rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-14007 
An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The user's session is available for an extended period beyond the last activity, allowing an attacker to reuse an old session for authorization.
Problem types: cwe_id: CWE-613
description: CWE-613
Affected products: vendor: n/a
product: ProMinent MultiFLEX M10a Controller
Published: 2017-10-17T22:00:00.000Z
CVE-2017-14008 
GE Centricity PACS RA1000, diagnostic image analysis, all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices.
Problem types: cwe_id: CWE-287
description: IMPROPER AUTHENTICATION CWE-287 The affected devices use default or hard-coded credentials.
Affected products: vendor: GE Healthcare
product: GE Centricity PACS RA1000
Published: 2018-03-20T16:00:00.000Z
CVE-2017-14009 
An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When an authenticated user uses the Change Password feature on the application, the current password for the user is specified in plaintext. This may allow an attacker who has been authenticated to gain access to the password.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: n/a
product: ProMinent MultiFLEX M10a Controller
Published: 2017-10-17T22:00:00.000Z
CVE-2017-14010 
In SpiderControl MicroBrowser Windows XP, Vista 7, 8 and 10, Versions 1.6.30.144 and prior, an uncontrolled search path element vulnerability has been identified which could be exploited by placing a specially crafted DLL file in the search path.  If the malicious DLL is loaded prior to the valid DLL, an attacker could execute arbitrary code on the system.
Problem types: cwe_id: CWE-427
description: UNCONTROLLED SEARCH PATH ELEMENT CWE-427
Affected products: vendor: SpiderControl
product: MicroBrowser
Published: 2018-04-26T19:00:00.000Z
CVE-2017-14011 
A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application does not sufficiently verify requests, making it susceptible to cross-site request forgery. This may allow an attacker to execute unauthorized code, resulting in changes to the configuration of the device.
Problem types: cwe_id: CWE-352
description: CWE-352
Affected products: vendor: n/a
product: ProMinent MultiFLEX M10a Controller
Published: 2017-10-17T22:00:00.000Z
CVE-2017-14012 
Boston Scientific ZOOM LATITUDE PRM Model 3120 does not encrypt PHI at rest. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Problem types: cwe_id: CWE-311
description: Missing Encryption of Sensitive Data - CWE-311
Affected products: vendor: Boston Scientific
product: ZOOM LATITUDE PRM
Published: 2018-05-01T18:00:00.000Z
CVE-2017-14013 
A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The log out function in the application removes the user's session only on the client side. This may allow an attacker to bypass protection mechanisms, gain privileges, or assume the identity of an authenticated user.
Problem types: cwe_id: CWE-602
description: CWE-602
Affected products: vendor: n/a
product: ProMinent MultiFLEX M10a Controller
Published: 2017-10-17T22:00:00.000Z
CVE-2017-14014 
Boston Scientific ZOOM LATITUDE PRM Model 3120 uses a hard-coded cryptographic key to encrypt PHI prior to having it transferred to removable media. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Problem types: cwe_id: CWE-321
description: Use of hard-coded cryptographic key CWE-321
Affected products: vendor: Boston Scientific
product: ZOOM LATITUDE PRM
Published: 2018-05-01T18:00:00.000Z
CVE-2017-14016 
A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The application lacks proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, which could allow an attacker to execute arbitrary code under the context of the process.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: n/a
product: Advantech WebAccess
Published: 2017-11-06T22:00:00.000Z
CVE-2017-14017 
An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An uncontrolled search path element vulnerability has been identified, which may allow a remote attacker without privileges to execute arbitrary code in the form of a malicious DLL file.
Problem types: cwe_id: CWE-427
description: CWE-427
Affected products: vendor: n/a
product: Progea Movicon SCADA/HMI
Published: 2017-10-19T23:00:00.000Z
CVE-2017-14018 
An improper authentication issue was discovered in Johnson & Johnson Ethicon Endo-Surgery Generator Gen11, all versions released before November 29, 2017. The security authentication mechanism used between the Ethicon Endo-Surgery Generator Gen11 and single-patient use products can be bypassed, allowing for unauthorized devices to be connected to the generator, which could result in a loss of integrity or availability.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: n/a
product: Ethicon Endo-Surgery Generator G11
Published: 2017-12-05T23:00:00.000Z
CVE-2017-14019 
An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An unquoted search path or element vulnerability has been identified, which may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate his or her privileges.
Problem types: cwe_id: CWE-428
description: CWE-428
Affected products: vendor: n/a
product: Progea Movicon SCADA/HMI
Published: 2017-10-19T23:00:00.000Z
CVE-2017-14020 
In AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) Versions 2.10 and prior; C-More Programming Software (Part Number EA9-PGMSW) Versions 6.30 and prior; C-More Micro (Part Number EA-PGMSW) Versions 4.20.01.0 and prior; Do-more Designer Software (Part Number DM-PGMSW) Versions 2.0.3 and prior; GS Drives Configuration Software (Part Number GSOFT) Versions 4.0.6 and prior; SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT) Versions 1.1.0.5 and prior; and DirectSOFT Programming Software Versions 6.1 and prior, an uncontrolled search path element (DLL Hijacking) vulnerability has been identified. To exploit this vulnerability, an attacker could rename a malicious DLL to meet the criteria of the application, and the application would not verify that the DLL is correct. Once loaded by the application, the DLL could run malicious code at the privilege level of the application.
Problem types: cwe_id: CWE-427
description: UNCONTROLLED SEARCH PATH ELEMENT CWE-427
Affected products: vendor: AutomationDirect
product: CLICK Programming Software (Part Number C0-PGMSW)
vendor: AutomationDirect
product: C-More Programming Software (Part Number EA9-PGMSW)
vendor: AutomationDirect
product: C-More Micro (Part Number EA-PGMSW)
vendor: AutomationDirect
product: Do-more Designer Software (Part Number DM-PGMSW)
vendor: AutomationDirect
product: GS Drives Configuration Software (Part Number GSOFT)
vendor: AutomationDirect
product: SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT)
vendor: AutomationDirect
product: DirectSOFT Programming Software
Published: 2017-11-13T20:00:00.000Z
CVE-2017-14021 
A Use of Hard-coded Cryptographic Key issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FX version 1.4, JetNet5628G-R version 1.4, JetNet5628G version 1.4, JetNet5728G-24P version 1.4, JetNet5828G version 1.1d, JetNet6710G-HVDC version 1.1e, and JetNet6710G version 1.1. An attacker may gain access to hard-coded certificates and private keys allowing the attacker to perform man-in-the-middle attacks.
Problem types: cwe_id: CWE-321
description: USE OF HARD-CODED CRYPTOGRAPHIC KEY CWE-321
Affected products: vendor: n/a
product: Korenix JetNet
Published: 2017-11-01T02:00:00.000Z
CVE-2017-14022 
An Improper Input Validation issue was discovered in Rockwell Automation FactoryTalk Alarms and Events, Version 2.90 and earlier. An unauthenticated attacker with remote access to a network with FactoryTalk Alarms and Events can send a specially crafted set of packets packet to Port 403/TCP (the history archiver service), causing the service to either stall or terminate.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: n/a
product: Rockwell Automation FactoryTalk Alarms and Events
Published: 2017-12-23T00:00:00.000Z
CVE-2017-14023 
An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators group to crash services by sending specially crafted messages to the DCOM interface.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: n/a
product: Siemens SIMATIC PCS 7
Published: 2017-11-06T22:00:00.000Z
CVE-2017-14024 
A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InTouch Machine Edition v8.0 SP2 Patch 1 and prior versions. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution with high privileges.
Problem types: description: Stack-based Buffer Overflow
Affected products: vendor: n/a
product: Schneider Electric InduSoft Web Studio and InTouch Machine Edition
Published: 2017-11-13T20:00:00.000Z
CVE-2017-14025 
An Improper Input Validation issue was discovered in ABB FOX515T release 1.0. An improper input validation vulnerability has been identified, allowing a local attacker to provide a malicious parameter to the script that is not validated by the application, This could enable the attacker to retrieve any file on the server.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: n/a
product: ABB FOX515T
Published: 2017-11-06T22:00:00.000Z
CVE-2017-14026 
In Ice Qube Thermal Management Center versions prior to version 4.13, the web application does not properly authenticate users which may allow an attacker to gain access to sensitive information.
Problem types: cwe_id: CWE-287
description: IMPROPER AUTHENTICATION CWE-287
Affected products: vendor: Ice Qube
product: Thermal Management Center
Published: 2018-09-06T19:00:00.000Z
CVE-2017-14027 
A Use of Hard-coded Credentials issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FX version 1.4, JetNet5628G-R version 1.4, JetNet5628G version 1.4, JetNet5728G-24P version 1.4, JetNet5828G version 1.1d, JetNet6710G-HVDC version 1.1e, and JetNet6710G version 1.1. The software uses undocumented hard-coded credentials that may allow an attacker to gain remote access.
Problem types: cwe_id: CWE-798
description: USE OF HARD-CODED CREDENTIALS CWE-798
Affected products: vendor: n/a
product: Korenix JetNet
Published: 2017-11-01T02:00:00.000Z
CVE-2017-14028 
A Resource Exhaustion issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exhaust memory resources by sending a large amount of TCP SYN packets.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: n/a
product: Moxa NPort 5110, 5130, and 5150
Published: 2017-11-16T21:00:00.000Z
CVE-2017-14029 
An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior. The program will execute specially crafted malicious dll files placed on the target machine.
Problem types: cwe_id: CWE-427
description: CWE-427
Affected products: vendor: n/a
product: Trihedral Engineering Limited VTScada
Published: 2017-11-06T22:00:00.000Z
CVE-2017-14030 
An issue was discovered in Moxa MXview v2.8 and prior. The unquoted service path escalation vulnerability could allow an authorized user with file access to escalate privileges by inserting arbitrary code into the unquoted service path.
Problem types: cwe_id: CWE-428
description: CWE-428
Affected products: vendor: n/a
product: Moxa MXview
Published: 2018-01-12T20:00:00.000Z
CVE-2017-14031 
An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local, non-administrator user has privileges to read and write to the file system of the target machine.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: n/a
product: Trihedral Engineering Limited VTScada
Published: 2017-11-06T22:00:00.000Z
CVE-2017-14032 
ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-30T20:00:00.000Z
CVE-2017-14033 
The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service (interpreter crash) via a crafted string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-19T17:00:00.000Z
CVE-2017-14034 
The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T04:00:00.000Z
CVE-2017-14035 
CrushFTP 8.x before 8.2.0 has a serialization vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-30T21:00:00.000Z
CVE-2017-14036 
CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-30T21:00:00.000Z
CVE-2017-14037 
CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-30T21:00:00.000Z
CVE-2017-14038 
CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-30T21:00:00.000Z
CVE-2017-14039 
A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-30T22:00:00.000Z
CVE-2017-14040 
An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function. The vulnerability may lead to remote denial of service or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-30T22:00:00.000Z
CVE-2017-14041 
A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-30T22:00:00.000Z
CVE-2017-14042 
A memory allocation failure was discovered in the ReadPNMImage function in coders/pnm.c in GraphicsMagick 1.3.26. The vulnerability causes a big memory allocation, which may lead to remote denial of service in the MagickRealloc function in magick/memory.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-30T22:00:00.000Z
CVE-2017-14048 
BlackCat CMS 1.2 allows remote authenticated users to inject arbitrary PHP code into info.php via a crafted new_modulename parameter to backend/addons/ajax_create.php. NOTE: this can be exploited via CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T04:00:00.000Z
CVE-2017-14049 
In BlackCat CMS 1.2, backend/settings/ajax_save_settings.php allows remote authenticated users to conduct XSS attacks via the Website header or Website footer field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T04:00:00.000Z
CVE-2017-14050 
In BlackCat CMS 1.2, backend/addons/install.php allows remote authenticated users to execute arbitrary PHP code via a ZIP archive that contains a .php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T04:00:00.000Z
CVE-2017-14051 
An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel through 4.12.10 allows local users to cause a denial of service (memory corruption and system crash) by leveraging root access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T04:00:00.000Z
CVE-2017-14053 
NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-01T21:00:00.000Z
CVE-2017-14054 
In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivr_read_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted IVR file, which claims a large "len" field in the header but does not contain sufficient backing data, is provided, the first type==4 loop would consume huge CPU resources, since there is no EOF check inside the loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T15:00:00.000Z
CVE-2017-14055 
In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nb_frames" field in the header but does not contain sufficient backing data, is provided, the loop over the frames would consume huge CPU and memory resources, since there is no EOF check inside the loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T15:00:00.000Z
CVE-2017-14056 
In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted RL2 file, which claims a large "frame_count" field in the header but does not contain sufficient backing data, is provided, the loops (for offset and size tables) would consume huge CPU and memory resources, since there is no EOF check inside these loops.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T15:00:00.000Z
CVE-2017-14057 
In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted ASF file, which claims a large "name_len" or "count" field in the header but does not contain sufficient backing data, is provided, the loops over the name and markers would consume huge CPU and memory resources, since there is no EOF check inside these loops.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T15:00:00.000Z
CVE-2017-14058 
In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service (infinite loop).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T15:00:00.000Z
CVE-2017-14059 
In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but does not contain sufficient backing data, is provided, the image-offset parsing loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T15:00:00.000Z
CVE-2017-14060 
In ImageMagick 7.0.6-10, a NULL Pointer Dereference issue is present in the ReadCUTImage function in coders/cut.c that could allow an attacker to cause a Denial of Service (in the QueueAuthenticPixelCacheNexus function within the MagickCore/cache.c file) by submitting a malformed image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T15:00:00.000Z
CVE-2017-14061 
Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T16:00:00.000Z
CVE-2017-14062 
Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T16:00:00.000Z
CVE-2017-14063 
Async Http Client (aka async-http-client) before 2.0.35 can be tricked into connecting to a host different from the one extracted by java.net.URI if a '?' character occurs in a fragment identifier. Similar bugs were previously identified in cURL (CVE-2016-8624) and Oracle Java 8 java.net.URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T16:00:00.000Z
CVE-2017-14064 
Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate call. The issues lies in using strdup in ext/json/ext/generator/generator.c, which will stop after encountering a '\0' byte, returning a pointer to a string of length zero, which is not the length stored in space_len.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T17:00:00.000Z
CVE-2017-14069 
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T18:00:00.000Z
CVE-2017-14070 
Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to ipsearch.php, related to PHP_SELF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T18:00:00.000Z
CVE-2017-14075 
This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x953824a7 by the windrvr1240 kernel driver. The issue lies in the failure to properly validate user-supplied data which can result in an out-of-bounds write condition. An attacker can leverage this vulnerability to execute arbitrary code under the context of kernel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T17:00:00.000Z
CVE-2017-14076 
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T19:00:00.000Z