yahoo-inc/cve-impacts huggingface dataset:
CVE-2017-17552: /LoadFrame in Zoho ManageEngine AD Manager Plus build 6590 - 6613 allows attackers to conduct URL Redirection attacks via the src parameter, resulting in a bypass of CSRF protection, or potentially masquerading a malicious URL as trusted.
Key phrases: bypass of CSRF protection, conduct URL Redirection attacks via the src parameter, url redirection, csrf protection
CVE-2017-17553: The Dolphin Browser for Android 12.0.2 suffers from an insecure parsing implementation of the Intent URI scheme. This vulnerability could allow attackers to abuse this implementation through a malicious Intent URI, in order to invoke private Activities within the Dolphin Browser.
Key phrases: abuse this implementation through a malicious Intent URI, insecure parsing implementation
CVE-2017-17554: A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avcodec_readframe in io/source_avcodec.c of aubio 0.4.6, which may lead to DoS when playing a crafted audio file.
Key phrases: null pointer dereference (dos)
CVE-2017-17555: The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file.
Key phrases: denial of service (NULL pointer dereference and application crash), cause a denial of service (NULL pointer, null pointer dereference
CVE-2017-17556: A debug tool in Synaptics TouchPad drivers allows local users with administrative access to obtain sensitive information about keyboard scan codes by modifying registry keys.
Key phrases: obtain sensitive information, obtain sensitive information about keyboard scan codes by
CVE-2017-17557: In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper validation of the biSize member, which can result in a heap based buffer overflow. An attacker can leverage this to execute code in the context of the current process.
Key phrases: heap based buffer overflow, execute code
CVE-2017-17558: The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device.
Key phrases: denial of service (out-of-bounds write access), cause a denial of service (out-, unspecified other impact, out of bounds write, unspecified impact
CVE-2017-1756: IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 135856.
Key phrases: be stored locally which can be read by
CVE-2017-17560: An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component, /web/jquery/uploader/multi_uploadify.php, provides multipart upload functionality that is accessible without authentication and can be used to place a file anywhere on the device's file system. This allows an attacker the ability to upload a PHP shell onto the device and obtain arbitrary code execution as root.
Key phrases: obtain arbitrary code execution, upload a PHP shell onto the device and
CVE-2017-17561: SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/admin_ping.php, which interacts with data/admin/ping.php.
Key phrases: execute arbitrary PHP code, execute arbitrary PHP code via a crafted token
CVE-2017-17562: Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc dynamic linker, this behaviour can be abused for remote code execution using special parameter names such as LD_PRELOAD. An attacker can POST their shared object payload in the body of the request, and reference it using /proc/self/fd/0.
Key phrases: remote code execution if CGI is enabled and
CVE-2017-17563: An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging an incorrect mask for reference-count overflow checking in shadow mode.
Key phrases: denial of service (host OS crash), gain host OS privileges, cause a denial of service (host OS, incorrect mask, reference-count overflow checking
CVE-2017-17564: An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging incorrect error handling for reference counting in shadow mode.
Key phrases: denial of service (host OS crash), gain host OS privileges, cause a denial of service (host OS, incorrect error handling
CVE-2017-17565: An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) if shadow mode and log-dirty mode are in place, because of an incorrect assertion related to M2P.
Key phrases: denial of service (host OS crash), cause a denial of service (host OS, host os crash, incorrect assertion
CVE-2017-17566: An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) or gain host OS privileges in shadow mode by mapping a certain auxiliary page.
Key phrases: denial of service (host OS crash), gain host OS privileges, cause a denial of service (host OS, auxiliary page
CVE-2017-17567: Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter.
Key phrases: sql injection
CVE-2017-17568: Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the backend PHP script), which might allow remote attackers to obtain sensitive information via a direct request.
Key phrases: obtain sensitive information, obtain sensitive information via a direct request, incorrect access control
CVE-2017-17569: Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.
Key phrases: xss
CVE-2017-1757: IBM Security Guardium 10.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 135858.
Key phrases: view, sql injection
CVE-2017-17570: FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php fl_orig or fl_dest parameter.
Key phrases: sql injection
CVE-2017-17571: FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.
Key phrases: sql injection
CVE-2017-17572: FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.
Key phrases: sql injection
CVE-2017-17573: FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id parameter.
Key phrases: sql injection
CVE-2017-17574: FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.
Key phrases: sql injection
CVE-2017-17575: FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.
Key phrases: sql injection
CVE-2017-17576: FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or service-provider.php ser parameter.
Key phrases: sql injection
CVE-2017-17577: FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id parameter.
Key phrases: sql injection
CVE-2017-17578: FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.
Key phrases: sql injection
CVE-2017-17579: FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.
Key phrases: sql injection
CVE-2017-1758: IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 135859.
Key phrases: xml external entity injection (xxe), consume memory resources, sensitive information
CVE-2017-17580: FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details.php id parameter.
Key phrases: sql injection
CVE-2017-17581: FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.
Key phrases: sql injection
CVE-2017-17582: FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.
Key phrases: sql injection
CVE-2017-17583: FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.
Key phrases: sql injection
CVE-2017-17584: FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest parameter.
Key phrases: sql injection
CVE-2017-17585: FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.
Key phrases: sql injection
CVE-2017-17586: FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.
Key phrases: sql injection
CVE-2017-17587: FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter.
Key phrases: sql injection
CVE-2017-17588: FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or show_misc_video.php id parameter.
Key phrases: sql injection
CVE-2017-17589: FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter.
Key phrases: sql injection
CVE-2017-17590: FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter.
Key phrases: sql injection
CVE-2017-17591: Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.
Key phrases: sql injection
CVE-2017-17592: Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.
Key phrases: sql injection
CVE-2017-17593: Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.
Key phrases: allows Arbitrary File Upload, Arbitrary File Upload via view/my_profile.php, arbitrary file upload
CVE-2017-17594: DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.
Key phrases: sql injection
CVE-2017-17595: Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter.
Key phrases: sql injection
CVE-2017-17596: Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.
Key phrases: sql injection
CVE-2017-17597: Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.
Key phrases: sql injection
CVE-2017-17598: Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.
Key phrases: sql injection
CVE-2017-17599: Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter.
Key phrases: sql injection
CVE-2017-1760: IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a local user to crash the queue manager agent thread and expose some sensitive information. IBM X-Force ID: 126454.
Key phrases: crash the queue manager agent thread and expose, sensitive information
CVE-2017-17600: Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.
Key phrases: sql injection
CVE-2017-17601: Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.
Key phrases: sql injection
CVE-2017-17602: Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.
Key phrases: sql injection
CVE-2017-17603: Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter.
Key phrases: sql injection
CVE-2017-17604: Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter.
Key phrases: sql injection
CVE-2017-17605: Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.
Key phrases: sql injection
CVE-2017-17606: Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter.
Key phrases: sql injection
CVE-2017-17607: CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail.
Key phrases: sql injection
CVE-2017-17608: Child Care Script 1.0 has SQL Injection via the /list city parameter.
Key phrases: sql injection
CVE-2017-17609: Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter.
Key phrases: sql injection
CVE-2017-1761: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136005.
Key phrases: embed arbitrary JavaScript code, embed arbitrary JavaScript code in the Web UI, cross-site scripting, credentials disclosure
CVE-2017-17610: E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid parameter, or news_detail.php newid parameter.
Key phrases: sql injection
CVE-2017-17611: Doctor Search Script 1.0 has SQL Injection via the /list city parameter.
Key phrases: sql injection
CVE-2017-17612: Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter.
Key phrases: sql injection
CVE-2017-17613: Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php catid parameter.
Key phrases: sql injection
CVE-2017-17614: Food Order Script 1.0 has SQL Injection via the /list city parameter.
Key phrases: sql injection
CVE-2017-17615: Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.
Key phrases: sql injection
CVE-2017-17616: Event Search Script 1.0 has SQL Injection via the /event-list city parameter.
Key phrases: sql injection
CVE-2017-17617: Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.
Key phrases: sql injection
CVE-2017-17618: Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.
Key phrases: sql injection
CVE-2017-17619: Laundry Booking Script 1.0 has SQL Injection via the /list city parameter.
Key phrases: sql injection
CVE-2017-1762: IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136006.
Key phrases: embed arbitrary JavaScript code, embed arbitrary JavaScript code in the Web UI, cross-site scripting, credentials disclosure
CVE-2017-17620: Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.
Key phrases: sql injection
CVE-2017-17621: Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.
Key phrases: sql injection
CVE-2017-17622: Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.
Key phrases: sql injection
CVE-2017-17623: Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.
Key phrases: sql injection
CVE-2017-17624: PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.
Key phrases: sql injection
CVE-2017-17625: Professional Service Script 1.0 has SQL Injection via the service-list city parameter.
Key phrases: sql injection
CVE-2017-17626: Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter.
Key phrases: sql injection
CVE-2017-17627: Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.
Key phrases: sql injection
CVE-2017-17628: Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.
Key phrases: sql injection
CVE-2017-17629: Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the single_detail.php sid parameter.
Key phrases: sql injection
CVE-2017-17630: Yoga Class Script 1.0 has SQL Injection via the /list city parameter.
Key phrases: sql injection
CVE-2017-17631: Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.
Key phrases: sql injection
CVE-2017-17632: Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.
Key phrases: sql injection
CVE-2017-17633: Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter.
Key phrases: sql injection
CVE-2017-17634: Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.
Key phrases: sql injection
CVE-2017-17635: MLM Forex Market Plan Script 2.0.4 has SQL Injection via the news_detail.php newid parameter or the event_detail.php eventid parameter.
Key phrases: sql injection
CVE-2017-17636: MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.
Key phrases: sql injection
CVE-2017-17637: Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.
Key phrases: sql injection
CVE-2017-17638: Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter.
Key phrases: sql injection
CVE-2017-17639: Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter.
Key phrases: sql injection
CVE-2017-1764: IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain text credentials to a local user. IBM X-Force ID: 136149.
Key phrases: plain text credentials
CVE-2017-17640: Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country parameter.
Key phrases: sql injection
CVE-2017-17641: Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter.
Key phrases: sql injection
CVE-2017-17642: Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.
Key phrases: sql injection
CVE-2017-17643: FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/.
Key phrases: sql injection
CVE-2017-17645: Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.
Key phrases: sql injection
CVE-2017-17648: Entrepreneur Dating Script 2.0.1 has SQL Injection via the search_result.php marital, gender, country, or profileid parameter.
Key phrases: sql injection
CVE-2017-17649: Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.
Key phrases: html injection
CVE-2017-1765: IBM Business Process Manager 8.6 could allow an authenticated user with special privileges to reveal sensitive information about the application server. IBM X-Force ID: 136150.
Key phrases: reveal sensitive information about the application server
CVE-2017-17651: Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter.
Key phrases: sql injection
CVE-2017-17652: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup Count method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4238.
Key phrases: execute arbitrary code, execute arbitrary code on vulnerable installations of Quest, execute code
CVE-2017-17653: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupOptionSet Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4286.
Key phrases: execute arbitrary code, execute arbitrary code on vulnerable installations of Quest, execute code
CVE-2017-17654: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup ClientList method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4287.
Key phrases: execute arbitrary code, execute arbitrary code on vulnerable installations of Quest, execute code
CVE-2017-17655: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup PluginList method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4289.
Key phrases: execute arbitrary code, execute arbitrary code on vulnerable installations of Quest, execute code
CVE-2017-17656: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup JobList method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4292.
Key phrases: execute arbitrary code, execute arbitrary code on vulnerable installations of Quest, execute code
CVE-2017-17657: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup TimeRange method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4294.
Key phrases: execute arbitrary code, execute arbitrary code on vulnerable installations of Quest, execute code
CVE-2017-17658: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobDefinitions Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4316.
Key phrases: execute arbitrary code, execute arbitrary code on vulnerable installations of Quest, execute code
CVE-2017-17659: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobHistory Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4906.
Key phrases: execute arbitrary code, execute arbitrary code on vulnerable installations of Quest, execute code
CVE-2017-1766: Due to incorrect authorization in IBM Business Process Manager 8.6 an attacker can claim and work on ad hoc tasks he is not assigned to. IBM X-Force ID: 136151.
Key phrases: incorrect authorization
CVE-2017-17662: Directory traversal in the HTTP server on Yawcam 0.2.6 through 0.6.0 devices allows attackers to read arbitrary files through a sequence of the form '.x./' or '....\\x/' where x is a pattern composed of one or more (zero or more for the second pattern) of either \\ or ..\\ -- for example a '.\\./', '....\\/' or '...\\./' sequence. For files with no extension, a single dot needs to be appended to ensure the HTTP server does not alter the request, e.g., a "GET /.\\./.\\./.\\./.\\./.\\./.\\./.\\./windows/system32/drivers/etc/hosts." request.
Key phrases: read arbitrary files, read arbitrary files through a sequence of the, directory traversal
CVE-2017-17663: The htpasswd implementation of mini_httpd before v1.28 and of thttpd before v2.28 is affected by a buffer overflow that can be exploited remotely to perform code execution.
Key phrases: buffer overflow, code execution
CVE-2017-17664: A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7.4, and 15.x before 15.1.4 and Certified Asterisk before 13.13-cert9. Certain compound RTCP packets cause a crash in the RTCP Stack.
Key phrases: remote crash issue
CVE-2017-17665: In Octopus Deploy before 4.1.3, the machine update process doesn't check that the user has access to all environments. This allows an access-control bypass because the set of environments to which a machine is scoped may include environments in which the user lacks access.
Key phrases: bypass because the set of environments to which, control bypass, which a machine is scoped may include environments, access-control bypass
CVE-2017-17668: Memory write mechanism in NCR S1 Dispenser controller before firmware version 0x0156 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.
Key phrases: upgrade or downgrade the firmware of the device, memory write mechanism, known
CVE-2017-17669: There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.
Key phrases: heap-based buffer over-read, remote denial of service, buffer over read
CVE-2017-1767: IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136152.
Key phrases: embed arbitrary JavaScript code, embed arbitrary JavaScript code in the Web UI, cross-site scripting, credentials disclosure
CVE-2017-17670: In VideoLAN VLC media player through 2.2.8, there is a type conversion vulnerability in modules/demux/mp4/libmp4.c in the MP4 demux module leading to a invalid free, because the type of a box may be changed between a read operation and a free operation.
Key phrases: type conversion
CVE-2017-17671: vBulletin through 5.3.x on Windows allows remote PHP code execution because a require_once call is reachable with an unauthenticated request that can include directory traversal sequences to specify an arbitrary pathname, and because ../ traversal is blocked but ..\\ traversal is not blocked. For example, an attacker can make an invalid HTTP request containing PHP code, and then make an index.php?routestring= request with enough instances of ".." to reach an Apache HTTP Server log file.
Key phrases: specify an arbitrary pathname, remote php code execution, unauthenticated request, directory traversal
CVE-2017-17672: In vBulletin through 5.3.x, there is an unauthenticated deserialization vulnerability that leads to arbitrary file deletion and, under certain circumstances, code execution, because of unsafe usage of PHP's unserialize() in vB_Library_Template's cacheTemplates() function, which is a publicly exposed API. This is exploited with the templateidlist parameter to ajax/api/template/cacheTemplates.
Key phrases: unauthenticated deserialization, arbitrary file deletion, code execution
CVE-2017-17674: BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the system can be vulnerable to attacks such as system fingerprinting, internal port scanning, Server Side Request Forgery (SSRF), or remote code execution (RCE).
Key phrases: local file inclusion, system fingerprinting, internal port scanning, server side request forgery (ssrf), remote code execution (rce)
CVE-2017-17675: BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Remote logging can be accessed by unauthenticated users, allowing for an attacker to hijack the system logs. This data can include user names and HTTP data.
Key phrases: hijack the system logs, log hijacking
CVE-2017-17677: BMC Remedy 9.1SP3 is affected by authenticated code execution. Authenticated users that have the right to create reports can use BIRT templates to run code.
Key phrases: authenticated code execution
CVE-2017-17678: BMC Remedy Mid Tier 9.1SP3 is affected by cross-site scripting (XSS). A DOM-based cross-site scripting vulnerability was discovered in a legacy utility.
Key phrases: cross-site scripting (xss)
CVE-2017-1768: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 136471.
Key phrases: sensitive information
CVE-2017-17680: In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted xpm image file.
Key phrases: cause a denial of service via a crafted, memory leak
CVE-2017-17681: In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted psd image file.
Key phrases: denial of service (CPU exhaustion), cause a denial of service (CPU exhaustion, infinite loop
CVE-2017-17682: In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.
Key phrases: denial of service (CPU exhaustion), cause a denial of service (CPU exhaustion, large loop
CVE-2017-17683: Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \\\\.\\PSMEMDriver DeviceIoControl request.
Key phrases: a system crash via a 0xb3702c44 \\\\.\\PSMEMDriver DeviceIoControl
CVE-2017-17684: Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \\\\.\\PSMEMDriver DeviceIoControl request.
Key phrases: a system crash via a 0xb3702c04 \\\\.\\PSMEMDriver DeviceIoControl
CVE-2017-17688: The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. NOTE: third parties report that this is a problem in applications that mishandle the Modification Detection Code (MDC) feature or accept an obsolete packet type, not a problem in the OpenPGP specification
Key phrases: plaintext exfiltration, malleability-gadget, efail
CVE-2017-17689: The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.
Key phrases: plaintext exfiltration, efail
CVE-2017-1769: IBM Business Process Manager 8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 136783.
Key phrases: execute malicious and unauthorized actions transmitted from a, cross-site request forgery, cross site request forgery
CVE-2017-17691: Homeputer CL Studio fur HomeMatic 4.0 Rel 160808 and earlier uses cleartext to exchange the username and password between server and client instances, which allows remote attackers to obtain sensitive information via a man in the middle attack.
Key phrases: obtain sensitive information, obtain sensitive information via a man in the, cleartext, man in the middle
CVE-2017-17692: Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property.
Key phrases: bypass the Same Origin Policy, obtain sensitive information, bypass the Same Origin Policy and obtain sensitive
CVE-2017-17693: Techno - Portfolio Management Panel through 2017-11-16 does not check authorization for panel/portfolio.php?action=delete requests that remove feedback.
Key phrases: remove feedback
CVE-2017-17694: Techno - Portfolio Management Panel through 2017-11-16 allows XSS via the panel/search.php s parameter.
Key phrases: XSS via the panel/search.php s parameter, xss
CVE-2017-17695: Techno - Portfolio Management Panel through 2017-11-16 allows SQL Injection via the panel/search.php s parameter.
Key phrases: SQL Injection via the panel/search.php s, sql injection
CVE-2017-17696: Techno - Portfolio Management Panel through 2017-11-16 allows full path disclosure via an invalid s parameter to panel/search.php.
Key phrases: panel/search.php, path disclosure, invalid s parameter
CVE-2017-17697: The Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping.
Key phrases: ssrf
CVE-2017-17698: Zoho ManageEngine Password Manager Pro 9 before 9.4 (9400) has reflected XSS in SearchResult.ec and BulkAccessControlView.ec.
Key phrases: xss
CVE-2017-17699: K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x950025ac DeviceIoControl request.
Key phrases: null pointer dereference
CVE-2017-17700: K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x950025a4 DeviceIoControl request.
Key phrases: null pointer dereference
CVE-2017-17701: K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x950025c8 DeviceIoControl request.
Key phrases: null pointer dereference
CVE-2017-17703: Synacor Zimbra Collaboration Suite (ZCS) before 8.8.3 has Persistent XSS.
Key phrases: persistent xss
CVE-2017-17704: A door-unlocking issue was discovered on Software House iStar Ultra devices through 6.5.2.20569 when used in conjunction with the IP-ACM Ethernet Door Module. The communications between the IP-ACM and the iStar Ultra is encrypted using a fixed AES key and IV. Each message is encrypted in CBC mode and restarts with the fixed IV, leading to replay attacks of entire messages. There is no authentication of messages beyond the use of the fixed AES key, so message forgery is also possible.
Key phrases: door-unlocking issue, replay, message forgery
CVE-2017-17707: Due to missing authorization checks, any authenticated user is able to list, upload, or delete attachments to password safe entries in Pleasant Password Server before 7.8.3. To perform those actions on an entry, the user needs to know the corresponding "CredentialId" value, which uniquely identifies a password safe entry. Since "CredentialId" values are implemented as GUIDs, they are hard to guess. However, if for example an entry's owner grants read-only access to a malicious user, the value gets exposed to the malicious user. The same holds true for temporary grants.
Key phrases: missing authorization
CVE-2017-17708: Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other users in Pleasant Password Server before 7.8.3.
Key phrases: insufficient authorization checks
CVE-2017-17712: The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in inet->hdrincl that leads to uninitialized stack pointer usage; this allows a local user to execute code and gain privileges.
Key phrases: gain privileges, execute code and gain privileges, race condition, uninitialized stack pointer usage
CVE-2017-17713: Trape before 2017-11-05 has SQL injection via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the /register lon parameter, the /register org parameter, the /register query parameter, the /register region parameter, the /register regionName parameter, the /register timezone parameter, the /register vId parameter, the /register zip parameter, or the /tping id parameter.
Key phrases: sql injection
CVE-2017-17714: Trape before 2017-11-05 has XSS via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the /register lon parameter, the /register org parameter, the /register query parameter, the /register region parameter, the /register regionName parameter, the /register timezone parameter, the /register vId parameter, the /register zip parameter, or the /tping id parameter.
Key phrases: xss
CVE-2017-17715: The saveFile method in MediaController.java in the Telegram Messenger application before 2017-12-08 for Android allows directory traversal via a pathname obtained in a file-transfer request from a remote peer, as demonstrated by writing to tgnet.dat or tgnet.dat.bak.
Key phrases: tgnet.dat or tgnet.dat.bak, directory traversal
CVE-2017-17716: GitLab 9.4.x before 9.4.2 does not support LDAP SSL certificate verification, but a verify_certificates LDAP option was mentioned in the 9.4 release announcement. This issue occurred because code was not merged. This is related to use of the omniauth-ldap library and the gitlab_omniauth-ldap gem.
CVE-2017-17717: Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature.
Key phrases: weak password encryption, hardcoded cmmdwov value
CVE-2017-17718: The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.
Key phrases: missing ssl certificate validation
CVE-2017-17719: A cross-site scripting (XSS) vulnerability in the wp-concours plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the result_message parameter to includes/concours_page.php.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, cross-site scripting (xss)
CVE-2017-1772: IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136786.
Key phrases: embed arbitrary JavaScript code, embed arbitrary JavaScript code in the Web UI, cross-site scripting, credentials disclosure
CVE-2017-17721: CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, assignto, building, domain, jobtype, site, trade, woType, workorderno, or workorderstatus parameter.
Key phrases: SQL injection via the tradestatus, sql injection
CVE-2017-17722: In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remote denial of service attack via a crafted TIFF file.
Key phrases: reachable assertion, remote denial of service
CVE-2017-17723: In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote attackers can exploit this vulnerability to disclose memory data or cause a denial of service via a crafted TIFF file.
Key phrases: heap-based buffer over-read, denial of service, buffer over read
CVE-2017-17724: In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file.
Key phrases: heap-based buffer over-read, denial of service, buffer over read
CVE-2017-17725: In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2::getULong function in types.cpp. Remote attackers can exploit the vulnerability to cause a denial of service via a crafted image file. Note that this vulnerability is different from CVE-2017-14864, which is an invalid memory address dereference.
Key phrases: integer overflow, heap-based buffer over-read, denial of service, invalid memory address dereference, buffer over read
CVE-2017-17727: DedeCMS through 5.6 allows arbitrary file upload and PHP code execution by embedding the PHP code in a .jpg file, which is used in the templet parameter to member/article_edit.php.
Key phrases: allows arbitrary file upload, member/article_edit.php, php code execution
CVE-2017-1773: IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle techniques to spoof DNS responses to perform DNS cache poisoning and redirect Internet traffic. IBM X-Force ID: 136817.
Key phrases: spoof DNS responses to perform DNS cache poisoning, dns cache poisoning, redirect internet traffic, man in the middle, spoofing
CVE-2017-17730: DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php.
Key phrases: sql injection
CVE-2017-17731: DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.
Key phrases: sql injection
CVE-2017-17733: Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request.
Key phrases: remote command execution via the wd parameter in
CVE-2017-17734: CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in sessions.
CVE-2017-17735: CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in cookies.
CVE-2017-17736: Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 allows remote attackers to obtain Global Administrator access by visiting CMSInstall/install.aspx and then navigating to the CMS Administration Dashboard.
Key phrases: obtain Global Administrator access, obtain Global Administrator access by visiting CMSInstall/, global administrator access
CVE-2017-17737: The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /storage_info.html.
Key phrases: xss
CVE-2017-17738: The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) allows renaming and modifying files via /tools.html.
Key phrases: renaming and modifying files via /tools.html
CVE-2017-17739: The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowing an attacker to read or write to files.
Key phrases: read or write to files, directory traversal, to write files
CVE-2017-1774: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 136818.
Key phrases: sensitive information
CVE-2017-17740: contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.
Key phrases: denial of service (slapd crash), cause a denial of service (slapd crash
CVE-2017-17741: The KVM implementation in the Linux kernel through 4.14.7 allows attackers to obtain potentially sensitive information from kernel memory, aka a write_mmio stack-based out-of-bounds read, related to arch/x86/kvm/x86.c and include/trace/events/kvm.h.
Key phrases: obtain potentially sensitive information, obtain potentially sensitive information from kernel memory, write_mmio stack-based out-of-bounds read, out of bounds read
CVE-2017-17742: Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 allows an HTTP Response Splitting attack. An attacker can inject a crafted key and value into an HTTP response for the HTTP server of WEBrick.
Key phrases: an HTTP Response Splitting attack, http response splitting
CVE-2017-17743: Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices before 4.4.20, 5.0.x before 5.0.19, and 5.1.x before 5.1.11 allows authenticated remote attackers to escape the shell and escalate their privileges by uploading a .bashrc file containing the /bin/sh string. In some situations, authentication can be achieved via the bhu85tgb default password for the admin account.
Key phrases: escape the shell and escalate their privileges by, improper input sanitization, escalate privilege, default password
CVE-2017-17744: A cross-site scripting (XSS) vulnerability in the custom-map plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map_id parameter to view/advancedsettings.php.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, cross-site scripting (xss)
CVE-2017-17745: Cross-site scripting (XSS) vulnerability in system_name_set.cgi in TP-Link TL-SG108E 1.0.0 allows authenticated remote attackers to submit arbitrary java script via the 'sysName' parameter.
Key phrases: submit arbitrary java script via the 'sysName, cross-site scripting (xss)
CVE-2017-17746: Weak access control methods on the TP-Link TL-SG108E 1.0.0 allow any user on a NAT network with an authenticated administrator to access the device without entering user credentials. The authentication record is stored on the device; thus if an administrator authenticates from a NAT network, the authentication applies to the IP address of the NAT gateway, and any user behind that NAT gateway is also treated as authenticated.
Key phrases: access the device without entering user credentials, weak access control methods
CVE-2017-17747: Weak access controls in the Device Logout functionality on the TP-Link TL-SG108E v1.0.0 allow remote attackers to call the logout functionality, triggering a denial of service condition.
Key phrases: call the logout functionality, weak access controls, denial of service condition
CVE-2017-17749: Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora.
Key phrases: XSS via crafted song data from a music, xss
CVE-2017-17750: Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify.
Key phrases: XSS via a crafted public playlist from Spotify, xss