have a default password of admin for the admin account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-13T08:00:00.000Z
CVE-2017-11352 
In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9144.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T01:00:00.000Z
CVE-2017-11353 
yadm (yet another dotfile manager) 1.10.0 has a race condition (related to the behavior of git commands in setting permissions for new files and directories), which potentially allows access to SSH and PGP keys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T01:00:00.000Z
CVE-2017-11354 
Fiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/app_article/sys_article.php via the name parameter in editing or adding a tag name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T06:00:00.000Z