rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-17448 
net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-07T00:00:00.000Z
CVE-2017-17449 
The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-07T00:00:00.000Z
CVE-2017-17450 
net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-07T00:00:00.000Z
CVE-2017-17451 
The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-07T00:00:00.000Z
CVE-2017-17454 
Mahara 16.10 before 16.10.7 and 17.04 before 17.04.5 and 17.10 before 17.10.2 have a Cross Site Scripting (XSS) vulnerability when a user enters invalid UTF-8 characters. These are now going to be discarded in Mahara along with NULL characters and invalid Unicode characters. Mahara will also avoid direct $_GET and $_POST usage where possible, and instead use param_exists() and the correct param_*() function to fetch the expected value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-20T22:00:00.000Z
CVE-2017-17455 
Mahara 16.10 before 16.10.7, 17.04 before 17.04.5, and 17.10 before 17.10.2 are vulnerable to being forced, via a man-in-the-middle attack, to interact with Mahara on the HTTP protocol rather than HTTPS even when an SSL certificate is present.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-20T22:00:00.000Z
CVE-2017-17458 
In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repository. Typical use of Mercurial prevents construction of such repositories, but they can be created programmatically.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-07T18:00:00.000Z
CVE-2017-17459 
http_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-14176, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-07T18:00:00.000Z
CVE-2017-17463 
Vivo modems allow remote attackers to obtain sensitive information by reading the index.cgi?page=wifi HTML source code, as demonstrated by ssid and psk_wepkey fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-08T05:00:00.000Z
CVE-2017-17464 
K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002570 DeviceIoControl request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-08T05:00:00.000Z
CVE-2017-17465 
K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002574 DeviceIoControl request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-08T05:00:00.000Z
CVE-2017-17466 
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service (Arbitrary Write) via a \\.\Viragtlt DeviceIoControl request of 0x82730088.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-08T07:00:00.000Z
CVE-2017-17467 
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730074.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-08T07:00:00.000Z
CVE-2017-17468 
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service (Arbitrary Write) via a \\.\Viragtlt DeviceIoControl request of 0x82730020, a different vulnerability than CVE-2017-17050.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-08T07:00:00.000Z
CVE-2017-17469 
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730008, a different vulnerability than CVE-2017-16948.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-08T07:00:00.000Z
CVE-2017-17470 
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730054.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-08T07:00:00.000Z
CVE-2017-17471 
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82732140.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-08T07:00:00.000Z
CVE-2017-17472 
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730030.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-08T07:00:00.000Z
CVE-2017-17473 
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730050.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-08T07:00:00.000Z
CVE-2017-17474 
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730070.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-08T07:00:00.000Z
CVE-2017-17475 
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82736068.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-08T07:00:00.000Z
CVE-2017-17476 
Open Ticket Request System (OTRS) 4.0.x before 4.0.28, 5.0.x before 5.0.26, and 6.0.x before 6.0.3, when cookie support is disabled, might allow remote attackers to hijack web sessions and consequently gain privileges via a crafted email.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-20T17:00:00.000Z
CVE-2017-17477 
Pexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via management web interface views.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T03:30:00.000Z
CVE-2017-17478 
An XSS issue was discovered in Designer Studio in Pegasystems Pega Platform 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2, 7.2.1, and 7.2.2. A user with developer credentials can insert malicious code (up to 64 characters) into a text field in Designer Studio, after establishing context. Designer Studio is the developer workbench for Pega Platform. That XSS payload will execute when other developers visit the affected pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-27T15:00:00.000Z
CVE-2017-17479 
In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-08T19:00:00.000Z
CVE-2017-17480 
In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-08T19:00:00.000Z
CVE-2017-17482 
An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table may result in a buffer overflow allowing a local privilege escalation when a non-privileged account enters a crafted command line. This bug is exploitable on VAX and Alpha and may cause a process crash on IA64. Software was affected regardless of whether it was directly shipped by VMS Software, Inc. (VSI), HPE, HP, Compaq, or Digital Equipment Corporation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-07T15:00:00.000Z
CVE-2017-17484 
The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles ucnv_convertEx calls for UTF-8 to UTF-8 conversion, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted string, as demonstrated by ZNC.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-10T20:00:00.000Z
CVE-2017-17485 
FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the Spring libraries are available in the classpath.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-10T18:00:00.000Z
CVE-2017-17497 
In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because the currentNode variable in the "children of the head" processing feature is modified in the loop without validating the new value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-10T22:00:00.000Z
CVE-2017-17498 
WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (bit_stream.c MagickBitStreamMSBWrite heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T02:00:00.000Z
CVE-2017-17499 
ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T02:00:00.000Z
CVE-2017-17500 
ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T02:00:00.000Z
CVE-2017-17501 
WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T02:00:00.000Z
CVE-2017-17502 
ReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has a magick/import.c ImportCMYKQuantumType heap-based buffer over-read via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T02:00:00.000Z
CVE-2017-17503 
ReadGRAYImage in coders/gray.c in GraphicsMagick 1.3.26 has a magick/import.c ImportGrayQuantumType heap-based buffer over-read via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T02:00:00.000Z
CVE-2017-17504 
ImageMagick before 7.0.7-12 has a coders/png.c Magick_png_read_raw_profile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T02:00:00.000Z
CVE-2017-17505 
In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T03:00:00.000Z
CVE-2017-17506 
In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Opline_pline_decode in H5Opline.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T03:00:00.000Z
CVE-2017-17507 
In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5T_conv_struct_opt in H5Tconv.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T03:00:00.000Z
CVE-2017-17508 
In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T03:00:00.000Z
CVE-2017-17509 
In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a. For example, h5dump would crash or possibly have unspecified other impact someone opens a crafted hdf5 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T03:00:00.000Z
CVE-2017-17511 
KildClient 3.1.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, related to prefs.c and worldgui.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z
CVE-2017-17512 
sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T06:00:00.000Z
CVE-2017-17513 
TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, related to linked_scripts/context/stubs/unix/mtxrun, texmf-dist/scripts/context/stubs/mswin/mtxrun.lua, and texmf-dist/tex/luatex/lualibs/lualibs-os.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z
CVE-2017-17514 
boxes.c in nip2 8.4.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that this product does not use the BROWSER environment variable
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z
CVE-2017-17515 
etc/ObjectList in Metview 4.7.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has indicated that the code to access this environment variable is not enabled in the shipped product
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z
CVE-2017-17516 
scripts/inspect_webbrowser.py in Reddit Terminal Viewer (RTV) 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z
CVE-2017-17517 
libsylph/utils.c in Sylpheed through 3.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z
CVE-2017-17518 
swt/motif/browser.c in White_dune (aka whitedune) 0.30.10 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: This issue is being disputed as not being a vulnerability because “the current version of white_dune (1.369 at https://wdune.ourproject.org/) do not use a "BROWSER environment variable". Instead, the "browser" variable is read from the $HOME/.dunerc file (or from the M$Windows registry). It is configurable in the "options" menu. The default is chosen in the ./configure script, which tests various programs, first tested is "xdg-open".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z
CVE-2017-17519 
batteriesConfig.mlp in OCaml Batteries Included (aka ocaml-batteries) 2.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z
CVE-2017-17520 
tools/url_handler.pl in TIN 2.4.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has reported that this is intentional behavior, because the documentation states "url_handler.pl was designed to work together with tin which only issues shell escaped absolute URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z
CVE-2017-17521 
uiutil.c in FontForge through 20170731 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, a different vulnerability than CVE-2017-17534.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z
CVE-2017-17522 
Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is impossible because the code relies on subprocess.Popen and the default shell=False setting
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z
CVE-2017-17523 
lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T06:00:00.000Z
CVE-2017-17524 
library/www_browser.pl in SWI-Prolog 7.2.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z
CVE-2017-17525 
guiclient/guiclient.cpp in xTuple PostBooks 4.7.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z
CVE-2017-17526 
Input.cc in Bernard Parisse Giac 1.2.3.57 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z
CVE-2017-17527 
delphi_gui/WWWBrowserRunnerDM.pas in PasDoc 0.14 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer has indicated that the code referencing the BROWSER environment variable is never used
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z
CVE-2017-17528 
backends/platform/sdl/posix/posix.cpp in ScummVM 1.9.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z
CVE-2017-17529 
af/util/xp/ut_go_file.cpp in AbiWord 3.0.2-2 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z
CVE-2017-17530 
common/help.c in Geomview 1.9.5 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: this is disputed by a third party because no untrusted input can be used for the injection
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z
CVE-2017-17531 
gozilla.c in GNU GLOBAL 4.8.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-14T16:00:00.000Z