rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-12809 
QEMU (aka Quick Emulator), when built with the IDE disk and CD/DVD-ROM Emulator support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by flushing an empty CDROM device drive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-23T16:00:00.000Z
CVE-2017-12810 
PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T07:00:00.000Z
CVE-2017-12811 
PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T07:00:00.000Z
CVE-2017-12812 
PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T07:00:00.000Z
CVE-2017-12813 
PHPJabbers File Sharing Script 1.0 has stored XSS in the comments section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-30T07:00:00.000Z
CVE-2017-12814 
Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windows allows attackers to execute arbitrary code via a long environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-27T17:00:00.000Z
CVE-2017-12815 
Analysis of the Bomgar Remote Support Portal JavaStart.jar Applet 52790 and earlier revealed that it is vulnerable to a path traversal vulnerability. The archive can be downloaded from a given Bomgar Remote Support Portal deployment at https://domain/api/content/JavaStart.jar and is callable from an arbitrary website using <object> and/or <appletHTML> tags. Successful exploitation results in file creation/modification/deletion in the operating system and with privileges of the user that ran the Java applet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-26T21:00:00.000Z
CVE-2017-12816 
In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware application to get unauthorized access to the product functionality by using Android IPC.
Problem types: description: Incorrect Access Control
Affected products: vendor: Kaspersky Lab
product: Kaspersky Lab Kaspersky Internet Security for Android 11.12.4.1622
Published: 2017-08-25T20:00:00.000Z
CVE-2017-12817 
In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted.
Problem types: description: Incorrect encryption
Affected products: vendor: Kaspersky Lab
product: Kaspersky Lab Kaspersky Internet Security for Android 11.12.4.1622
Published: 2017-08-25T20:00:00.000Z
CVE-2017-12818 
Stack overflow in custom XML-parser in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service.
Problem types: description: Stack overflow in custom XML-parser leads to remote denial of service
Affected products: vendor: Gemalto
product: Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE
Published: 2017-10-03T13:00:00.000Z
CVE-2017-12819 
Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55.
Problem types: description: Remote manipulations with language pack updater lead to NTLM-relay attack for system user
Affected products: vendor: Gemalto
product: Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE
Published: 2017-10-03T13:00:00.000Z
CVE-2017-12820 
Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service.
Problem types: description: Arbitrary memory read from controlled memory pointer leads to remote denial of service
Affected products: vendor: Gemalto
product: Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE
Published: 2017-10-03T13:00:00.000Z
CVE-2017-12821 
Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 might cause remote code execution.
Problem types: description: Memory corruption might cause remote code execution
Affected products: vendor: Gemalto
product: Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE
Published: 2017-10-03T13:00:00.000Z
CVE-2017-12822 
Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to new attack vectors.
Problem types: description: Remote enabling and disabling admin interface leads to new attack vectors
Affected products: vendor: Gemalto
product: Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE
Published: 2017-10-03T13:00:00.000Z
CVE-2017-12823 
Kernel pool memory corruption in one of drivers in Kaspersky Embedded Systems Security version 1.2.0.300 leads to local privilege escalation.
Problem types: description: One of the product drivers is vulnerable to a kernel pool memory corruption
Affected products: vendor: Kaspersky Labs
product: Kaspersky Embedded Systems Security
Published: 2017-12-08T16:00:00.000Z
CVE-2017-12824 
Special crafted InPage document leads to arbitrary code execution in InPage reader.
Problem types: description: Special crafted InPage document leads to arbitrary code execution
Affected products: vendor: InPage
product: InPage reader
Published: 2017-11-08T14:00:00.000Z
CVE-2017-12836 
CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-24T14:00:00.000Z
CVE-2017-12837 
Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\N{}' escape and the case-insensitive modifier.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-19T18:00:00.000Z
CVE-2017-12838 
Cross-site request forgery (CSRF) vulnerability in NexusPHP 1.5 allows remote attackers to hijack the authentication of users for requests that (1) send manas via a request to mybonus.php or (2) add administrators via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T13:00:00.000Z
CVE-2017-12839 
A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote attackers to cause a possible denial-of-service (out-of-bounds read) or possibly have unspecified other impact via a crafted mp3 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-09T16:46:40.000Z
CVE-2017-12840 
A kernel driver, namely DLMFENC.sys, bundled with the DESLock+ client application 4.8.16 and earlier contains a locally exploitable heap based buffer overflow in the handling of an IOCTL message of type 0x0FA4204. The vulnerability is present due to the kernel driver failing to allocate sufficient memory on the kernel heap to contain a user supplied string as such the string is copied into a buffer of constant size (0x1000-bytes) and thus an overflow condition results. Access to the kernel driver is permitted through an obfuscated interface whereby bytes of user supplied message are "authenticated" via an obfuscation routine employing a linear equation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2017-12842 
Bitcoin Core before 0.14 allows an attacker to create an ostensibly valid SPV proof for a payment to a victim who uses an SPV wallet, even if that payment did not actually occur. Completing the attack would cost more than a million dollars, and is relevant mainly only in situations where an autonomous system relies solely on an SPV proof for transactions of a greater dollar amount.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T19:42:50.000Z
CVE-2017-12843 
Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a crafted (1) SYNCAPPLY, (2) SYNCGET or (3) SYNCRESTORE command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-22T14:00:00.000Z
CVE-2017-12844 
Cross-site scripting (XSS) vulnerability in the admin panel in IceWarp Mail Server 10.4.4 allows remote authenticated domain administrators to inject arbitrary web script or HTML via a crafted user name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-23T14:00:00.000Z
CVE-2017-12847 
Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for nagios.lock modification before a root script executes a "kill `cat /pathname/nagios.lock`" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-23T21:00:00.000Z
CVE-2017-12849 
Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users via timing attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-12T15:00:00.000Z
CVE-2017-12850 
An authenticated standard user could reset the password of other users (including the admin) by altering form data. Affects kanboard before 1.0.46.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-14T20:00:00.000Z
CVE-2017-12851 
An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-14T20:00:00.000Z
CVE-2017-12852 
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-15T16:00:00.000Z
CVE-2017-12853 
The RealTime RWR-3G-100 Router Firmware Version : Ver1.0.56 is affected by CSRF an attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-14T20:00:00.000Z
CVE-2017-12855 
Xen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances, Xen will clear the status bits too early, incorrectly informing the guest that the grant is no longer in use. A guest may prematurely believe that a granted frame is safely private again, and reuse it in a way which contains sensitive information, while the domain on the far end of the grant is still using the grant. Xen 4.9, 4.8, 4.7, 4.6, and 4.5 are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-15T16:00:00.000Z
CVE-2017-12856 
Cross-site scripting (XSS) vulnerability in C.P.Sub 5.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T15:00:00.000Z
CVE-2017-12857 
Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0 are affected by a vulnerability in their UCS web application. This vulnerability could allow an authenticated remote attacker to read a segment of the phone's memory which could contain an administrator's password or other sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-25T19:00:00.000Z
CVE-2017-12858 
Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-23T14:00:00.000Z
CVE-2017-12859 
NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T16:00:00.000Z
CVE-2017-12860 
The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.In addition to the password, each projector has a hardcoded "backdoor" code (2270), which authenticates to all devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-10T13:00:00.000Z
CVE-2017-12861 
The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.All Epson projectors supporting the "EasyMP" software are vulnerable to a brute-force vulnerability, allowing any attacker on the network to remotely control and stream to the vulnerable device
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-10T13:00:00.000Z
CVE-2017-12862 
In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause copy buffer overflow later. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-15T16:00:00.000Z
CVE-2017-12863 
In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_pitch. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-15T16:00:00.000Z
CVE-2017-12864 
In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-15T16:00:00.000Z
CVE-2017-12865 
Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted response query string passed to the "name" variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T16:00:00.000Z
CVE-2017-12867 
The SimpleSAML_Auth_TimeLimitedToken class in SimpleSAMLphp 1.14.14 and earlier allows attackers with access to a secret token to extend its validity period by manipulating the prepended time offset.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T15:00:00.000Z
CVE-2017-12868 
The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-01T13:00:00.000Z
CVE-2017-12869 
The multiauth module in SimpleSAMLphp 1.14.13 and earlier allows remote attackers to bypass authentication context restrictions and use an authentication source defined in config/authsources.php via vectors related to improper validation of user input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-01T13:00:00.000Z
CVE-2017-12870 
SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle attackers to obtain sensitive information by leveraging use of the aesEncrypt and aesDecrypt methods in the SimpleSAML/Utils/Crypto class to protect session identifiers in replies to non-HTTPS service providers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-01T13:00:00.000Z
CVE-2017-12871 
The aesEncrypt method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.x through 1.14.11 makes it easier for context-dependent attackers to bypass the encryption protection mechanism by leveraging use of the first 16 bytes of the secret key as the initialization vector (IV).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-01T21:00:00.000Z
CVE-2017-12872 
The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to conduct timing side-channel attacks by leveraging use of the standard comparison operator to compare secret material against user input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-01T21:00:00.000Z
CVE-2017-12873 
SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider (IdP) is misconfigured.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-01T21:00:00.000Z
CVE-2017-12874 
The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-01T21:00:00.000Z
CVE-2017-12875 
The WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (CPU consumption) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T15:00:00.000Z
CVE-2017-12876 
Heap-based buffer overflow in enhance.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2017-12877 
Use-after-free vulnerability in the DestroyImage function in image.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2017-12879 
Cross-site scripting (XSS-STORED) vulnerability in the DEVICES OR SENSORS functionality in Paessler PRTG Network Monitor before 17.3.33.2654 allows authenticated remote attackers to inject arbitrary web script or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-24T19:00:00.000Z
CVE-2017-12881 
Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T18:00:00.000Z
CVE-2017-12882 
Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML via the file upload functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T18:00:00.000Z
CVE-2017-12883 
Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service (application crash) via a crafted regular expression with an invalid '\N{U+...}' escape.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-19T18:00:00.000Z
CVE-2017-12884 
OX Software GmbH App Suite 7.8.4 and earlier is affected by: Information Exposure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-10T15:32:33.000Z
CVE-2017-12885 
OX Software GmbH App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-10T14:43:25.000Z
CVE-2017-12892 
Foxit PDF Compressor installers from versions from 7.0.0.183 to 7.7.2.10 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-16T21:00:00.000Z
CVE-2017-12893 
The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12894 
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12895 
The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12896 
The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12897 
The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12898 
The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12899 
The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12900 
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12901 
The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12902 
The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z