rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-2142 
Buffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
Problem types: description: Buffer Overflow
Affected products: vendor: I-O DATA DEVICE, INC.
product: WN-G300R3
Published: 2017-04-28T16:00:00.000Z
CVE-2017-2143 
CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php.
Problem types: description: Fails to restrict access
Affected products: vendor: Frogman Office Inc.
product: CS-Cart Japanese Edition
vendor: Frogman Office Inc.
product: CS-Cart Multivendor Japanese Edition
Published: 2017-04-28T16:00:00.000Z
CVE-2017-2144 
Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page.
Problem types: description: Fails to restrict access
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2145 
Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors.
Problem types: description: Session fixation
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2146 
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via application menu.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2147 
Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: WP Statistics
product: WP Statistics
Published: 2017-04-28T16:00:00.000Z
CVE-2017-2148 
Cross-site scripting vulnerability in WN-AC1167GR firmware version 1.04 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: I-O DATA DEVICE, INC.
product: WN-AC1167GR
Published: 2017-04-28T16:00:00.000Z
CVE-2017-2149 
Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool V1.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Configuration Software V3.0.2 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WE series<W-03>) V3.00.01, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WD/WC series<W-02>) V2.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WB/WL series) V1.00.04 and earlier, SDHC Memory Card with embedded TransferJet functionality Configuration Software V1.02 and earlier, SDHC Memory Card with embedded TransferJet functionality Software Update tool V1.00.06 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Toshiba Corporation
product: Installer for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool
vendor: Toshiba Corporation
product: Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Configuration Software
vendor: Toshiba Corporation
product: Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Software Update tool (SD-WE series<W-03>)
vendor: Toshiba Corporation
product: Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Software Update tool (SD-WD/WC series<W-02>)
vendor: Toshiba Corporation
product: Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Software Update tool (SD-WB/WL series)
vendor: Toshiba Corporation
product: Installer for SDHC Memory Card with embedded TransferJetTM functionality Configuration Software
vendor: Toshiba Corporation
product: Installer for SDHC Memory Card with embedded TransferJetTM functionality Software Update tool
Published: 2017-04-28T16:00:00.000Z
CVE-2017-2150 
Directory traversal vulnerability in Booking Calendar version 7.0 and earlier allows remote attackers to read arbitrary files via specially crafted captcha_chalange parameter.
Problem types: description: Directory traversal
Affected products: vendor: wpdevelop
product: Booking Calendar
Published: 2017-04-28T16:00:00.000Z
CVE-2017-2151 
Cross-site scripting vulnerability in Booking Calendar version 7.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: wpdevelop
product: Booking Calendar
Published: 2017-04-28T16:00:00.000Z
CVE-2017-2152 
WNC01WH firmware 1.0.0.9 and earlier allows authenticated attackers to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: BUFFALO INC.
product: WNC01WH
Published: 2017-04-28T16:00:00.000Z
CVE-2017-2153 
SEIL/x86 Fuji 1.70 to 5.62, SEIL/BPV4 5.00 to 5.62, SEIL/X1 1.30 to 5.62, SEIL/X2 1.30 to 5.62, SEIL/B1 1.00 to 5.62 allows remote attackers to cause a denial of service via specially crafted IPv4 UDP packets.
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: Internet Initiative Japan Inc.
product: SEIL/x86 Fuji
vendor: Internet Initiative Japan Inc.
product: SEIL/BPV4
vendor: Internet Initiative Japan Inc.
product: SEIL/X1
vendor: Internet Initiative Japan Inc.
product: SEIL/X2
vendor: Internet Initiative Japan Inc.
product: SEIL/B1
Published: 2017-04-28T16:00:00.000Z
CVE-2017-2154 
Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 [Standard], JUST Office 3 [Eco Print Package], JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Police 3, Hanako 2017 trial version allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-28T16:00:00.000Z
CVE-2017-2155 
Buffer overflow in Hoozin Viewer 2, 3, 4.1.5.15 and earlier, 5.1.2.13 and earlier, and 6.0.3.09 and earlier allows remote attackers to execute arbitrary code via specially crafted webpage.
Problem types: description: Buffer Overflow
Affected products: vendor: ICON CORPORATION
product: Hoozin Viewer
vendor: ICON CORPORATION
product: Hoozin Viewer
vendor: ICON CORPORATION
product: Hoozin Viewer
vendor: ICON CORPORATION
product: Hoozin Viewer
vendor: ICON CORPORATION
product: Hoozin Viewer
Published: 2017-04-28T16:00:00.000Z
CVE-2017-2156 
Untrusted search path vulnerability in Vivaldi installer for Windows prior to version 1.7.735.48 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Vivaldi Technologies
product: Vivaldi installer for Windows
Published: 2017-04-28T16:00:00.000Z
CVE-2017-2157 
Untrusted search path vulnerability in installers for The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)" Ver3.1 and earlier, The Public Certification Service for Individuals "The JPKI user's software (for Windows Vista)", The Public Certification Service for Individuals "The JPKI user's software" Ver2.6 and earlier that were available until April 27, 2017 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Japan Agency for Local Authority Information Systems
product: Installer for The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)"
vendor: Japan Agency for Local Authority Information Systems
product: Installer for The Public Certification Service for Individuals "The JPKI user's software (for Windows Vista)"
vendor: Japan Agency for Local Authority Information Systems
product: Installer for The Public Certification Service for Individuals "The JPKI user's software"
Published: 2017-05-12T18:00:00.000Z
CVE-2017-2158 
Improper verification when expanding ZIP64 archives in Lhaplus versions 1.73 and earlier may lead to unintended contents to be extracted from a specially crafted ZIP64 archive.
Problem types: description: Insufficient Verification of Data Authenticity
Affected products: vendor: Schezo
product: Lhaplus
Published: 2018-01-12T14:00:00.000Z
CVE-2017-2161 
FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) V2.00.04 and earlier allows authenticated attackers to bypass access restrictions to obtain unauthorized image data via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Toshiba Corporation
product: FlashAirTM SDHC Memory Card (SD-WE Series <W-03>)
vendor: Toshiba Corporation
product: FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>)
Published: 2017-05-22T16:00:00.000Z
CVE-2017-2162 
FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) V2.00.04 and earlier allows default credentials to be set for wireless LAN connections to the product when enabling the PhotoShare function through a web browser.
Problem types: description: Configures default credentials
Affected products: vendor: Toshiba Corporation
product: FlashAirTM SDHC Memory Card (SD-WE Series <W-03>)
vendor: Toshiba Corporation
product: FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>)
Published: 2017-05-22T16:00:00.000Z
CVE-2017-2163 
Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary files via shop_id.
Problem types: description: Directory traversal
Affected products: vendor: Nippon Institute of Agroinformatics Ltd.
product: SOY CMS
Published: 2017-05-12T18:00:00.000Z
CVE-2017-2164 
Cross-site scripting vulnerability in SOY CMS with installer 1.8.12 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Nippon Institute of Agroinformatics Ltd.
product: SOY CMS with installer
Published: 2017-05-12T18:00:00.000Z
CVE-2017-2165 
GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Japan Total System Co.,Ltd.
product: GroupSession
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2166 
Open redirect vulnerability in GroupSession version 4.7.0 and earlier allows an attacker to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Problem types: description: Open Redirect
Affected products: vendor: Japan Total System Co.,Ltd.
product: GroupSession
Published: 2018-01-26T16:00:00.000Z
CVE-2017-2167 
Untrusted search path vulnerability in Installer for PrimeDrive Desktop Application version 1.4.4 and earlier allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: SoftBank Corporation
product: Installer for PrimeDrive Desktop Application
Published: 2017-05-12T18:00:00.000Z
CVE-2017-2168 
Cross-site scripting vulnerability in WP Booking System Free version prior to version 1.4 and WP Booking System Premium version prior to version 3.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: WP Booking System
product: WP Booking System Free version
vendor: WP Booking System
product: WP Booking System Premium version
Published: 2017-05-22T16:00:00.000Z
CVE-2017-2169 
Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Max Foundry
product: MaxButtons
vendor: Max Foundry
product: MaxButtons Pro
Published: 2017-05-22T16:00:00.000Z
CVE-2017-2172 
Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu KUNAI for Android
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2173 
Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA)
product: Empirical Project Monitor - eXtended
Published: 2017-05-22T16:00:00.000Z
CVE-2017-2174 
Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA)
product: Empirical Project Monitor - eXtended
Published: 2017-05-22T16:00:00.000Z
CVE-2017-2175 
Untrusted search path vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA)
product: Empirical Project Monitor - eXtended
Published: 2017-05-22T16:00:00.000Z
CVE-2017-2176 
Untrusted search path vulnerability in screensaver installers (jasdf_01.exe, jasdf_02.exe, jasdf_03.exe, jasdf_04.exe, jasdf_05.exe, scramble_setup.exe, clock_01_setup.exe, clock_02_setup.exe) available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSE
product: jasdf_01.exe
vendor: JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSE
product: jasdf_02.exe
vendor: JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSE
product: jasdf_03.exe
vendor: JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSE
product: jasdf_04.exe
vendor: JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSE
product: jasdf_05.exe
vendor: JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSE
product: scramble_setup.exe
vendor: JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSE
product: clock_01_setup.exe
vendor: JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSE
product: clock_02_setup.exe
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2177 
Untrusted search path vulnerability in Installer of Shogyo Touki Denshi Ninsho Software Ver 1.7 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Ministry of Justice
product: Installer of Shogyo Touki Denshi Ninsho Software
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2178 
Untrusted search path vulnerability in Installer of electronic tendering and bid opening system available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Acquisition, Technology & Logistics Agency
product: Installer of electronic tendering and bid opening system
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2179 
Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allows remote code execution via unspecified vectors, a different vulnerability than CVE-2017-2181 and CVE-2017-2182.
Problem types: description: Remote code execution
Affected products: vendor: INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA)
product: Hands-on Vulnerability Learning Tool "AppGoat" for Web Application
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2180 
Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors.
Problem types: description: Information Disclosure
Affected products: vendor: INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA)
product: Hands-on Vulnerability Learning Tool "AppGoat" for Web Application
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2181 
Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors, a different vulnerability than CVE-2017-2179 and CVE-2017-2182.
Problem types: description: Remote code execution
Affected products: vendor: INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA)
product: Hands-on Vulnerability Learning Tool "AppGoat" for Web Application
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2182 
Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors, a different vulnerability than CVE-2017-2179 and CVE-2017-2181.
Problem types: description: Remote code execution
Affected products: vendor: INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA)
product: Hands-on Vulnerability Learning Tool "AppGoat" for Web Application
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2183 
HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings.
Problem types: description: OS Command Injection
Affected products: vendor: KDDI CORPORATION
product: HOME SPOT CUBE2
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2184 
Buffer overflow in HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to execute arbitrary code via WebUI.
Problem types: description: Buffer Overflow
Affected products: vendor: KDDI CORPORATION
product: HOME SPOT CUBE2
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2185 
HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI.
Problem types: description: OS Command Injection
Affected products: vendor: KDDI CORPORATION
product: HOME SPOT CUBE2
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2186 
HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to bypass authentication to load malicious firmware via WebUI.
Problem types: description: Authentication bypass
Affected products: vendor: KDDI CORPORATION
product: HOME SPOT CUBE2
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2187 
Cross-site scripting vulnerability in WP Live Chat Support prior to version 7.0.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: CODECABIN_
product: WP Live Chat Support
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2188 
Untrusted search path vulnerability in Installer of Denshinouhin Check System (for Ministry of Agriculture, Forestry and Fisheries Nouson Seibi Jigyou) 2014 March Edition (Ver.9.0.001.001) [Updated on 2017 June 9], (Ver.8.0.001.001) [Updated on 2016 May 31] and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Ministry of Agreculture, Foresty and Fishery
product: Installer of Denshinouhin Check System (for Ministry of Agriculture, Forestry and Fisheries Nouson Seibi Jigyou) 2014 March Edition
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2189 
Untrusted search path vulnerability in RW-4040 driver installer for Windows 7 version 2.27 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Sharp Corporation
product: RW-4040 driver installer for Windows 7
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2190 
Untrusted search path vulnerability in RW-4040 tool to verify execution environment for Windows 7 version 1.2.0.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Sharp Corporation
product: RW-4040 tool to verify execution environment for Windows 7
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2191 
Untrusted search path vulnerability in RW-5100 driver installer for Windows 7 version 1.0.0.9 and RW-5100 driver installer for Windows 8.1 version 1.0.1.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Sharp Corporation
product: RW-5100 driver installer for Windows 7
vendor: Sharp Corporation
product: RW-5100 driver installer for Windows 8.1
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2192 
Untrusted search path vulnerability in RW-5100 tool to verify execution environment for Windows 7 version 1.1.0.0 and RW-5100 tool to verify execution environment for Windows 8.1 version 1.2.0.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Sharp Corporation
product: RW-5100 tool to verify execution environment for Windows 7
vendor: Sharp Corporation
product: RW-5100 tool to verify execution environment for Windows 8.1
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2193 
Untrusted search path vulnerability in the installer of Tera Term 4.94 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: TeraTerm Project
product: The installer of Tera Term
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2194 
Cross-site scripting vulnerability in Source code security studying tool iCodeChecker allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA)
product: Source code security studying tool iCodeChecker
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2195 
SQL injection vulnerability in the Multi Feed Reader prior to version 2.2.4 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: SQL Injection
Affected products: vendor: Eric Teubert
product: Multi Feed Reader
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2206 
Untrusted search path vulnerability in the installer of SaAT Netizen ver.1.2.10.510 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: NetMove Corporation
product: The installer of SaAT Netizen
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2207 
Untrusted search path vulnerability in the installer of SaAT Personal ver.1.0.10.272 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: NetMove Corporation
product: The installer of SaAT Personal
Published: 2017-06-09T16:00:00.000Z