rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-9753 
The versados_mkobject function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not initialize a certain data structure, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-19T04:00:00.000Z
CVE-2017-9754 
The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-19T04:00:00.000Z
CVE-2017-9755 
opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-19T04:00:00.000Z
CVE-2017-9756 
The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-19T04:00:00.000Z
CVE-2017-9757 
IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell. This can be exploited directly by authenticated users, or through CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-19T13:00:00.000Z
CVE-2017-9758 
Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-09T19:00:00.000Z
CVE-2017-9759 
SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-19T14:00:00.000Z
CVE-2017-9761 
The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-19T16:00:00.000Z
CVE-2017-9762 
The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted binary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-19T16:00:00.000Z
CVE-2017-9763 
The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-19T16:00:00.000Z
CVE-2017-9764 
Cross-site scripting (XSS) vulnerability in MetInfo 5.3.17 allows remote attackers to inject arbitrary web script or HTML via the Client-IP or X-Forwarded-For HTTP header to /include/stat/stat.php in a para action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T12:00:00.000Z
CVE-2017-9765 
Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil's Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-20T00:00:00.000Z
CVE-2017-9766 
In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service (stack exhaustion) in the dissect_IODWriteReq function in plugins/profinet/packet-dcerpc-pn-io.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-21T07:00:00.000Z
CVE-2017-9767 
Multiple cross-site scripting (XSS) vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to inject arbitrary web script or HTML via the (1) Name or (2) Description parameter to RM/Reservation/ReserveNew; the (3) Description parameter to RM/Topology/Update; the (4) Name, (5) Description, (6) ExecutionBatches[0].Name, (7) ExecutionBatches[0].Description, or (8) Labels parameter to SnQ/JobTemplate/Edit; or (9) Alias or (10) Description parameter to RM/AbstractTemplate/AddOrUpdateAbstractTemplate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T16:00:00.000Z
CVE-2017-9769 
A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened to an arbitrary process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T19:00:00.000Z
CVE-2017-9770 
A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse that can cause an out of bounds read operation to occur due to a field within the IOCTL data being used as a length.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T19:00:00.000Z
CVE-2017-9771 
install\save.php in WebsiteBaker v2.10.0 allows remote attackers to execute arbitrary PHP code via the database_username, database_host, or database_password parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-21T07:00:00.000Z
CVE-2017-9772 
Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with raised privilege in binaries marked as setuid, by setting the CAML_CPLUGINS, CAML_NATIVE_CPLUGINS, or CAML_BYTE_CPLUGINS environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-23T20:00:00.000Z
CVE-2017-9773 
Denial of Service was found in Horde_Image 2.x before 2.5.0 via a crafted URL to the "Null" image driver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-21T18:00:00.000Z
CVE-2017-9774 
Remote Code Execution was found in Horde_Image 2.x before 2.5.0 via a crafted GET request. Exploitation requires authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-21T18:00:00.000Z
CVE-2017-9775 
Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-22T21:00:00.000Z
CVE-2017-9776 
Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-22T21:00:00.000Z
CVE-2017-9778 
GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit is reached. This can, for example, impede efforts to analyze malware with GDB.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-21T07:00:00.000Z
CVE-2017-9779 
OCaml compiler allows attackers to have unspecified impact via unknown vectors, a similar issue to CVE-2017-9772 "but with much less impact."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T14:00:00.000Z
CVE-2017-9780 
In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for example setuid or world-writable. The files are deployed with those permissions, which would let a local attacker run the setuid executable or write to the world-writable location. In the case of the "system helper" component, files deployed as part of the app are owned by root, so in the worst case they could be setuid root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-21T15:00:00.000Z
CVE-2017-9781 
A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.4.0x prior to 1.4.0p6, allowing an unauthenticated remote attacker to inject arbitrary HTML or JavaScript via the _username parameter when attempting authentication to webapi.py, which is returned unencoded with content type text/html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-21T18:00:00.000Z
CVE-2017-9782 
JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-21T20:00:00.000Z
CVE-2017-9783 
Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in a Site name updated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T16:00:00.000Z
CVE-2017-9785 
Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie.
Problem types: description: Remote Code Execution via untrusted deserialization of Json data
Affected products: vendor: NancyFX
product: NancyFX Framework Up to 2.0.0
Published: 2017-07-20T12:00:00.000Z
CVE-2017-9786 
Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in My account Name updated, related to home.php and actions-log.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T16:00:00.000Z
CVE-2017-9787 
When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33.
Problem types: description: DoS Attack
Affected products: vendor: Apache Software Foundation
product: Apache Struts
Published: 2017-07-13T15:00:00.000Z
CVE-2017-9788 
In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.
Problem types: description: Uninitialized memory reflection in mod_auth_digest
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Published: 2017-07-13T16:00:00.000Z
CVE-2017-9789 
When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has been freed, resulting in potentially erratic behaviour.
Problem types: description: Read after free in mod_http2
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Published: 2017-07-13T16:00:00.000Z
CVE-2017-9790 
When handling a libprocess message wrapped in an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev crashes if the request path is empty, because the parser assumes the request path always starts with '/'. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.
Problem types: description: Denial of Service
Affected products: vendor: Apache Software Foundation
product: Apache Mesos
Published: 2017-09-28T20:00:00.000Z
CVE-2017-9791 
The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.
Problem types: description: Remote Code Execution
Affected products: vendor: Apache Software Foundation
product: Apache Struts
Published: 2017-07-10T16:00:00.000Z
CVE-2017-9792 
In Apache Impala (incubating) before 2.10.0, a malicious user with "ALTER" permissions on an Impala table can access any other Kudu table data by altering the table properties to make it "external" and then changing the underlying table mapping to point to other Kudu tables. This violates and works around the authorization requirement that creating a Kudu external table via Impala requires an "ALL" privilege at the server scope. This privilege requirement for "CREATE" commands is enforced to precisely avoid this scenario where a malicious user can change the underlying Kudu table mapping. The fix is to enforce the same privilege requirement for "ALTER" commands that would make existing non-external Kudu tables external.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Impala
Published: 2017-10-03T01:00:00.000Z
CVE-2017-9793 
The REST Plugin in Apache Struts 2.1.x, 2.3.7 through 2.3.33 and 2.5 through 2.5.12 is using an outdated XStream library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted XML payload.
Problem types: description: A remote attacker may create a DoS attack by sending crafted xml request when using the Struts REST plugin
Affected products: vendor: Apache Software Foundation
product: Apache Struts
Published: 2017-09-20T17:00:00.000Z
CVE-2017-9794 
When a cluster is operating in secure mode, a user with read privileges for specific data regions can use the gfsh command line utility to execute queries. In Apache Geode before 1.2.1, the query results may contain data from another user's concurrently executing gfsh query, potentially revealing data that the user is not authorized to view.
Problem types: description: Concurrent Execution using Shared Resource with Improper Synchronization error
Affected products: vendor: Apache Software Foundation
product: Apache Geode
Published: 2017-09-29T21:00:00.000Z
CVE-2017-9795 
When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL queries that allow read and write access to objects within unauthorized regions. In addition a user could invoke methods that allow remote code execution.
Problem types: description: Improper Access Control
Affected products: vendor: Apache Software Foundation
product: Apache Geode
Published: 2018-01-10T03:00:00.000Z
CVE-2017-9796 
When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL queries containing a region name as a bind parameter that allow read access to objects within unauthorized regions.
Problem types: description: Improper Access Control
Affected products: vendor: Apache Software Foundation
product: Apache Geode
Published: 2018-01-10T03:00:00.000Z
CVE-2017-9797 
When an Apache Geode cluster before v1.2.1 is operating in secure mode, an unauthenticated client can enter multi-user authentication mode and send metadata messages. These metadata operations could leak information about application data types. In addition, an attacker could perform a denial of service attack on the cluster.
Problem types: description: Improper Access Control error
Affected products: vendor: Apache Software Foundation
product: Apache Geode
Published: 2017-10-02T13:00:00.000Z
CVE-2017-9798 
Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The attacker sends an unauthenticated OPTIONS HTTP request when attempting to read secret data. This is a use-after-free issue and thus secret data is not always sent, and the specific data depends on many factors including configuration. Exploitation with .htaccess can be blocked with a patch to the ap_limit_section function in server/core.c.
Problem types: description: use-after-free
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Published: 2017-09-18T15:00:00.000Z
CVE-2017-9799 
It was found that under some situations and configurations of Apache Storm 1.x before 1.0.4 and 1.1.x before 1.1.1, it is theoretically possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user. In the worst case this could lead to secure credentials of the other user being compromised.
Problem types: description: code execution as a different user.
Affected products: vendor: Apache Software Foundation
product: Apache Storm
Published: 2017-08-09T21:00:00.000Z
CVE-2017-9800 
A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be generated by a malicious server, by a malicious user committing to a honest server (to attack another user of that server's repositories), or by a proxy server. The vulnerability affects all clients, including those that use file://, http://, and plain (untunneled) svn://.
Problem types: description: Remote Code Execution
Affected products: vendor: Apache Software Foundation
product: Apache Subversion
Published: 2017-08-11T21:00:00.000Z
CVE-2017-9801 
When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers.
Problem types: description: SMTP header injection
Affected products: vendor: Apache Software Foundation
product: Apache Commons Email
Published: 2017-08-07T15:00:00.000Z
CVE-2017-9802 
The Javascript method Sling.evalString() in Apache Sling Servlets Post before 2.3.22 uses the javascript 'eval' function to parse input strings, which allows for XSS attacks by passing specially crafted input strings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-14T13:00:00.000Z
CVE-2017-9803 
Apache Solr's Kerberos plugin can be configured to use delegation tokens, which allows an application to reuse the authentication of an end-user or another application. There are two issues with this functionality (when using SecurityAwareZkACLProvider type of ACL provider e.g. SaslZkACLProvider). Firstly, access to the security configuration can be leaked to users other than the solr super user. Secondly, malicious users can exploit this leaked configuration for privilege escalation to further expose/modify private data and/or disrupt operations in the Solr cluster. The vulnerability is fixed from Apache Solr 6.6.1 onwards.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Solr
Published: 2017-09-18T21:00:00.000Z
CVE-2017-9804 
In Apache Struts 2.3.7 through 2.3.33 and 2.5 through 2.5.12, if an application allows entering a URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL.  NOTE: this vulnerability exists because of an incomplete fix for S2-047 / CVE-2017-7672.
Problem types: description: A regular expression Denial of Service when using URLValidator (similar to S2-044 & S2-047)
Affected products: vendor: Apache Software Foundation
product: Apache Struts
Published: 2017-09-20T17:00:00.000Z
CVE-2017-9805 
The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.
Problem types: description: RCE
Affected products: vendor: Apache Software Foundation
product: Apache Struts
Published: 2017-09-15T19:00:00.000Z
CVE-2017-9806 
A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.
Problem types: description: Potential Arbitrary Code Execution
Affected products: vendor: Apache Software Foundation
product: Apache OpenOffice
Published: 2017-11-20T17:00:00.000Z
CVE-2017-9807 
An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig function of "plugin/controllers/models/config.py" performs an eval() call on the contents of the "key" HTTP GET parameter. This allows an unauthenticated remote attacker to execute arbitrary Python code or OS commands via api/saveconfig.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-22T03:00:00.000Z
CVE-2017-9808 
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-22T19:01:49.000Z
CVE-2017-9809 
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Information Exposure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-22T18:54:58.000Z
CVE-2017-9810 
There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). This would allow an attacker to submit authenticated requests when an authenticated user browses an attacker-controlled domain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T21:00:00.000Z
CVE-2017-9811 
The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). By abusing the quarantine read and write operations, it is possible to elevate the privileges to root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T21:00:00.000Z
CVE-2017-9812 
The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312) to read arbitrary files with kluser privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T21:00:00.000Z