rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-11600 
net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less, which allows local users to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via an XFRM_MSG_MIGRATE xfrm Netlink message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-24T07:00:00.000Z
CVE-2017-11605 
There is a heap based buffer over-read in LibSass 3.4.5, related to address 0xb4803ea1. A crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-24T07:00:00.000Z
CVE-2017-11608 
There is a heap-based buffer over-read in the Sass::Prelexer::re_linebreak function in lexer.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-24T12:00:00.000Z
CVE-2017-11610 
The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-23T14:00:00.000Z
CVE-2017-11611 
Wolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks. The vulnerability exists due to insufficient sanitization of the file name in a "create-file-popup" action, and the directory name in a "create-directory-popup" action, in the HTTP POST method to the "/plugin/file_manager/" script (aka an /admin/plugin/file_manager/browse// URI).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-08T10:00:00.000Z
CVE-2017-11612 
In Joomla! before 3.7.4, inadequate filtering of potentially malicious HTML tags leads to XSS vulnerabilities in various components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T15:00:00.000Z
CVE-2017-11613 
In LibTIFF 4.0.8, there is a denial of service vulnerability in the TIFFOpen function. A crafted input will lead to a denial of service attack. During the TIFFOpen process, td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called based on td_imagelength. If we set the value of td_imagelength close to the amount of system memory, it will hang the system or trigger the OOM killer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T08:00:00.000Z
CVE-2017-11614 
MEDHOST Connex contains hard-coded credentials that are used for customer database access. An attacker with knowledge of the hard-coded credentials and the ability to communicate directly with the database may be able to obtain or modify sensitive patient and financial information. Connex utilizes an IBM i DB2 user account for database access. The account name is HMSCXPDN. Its password is hard-coded in multiple places in the application. Customers do not have the option to change this password. The account has elevated DB2 roles, and can access all objects or database tables on the customer DB2 database. This account can access data through ODBC, FTP, and TELNET. Customers without Connex installed are still vulnerable because the MEDHOST setup program creates this account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T17:00:00.000Z
CVE-2017-11615 
A sandbox escape in the Lua interface in Wube Factorio before 0.15.31 allows remote game servers or user-assisted attackers to execute arbitrary C code by including and loading a C library.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T15:00:00.000Z
CVE-2017-11617 
Cross-site scripting (XSS) vulnerability in atmail prior to version 7.8.0.2 allows remote attackers to inject arbitrary web script or HTML within the body of an email via an IMG element with both single quotes and double quotes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T17:00:00.000Z
CVE-2017-11624 
A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc after two consecutive calls to QPDFObjectHandle::parseInternal, aka an "infinite loop."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T23:00:00.000Z
CVE-2017-11625 
A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDF::resolveObjectsInStream function in QPDF.cc, aka an "infinite loop."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T23:00:00.000Z
CVE-2017-11626 
A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc after four consecutive calls to QPDFObjectHandle::parseInternal, aka an "infinite loop."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T23:00:00.000Z
CVE-2017-11627 
A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the PointerHolder function in PointerHolder.hh, aka an "infinite loop."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T23:00:00.000Z
CVE-2017-11628 
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in the zend_ini_do_op() function in Zend/zend_ini_parser.c could cause a denial of service or potentially allow executing code. NOTE: this is only relevant for PHP applications that accept untrusted input (instead of the system's php.ini file) for the parse_ini_string or parse_ini_file function, e.g., a web application for syntax validation of php.ini directives.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T23:00:00.000Z
CVE-2017-11629 
dayrui FineCms through 5.0.10 has Cross Site Scripting (XSS) in controllers/api.php via the function parameter in a c=api&m=data2 request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T08:00:00.000Z
CVE-2017-11630 
dapur\apps\app_config\controller\backuper.php in Fiyo CMS 2.0.7 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter in a type=database request, a different vulnerability than CVE-2017-8853.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T08:00:00.000Z
CVE-2017-11631 
dapur/app/app_user/controller/status.php in Fiyo CMS 2.0.7 has SQL injection via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T08:00:00.000Z
CVE-2017-11632 
An issue was discovered on Wireless IP Camera 360 devices. A root account with a known SHA-512 password hash exists, which makes it easier for remote attackers to obtain administrative access via a TELNET session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-26T22:00:00.000Z
CVE-2017-11633 
An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover RTSP credentials by connecting to TCP port 9527 and reading the InsertConnect field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-26T22:00:00.000Z
CVE-2017-11634 
An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover a weakly encoded admin password by connecting to TCP port 9527 and reading the password field of the debugging information, e.g., nTBCS19C corresponds to a password of 123456.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-26T22:00:00.000Z
CVE-2017-11635 
An issue was discovered on Wireless IP Camera 360 devices. Attackers can read recordings by navigating to /mnt/idea0 or /mnt/idea1 on the SD memory card.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-26T22:00:00.000Z
CVE-2017-11636 
GraphicsMagick 1.3.26 has a heap overflow in the WriteRGBImage() function in coders/rgb.c when processing multiple frames that have non-identical widths.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T08:00:00.000Z
CVE-2017-11637 
GraphicsMagick 1.3.26 has a NULL pointer dereference in the WritePCLImage() function in coders/pcl.c during writes of monochrome images.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T08:00:00.000Z
CVE-2017-11638 
GraphicsMagick 1.3.26 has a segmentation violation in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11642.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T08:00:00.000Z
CVE-2017-11639 
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteCIPImage() function in coders/cip.c, related to the GetPixelLuma function in MagickCore/pixel-accessor.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T08:00:00.000Z
CVE-2017-11640 
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage() function in coders/tiff.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T08:00:00.000Z
CVE-2017-11641 
GraphicsMagick 1.3.26 has a Memory Leak in the PersistCache function in magick/pixel_cache.c during writing of Magick Persistent Cache (MPC) files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T08:00:00.000Z
CVE-2017-11642 
GraphicsMagick 1.3.26 has a NULL pointer dereference in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11638.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T08:00:00.000Z
CVE-2017-11643 
GraphicsMagick 1.3.26 has a heap overflow in the WriteCMYKImage() function in coders/cmyk.c when processing multiple frames that have non-identical widths.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T08:00:00.000Z
CVE-2017-11644 
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T08:00:00.000Z
CVE-2017-11645 
NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 do not require authentication for logfile.html, status.html, or system_config.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-28T05:00:00.000Z
CVE-2017-11646 
NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to CSRF attacks, as demonstrated by using administration.html to disable the firewall. They does not contain any token that can mitigate CSRF vulnerabilities within the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-28T05:00:00.000Z
CVE-2017-11647 
NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored cross-site scripting attacks. Creating an SSID with an XSS payload results in successful exploitation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-28T05:00:00.000Z
CVE-2017-11648 
Techroutes TR 1803-3G Wireless Cellular Router/Modem 2.4.25 devices do not possess any protection against a CSRF vulnerability, as demonstrated by a goform/BasicSettings request to disable port filtering.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-31T23:00:00.000Z
CVE-2017-11649 
Cross-site request forgery (CSRF) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to hijack the authentication of unspecified users for requests that enable SNMP on the remote device via vectors involving goform/setSnmp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T22:00:00.000Z
CVE-2017-11650 
Cross-site scripting (XSS) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to inject arbitrary web script or HTML via vectors involving home.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T22:00:00.000Z
CVE-2017-11651 
NexusPHP V1.5 has XSS via a javascript: or data: URL in a UBBCode url tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T08:00:00.000Z
CVE-2017-11652 
Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users to gain privileges via a Trojan horse dbghelp.dll file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T17:00:00.000Z
CVE-2017-11653 
Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the Devices directory, which allows local users to gain privileges via a Trojan horse (1) RazerConfigNative.dll or (2) RazerConfigNativeLOC.dll file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T17:00:00.000Z
CVE-2017-11654 
An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traffic, because 0x00 termination of a payload array was mishandled. A remote attacker could potentially use this flaw to crash the sipdump process by generating specially crafted SIP traffic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T14:00:00.000Z
CVE-2017-11655 
A memory leak was found in the way SIPcrack 0.2 handled processing of SIP traffic, because a lines array was mismanaged. A remote attacker could potentially use this flaw to crash long-running sipdump network sniffing sessions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T14:00:00.000Z
CVE-2017-11657 
Dashlane might allow local users to gain privileges by placing a Trojan horse WINHTTP.dll in the %APPDATA%\Dashlane directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-04T14:00:00.000Z
CVE-2017-11658 
In the WP Rocket plugin 2.9.3 for WordPress, the Local File Inclusion mitigation technique is to trim traversal characters (..) -- however, this is insufficient to stop remote attacks and can be bypassed by using 0x00 bytes, as demonstrated by a .%00.../.%00.../ attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T15:00:00.000Z
CVE-2017-11661 
The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-17T16:00:00.000Z
CVE-2017-11662 
The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-17T16:00:00.000Z
CVE-2017-11663 
The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-17T16:00:00.000Z
CVE-2017-11664 
The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-17T16:00:00.000Z
CVE-2017-11665 
The ff_amf_get_field_value function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service (Segmentation Violation and application crash) via a crafted stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-27T12:00:00.000Z
CVE-2017-11666 
Cross-site scripting (XSS) vulnerability in js/ViewerPanel.js in the file previewer plugin in Kopano WebApp versions 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a specially crafted previewable file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T17:00:00.000Z
CVE-2017-11667 
OpenProject before 6.1.6 and 7.x before 7.0.3 mishandles session expiry, which allows remote attackers to perform APIv3 requests indefinitely by leveraging a hijacked session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T20:00:00.000Z
CVE-2017-11668 
An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:134 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash the eapmd5pass process under certain circumstances by generating specially crafted network traffic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-31T17:00:00.000Z
CVE-2017-11669 
An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:211 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash the eapmd5pass process under certain circumstances by generating specially crafted network traffic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-31T17:00:00.000Z
CVE-2017-11670 
A length validation (leading to out-of-bounds read and write) flaw was found in the way eapmd5pass 1.4 handled network traffic in the extract_eapusername function. A remote attacker could potentially use this flaw to crash the eapmd5pass process by generating specially crafted network traffic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-31T17:00:00.000Z
CVE-2017-11671 
Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-26T21:00:00.000Z
CVE-2017-11672 
The OPC Foundation Local Discovery Server (LDS) before 1.03.367 is installed as a Windows Service without adding double quotes around the opcualds.exe executable path, which might allow local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-13T18:00:00.000Z
CVE-2017-11673 
Reporter.exe in Acunetix 8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed PRE file, related to a "User Mode Write AV starting at reporter!madTraceProcess."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-27T06:00:00.000Z
CVE-2017-11674 
Reporter.exe in Acunetix 8 allows remote attackers to cause a denial of service (application crash) via a malformed PRE file, related to a "Read Access Violation starting at reporter!madTraceProcess."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-27T06:00:00.000Z
CVE-2017-11675 
The traverseStrictSanitize function in admin_dir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key strings, which allows remote authenticated users to execute arbitrary PHP code by placing that code into an invalid array index of the admin_name array parameter to admin_dir/login.php, if there is an export of an error-log entry for that invalid array index.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-27T06:00:00.000Z
CVE-2017-11677 
Cross-site scripting (XSS) vulnerability in Hashtopus 1.5g allows remote attackers to inject arbitrary web script or HTML via the query string to admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-27T06:00:00.000Z
CVE-2017-11678 
SQL injection vulnerability in Hashtopus 1.5g allows remote authenticated users to execute arbitrary SQL commands via the format parameter in admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-27T06:00:00.000Z
CVE-2017-11679 
Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-27T06:00:00.000Z
CVE-2017-11680 
Cross-Site Request Forgery (CSRF) exists in Hashtopussy 0.4.0, allowing an admin password change via users.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-27T06:00:00.000Z
CVE-2017-11681 
Incorrect Access Control vulnerability in Hashtopussy 0.4.0 allows remote authenticated users to execute actions that should only be available for administrative roles, as demonstrated by an action=createVoucher request to agents.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-27T06:00:00.000Z
CVE-2017-11682 
Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) version, (2) url, or (3) rootdir parameter in hashcat.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-27T06:00:00.000Z
CVE-2017-11683 
There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-27T00:00:00.000Z
CVE-2017-11684 
There is an illegal address access in the build_table function in libavcodec/bitstream.c of Libav 12.1 that will lead to remote denial of service via crafted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-27T06:00:00.000Z
CVE-2017-11685 
Multiple Reflective cross-site scripting (XSS) vulnerabilities in search and display of event data in Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allow remote attackers to inject arbitrary web script or HTML, as demonstrated by the fName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-27T06:00:00.000Z