rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-17944 
The ASUS Vivobaby application before 1.1.09 for Android has Missing SSL Certificate Validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-20T15:00:14.000Z
CVE-2017-17945 
The ASUS HiVivo aspplication before 5.6.27 for ASUS Watch has Missing SSL Certificate Validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-24T18:22:42.000Z
CVE-2017-17946 
A buffer overflow in Handy Password 4.9.3 allows remote attackers to execute arbitrary code via a long "Title name" field in "mail box" data that is mishandled in an "Open from mail box" action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-10T20:00:00.000Z
CVE-2017-17947 
A cross site scripting issue has been found in custompage.cgi in Pulse Secure Pulse Connect Secure (PCS) before 8.0R17.0, 8.1.x before 8.1R13, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 and Pulse Policy Secure (PPS) before 5.2R10, 5.3.x before 5.3R9, and 5.4.x before 5.4R3 due to one of the URL parameters not being sanitized. Exploitation does require the user to be logged in as administrator; the issue is not applicable to the end user portal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T21:00:00.000Z
CVE-2017-17948 
Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-28T18:00:00.000Z
CVE-2017-17949 
Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-28T18:00:00.000Z
CVE-2017-17950 
Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-28T18:00:00.000Z
CVE-2017-17951 
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-28T18:00:00.000Z
CVE-2017-17952 
PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-28T18:00:00.000Z
CVE-2017-17953 
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-28T18:00:00.000Z
CVE-2017-17954 
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-28T18:00:00.000Z
CVE-2017-17955 
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-28T18:00:00.000Z
CVE-2017-17956 
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-28T18:00:00.000Z
CVE-2017-17957 
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-28T18:00:00.000Z
CVE-2017-17958 
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-28T18:00:00.000Z
CVE-2017-17959 
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-28T18:00:00.000Z
CVE-2017-17960 
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-28T18:00:00.000Z
CVE-2017-17967 
pptreader.dll in Kingsoft WPS Office 10.1.0.6930 allows remote attackers to cause a denial of service via a crafted PPT file, aka CNVD-2017-35482.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-28T19:00:00.000Z
CVE-2017-17968 
A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long HTTP response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-29T15:00:00.000Z
CVE-2017-17969 
Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-30T16:00:00.000Z
CVE-2017-17970 
Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to login.php; the (2) season_id parameter to themes/flixer/ajax/load_season.php; the (3) movie_id parameter to themes/flixer/ajax/get_rating.php; the (4) rating or (5) movie_id parameter to themes/flixer/ajax/update_rating.php; or the (6) id parameter to themes/flixer/ajax/set_player_source.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-12T17:00:00.000Z
CVE-2017-17971 
The test_sql_and_script_inject function in htdocs/main.inc.php in Dolibarr ERP/CRM 6.0.4 blocks some event attributes but neither onclick nor onscroll, which allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-29T18:00:00.000Z
CVE-2017-17972 
packages/subjects/pub/subjects.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?subjecttypeid=xxx request, aka Open Bug Bounty ID OBB-466362.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T16:35:58.000Z
CVE-2017-17973 
In LibTIFF 4.0.8, there is a heap-based use-after-free in the t2p_writeproc function in tiff2pdf.c. NOTE: there is a third-party report of inability to reproduce this issue
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-29T21:00:00.000Z
CVE-2017-17974 
BA SYSTEMS BAS Web on BAS920 devices (with Firmware 01.01.00*, HTTPserv 00002, and Script 02.*) and ISC2000 devices allows remote attackers to obtain sensitive information via a request for isc/get_sid_js.aspx or isc/get_sid.aspx, as demonstrated by obtaining administrative access by subsequently using the credential information for the Supervisor/Administrator account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-29T21:00:00.000Z
CVE-2017-17975 
Use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c in the Linux kernel through 4.14.10 allows attackers to cause a denial of service (system crash) or possibly have unspecified other impact by triggering failure of audio registration, because a kfree of the usbtv data structure occurs during a usbtv_video_free call, but the usbtv_video_fail label's code attempts to both access and free this data structure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T01:00:00.000Z
CVE-2017-17976 
In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T20:00:00.000Z
CVE-2017-17981 
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slider_edit.php edit_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T04:00:00.000Z
CVE-2017-17982 
PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T04:00:00.000Z
CVE-2017-17983 
PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php mem_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T04:00:00.000Z
CVE-2017-17984 
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T04:00:00.000Z
CVE-2017-17985 
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T04:00:00.000Z
CVE-2017-17986 
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste_view.php comm_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T04:00:00.000Z
CVE-2017-17987 
PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetails_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T04:00:00.000Z
CVE-2017-17988 
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_add.php event_title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T04:00:00.000Z
CVE-2017-17989 
Biometric Shift Employee Management System has XSS via the index.php holiday_name parameter in an edit_holiday action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T04:00:00.000Z
CVE-2017-17990 
Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T04:00:00.000Z
CVE-2017-17991 
Biometric Shift Employee Management System has XSS via the expense_name parameter in an index.php?user=expenses request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T04:00:00.000Z
CVE-2017-17992 
Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php form_file_name parameter in a download_form action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T04:00:00.000Z
CVE-2017-17993 
Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=addition_deduction request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T04:00:00.000Z
CVE-2017-17994 
Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competency_criteria request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T04:00:00.000Z
CVE-2017-17995 
Biometric Shift Employee Management System has XSS via the Last_Name parameter in an index.php?user=ajax request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T04:00:00.000Z
CVE-2017-17996 
A buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise <= 10.3.14. The vulnerability can be triggered by an authenticated attacker who submits more than 5000 characters as the command name. It will cause termination of the SyncBreeze Enterprise server and possibly remote command execution with SYSTEM privilege.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-06T16:00:00.000Z
CVE-2017-17997 
In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissectors/packet-mrdisc.c by validating an IPv4 address. This vulnerability is similar to CVE-2017-9343.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T07:00:00.000Z
CVE-2017-17999 
SQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL commands via the search parameter to index.php/knowledge_base/get_article_suggestion/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-23T18:00:00.000Z
CVE-2017-18001 
Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, via the publicKey parameter to the /sendKey URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-31T19:00:00.000Z
CVE-2017-18004 
Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-31T19:00:00.000Z
CVE-2017-18005 
Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-31T19:00:00.000Z
CVE-2017-18006 
netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-01T00:00:00.000Z
CVE-2017-18008 
In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-01T08:00:00.000Z
CVE-2017-18009 
In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-01T08:00:00.000Z
CVE-2017-18010 
The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/custom/egoi-for-wp-form_egoi.php url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-01T08:00:00.000Z
CVE-2017-18011 
The MyCBGenie Affiliate Ads for Clickbank Products plugin through 1.6 for WordPress has XSS via the text_ads_ajax.php border_color parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-01T08:00:00.000Z
CVE-2017-18012 
The Z-URL Preview plugin 1.6.1 for WordPress has XSS via the class.zlinkpreview.php url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-01T08:00:00.000Z
CVE-2017-18013 
In LibTIFF 4.0.9, there is a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated by a tiffinfo crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-01T08:00:00.000Z
CVE-2017-18014 
An NC-25986 issue was discovered in the Logging subsystem of Sophos XG Firewall with SFOS before 17.0.3 MR3. An unauthenticated user can trigger a persistent XSS vulnerability found in the WAF log page (Control Center -> Log Viewer -> in the filter option "Web Server Protection") in the webadmin interface, and execute any action available to the webadmin of the firewall (e.g., creating a new user, enabling SSH, or adding an SSH authorized key). The WAF log page will execute the "User-Agent" parameter in the HTTP POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-12T17:00:00.000Z
CVE-2017-18015 
The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T03:00:00.000Z
CVE-2017-18016 
Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting other websites via the Parity web proxy engine (reusing the current website's token, which is not bound to an origin).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-11T16:00:00.000Z
CVE-2017-18017 
The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-03T06:00:00.000Z
CVE-2017-18018 
In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-04T04:00:00.000Z
CVE-2017-18019 
In K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the user-controlled input can be used to compare an arbitrary memory address with a fixed value, which in turn can be used to read the contents of arbitrary memory. Similarly, the product crashes upon a \\.\K7Sentry DeviceIoControl call with an invalid kernel pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-04T04:00:00.000Z
CVE-2017-18020 
On Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software and Exynos chipsets, attackers can execute arbitrary code in the bootloader because S Boot omits a size check during a copy of ramfs data to memory. The Samsung ID is SVE-2017-10598.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-04T06:00:00.000Z
CVE-2017-18021 
It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-05T19:00:00.000Z
CVE-2017-18022 
In ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-05T19:00:00.000Z
CVE-2017-18023 
Office Tracker 11.2.5 has XSS via the logincount parameter to the /otweb/OTPClientLogin URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-10T18:00:00.000Z
CVE-2017-18024 
AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-10T18:00:00.000Z
CVE-2017-18025 
cgi-bin/drknow.cgi in Innotube ITGuard-Manager 0.0.0.1 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the username field, as demonstrated by a username beginning with "admin|" to use the '|' metacharacter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-09T03:00:00.000Z
CVE-2017-18026 
Redmine before 3.2.9, 3.3.x before 3.3.6, and 3.4.x before 3.4.4 does not block the --config and --debugger flags to the Mercurial hg program, which allows remote attackers to execute arbitrary commands (through the Mercurial adapter) via vectors involving a branch whose name begins with a --config= or --debugger= substring, a related issue to CVE-2017-17536.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-10T09:00:00.000Z
CVE-2017-18027 
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-12T20:00:00.000Z
CVE-2017-18028 
In ImageMagick 7.0.7-1 Q16, a memory exhaustion vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allow remote attackers to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-12T20:00:00.000Z
CVE-2017-18029 
In ImageMagick 7.0.6-10 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-12T20:00:00.000Z
CVE-2017-18030 
The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to negative pitch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-23T18:00:00.000Z
CVE-2017-18032 
The download-manager plugin before 2.9.52 for WordPress has XSS via the id parameter in a wpdm_generate_password action to wp-admin/admin-ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T09:00:00.000Z
CVE-2017-18033 
The Jira-importers-plugin in Atlassian Jira before version 7.6.1 allows remote attackers to create new projects and abort an executing external system import via various Cross-site request forgery (CSRF) vulnerabilities.
Problem types: description: Cross-Site Request Forgery (CSRF)
Affected products: vendor: Atlassian
product: Jira
Published: 2018-01-18T14:00:00.000Z
CVE-2017-18034 
The source browse resource in Atlassian Fisheye and Crucible before version 4.5.1 and 4.6.0 allows allows remote attackers that have write access to an indexed repository to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in via a specially crafted repository branch name when trying to display deleted files of the branch.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Fisheye and Crucible
Published: 2018-02-02T14:00:00.000Z
CVE-2017-18035 
The /rest/review-coverage-chart/1.0/data/<repository_name>/.json resource in Atlassian Fisheye and Crucible before version 4.5.1 and 4.6.0 was missing a permissions check, this allows remote attackers who do not have access to a particular repository to determine its existence and access review coverage statistics for it.
Problem types: cwe_id: CWE-284
description: Improper Access Control (CWE-284)
Affected products: vendor: Atlassian
product: Fisheye and Crucible
Published: 2018-02-02T14:00:00.000Z
CVE-2017-18036 
The Github repository importer in Atlassian Bitbucket Server before version 5.3.0 allows remote attackers to determine if a service they could not otherwise reach has open ports via a Server Side Request Forgery (SSRF) vulnerability.
Problem types: cwe_id: CWE-918
description: Server Side Request Forgery (CWE-918)
Affected products: vendor: Atlassian
product: Bitbucket Server
Published: 2018-02-02T14:00:00.000Z