rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-15863 
Cross Site Scripting (XSS) exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-24T18:00:00.000Z
CVE-2017-15864 
In the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T15:00:00.000Z
CVE-2017-15865 
bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes because of a mishandled attribute length, aka RN-690 (CM-18492).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-08T20:00:00.000Z
CVE-2017-15867 
Multiple cross-site scripting (XSS) vulnerabilities in the user-login-history plugin through 1.5.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) date_from, (2) date_to, (3) user_id, (4) username, (5) country_name, (6) browser, (7) operating_system, or (8) ip_address parameter to admin/partials/listing/listing.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-24T19:00:00.000Z
CVE-2017-15868 
The bnep_add_connection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2cap socket is available, which allows local users to gain privileges via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-05T23:00:00.000Z
CVE-2017-15869 
Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows remote attackers to inject arbitrary web script or HTML via the search-for parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-18T14:00:00.000Z
CVE-2017-15870 
Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on the local station to gain SYSTEM privileges via vectors involving "image path execution hijacking."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T17:00:00.000Z
CVE-2017-15871 
The deserialize function in serialize-to-js through 1.1.1 allows attackers to cause a denial of service via vectors involving an Immediately Invoked Function Expression "function()" substring, as demonstrated by a "function(){console.log(" call or a simple infinite loop. NOTE: the vendor agrees that denial of service can occur but notes that deserialize is explicitly listed as "harmful" within the README.md file
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-24T20:00:00.000Z
CVE-2017-15872 
phpwcms 1.8.9 has XSS in include/inc_tmpl/admin.edituser.tmpl.php and include/inc_tmpl/admin.newuser.tmpl.php via the username (aka new_login) field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-24T20:00:00.000Z
CVE-2017-15873 
The get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-24T20:00:00.000Z
CVE-2017-15874 
archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-24T20:00:00.000Z
CVE-2017-15875 
SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to execute arbitrary SQL commands via the "checkemail" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-18T17:00:00.000Z
CVE-2017-15876 
Unrestricted File Upload vulnerability in GPWeb 8.4.61 allows remote authenticated users to upload any type of file, including a PHP shell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-18T17:00:00.000Z
CVE-2017-15877 
Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers to view the password and user database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-18T17:00:00.000Z
CVE-2017-15878 
A cross-site scripting (XSS) vulnerability exists in fields/types/markdown/MarkdownType.js in KeystoneJS before 4.0.0-beta.7 via the Contact Us feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-24T21:00:00.000Z
CVE-2017-15879 
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-24T21:00:00.000Z
CVE-2017-15880 
SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the group_name parameter to module/admin_group/add_modify_group.php (for insert_group and update_group).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-24T22:00:00.000Z
CVE-2017-15881 
Cross-Site Scripting vulnerability in KeystoneJS before 4.0.0-beta.7 allows remote authenticated administrators to inject arbitrary web script or HTML via the "content brief" or "content extended" field, a different vulnerability than CVE-2017-15878.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-24T22:00:00.000Z
CVE-2017-15882 
The London Trust Media Private Internet Access (PIA) application before 1.3.3.1 for Android allows remote attackers to cause a denial of service (application crash) via a large VPN server-list file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-26T05:00:00.000Z
CVE-2017-15883 
Sitefinity 5.1, 5.2, 5.3, 5.4, 6.x, 7.x, 8.x, 9.x, and 10.x allow remote attackers to bypass authentication and consequently cause a denial of service on load balanced sites or gain privileges via vectors related to weak cryptography.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-08T19:00:00.000Z
CVE-2017-15884 
In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.0, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-31T18:00:00.000Z
CVE-2017-15885 
Reflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an attacker to execute arbitrary JavaScript via the conf_Layout_OwnTitle parameter to view/view.shtml. NOTE: this might overlap CVE-2007-5214.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-25T06:00:00.000Z
CVE-2017-15886 
Server-side request forgery (SSRF) vulnerability in Link Preview in Synology Chat before 2.0.0-1124 allows remote authenticated users to download arbitrary local files via a crafted URI.
Problem types: cwe_id: CWE-918
description: Server-Side Request Forgery (CWE-918)
Affected products: vendor: Synology
product: Chat
Published: 2017-12-28T15:00:00.000Z
CVE-2017-15887 
An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server before 6.0.7-0085 allows remote attackers to obtain user credentials via a brute-force attack.
Problem types: cwe_id: CWE-307
description: Improper Restriction of Excessive Authentication Attempts (CWE-307)
Affected products: vendor: Synology
product: Synology CardDAV Server
Published: 2017-11-07T15:00:00.000Z
CVE-2017-15888 
Cross-site scripting (XSS) vulnerability in Custom Internet Radio List in Synology Audio Station before 6.3.0-3260 allows remote authenticated attackers to inject arbitrary web script or HTML via the NAME parameter.
Problem types: cwe_id: CWE-79
description: Improper Neutralization of Input During Web Page Generation (CWE-79)
Affected products: vendor: Synology
product: Synology Audio Station
Published: 2017-10-30T18:00:00.000Z
CVE-2017-15889 
Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field.
Problem types: cwe_id: CWE-77
description: Improper Neutralization of Special Elements used in a Command (CWE-77)
Affected products: vendor: Synology
product: DiskStation Manager (DSM)
Published: 2017-12-04T19:00:00.000Z
CVE-2017-15890 
Cross-site scripting (XSS) vulnerability in Disclaimer in Synology MailPlus Server before 1.4.0-0415 allows remote authenticated users to inject arbitrary web script or HTML via the NAME parameter.
Problem types: cwe_id: CWE-79
description: Improper Neutralization of Input During Web Page Generation (CWE-79)
Affected products: vendor: Synology
product: MailPlus Server
Published: 2017-12-15T15:00:00.000Z
CVE-2017-15891 
Improper access control vulnerability in SYNO.Cal.EventBase in Synology Calendar before 2.0.1-0242 allows remote authenticated users to modify calendar event via unspecified vectors.
Problem types: cwe_id: CWE-284
description: Improper Access Control (CWE-284)
Affected products: vendor: Synology
product: Synology Calendar
Published: 2017-12-08T16:00:00.000Z
CVE-2017-15892 
Multiple cross-site scripting (XSS) vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbitrary web script or HTML via (1) COMMAND, (2) COMMANDS INSTRUCTION, or (3) DESCRIPTION parameter.
Problem types: cwe_id: CWE-79
description: Improper Neutralization of Input During Web Page Generation (CWE-79)
Affected products: vendor: Synology
product: Chat
Published: 2017-12-28T15:00:00.000Z
CVE-2017-15893 
Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology File Station before 1.1.1-0099 allows remote authenticated users to write arbitrary files via the dest_folder_path parameter.
Problem types: cwe_id: CWE-22
description: Improper Limitation of a Pathname to a Restricted Directory (CWE-22)
Affected products: vendor: Synology
product: Synology File Station
Published: 2017-12-08T16:00:00.000Z
CVE-2017-15894 
Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager (DSM) 6.0.x before 6.0.3-8754-3 and before 5.2-5967-6 allows remote authenticated users to write arbitrary files via the dest_folder_path parameter.
Problem types: cwe_id: CWE-22
description: Improper Limitation of a Pathname to a Restricted Directory (CWE-22)
Affected products: vendor: Synology
product: Synology DiskStation Manager (DSM)
Published: 2017-12-08T16:00:00.000Z
CVE-2017-15895 
Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology Router Manager (SRM) before 1.1.5-6542-4 allows remote authenticated users to write arbitrary files via the dest_folder_path parameter.
Problem types: cwe_id: CWE-22
description: Improper Limitation of a Pathname to a Restricted Directory (CWE-22)
Affected products: vendor: Synology
product: Synology Router Manager (SRM)
Published: 2017-12-08T16:00:00.000Z
CVE-2017-15896 
Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read() due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the TLS or HTTP2 modules in a way that bypassed TLS authentication and encryption.
Problem types: description: Data Confidentiality/Integrity
Affected products: vendor: The Node.js Project
product: Node.js
Published: 2017-12-11T21:00:00.000Z
CVE-2017-15897 
Node.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the encoding for the fill value did not match the encoding specified. For example, 'Buffer.alloc(0x100, "This is not correctly encoded", "hex");' The buffer implementation was updated such that the buffer will be initialized to all zeros in these cases.
Problem types: description: Un-initialized Data
Affected products: vendor: The Node.js Project
product: Node.js
Published: 2017-12-11T21:00:00.000Z
CVE-2017-15906 
The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-26T00:00:00.000Z
CVE-2017-15907 
SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-26T05:00:00.000Z
CVE-2017-15908 
In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-26T14:00:00.000Z
CVE-2017-15909 
D-Link DGS-1500 Ax devices before 2.51B021 have a hardcoded password, which allows remote attackers to obtain shell access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-26T03:00:00.000Z
CVE-2017-15911 
The Admin Console in Ignite Realtime Openfire Server before 4.1.7 allows arbitrary client-side JavaScript code execution on victims who click a crafted setup/setup-host-settings.jsp?domain= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish communication channels, etc. The vulnerability is present after login into the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-26T17:00:00.000Z
CVE-2017-15913 
The Installer in Whale allows DLL hijacking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-08T03:00:00.000Z
CVE-2017-15914 
Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-08T23:00:00.000Z
CVE-2017-15917 
In Paessler PRTG Network Monitor 17.3.33.2830, it's possible to create a Map as a read-only user, by forging a request and sending it to the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-26T17:00:00.000Z
CVE-2017-15918 
Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivial and also exposes the user and system keychains to local attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-01T17:00:00.000Z
CVE-2017-15919 
The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-26T18:00:00.000Z
CVE-2017-15920 
In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002054. This is due to the input buffer being NULL or the input buffer size being 0 as they are not validated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-30T15:00:00.000Z
CVE-2017-15921 
In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002010. This is due to the input buffer being NULL or the input buffer size being 0 as they are not validated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-30T15:00:00.000Z
CVE-2017-15922 
In GNU Libextractor 1.4, there is an out-of-bounds read in the EXTRACTOR_dvi_extract_method function in plugins/dvi_extractor.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-26T18:00:00.000Z
CVE-2017-15923 
Konversation 1.4.x, 1.5.x, 1.6.x, and 1.7.x before 1.7.3 allow remote attackers to cause a denial of service (crash) via vectors related to parsing of IRC color formatting codes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-15T16:00:00.000Z
CVE-2017-15924 
In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request received via 127.0.0.1 UDP traffic, related to the add_server, build_config, and construct_command_line functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-27T16:00:00.000Z
CVE-2017-15928 
In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse_obj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-27T17:00:00.000Z
CVE-2017-15930 
In ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26, a Null Pointer Dereference occurs while transferring JPEG scanlines, related to a PixelPacket pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-27T18:00:00.000Z
CVE-2017-15931 
In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verneed() in libr/bin/format/elf/elf.c via crafted ELF files on 32bit systems.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-27T18:00:00.000Z
CVE-2017-15932 
In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/elf.c via crafted ELF files when parsing the ELF version on 32bit systems.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-27T18:00:00.000Z
CVE-2017-15933 
SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the host parameter to module/capacity_per_device/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-27T19:00:00.000Z
CVE-2017-15934 
Artica Pandora FMS version 7.0 is vulnerable to stored Cross-Site Scripting in the map name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-27T20:00:00.000Z
CVE-2017-15935 
Artica Pandora FMS version 7.0 is vulnerable to remote PHP code execution through the manager files function. This is only exploitable by administrators who upload a PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-27T20:00:00.000Z
CVE-2017-15936 
In Artica Pandora FMS version 7.0, an Attacker with write Permission can create an agent with an XSS Payload; when a user enters the agent definitions page, the script will get executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-27T20:00:00.000Z
CVE-2017-15937 
Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph requisition. This also implies that general OS information is leaked (e.g., a /var/www pathname typically means Linux or UNIX).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-27T20:00:00.000Z
CVE-2017-15938 
dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, miscalculates DW_FORM_ref_addr die refs in the case of a relocatable object file, which allows remote attackers to cause a denial of service (find_abstract_instance_name invalid memory read, segmentation fault, and application crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-27T21:00:00.000Z
CVE-2017-15939 
dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug_line file table, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename. NOTE: this issue is caused by an incomplete fix for CVE-2017-15023.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-27T21:00:00.000Z
CVE-2017-15940 
The web interface packet capture management component in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote authenticated users to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T17:00:00.000Z
CVE-2017-15941 
Cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.7, when the GlobalProtect gateway or portal is configured, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-10T18:00:00.000Z
CVE-2017-15942 
Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.13, and 8.0.x before 8.0.6 allows remote attackers to cause a denial of service via vectors related to the management interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T17:00:00.000Z
CVE-2017-15943 
The configuration file import for applications, spyware and vulnerability objects functionality in the web interface in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, and 7.1.x before 7.1.14 allows remote attackers to conduct server-side request forgery (SSRF) attacks and consequently obtain sensitive information via vectors related to parsing of external entities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T17:00:00.000Z
CVE-2017-15944 
Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T17:00:00.000Z
CVE-2017-15945 
The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysql account for creation of a link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-27T21:00:00.000Z
CVE-2017-15946 
In the com_tag component 1.7.6 for Joomla!, a SQL injection vulnerability is located in the `tag` parameter to index.php. The request method to execute is GET.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-28T00:00:00.000Z