rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-10610 SRX Series: Embedded ICMP may cause the flowd process to crash
On SRX Series devices, a crafted ICMP packet embedded within a NAT64 IPv6 to IPv4 tunnel may cause the flowd process to crash. Repeated crashes of the flowd process constitutes an extended denial of service condition for the SRX Series device. This issue only occurs if NAT64 is configured. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D71, 12.3X48 prior to 12.3X48-D55, 15.1X49 prior to 15.1X49-D100 on SRX Series. No other Juniper Networks products or platforms are affected by this issue.
Problem types: description: Denial of service
Affected products: vendor: Juniper Networks
product: Junos OS
Published: 2017-10-13T17:00:00.000Z
CVE-2017-10611 Junos: EX Series PFE and MX MPC7E/8E/9E PFE crash when fetching interface stats with 'extended-statistics' enabled
If extended statistics are enabled via 'set chassis extended-statistics', when executing any operation that fetches interface statistics, including but not limited to SNMP GET requests, the pfem process or the FPC may crash and restart. Repeated crashes of PFE processing can result in an extended denial of service condition. This issue only affects the following platforms: (1) EX2200, EX3300, XRE200 (2) MX Series routers with MPC7E/8E/9E PFEs installed, and only if 'extended-statistics' are enabled under the [edit chassis] configuration. Affected releases are Juniper Networks Junos OS 14.1 prior to 14.1R8-S5, 14.1R9 on MX Series; 14.1X53 prior to 14.1X53-D46, 14.1X53-D50 on EX2200, EX3300, XRE200; 14.2 prior to 14.2R7-S9, 14.2R8 on MX Series; 15.1 prior to 15.1F5-S8, 15.1F6-S8, 15.1R5-S3, 15.1R6 on MX Series; 16.1 prior to 16.1R4-S5, 16.1R5, 16.1R6 on MX Series; 16.1X65 prior to 16.1X65-D45 on EX2200, EX3300, XRE200; 16.2 prior to 16.2R2-S1, 16.2R3 on MX Series; 17.1 prior to 17.1R2-S2, 17.1R3 on MX Series; 17.2 prior to 17.2R1-S3, 17.2R2 on MX Series; 17.2X75 prior to 17.2X75-D50 on MX Series; 17.3 prior to 17.3R1-S1, 17.3R2 on MX Series. No other Juniper Networks products or platforms are affected by this issue.
Problem types: description: Denial of service
Affected products: vendor: Juniper Networks
product: Junos OS
vendor: Juniper Networks
product: Junos OS
Published: 2017-10-13T17:00:00.000Z
CVE-2017-10612 Junos Space: Persistent Cross site scripting in Junos Space
A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be used to steal information or perform actions as other Junos Space users or administrators. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.
Problem types: description: Persistent cross site scripting vulnerability
Affected products: vendor: Juniper Networks
product: Junos Space
Published: 2017-10-13T17:00:00.000Z
CVE-2017-10613 Junos OS: A kernel hang may occur due to a specific loopback filter action command
A vulnerability in a specific loopback filter action command, processed in a specific logical order of operation, in a running configuration of Juniper Networks Junos OS, allows an attacker with CLI access and the ability to initiate remote sessions to the loopback interface with the defined action, to hang the kernel. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D55; 12.3X48 prior to 12.3X48-D35; 14.1 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D40; 14.2 prior to 14.2R4-S9, 14.2R7-S8, 14.2R8; 15.1 prior to 15.1F5-S3, 15.1F6, 15.1R4; 15.1X49 prior to 15.1X49-D60; 15.1X53 prior to 15.1X53-D47; 16.1 prior to 16.1R2. No other Juniper Networks products or platforms are affected by this issue.
Problem types: description: kernel hang
description: resource consumption
Affected products: vendor: Juniper Networks
product: Junos OS
Published: 2017-10-13T17:00:00.000Z
CVE-2017-10614 Junos OS: A remote unauthenticated attacker can consume large amounts of CPU and/or memory through telnetd
A vulnerability in telnetd service on Junos OS allows a remote attacker to cause a limited memory and/or CPU consumption denial of service attack. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D45; 12.3X48 prior to 12.3X48-D30; 14.1 prior to 14.1R4-S9, 14.1R8; 14.2 prior to 14.2R6; 15.1 prior to 15.1F5, 15.1R3; 15.1X49 prior to 15.1X49-D40; 15.1X53 prior to 15.1X53-D232, 15.1X53-D47.
Problem types: description: resource consumption
description: denial of service
Affected products: vendor: Juniper Networks
product: Junos OS
Published: 2017-10-13T17:00:00.000Z
CVE-2017-10615 Junos: Potential remote code execution vulnerability in PAM
A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as telnetd or sshd that make use of PAM. Affected Juniper Networks Junos OS releases are: 14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D50 on EX and QFX series; 14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8; No other Junos OS releases are affected by this issue. No other Juniper Networks products are affected by this issue.
Problem types: description: remote code execution vulnerability
Affected products: vendor: Juniper Networks
product: Junos OS
Published: 2017-10-13T17:00:00.000Z
CVE-2017-10616 Contrail: hard coded credentials
The ifmap service that comes bundled with Juniper Networks Contrail releases uses hard coded credentials. Affected releases are Contrail releases 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0. CVE-2017-10616 and CVE-2017-10617 can be chained together and have a combined CVSSv3 score of 5.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).
Problem types: description: hardcoded credential
Affected products: vendor: Juniper Networks
product: Contrail
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
Credits: lang: en
value: Guillaume TEISSIER / Orange  for responsibly reporting this vulnerability.
Published: 2017-10-13T17:00:00.000Z
CVE-2017-10617 Contrail: XML External Entity (XXE) vulnerability
The ifmap service that comes bundled with Contrail has an XML External Entity (XXE) vulnerability that may allow an attacker to retrieve sensitive system files. Affected releases are Juniper Networks Contrail 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0. CVE-2017-10616 and CVE-2017-10617 can be chained together and have a combined CVSSv3 score of 5.8 (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).
Problem types: description: XML External Entity (XXE) vulnerability
Affected products: vendor: Juniper Networks
product: Contrail
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 5
baseSeverity: MEDIUM
Credits: lang: en
value: Guillaume TEISSIER / Orange  for responsibly reporting this vulnerability.
Published: 2017-10-13T17:00:00.000Z
CVE-2017-10618 Junos: RPD core due to BGP UPDATE with malformed optional transitive attributes
When the 'bgp-error-tolerance' feature &#xe2;&#x80;" designed to help mitigate remote session resets from malformed path attributes &#xe2;&#x80;" is enabled, a BGP UPDATE containing a specifically crafted set of transitive attributes can cause the RPD routing process to crash and restart. Devices with BGP enabled that do not have 'bgp-error-tolerance' configured are not vulnerable to this issue. Affected releases are Juniper Networks Junos OS 13.3 prior to 13.3R10-S2; 14.1 prior to 14.1R8-S4, 14.1R9; 14.1X50 prior to 14.1X50-D185; 14.1X53 prior to 14.1X53-D45, 14.1X53-D50; 14.2 prior to 14.2R7-S7, 14.2R8; 15.1 prior to 15.1F5-S8, 15.1F6-S7, 15.1R5-S6, 15.1R6-S2, 15.1R7; 15.1X49 prior to 15.1X49-D100; 15.1X53 prior to 15.1X53-D64, 15.1X53-D70; 16.1 prior to 16.1R3-S4, 16.1R4-S3, 16.1R5; 16.2 prior to 16.2R1-S5, 16.2R2; 17.1 prior to 17.1R1-S3, 17.1R2; 17.2 prior to 17.2R1-S2, 17.2R2; 17.2X75 prior to 17.2X75-D50. No other Juniper Networks products or platforms are affected by this issue.
Problem types: description: Denial of service
Affected products: vendor: Juniper Networks
product: Junos OS
Published: 2017-10-13T17:00:00.000Z
CVE-2017-10619 Junos: SRX cluster denial of service vulnerability in flowd due to multicast packets
When Express Path (formerly known as service offloading) is configured on Juniper Networks SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800 in high availability cluster configuration mode, certain multicast packets might cause the flowd process to crash, halting or interrupting traffic from flowing through the device and triggering RG1+ (data-plane) fail-over to the secondary node. Repeated crashes of the flowd process may constitute an extended denial of service condition. This service is not enabled by default and is only supported in high-end SRX platforms. Affected releases are Juniper Networks Junos OS 12.3X48 prior to 12.3X48-D45, 15.1X49 prior to 15.1X49-D80 on SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800.
Problem types: description: denial of service
Affected products: vendor: Juniper Networks
product: Junos OS
Published: 2017-10-13T17:00:00.000Z
CVE-2017-10620 SRX Series: Antivirus updates are downloaded without verification
Juniper Networks Junos OS on SRX series devices do not verify the HTTPS server certificate before downloading anti-virus updates. This may allow a man-in-the-middle attacker to inject bogus signatures to cause service disruptions or make the device not detect certain types of attacks. Affected Junos OS releases are: 12.1X46 prior to 12.1X46-D71; 12.3X48 prior to 12.3X48-D55; 15.1X49 prior to 15.1X49-D110;
Problem types: description: insufficient verification
Affected products: vendor: Juniper Networks
product: Junos OS
Published: 2017-10-13T17:00:00.000Z
CVE-2017-10621 Junos OS: Denial of service vulnerability in telnetd
A denial of service vulnerability in telnetd service on Juniper Networks Junos OS allows remote unauthenticated attackers to cause a denial of service. Affected Junos OS releases are: 12.1X46 prior to 12.1X46-D71; 12.3X48 prior to 12.3X48-D50; 14.1 prior to 14.1R8-S5, 14.1R9; 14.1X53 prior to 14.1X53-D50; 14.2 prior to 14.2R7-S9, 14.2R8; 15.1 prior to 15.1F2-S16, 15.1F5-S7, 15.1F6-S6, 15.1R5-S2, 15.1R6; 15.1X49 prior to 15.1X49-D90; 15.1X53 prior to 15.1X53-D47; 16.1 prior to 16.1R4-S1, 16.1R5; 16.2 prior to 16.2R1-S3, 16.2R2;
Problem types: description: denial of service
Affected products: vendor: Juniper Networks
product: Junos OS
Published: 2017-10-13T17:00:00.000Z
CVE-2017-10622 Junos Space: Authentication bypass vulnerability
An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to login as any privileged user. This issue only affects Junos Space Network Management Platform 17.1R1 without Patch v1 and 16.1 releases prior to 16.1R3. This issue was found by an external security researcher.
Problem types: description: authentication bypass
Affected products: vendor: Juniper Networks
product: Junos Space
Credits: lang: en
value: Ilias Polychroniadis of NeuroSoft S.A. (Redyops Team)
Published: 2017-10-13T17:00:00.000Z
CVE-2017-10623 Junos Space: Insufficient verification of cluster messages
Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept, inject or disrupt Junos Space cluster operations between two nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.
Problem types: description: insufficient verification
Affected products: vendor: Juniper Networks
product: Junos Space
Published: 2017-10-13T17:00:00.000Z
CVE-2017-10624 Junos Space: Insufficient verification of node certificates.
Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database or add nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.
Problem types: description: insufficient verification
Affected products: vendor: Juniper Networks
product: Junos Space
Published: 2017-10-13T17:00:00.000Z
CVE-2017-10661 
Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-19T18:00:00.000Z
CVE-2017-10662 
The sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment count, which allows local users to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-19T18:00:00.000Z
CVE-2017-10663 
The sanity_check_ckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the blkoff and segno arrays, which allows local users to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-19T18:00:00.000Z
CVE-2017-10664 
qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T19:00:00.000Z
CVE-2017-10665 
Directory traversal vulnerability in ajaxfileupload.php in Kayson Group Ltd. phpGrid before 7.2.5 allows remote attackers to execute arbitrary code by uploading a crafted file with a .. (dot dot) in the file name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T14:00:00.000Z
CVE-2017-10667 
In index.php in Zen Cart 1.6.0, the products_id parameter can cause XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-29T00:00:00.000Z
CVE-2017-10668 
A Padding Oracle exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). Under an MITM condition within the OSCI infrastructure, an attacker needs to send crafted protocol messages to analyse the CBC mode padding in order to decrypt the transport encryption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-30T12:00:00.000Z
CVE-2017-10669 
Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). An attacker with access to unencrypted OSCI protocol messages must send crafted protocol messages with duplicate IDs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-30T12:00:00.000Z
CVE-2017-10670 
An XML External Entity (XXE) issue exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET), exploitable by sending a crafted standard-conforming OSCI message from within the infrastructure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-30T12:00:00.000Z
CVE-2017-10671 
Heap-based Buffer Overflow in the de_dotdot function in libhttpd.c in sthttpd before 2.27.1 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a crafted filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-29T08:00:00.000Z
CVE-2017-10672 
Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-29T08:00:00.000Z
CVE-2017-10673 
admin/profile.php in GetSimple CMS 3.x has XSS in a name field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-29T08:00:00.000Z
CVE-2017-10674 
Antiy Antivirus Engine 5.0.0.06281654 allows local users to cause a denial of service (BSOD) via a long third argument in a DeviceIoControl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-30T13:00:00.000Z
CVE-2017-10676 
On D-Link DIR-600M devices before C1_v3.05ENB01_beta_20170306, XSS was found in the form2userconfig.cgi username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-20T01:00:00.000Z
CVE-2017-10677 
Cross-Site Request Forgery (CSRF) exists on Linksys EA4500 devices with Firmware Version before 2.1.41.164606, as demonstrated by a request to apply.cgi to disable SIP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-06T18:00:00.000Z
CVE-2017-10678 
Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to delete permalinks via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-29T21:00:00.000Z
CVE-2017-10679 
Piwigo through 2.9.1 allows remote attackers to obtain sensitive information about the descriptive name of a permalink by examining the redirect URL that is returned in a request for the permalink ID number of a private album. The permalink ID numbers are easily guessed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-29T21:00:00.000Z
CVE-2017-10680 
Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to change a private album to public via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-29T21:00:00.000Z
CVE-2017-10681 
Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to unlock albums via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-29T21:00:00.000Z
CVE-2017-10682 
SQL injection vulnerability in the administrative backend in Piwigo through 2.9.1 allows remote users to execute arbitrary SQL commands via the cat_false or cat_true parameter in the comments or status page to cat_options.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-29T21:00:00.000Z
CVE-2017-10683 
In mpg123 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in libmpg123/id3.c. A crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-29T23:00:00.000Z
CVE-2017-10684 
In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-29T23:00:00.000Z
CVE-2017-10685 
In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-29T23:00:00.000Z
CVE-2017-10686 
In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token() function and freed in the detoken() function (called by pp_getline()) - it is used again at multiple positions later that could cause multiple damages. For example, it causes a corrupted double-linked list in detoken(), a double free or corruption in delete_Token(), and an out-of-bounds write in detoken(). It has a high possibility to lead to a remote code execution attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-29T23:00:00.000Z
CVE-2017-10687 
In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp. A crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-29T23:00:00.000Z
CVE-2017-10688 
In LibTIFF 4.0.8, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c. A crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-29T23:00:00.000Z
CVE-2017-10689 
In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.
Problem types: description: Incorrect Permission Handling
Affected products: vendor: Puppet
product: Puppet Enterprise
vendor: Puppet
product: Puppet Agent
Published: 2018-02-09T20:00:00.000Z
CVE-2017-10690 
In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environment that it was not classified to retrieve from. This was resolved in Puppet Agent 5.3.4, included in Puppet Enterprise 2017.3.4
Problem types: description: Privilege Escalation
Affected products: vendor: Puppet
product: Puppet Enterprise
vendor: Puppet
product: Puppet Agent
Published: 2018-02-09T20:00:00.000Z
CVE-2017-10699 
avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy() with a wrong size, leading to a denial of service (application crash) or possibly code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-30T13:00:00.000Z
CVE-2017-10700 
In the medialibrary component in QNAP NAS 4.3.3.0229, an un-authenticated, remote attacker can execute arbitrary system commands as the root user of the NAS application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-19T15:00:00.000Z
CVE-2017-10701 
Cross site scripting (XSS) vulnerability in SAP Enterprise Portal 7.50 allows remote attackers to inject arbitrary web script or HTML, aka SAP Security Notes 2469860, 2471209, and 2488516.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-28T19:00:00.000Z
CVE-2017-10706 
When Antiy Antivirus Engine before 5.0.0.05171547 scans a special ZIP archive, it crashes with a stack-based buffer overflow because a fixed path length is used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-02T13:00:00.000Z
CVE-2017-10708 
An issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the ExecutablePath field and it then uses the path to run package specific hooks without protecting against path traversal. This allows remote attackers to execute arbitrary code via a crafted .crash file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T20:00:00.000Z
CVE-2017-10709 
The lockscreen on Elephone P9000 devices (running Android 6.0) allows physically proximate attackers to bypass a wrong-PIN lockout feature by pressing backspace after each PIN guess.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-30T16:00:00.000Z