rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-8766 
IrfanView version 4.44 (32bit) allows remote attackers to execute code via a crafted .mov file, because of a "User Mode Write AV near NULL" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T19:00:00.000Z
CVE-2017-8768 
Atlassian SourceTree v2.5c and prior are affected by a command injection in the handling of the sourcetree:// scheme. It will lead to arbitrary OS command execution with a URL substring of sourcetree://cloneRepo/ext:: or sourcetree://checkoutRef/ext:: followed by the command. The Atlassian ID number is SRCTREE-4632.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-04T22:00:00.000Z
CVE-2017-8769 
Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files (Audio, Documents, Images, Video, and Voice Notes) associated with a chat, even after that chat is deleted. There may be users who expect file deletion to occur upon chat deletion, or who expect encryption (consistent with the application's use of an encrypted database to store chat text). NOTE: the vendor reportedly indicates that they do not "consider these to be security issues" because a user may legitimately want to preserve any file for use "in other apps like the Google Photos gallery" regardless of whether its associated chat is deleted
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-18T06:13:00.000Z
CVE-2017-8770 
There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T14:00:00.000Z
CVE-2017-8771 
On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:"root" password:"root"). The attacker can make a user that is connected to the repeater click on a malicious link that will log into the telnet and will infect the device with malicious code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T14:00:00.000Z
CVE-2017-8772 
On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:"root" password:"root") and can: 1. Read the entire file system; 2. Write to the file system; or 3. Execute any code that attacker desires (malicious or not).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T14:00:00.000Z
CVE-2017-8773 
Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Out of Bounds Write on a Heap Buffer due to improper validation of dwCompressionSize of Microsoft WIM Header WIMHEADER_V1_PACKED. This vulnerability can be exploited to gain Remote Code Execution as well as Privilege Escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-04T03:55:00.000Z
CVE-2017-8774 
Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-04T03:55:00.000Z
CVE-2017-8775 
Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-04T03:55:00.000Z
CVE-2017-8776 
Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 have approximately 165 PE files in the default installation that do not use ASLR/DEP protection mechanisms that provide sufficient defense against directed attacks against the product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-04T03:55:00.000Z
CVE-2017-8777 
Open-Xchange GmbH OX Cloud Plugins 1.4.0 and earlier is affected by: Missing Authorization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-22T19:06:53.000Z
CVE-2017-8778 
GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element in an issue attachment or avatar that is an SVG document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-04T15:00:00.000Z
CVE-2017-8779 
rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-04T14:00:00.000Z
CVE-2017-8780 
GeniXCMS 1.0.2 has XSS triggered by a comment that is mishandled during a publish operation by an administrator, as demonstrated by a malformed P element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-04T14:00:00.000Z
CVE-2017-8781 
XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted JPEG 2000 file that is mishandled during the opening of a directory in "Browser" mode, because of a "Stack Buffer Overrun" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T19:00:00.000Z
CVE-2017-8782 
The readString function in util/read.c and util/old/read.c in libming 0.4.8 allows remote attackers to cause a denial of service via a large file that is mishandled by listswf, listaction, etc. This occurs because of an integer overflow that leads to a memory allocation error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-31T03:54:00.000Z
CVE-2017-8783 
Synacor Zimbra Collaboration Suite (ZCS) before 8.7.10 has Persistent XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-04T01:00:00.000Z
CVE-2017-8785 
FastStone Image Viewer 6.2 has a "Data from Faulting Address may be used as a return value" issue. This issue can be triggered by a malformed JPEG 2000 file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T19:00:00.000Z
CVE-2017-8786 
pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-05T00:00:00.000Z
CVE-2017-8787 
The PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base/PdfXRefStreamParserObject.cpp:224 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted PDF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-05T07:04:00.000Z
CVE-2017-8788 
An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is a CRLF vulnerability in settings_global_text_edit.php allowing ?display=x%0Dnewline attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-05T18:00:00.000Z
CVE-2017-8789 
An issue was discovered on Accellion FTA devices before FTA_9_12_180. A report_error.php?year='payload SQL injection vector exists.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-05T18:00:00.000Z
CVE-2017-8790 
An issue was discovered on Accellion FTA devices before FTA_9_12_180. The home/seos/courier/ldaptest.html POST parameter "filter" can be used for LDAP Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-05T18:00:00.000Z
CVE-2017-8791 
An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is a home/seos/courier/login.html auth_params CRLF attack vector.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-05T18:00:00.000Z
CVE-2017-8792 
An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in home/seos/courier/user_add.html with the param parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-05T18:00:00.000Z
CVE-2017-8793 
An issue was discovered on Accellion FTA devices before FTA_9_12_180. By sending a POST request to home/seos/courier/web/wmProgressstat.html.php with an attacker domain in the acallow parameter, the device will respond with an Access-Control-Allow-Origin header allowing the attacker to have site access with a bypass of the Same Origin Policy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-05T18:00:00.000Z
CVE-2017-8794 
An issue was discovered on Accellion FTA devices before FTA_9_12_180. Because a regular expression (intended to match local https URLs) lacks an initial ^ character, courier/web/1000@/wmProgressval.html allows SSRF attacks with a file:///etc/passwd#https:// URL pattern.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-05T18:00:00.000Z
CVE-2017-8795 
An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in home/seos/courier/smtpg_add.html with the param parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-05T18:00:00.000Z
CVE-2017-8796 
An issue was discovered on Accellion FTA devices before FTA_9_12_180. Because mysql_real_escape_string is misused, seos/courier/communication_p2p.php allows SQL injection with the app_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-05T18:00:00.000Z
CVE-2017-8797 
The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-02T17:00:00.000Z
CVE-2017-8798 
Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-11T01:00:00.000Z
CVE-2017-8799 
Untrusted input execution via igetwild in all iRODS versions before 4.1.11 and 4.2.1 allows other iRODS users (potentially anonymous) to execute remote shell commands via iRODS virtual pathnames. To exploit this vulnerability, a virtual iRODS pathname that includes a semicolon would be retrieved via igetwild. Because igetwild is a Bash script, the part of the pathname following the semicolon would be executed in the user's shell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-05T18:00:00.000Z
CVE-2017-8801 
Trend Micro OfficeScan 11.0 before SP1 CP 6325 (with Agent Module Build before 6152) and XG before CP 1352 has XSS via a crafted URI using a blocked website.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-05T19:00:00.000Z
CVE-2017-8802 
Cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.8.0 Beta2 might allow remote attackers to inject arbitrary web script or HTML via vectors related to the "Show Snippet" functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T19:00:00.000Z
CVE-2017-8803 
Notepad++ 7.3.3 (32-bit) with Hex Editor Plugin v0.9.5 might allow user-assisted attackers to execute code via a crafted file, because of a "Data from Faulting Address controls Code Flow" issue. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T19:00:00.000Z
CVE-2017-8804 
The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779. NOTE: [Information provided from upstream and references
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-07T18:00:00.000Z
CVE-2017-8805 
Debian ftpsync before 20171017 does not use the rsync --safe-links option, which allows remote attackers to conduct directory traversal attacks via a crafted upstream mirror.
Problem types: description: directory traversal
Affected products: vendor: n/a
product: Debian ftpsync before 20171017
Published: 2017-10-17T18:00:00.000Z
CVE-2017-8806 
The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-common package before 181+deb9u1 for PostgreSQL (and other packages related to Debian and Ubuntu), handled symbolic links insecurely, which could result in local denial of service by overwriting arbitrary files.
Problem types: description: handled symbolic links insecurely
Affected products: vendor: n/a
product: PostgreSQL-related scripts that are specific to Debian and Ubuntu
Published: 2017-11-13T09:00:00.000Z
CVE-2017-8807 
vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to obtain sensitive information from process memory because a VFP_GetStorage buffer is larger than intended in certain circumstances involving -sfile Stevedore transient objects.
Problem types: description: memory disclosure
Affected products: vendor: n/a
product: Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1
Published: 2017-11-16T02:00:00.000Z
CVE-2017-8808 
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has XSS when the $wgShowExceptionDetails setting is false and the browser sends non-standard URL escaping.
Problem types: description: XSS
Affected products: vendor: n/a
product: MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2
Published: 2017-11-15T08:00:00.000Z
CVE-2017-8809 
api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulnerability.
Problem types: description: Reflected File Download
Affected products: vendor: n/a
product: MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2
Published: 2017-11-15T08:00:00.000Z
CVE-2017-8810 
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2, when a private wiki is configured, provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account names and conduct brute-force attacks via a series of requests.
Problem types: description: information leak because of response discrepancy
Affected products: vendor: n/a
product: MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2
Published: 2017-11-15T08:00:00.000Z
CVE-2017-8811 
The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks.
Problem types: description: HTML mangling
Affected products: vendor: n/a
product: MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2
Published: 2017-11-15T08:00:00.000Z
CVE-2017-8812 
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject > (greater than) characters via the id attribute of a headline.
Problem types: description: greater than injection
Affected products: vendor: n/a
product: MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2
Published: 2017-11-15T08:00:00.000Z
CVE-2017-8814 
The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to replace text inside tags via a rule definition followed by "a lot of junk."
Problem types: description: unrestricted text replacement
Affected products: vendor: n/a
product: MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2
Published: 2017-11-15T08:00:00.000Z
CVE-2017-8815 
The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attribute injection attacks via glossary rules.
Problem types: description: attribute injection
Affected products: vendor: n/a
product: MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2
Published: 2017-11-15T08:00:00.000Z
CVE-2017-8816 
The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.
Problem types: description: integer overflow
Affected products: vendor: n/a
product: curl and libcurl before 7.57.0
Published: 2017-11-29T18:00:00.000Z
CVE-2017-8817 
The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an '[' character.
Problem types: description: out-of-bounds read
Affected products: vendor: n/a
product: curl and libcurl before 7.57.0
Published: 2017-11-29T18:00:00.000Z
CVE-2017-8818 
curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library.
Problem types: description: out-of-bounds access
Affected products: vendor: n/a
product: curl and libcurl before 7.57.0
Published: 2017-11-29T18:00:00.000Z
CVE-2017-8819 
In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, the replay-cache protection mechanism is ineffective for v2 onion services, aka TROVE-2017-009. An attacker can send many INTRODUCE2 cells to trigger this issue.
Problem types: description: broken protection mechanism
Affected products: vendor: n/a
product: Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9
Published: 2017-12-03T07:00:00.000Z
CVE-2017-8820 
In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, remote attackers can cause a denial of service (NULL pointer dereference and application crash) against directory authorities via a malformed descriptor, aka TROVE-2017-010.
Problem types: description: denial of service
Affected products: vendor: n/a
product: Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9
Published: 2017-12-03T07:00:00.000Z
CVE-2017-8821 
In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, an attacker can cause a denial of service (application hang) via crafted PEM input that signifies a public key requiring a password, which triggers an attempt by the OpenSSL library to ask the user for the password, aka TROVE-2017-011.
Problem types: description: application hang
Affected products: vendor: n/a
product: Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9
Published: 2017-12-03T07:00:00.000Z
CVE-2017-8822 
In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, relays (that have incompletely downloaded descriptors) can pick themselves in a circuit path, leading to a degradation of anonymity, aka TROVE-2017-012.
Problem types: description: loss of anonymity
Affected products: vendor: n/a
product: Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9
Published: 2017-12-03T07:00:00.000Z
CVE-2017-8823 
In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, there is a use-after-free in onion service v2 during intro-point expiration because the expiring list is mismanaged in certain error cases, aka TROVE-2017-013.
Problem types: description: use-after-free
Affected products: vendor: n/a
product: Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9
Published: 2017-12-03T07:00:00.000Z
CVE-2017-8824 
The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state.
Problem types: description: use-after-free
Affected products: vendor: n/a
product: Linux kernel through 4.14.3
Published: 2017-12-05T09:00:00.000Z
CVE-2017-8825 
A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCore and MailCore 2. A crash can occur in low-level/imf/mailimf.c during a failed parse of a Cc header containing multiple e-mail addresses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-08T16:00:00.000Z
CVE-2017-8826 
FastStone Image Viewer 6.2 has a "User Mode Write AV" issue, possibly related to the jpeg_mem_term function in jmemnobs.c in libjpeg. This issue can be triggered by a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T19:00:00.000Z
CVE-2017-8827 
forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service (login inability) or possibly conduct Arbitrary User Password Reset attacks via a series of requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-08T06:10:00.000Z
CVE-2017-8829 
Deserialization vulnerability in lintian through 2.5.50.3 allows attackers to trigger code execution by requesting a review of a source package with a crafted YAML file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-08T06:10:00.000Z
CVE-2017-8830 
In ImageMagick 7.0.5-6, the ReadBMPImage function in bmp.c:1379 allows attackers to cause a denial of service (memory leak) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-08T06:10:00.000Z