rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-9300 
plugins\codec\libflac_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted FLAC file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T19:00:00.000Z
CVE-2017-9301 
plugins\audio_filter\libmpgatofixed32_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (invalid read and application crash) or possibly have unspecified other impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T19:00:00.000Z
CVE-2017-9302 
RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T19:00:00.000Z
CVE-2017-9303 
Laravel 5.4.x before 5.4.22 does not properly constrain the host portion of a password-reset URL, which makes it easier for remote attackers to conduct phishing attacks by specifying an attacker-controlled host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T22:00:00.000Z
CVE-2017-9304 
libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption) via a crafted rule that is mishandled in the _yr_re_emit function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-31T03:54:00.000Z
CVE-2017-9305 
lib/core/TikiFilter/PreventXss.php in Tiki Wiki CMS Groupware 16.2 allows remote attackers to bypass the XSS filter via padded zero characters, as demonstrated by an attack on tiki-batch_send_newsletter.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-31T03:54:00.000Z
CVE-2017-9306 
inc/SP/Html/Html.class.php in sysPass 2.1.9 allows remote attackers to bypass the XSS filter, as demonstrated by use of an "<svg/onload=" substring instead of an "<svg onload=" substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-31T03:54:00.000Z
CVE-2017-9307 
SSRF vulnerability in remotedownload.php in Allen Disk 1.6 allows remote authenticated users to conduct port scans and access intranet servers via a crafted file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-31T03:54:00.000Z
CVE-2017-9310 
QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to cause a denial of service (infinite loop) via vectors related to setting the initial receive / transmit descriptor head (TDH/RDH) outside the allocated descriptor buffer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-08T16:00:00.000Z
CVE-2017-9312 
Improperly implemented option-field processing in the TCP/IP stack on Allen-Bradley L30ERMS safety devices v30 and earlier causes a denial of service. When a crafted TCP packet is received, the device reboots immediately.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T15:00:00.000Z
CVE-2017-9313 
Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via the sec parameter to view_man.cgi, the referers parameter to change_referers.cgi, or the name parameter to save_user.cgi. NOTE: these issues were not fixed in 1.840.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-04T02:00:00.000Z
CVE-2017-9314 
Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message.
Problem types: description: Authentication vulnerability
Affected products: vendor: Dahua Technologies
product: NVR50XX, VR52XX, VR54XX, VR58XX
Published: 2017-11-13T16:00:00.000Z
CVE-2017-9315 
Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker.
Problem types: description: risk of sensitive information leakage
Affected products: vendor: Dahua Technologies
product: Dahua IP Camera and IP PTZ IPC-HFW1XXX, IPC-HDW1XXX, IPC-HDBW1XXX, IPC-HFW2XXX, IPC-HDW2XXX, IPC-HDBW2XXX, IPC-HFW4XXX, IPC-HDW4XXX, IPC-HDBW4XXX, IPC-HF5XXX, IPC-HFW5XXX, IPC-HDW5XXX, IPC-HDBW5XXX, IPC-HF8XXX, IPC-HFW8XXX, IPC-HDBW8XXX, IPC-EBW8XXX, IPC-PFW8xxx, IPC-PDBW8xxx, IPC-HUM8xxx, PSD8xxxx, DH-SD2XXXXX, DH-SD4XXXXX, DH-SD5XXXXX, DH-SD6XXXXX
Published: 2017-11-28T19:00:00.000Z
CVE-2017-9316 
Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerability was caused by internal Debug function. This particular function was used for problem analysis and performance tuning during product development phase. It allowed the device to receive only specific data (one direction, no transmit) and therefore it was not involved in any instance of collecting user privacy data or allowing remote code execution.
Problem types: description: Firmware upgrade authentication bypass vulnerability
Affected products: vendor: Dahua Technologies
product: IPC-HDW4300S\NVR11HS\IPC-HFW4X00\IPC-HDW4X00\IPC-HDBW4X00\IPC-HF5X00\IPC-HFW5X00\IPC-HDW5X00\IPC-HDBW5X00\NVR11HS
Published: 2017-11-27T17:00:00.000Z
CVE-2017-9317 
Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obtain device information or attack the device.
Problem types: description: Privilege escalation
Affected products: vendor: Dahua Technologies
product: XVR 5x04, XVR 5x08, XVR 5x16, XVR 7x16, IPC-HDBW4XXX, IPC-HDBW5XXX
Published: 2018-05-23T15:00:00.000Z
CVE-2017-9324 
In Open Ticket Request System (OTRS) 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5.0.19, an attacker with agent permission is capable of opening a specific URL in a browser to gain administrative privileges / full access. Afterward, all system settings can be read and changed. The URLs in question contain index.pl?Action=Installer with ;Subaction=Intro or ;Subaction=Start or ;Subaction=System appended at the end.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-12T06:00:00.000Z
CVE-2017-9325 
The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T16:23:05.000Z
CVE-2017-9326 
The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloudera Manager. The keystore file itself is not exposed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T16:17:43.000Z
CVE-2017-9327 
Secret data of processes managed by CM is not secured by file permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T16:14:29.000Z
CVE-2017-9328 
Shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before 3.0.34 leads to remote code execution as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-15T20:00:00.000Z
CVE-2017-9330 
QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-08T16:00:00.000Z
CVE-2017-9331 
The Agenda component in Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules/Utils/RecordBrowser/RecordBrowserCommon_0.php, which allows remote attackers to inject arbitrary web script or HTML via a crafted meeting description parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-01T04:53:00.000Z
CVE-2017-9332 
The smarty_self function in modules/module_smarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the self Smarty tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-06T14:00:00.000Z
CVE-2017-9333 
OpenWebif 1.2.5 allows remote code execution via a URL to the CallOPKG function in the IpkgController class in plugin/controllers/ipkg.py, when the URL refers to an attacker-controlled web site with a Trojan horse package. This has security implications in cases where untrusted users can trigger CallOPKG calls, and these users can enter an arbitrary URL in an input field, even though that input field was only intended for a package name. This threat model may be relevant in the latest versions of third-party products that bundle OpenWebif, i.e., set-top box products. The issue of Trojan horse packages does NOT have security implications in cases where the attacker has full OpenWebif access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T01:00:00.000Z
CVE-2017-9334 
An incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer dereference in all CHICKEN Scheme versions prior to 4.13, which allows an attacker to cause a denial of service by passing an improper list to an application that calls "length" on it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-01T04:53:00.000Z
CVE-2017-9336 
The WP Editor.MD plugin 1.6 for WordPress has a stored XSS vulnerability in the content of a post.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-01T04:53:00.000Z
CVE-2017-9337 
The Markdown on Save Improved plugin 2.5 for WordPress has a stored XSS vulnerability in the content of a post.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-01T04:53:00.000Z
CVE-2017-9338 
Inadequate escaping lead to XSS vulnerability in the search module in ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2. To be exploitable a user has to write or paste malicious content into the search dialogue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T21:00:00.000Z
CVE-2017-9339 
A logical error in ownCloud Server before 10.0.2 caused disclosure of valid share tokens for public calendars. Thus granting an attacker potentially access to publicly shared calendars without knowing the share token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T21:00:00.000Z
CVE-2017-9340 
An attacker is logged in as a normal user and can somehow make admin to delete shared folders in ownCloud Server before 10.0.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T21:00:00.000Z
CVE-2017-9343 
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer. This was addressed in epan/dissectors/packet-msnip.c by validating an IPv4 address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9344 
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bluetooth L2CAP dissector could divide by zero. This was addressed in epan/dissectors/packet-btl2cap.c by validating an interval value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9345 
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dns.c by trying to detect self-referencing pointers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9346 
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-slsk.c by making loop bounds more explicit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9347 
In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/asn1/ros/packet-ros-template.c by validating an OID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9348 
In Wireshark 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-dof.c by validating a size value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9349 
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DICOM dissector has an infinite loop. This was addressed in epan/dissectors/packet-dcm.c by validating a length value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9350 
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by checking for a negative length.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9351 
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-bootp.c by extracting the Vendor Class Identifier more carefully.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9352 
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bazaar dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by ensuring that backwards parsing cannot occur.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9353 
In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. This was addressed in epan/dissectors/packet-ipv6.c by validating an IPv6 address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9354 
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the RGMP dissector could crash. This was addressed in epan/dissectors/packet-rgmp.c by validating an IPv4 address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9355 
XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted XSPF playlist file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-07T19:00:00.000Z
CVE-2017-9356 
Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-23T05:00:00.000Z
CVE-2017-9358 
A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before 13.13-cert4, which can be triggered by sending specially crafted SCCP packets causing an infinite loop and leading to memory exhaustion (by message logging in that loop).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9359 
The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9360 
WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9361 
WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9362 
ManageEngine ServiceDesk Plus before 9312 contains an XML injection at add Configuration items CMDB API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-25T15:54:17.000Z
CVE-2017-9363 
Untrusted Java serialization in Soffid IAM console before 1.7.5 allows remote attackers to achieve arbitrary remote code execution via a crafted authentication request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9364 
Unrestricted File Upload exists in BigTree CMS through 4.2.18: if an attacker uploads an 'xxx.pht' or 'xxx.phtml' file, they could bypass a safety check and execute any code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9365 
CSRF exists in BigTree CMS through 4.2.18 with the force parameter to /admin/pages/revisions.php - for example: /admin/pages/revisions/1/?force=false. A page with id=1 can be unlocked.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9366 
Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules/Base/Dashboard/Dashboard_0.php, which allows remote attackers to inject arbitrary web script or HTML via a crafted tab_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T05:04:00.000Z
CVE-2017-9367 
A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request.
Problem types: description: Directory traversal
Affected products: vendor: BlackBerry
product: Workspaces Server
Published: 2017-10-16T21:00:00.000Z
CVE-2017-9368 
An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access to source code for server-side applications by crafting a request for specific files.
Problem types: description: Information disclosure
Affected products: vendor: BlackBerry
product: Workspaces Server
Published: 2017-10-16T21:00:00.000Z
CVE-2017-9369 
In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, an information disclosure vulnerability in the default configuration of the QNX SDP could allow an attacker to gain information relating to memory layout of higher privileged processes by manipulating environment variables that influence the loader.
Problem types: cwe_id: CWE-200
description: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: BlackBerry
product: QNX Software Development Platform (SDP)
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 3.8
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
version: 3.1
Published: 2017-11-14T21:00:00.000Z
CVE-2017-9370 
An information disclosure / elevation of privilege vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker who has legitimate access to BlackBerry Workspaces to gain access to another user's workspace by making multiple login requests to the server.
Problem types: description: Information disclosure/elevation of privilege
Affected products: vendor: BlackBerry
product: BlackBerry Workspaces Server; WatchDox by BlackBerry Server
Published: 2017-08-09T17:00:00.000Z
CVE-2017-9371 
In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default configuration of the QNX SDP could allow an attacker being able to reduce the entropy of the PRNG, making other blended attacks more practical by gaining control over environmental factors that influence seed generation.
Problem types: description: Loss of integrity vulnerability
cwe_id: CWE-332
description: CWE-332 Insufficient Entropy in PRNG
Affected products: vendor: BlackBerry
product: QNX Software Development Platform (QNX SDP)
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: PHYSICAL
availabilityImpact: NONE
baseScore: 2.6
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
version: 3.1
Published: 2017-11-14T21:00:00.000Z
CVE-2017-9372 
PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service (buffer overflow and application crash) via a SIP packet with a crafted CSeq header in conjunction with a Via header that lacks a branch parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-02T14:00:00.000Z
CVE-2017-9373 
Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the AHCI device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-16T22:00:00.000Z
CVE-2017-9374 
Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-16T22:00:00.000Z
CVE-2017-9375 
QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users to cause a denial of service (infinite recursive call) via vectors involving control transfer descriptors sequencing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-16T22:00:00.000Z
CVE-2017-9376 
ManageEngine ServiceDesk Plus before 9314 contains a local file inclusion vulnerability in the defModule parameter in DefaultConfigDef.do and AssetDefaultConfigDef.do.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-25T15:53:20.000Z
CVE-2017-9377 
A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-30T14:00:00.000Z