rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-7903 
A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00 and prior versions; and 1763-L16DWD, Series A and B, Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWAA, Series A and B, Version 16.00 and prior versions; 1766-L32BXB, Series A and B, Version 16.00 and prior versions; 1766-L32BXBA, Series A and B, Version 16.00 and prior versions; and 1766-L32AWAA, Series A and B, Version 16.00 and prior versions. The affected products use a numeric password with a small maximum character size for the password.
Problem types: cwe_id: CWE-521
description: CWE-521
Affected products: vendor: n/a
product: Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400
Published: 2017-06-30T02:35:00.000Z
CVE-2017-7905 
A Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 760 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 469 Motor Protection Relay, firmware versions prior to Version 5.23; SR 489 Generator Protection Relay, firmware versions prior to Version 4.06; SR 745 Transformer Protection Relay, firmware versions prior to Version 5.23; SR 369 Motor Protection Relay, all firmware versions; Multilin Universal Relay, firmware Version 6.0 and prior versions; and Multilin URplus (D90, C90, B95), all versions. Ciphertext versions of user passwords were created with a non-random initialization vector leaving them susceptible to dictionary attacks. Ciphertext of user passwords can be obtained from the front LCD panel of affected products and through issued Modbus commands.
Problem types: cwe_id: CWE-261
description: CWE-261
Affected products: vendor: n/a
product: GE Multilin SR, UR, and URplus Protective Relays
Published: 2017-06-30T02:35:00.000Z
CVE-2017-7906 
In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating that user.
Problem types: cwe_id: CWE-352
description: CROSS-SITE REQUEST FORGERY CWE-352
Affected products: vendor: ICS-CERT
product: ABB IP GATEWAY
Published: 2018-06-06T20:00:00.000Z
CVE-2017-7907 
An Improper XML Parser Configuration issue was discovered in Schneider Electric Wonderware Historian Client 2014 R2 SP1 and prior. An improperly restricted XML parser (with improper restriction of XML external entity reference, or XXE) may allow an attacker to enter malicious input through the application which could cause a denial of service or disclose file contents from a server or connected network.
Problem types: cwe_id: CWE-611
description: CWE-611
Affected products: vendor: n/a
product: Schneider Electric Wonderware Historian Client
Published: 2017-05-19T02:43:00.000Z
CVE-2017-7908 
A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 and prior. A malicious HTML file that loads the ActiveX controls can trigger the vulnerability via unchecked function calls.
Problem types: cwe_id: CWE-122
description: HEAP-BASED BUFFER OVERFLOW CWE-122
Affected products: vendor: GE
product: GE Communicator
Published: 2018-10-02T21:00:00.000Z
CVE-2017-7909 
A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. The web interface uses JavaScript to check client authentication and redirect unauthorized users. Attackers may intercept requests and bypass authentication to access restricted web pages.
Problem types: cwe_id: CWE-603
description: CWE-603
Affected products: vendor: n/a
product: Advantech B+B SmartWorx MESR901
Published: 2017-05-06T00:00:00.000Z
CVE-2017-7910 
A Stack-Based Buffer Overflow issue was discovered in Digital Canal Structural Wind Analysis versions 9.1 and prior. An attacker may be able to run arbitrary code by remotely exploiting an executable to perform a denial-of-service attack.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: n/a
product: Digital Canal Structural Wind Analysis
Published: 2017-06-14T21:00:00.000Z
CVE-2017-7911 
A Code Injection issue was discovered in CyberVision Kaa IoT Platform, Version 0.7.4. An insufficient-encapsulation vulnerability has been identified, which may allow remote code execution.
Problem types: cwe_id: CWE-485
description: CWE-485
Affected products: vendor: n/a
product: CyberVision Kaa IoT Platform
Published: 2017-05-06T00:00:00.000Z
CVE-2017-7912 
Hanwha Techwin SRN-4000, SRN-4000 firmware versions prior to SRN4000_v2.16_170401, A specially crafted http request and response could allow an attacker to gain access to the device management page with admin privileges without proper authentication.
Problem types: cwe_id: CWE-284
description: IMPROPER ACCESS CONTROL CWE-284
Affected products: vendor: Hanwha Techwin
product: SRN-4000
Published: 2019-04-08T14:17:09.000Z
CVE-2017-7913 
A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application's configuration file contains parameters that represent passwords in plaintext.
Problem types: cwe_id: CWE-256
description: CWE-256
Affected products: vendor: n/a
product: Moxa OnCell
Published: 2017-05-29T16:00:00.000Z
CVE-2017-7914 
A Missing Authorization issue was discovered in Rockwell Automation PanelView Plus 6 700-1500 6.00.04, 6.00.05, 6.00.42, 6.00-20140306, 6.10.20121012, 6.10-20140122, 7.00-20121012, 7.00-20130108, 7.00-20130325, 7.00-20130619, 7.00-20140128, 7.00-20140310, 7.00-20140429, 7.00-20140621, 7.00-20140729, 7.00-20141022, 8.00-20140730, and 8.00-20141023. There is no authorization check when connecting to the device, allowing an attacker remote access.
Problem types: cwe_id: CWE-882
description: CWE-882
Affected products: vendor: n/a
product: Rockwell Automation PanelView Plus 6 700-1500
Published: 2017-06-14T21:00:00.000Z
CVE-2017-7915 
An Improper Restriction of Excessive Authentication Attempts issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. An attacker can freely use brute force to determine parameters needed to bypass authentication.
Problem types: cwe_id: CWE-307
description: CWE-307
Affected products: vendor: n/a
product: Moxa OnCell
Published: 2017-05-29T16:00:00.000Z
CVE-2017-7916 
A Permissions, Privileges, and Access Controls issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for React versions 2.1.3 and prior. The web application does not properly restrict privileges of the Guest account. A malicious user may be able to gain access to configuration information that should be restricted.
Problem types: cwe_id: CWE-264
description: CWE-264
Affected products: vendor: n/a
product: ABB VSN300 WiFi Logger Card
Published: 2017-08-07T08:00:00.000Z
CVE-2017-7917 
A Cross-Site Request Forgery issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application does not sufficiently verify if a request was intentionally provided by the user who submitted the request, which could allow an attacker to modify the configuration of the device.
Problem types: cwe_id: CWE-352
description: CWE-352
Affected products: vendor: n/a
product: Moxa OnCell
Published: 2017-05-29T16:00:00.000Z
CVE-2017-7918 
An Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has used SNMP configuration export, an attacker is able to remotely trigger device configuration backups using specific MIBs. These backups lack proper access control and may allow access to sensitive information and possibly allow for configuration changes.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: n/a
product: Cambium Networks ePMP
Published: 2017-06-21T19:00:00.000Z
CVE-2017-7919 
An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource locator (URL).
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: n/a
product: Newport XPS-Cx, XPS-Qx
Published: 2017-07-03T19:00:00.000Z
CVE-2017-7920 
An Improper Authentication issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for React versions 2.1.3 and prior. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access internal information about status and connected devices without authenticating.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: n/a
product: ABB VSN300 WiFi Logger Card
Published: 2017-08-07T08:00:00.000Z
CVE-2017-7921 
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: n/a
product: Hikvision Cameras
Published: 2017-05-06T00:00:00.000Z
CVE-2017-7922 
An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community strings are not properly restricted, which may allow an attacker to gain access to sensitive information and possibly allow for configuration changes.
Problem types: cwe_id: CWE-269
description: CWE-269
Affected products: vendor: n/a
product: Cambium Networks ePMP
Published: 2017-06-21T19:00:00.000Z
CVE-2017-7923 
A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The password in configuration file vulnerability could allow a malicious user to escalate privileges or assume the identity of another user and access sensitive information.
Problem types: cwe_id: CWE-260
description: CWE-260
Affected products: vendor: n/a
product: Hikvision Cameras
Published: 2017-05-06T00:00:00.000Z
CVE-2017-7924 
An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L16AWA, 1763-L16BBB, and 1763-L16DWD. A remote, unauthenticated attacker could send a single, specially crafted Programmable Controller Communication Commands (PCCC) packet to the controller that could potentially cause the controller to enter a DoS condition.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: n/a
product: Rockwell Automation MicroLogix 1100 Controllers
Published: 2017-09-20T16:00:00.000Z
CVE-2017-7925 
A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and DHI-HCVR58A32S-S2 devices. The password in configuration file vulnerability was identified, which could lead to a malicious user assuming the identity of a privileged user and gaining access to sensitive information.
Problem types: cwe_id: CWE-260
description: CWE-260
Affected products: vendor: n/a
product: Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras
Published: 2017-05-06T00:00:00.000Z
CVE-2017-7926 
A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0). The vulnerability allows cross-site request forgery (CSRF) attacks to occur when an otherwise-unauthorized cross-site request is sent from a browser the server has previously authenticated.
Problem types: cwe_id: CWE-352
description: CWE-352
Affected products: vendor: n/a
product: OSIsoft PI Web API 2017
Published: 2017-08-25T19:00:00.000Z
CVE-2017-7927 
A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and DHI-HCVR58A32S-S2 devices. The use of password hash instead of password for authentication vulnerability was identified, which could allow a malicious user to bypass authentication without obtaining the actual password.
Problem types: cwe_id: CWE-836
description: CWE-836
Affected products: vendor: n/a
product: Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras
Published: 2017-05-06T00:00:00.000Z
CVE-2017-7928 
An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R203-V1, R203-V2 and, R204, R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may allow for unauthorized communications to downstream devices.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: n/a
product: Schweitzer Engineering Laboratories, Inc. SEL-3620 and SEL-3622
Published: 2017-08-07T08:00:00.000Z
CVE-2017-7929 
An Absolute Path Traversal issue was discovered in Advantech WebAccess Version 8.1 and prior. The absolute path traversal vulnerability has been identified, which may allow an attacker to traverse the file system to access restricted files or directories.
Problem types: cwe_id: CWE-36
description: CWE-36
Affected products: vendor: n/a
product: Advantech WebAccess
Published: 2017-05-06T00:00:00.000Z
CVE-2017-7930 
An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Data Archive has protocol flaws with the potential to expose change records in the clear and allow a malicious party to spoof a server within a collective.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: n/a
product: OSIsoft PI Server 2017
Published: 2017-08-25T19:00:00.000Z
CVE-2017-7931 
In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the configuration files and application pages without authentication.
Problem types: cwe_id: CWE-287
description: IMPROPER AUTHENTICATION CWE-287
Affected products: vendor: ICS-CERT
product: ABB IP GATEWAY
Published: 2018-06-06T20:00:00.000Z
CVE-2017-7932 
An improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual Vybrid VF3xx, Vybrid VF5xx, Vybrid VF6xx, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX 6Quad, i.MX 6DualPlus, and i.MX 6QuadPlus. When the device is configured in security enabled configuration, under certain conditions it is possible to bypass the signature verification by using a specially crafted certificate leading to the execution of an unsigned image.
Problem types: cwe_id: CWE-295
description: CWE-295
Affected products: vendor: n/a
product: NXP i.MX Product Family
Published: 2017-08-07T08:00:00.000Z
CVE-2017-7933 
In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unauthorized access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-06T20:00:00.000Z
CVE-2017-7934 
An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Network Manager using older protocol versions contains a flaw that could allow a malicious user to authenticate with a server and then cause PI Network Manager to behave in an undefined manner.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: n/a
product: OSIsoft PI Server 2017
Published: 2017-08-25T19:00:00.000Z
CVE-2017-7935 
A Resource Exhaustion issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may compromise the device's availability by performing multiple initial VPN requests.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: n/a
product: Phoenix Contact GmbH mGuard
Published: 2017-05-19T02:43:00.000Z
CVE-2017-7936 
A stack-based buffer overflow issue was discovered in NXP i.MX 50, i.MX 53, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX 6Quad, i.MX 6DualPlus, i.MX 6QuadPlus, Vybrid VF3xx, Vybrid VF5xx, and Vybrid VF6xx. When the device is configured in security enabled configuration, SDP could be used to download a small section of code to an unprotected region of memory.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: n/a
product: NXP i.MX Product Family
Published: 2017-08-07T08:00:00.000Z
CVE-2017-7937 
An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may be able to gain unauthorized access to the user firewall when RADIUS servers are unreachable.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: n/a
product: Phoenix Contact GmbH mGuard
Published: 2017-05-19T02:43:00.000Z
CVE-2017-7938 
Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long argument. An example threat model is automated execution of DMitry with hostname strings found in local log files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T00:00:00.000Z
CVE-2017-7939 
The read_next_pam_token function in imagew-pnm.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (stack-based buffer over-read) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-18T19:00:00.000Z
CVE-2017-7940 
The iw_read_gif_file function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to consume an amount of available memory via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-18T19:00:00.000Z
CVE-2017-7941 
The ReadSGIImage function in sgi.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-18T19:00:00.000Z
CVE-2017-7942 
The ReadAVSImage function in avs.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-18T19:00:00.000Z
CVE-2017-7943 
The ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-18T19:00:00.000Z
CVE-2017-7944 
XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in page_dbsettings.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-24T10:00:00.000Z
CVE-2017-7945 
The GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, 7.1.x before 7.1.9, and 8.x before 8.0.2 provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account names and conduct brute-force attacks via a series of requests, aka PAN-SA-2017-0014 and PAN-72769.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-29T00:00:00.000Z
CVE-2017-7946 
The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted Mach0 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-18T20:00:00.000Z
CVE-2017-7947 
NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T21:00:00.000Z
CVE-2017-7948 
Integer overflow in the mark_curve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via a crafted PostScript document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T14:00:00.000Z
CVE-2017-7950 
Nitro Pro 11.0.3 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted PCX file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-07T11:00:00.000Z
CVE-2017-7951 
WonderCMS before 2.0.3 has CSRF because of lack of a token in an unspecified context.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-21T02:11:00.000Z
CVE-2017-7952 
INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-16T10:00:00.000Z
CVE-2017-7953 
INFOR EAM V11.0 Build 201410 has XSS via comment fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-16T10:00:00.000Z
CVE-2017-7957 
XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML("<void/>") call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-29T19:00:00.000Z
CVE-2017-7960 
The cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted CSS file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T15:00:00.000Z