rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-2875 
An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10000 can cause a buffer overflow resulting in overwriting arbitrary data.
Problem types: description: Buffer Overflow
Affected products: vendor: Foscam
product: Foscam C1 Indoor HD Camera
Published: 2018-09-19T16:00:00.000Z
CVE-2017-2876 
An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10000 can cause a buffer overflow resulting in overwriting arbitrary data.
Problem types: description: Stack-based Buffer Overflow
Affected products: vendor: Foscam
product: Foscam C1 Indoor HD Camera
Published: 2018-09-19T18:00:00.000Z
CVE-2017-2877 
A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 could allow an attacker to reset the user accounts to factory defaults, without authentication.
Problem types: description: Missing Report of Error Condition
Affected products: vendor: Foscam
product: Foscam C1 Indoor HD Camera
Published: 2018-09-19T18:00:00.000Z
CVE-2017-2878 
An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Problem types: description: Buffer Overflow
Affected products: vendor: Foscam
product: Foscam C1 Indoor HD Camera
Published: 2018-09-19T16:00:00.000Z
CVE-2017-2879 
An exploitable buffer overflow vulnerability exists in the UPnP implementation used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted UPnP discovery response can cause a buffer overflow resulting in overwriting arbitrary data. An attacker needs to be in the same subnetwork and reply to a discovery message to trigger this vulnerability.
Problem types: description: Buffer Overflow
Affected products: vendor: Foscam
product: Foscam C1 Indoor HD Camera
Published: 2018-09-19T16:00:00.000Z
CVE-2017-2880 
An memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. A specially crafted .GIF file can cause a vulnerability resulting in potential code execution. An attacker can send specific .GIF file to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Talos
product: Computerinsel Photoline
Published: 2017-10-05T19:00:00.000Z
CVE-2017-2881 
An exploitable vulnerability exists in the torlist update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the product to run an attacker-supplied shell script. An attacker can intercept and alter network traffic to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Circle Media
product: Circle
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2882 
An exploitable vulnerability exists in the servers update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to overwrite sensitive files, resulting in code execution. An attacker needs to impersonate a remote server in order to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Circle Media
product: Circle
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2883 
An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to execute arbitrary code. An attacker needs to impersonate a remote server in order to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Circle Media
product: Circle
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2884 
An exploitable vulnerability exists in the user photo update functionality of Circle with Disney running firmware 2.0.1. A repeated set of specially crafted API calls can cause the device to corrupt essential memory, resulting in a bricked device. An attacker needs network connectivity to the device to trigger this vulnerability.
Problem types: description: authentication bypass
Affected products: vendor: Circle Media
product: Circle
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2885 
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.
Problem types: description: buffer overflow
Affected products: vendor: GNOME
product: libsoup
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2886 
A memory corruption vulnerability exists in the .PSD parsing functionality of ACDSee Ultimate 10.0.0.292. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in potential code execution. An attacker can send a specific .PSD file to trigger this vulnerability.
Problem types: description: parsing code execution
Affected products: vendor: ACDSee
product: ACDSee Ultimate
Published: 2017-12-11T22:00:00.000Z
CVE-2017-2887 
An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDL_image 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this vulnerability.
Problem types: description: Remote code execution
Affected products: vendor: Talos
product: Simple Direct Media
Published: 2017-10-11T18:00:00.000Z
CVE-2017-2888 
An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.
Problem types: description: Remote code execution
Affected products: vendor: Talos
product: Simple Direct Media
Published: 2017-10-11T18:00:00.000Z
CVE-2017-2889 
An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A large amount of simultaneous TCP connections causes the APID daemon to repeatedly fork, causing the daemon to run out of memory and trigger a device reboot. An attacker needs network connectivity to the device to trigger this vulnerability.
Problem types: description: authentication bypass
Affected products: vendor: Circle Media
product: Circle
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2890 
An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request trigger this vulnerability.
Problem types: description: command injection
Affected products: vendor: Circle Media
product: Circle
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2891 
An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POST request with a CGI target can cause a reuse of previously freed pointer potentially resulting in remote code execution. An attacker needs to send this HTTP request over the network to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Cesanta
product: Mongoose
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2892 
An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT packet can cause an arbitrary out-of-bounds memory read and write potentially resulting in information disclosure, denial of service and remote code execution. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Cesanta
product: Mongoose
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2893 
An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. An MQTT SUBSCRIBE packet can cause a NULL pointer dereference leading to server crash and denial of service. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.
Problem types: description: denial of service
Affected products: vendor: Cesanta
product: Mongoose
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2894 
An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause a stack buffer overflow resulting in remote code execution. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Cesanta
product: Mongoose
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2895 
An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially resulting in information disclosure and denial of service. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.
Problem types: description: denial of service
Affected products: vendor: Cesanta
product: Mongoose
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2896 
An exploitable out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls 1.4. . A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: libxls
product: libxls
Published: 2017-11-20T22:00:00.000Z
CVE-2017-2897 
An exploitable out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: libxls
product: libxls
Published: 2017-11-20T22:00:00.000Z
CVE-2017-2898 
An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney. Specially crafted network packets can cause an unsigned firmware to be installed in the device resulting in arbitrary code execution. An attacker can send a series of packets to trigger this vulnerability.
Problem types: description: arbitrary code execution
Affected products: vendor: Circle Media
product: Circle
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2899 
An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.tif' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.
Problem types: description: buffer overflow
Affected products: vendor: Blender
product: Blender
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2900 
An exploitable integer overflow exists in the PNG loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.png' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.
Problem types: description: buffer overflow
Affected products: vendor: Blender
product: Blender
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2901 
An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.iris' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.
Problem types: description: buffer overflow
Affected products: vendor: Blender
product: Blender
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2902 
An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.cin' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.
Problem types: description: buffer overflow
Affected products: vendor: Blender
product: Blender
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2903 
An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.cin' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.
Problem types: description: buffer overflow
Affected products: vendor: Blender
product: Blender
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2904 
An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.
Problem types: description: buffer overflow
Affected products: vendor: Blender
product: Blender
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2905 
An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.bmp' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.
Problem types: description: buffer overflow
Affected products: vendor: Blender
product: Blender
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2906 
An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset in order to trigger this vulnerability.
Problem types: description: buffer overflow
Affected products: vendor: Blender
product: Blender
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2907 
An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset in order to trigger this vulnerability.
Problem types: description: buffer overflow
Affected products: vendor: Blender
product: Blender
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2908 
An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to render the thumbnail for the file while in the File->Open dialog.
Problem types: description: buffer overflow
Affected products: vendor: Blender
product: Blender
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2909 
An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability.
Problem types: description: denial of service
Affected products: vendor: Cesanta
product: Mongoose
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2910 
An exploitable Out-of-bounds Write vulnerability exists in the xls_addCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability.
Problem types: description: out of bounds write
Affected products: vendor: n/a
product: libxls
Published: 2020-12-02T17:26:55.000Z
CVE-2017-2911 
An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the rclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability.
Problem types: description: SSL certificate
Affected products: vendor: Circle Media
product: Circle
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2912 
An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the goclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability.
Problem types: description: authentication bypass
Affected products: vendor: Circle Media
product: Circle
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2913 
An exploitable vulnerability exists in the filtering functionality of Circle with Disney. SSL certificates for specific domain names can cause the Bluecoat library to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability.
Problem types: description: authentication bypass
Affected products: vendor: Circle Media
product: Circle
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2914 
An exploitable authentication bypass vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A specially crafted token can bypass the authentication routine of the Apid binary, causing the device to grant unintended administrative access. An attacker needs network connectivity to the device to trigger this vulnerability.
Problem types: description: authentication bypass
Affected products: vendor: Circle Media
product: Circle
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2915 
An exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause the device to execute arbitrary shell commands. An attacker needs to send a couple of HTTP requests and setup an access point reachable by the device to trigger this vulnerability.
Problem types: description: arbitrary code execution
Affected products: vendor: Circle Media
product: Circle
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2916 
An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: arbitrary code execution
Affected products: vendor: Circle Media
product: Circle
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2917 
An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: command injection
Affected products: vendor: Circle Media
product: Circle
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2918 
An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open the file or use it as a library in order to trigger this vulnerability.
Problem types: description: buffer overflow
Affected products: vendor: Blender
product: Blender
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2919 
An exploitable stack based buffer overflow vulnerability exists in the xls_getfcell function of libxls 1.3.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability
Problem types: description: remote code execution
Affected products: vendor: libxls
product: libxls
Published: 2017-11-20T22:00:00.000Z
CVE-2017-2920 
An memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02. A specially crafted .SVG file can cause a vulnerability resulting in memory corruption, which can potentially lead to arbitrary code execution. An attacker can send a specific .SVG file to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Talos
product: Computerinsel Photoline
Published: 2017-10-05T19:00:00.000Z
CVE-2017-2921 
An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet can cause an integer overflow, leading to a heap buffer overflow and resulting in denial of service and potential remote code execution. An attacker needs to send a specially crafted websocket packet over network to trigger this vulnerability.
Problem types: description: denial of service
Affected products: vendor: Cesanta
product: Mongoose
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2922 
An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet can cause a buffer to be allocated while leaving stale pointers which leads to a use-after-free vulnerability which can be exploited to achieve remote code execution. An attacker needs to send a specially crafted websocket packet over the network to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Cesanta
product: Mongoose
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2923 
An exploitable heap based buffer overflow vulnerability exists in the 'read_biff_next_record function' of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Alessandro Furieri
product: FreeXL
Published: 2018-04-24T19:00:00.000Z