rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-10174 
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2016-10175 
The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers to the password-recovery questions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2016-10176 
The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special URL is handled by the embedded web server (uhttpd) and processed accordingly. The web server also contains another URL, apply_noauth.cgi, that allows an unauthenticated user to perform sensitive actions on the device. This functionality can be exploited to change the router settings (such as the answers to the password-recovery questions) and achieve remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2016-10177 
An issue was discovered on the D-Link DWR-932B router. Undocumented TELNET and SSH services provide logins to admin with the password admin and root with the password 1234.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2016-10178 
An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 (UDP) launches the "/sbin/telnetd -l /bin/sh" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2016-10179 
An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2016-10180 
An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2016-10181 
An issue was discovered on the D-Link DWR-932B router. qmiweb provides sensitive information for CfgType=get_homeCfg requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2016-10182 
An issue was discovered on the D-Link DWR-932B router. qmiweb allows command injection with ` characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2016-10183 
An issue was discovered on the D-Link DWR-932B router. qmiweb allows directory listing with ../ traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2016-10184 
An issue was discovered on the D-Link DWR-932B router. qmiweb allows file reading with ..%2f traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2016-10185 
An issue was discovered on the D-Link DWR-932B router. A secure_mode=no line exists in /var/miniupnpd.conf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2016-10186 
An issue was discovered on the D-Link DWR-932B router. /var/miniupnpd.conf has no deny rules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2016-10187 
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-16T15:00:00.000Z
CVE-2016-10188 
Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary code by causing a file transfer connection to expire.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-14T14:00:00.000Z
CVE-2016-10189 
BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-14T14:00:00.000Z
CVE-2016-10190 
Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute arbitrary code via a negative chunk size in an HTTP response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T15:00:00.000Z
CVE-2016-10191 
Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T15:00:00.000Z
CVE-2016-10192 
Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T15:00:00.000Z
CVE-2016-10193 
The espeak-ruby gem before 1.0.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the speak, save, bytes or bytes_wav method in lib/espeak/speech.rb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2016-10194 
The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to_speech or (2) to_mp3 method in lib/festivaltts4r/festival4r.rb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2016-10195 
The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T15:00:00.000Z
CVE-2016-10196 
Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T15:00:00.000Z
CVE-2016-10197 
The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T15:00:00.000Z
CVE-2016-10198 
The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted audio file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T15:00:00.000Z
CVE-2016-10199 
The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted tag value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T15:00:00.000Z
CVE-2016-10200 
Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-07T21:00:00.000Z
CVE-2016-10201 
Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the format parameter in a download log request to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2016-10202 
Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the path info to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2016-10203 
Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the name when creating a new monitor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2016-10204 
SQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2016-10205 
Session fixation vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack web sessions via the ZMSESSID cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2016-10206 
Cross-site request forgery (CSRF) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack the authentication of users for requests that change passwords and possibly have unspecified other impact as demonstrated by a crafted user action request to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2016-10207 
The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by terminating a TLS handshake early.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-28T18:00:00.000Z
CVE-2016-10208 
The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-06T06:04:00.000Z
CVE-2016-10209 
The archive_wstring_append_from_mbs function in archive_string.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted archive file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-03T05:44:00.000Z
CVE-2016-10210 
libyara/lexer.l in YARA 3.5.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted rule that is mishandled in the yy_get_next_buffer function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-03T05:44:00.000Z
CVE-2016-10211 
libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted rule that is mishandled in the yr_parser_lookup_loop_variable function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-03T05:44:00.000Z
CVE-2016-10212 
Radware devices use the same value for the first two GCM nonces, which allows remote attackers to obtain the authentication key and spoof data via a "forbidden attack," a similar issue to CVE-2016-0270.  NOTE: this issue may be due to the use of a third-party Cavium product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-08T16:00:00.000Z
CVE-2016-10213 
A10 AX1030 and possibly other devices with software before 2.7.2-P8 uses random GCM nonce generations, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging a reused nonce in a session and a "forbidden attack," a similar issue to CVE-2016-0270.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-08T16:00:00.000Z
CVE-2016-10214 
Memory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-20T16:00:00.000Z
CVE-2016-10215 
An issue was discovered in Fastspot BigTree bigtree-form-builder before 1.2. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP POST parameters passed to a "site/index.php/../../extensions/com.fastspot.form-builder/ajax/redraw-field.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-10T06:51:00.000Z
CVE-2016-10216 
An issue was discovered in IT ITems DataBase (ITDB) through 1.23. The vulnerability exists due to insufficient filtration of user-supplied data in the "value" HTTP POST parameter passed to the "itdb-1.23/js/DataTables-1.8.2/examples/examples_support/editable_ajax.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-10T06:51:00.000Z
CVE-2016-10217 
The pdf14_open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file that is mishandled in the color management module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-03T05:44:00.000Z
CVE-2016-10218 
The pdf14_pop_transparency_group function in base/gdevp14.c in the PDF Transparency module in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-03T05:44:00.000Z
CVE-2016-10219 
The intersect function in base/gxfill.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-03T05:44:00.000Z
CVE-2016-10220 
The gs_makewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file that is mishandled in the PDF Transparency module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-03T05:44:00.000Z
CVE-2016-10221 
The count_entries function in pdf-layer.c in Artifex Software, Inc. MuPDF 1.10a allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-03T05:44:00.000Z
CVE-2016-10222 
runtime/JSONObject.cpp in JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service (segmentation violation and application crash) via crafted JavaScript code that triggers a "type confusion" in the JSON.stringify function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-03T05:44:00.000Z
CVE-2016-10223 
An issue was discovered in BigTree CMS before 4.2.15. The vulnerability exists due to insufficient filtration of user-supplied data in the "id" HTTP GET parameter passed to the "core/admin/adjax/dashboard/check-module-integrity.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-14T06:30:00.000Z
CVE-2016-10224 
An issue was discovered in Sauter NovaWeb web HMI. The application uses a protection mechanism that relies on the existence or values of a cookie, but it does not properly ensure that the cookie is valid for the associated user.
Problem types: description: Sauter NovaWeb Web HMI Authentication Bypass Vulnerability
Affected products: vendor: n/a
product: Sauter NovaWeb Web HMI
Published: 2017-02-13T21:00:00.000Z
CVE-2016-10225 
The sunxi-debug driver in Allwinner 3.4 legacy kernel for H3, A83T and H8 devices allows local users to gain root privileges by sending "rootmydevice" to /proc/sunxi_debug/sunxi_debug.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-27T17:00:00.000Z
CVE-2016-10226 
JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service (bitfield out-of-bounds read and application crash) via crafted JavaScript code that is mishandled in the operatorString function, related to assembler/MacroAssemblerARM64.h, assembler/MacroAssemblerX86Common.h, and wasm/WasmB3IRGenerator.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-03T05:44:00.000Z
CVE-2016-10227 
Zyxel USG50 Security Appliance and NWA3560-N Access Point allow remote attackers to cause a denial of service (CPU consumption) via a flood of ICMPv4 Port Unreachable packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-21T07:46:00.000Z
CVE-2016-10228 
The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-02T00:00:00.000Z
CVE-2016-10229 
udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSG_PEEK flag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-04T04:54:00.000Z
CVE-2016-10230 
A remote code execution vulnerability in the Qualcomm crypto driver. Product: Android. Versions: Android kernel. Android ID: A-34389927. References: QC-CR#1091408.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2016-10231 
An elevation of privilege vulnerability in the Qualcomm sound codec driver. Product: Android. Versions: Android kernel. Android ID: A-33966912. References: QC-CR#1096799.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2016-10232 
An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34386696. References: QC-CR#1024872.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2016-10233 
An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34389926. References: QC-CR#897452.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2016-10234 
An information disclosure vulnerability in the Qualcomm IPA driver. Product: Android. Versions: Android kernel. Android ID: A-34390017. References: QC-CR#1069060.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2016-10235 
A denial of service vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android ID: A-34390620. References: QC-CR#1046409.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2016-10236 
An information disclosure vulnerability in the Qualcomm USB driver. Product: Android. Versions: Android kernel. Android ID: A-33280689. References: QC-CR#1102418.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2016-10237 
If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all Android releases from CAF using the Linux kernel, the TA would not detect an issue and it would be treated as secure memory.
Problem types: description: Improper Input Validation in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm Products
Published: 2017-05-16T14:00:00.000Z
CVE-2016-10238 
In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue.
Problem types: description: Improper Access Control in QSEE
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm Products
Published: 2017-05-16T14:00:00.000Z
CVE-2016-10239 
In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a buffer overflow could potentially occur and a buffer over-read vulnerability could potentially occur.
Problem types: description: Multiple Vulnerabilities in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm Products
Published: 2017-05-16T14:00:00.000Z
CVE-2016-10242 
A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel.
Problem types: description: Time-of-check Time-of-use Race Condition in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm Products
Published: 2017-05-16T14:00:00.000Z
CVE-2016-10243 
TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-02T14:00:00.000Z
CVE-2016-10244 
The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-06T06:11:00.000Z