rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-16942 
In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function wav_w64_read_fmt_chunk() in wav_w64.c, which may lead to DoS when playing a crafted audio file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-25T17:00:00.000Z
CVE-2017-16943 
The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via vectors involving BDAT commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-25T17:00:00.000Z
CVE-2017-16944 
The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial of service (infinite loop and stack exhaustion) via vectors involving BDAT commands and an improper check for a '.' character signifying the end of the content, related to the bdat_getc function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-25T17:00:00.000Z
CVE-2017-16945 
The standardrestorer binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted restore path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-31T20:00:00.000Z
CVE-2017-16946 
The admin_edit function in app/Controller/UsersController.php in MISP 2.4.82 mishandles the enable_password field, which allows admins to discover a hashed password by reading the audit log.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-25T18:00:00.000Z
CVE-2017-16948 
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730008 DeviceIoControl request to \\.\Viragtlt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-26T21:00:00.000Z
CVE-2017-16949 
An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper input sanitization allows the attacker to override the settings for allowed file extensions and upload file size, related to inc/cores/file-uploader.php and file-uploader/file-uploader-class.php. This allows the attacker to upload anything they want to the server, as demonstrated by an action=ap_file_upload_action&allowedExtensions[]=php request to /wp-admin/admin-ajax.php that results in a .php file upload and resultant PHP code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-18T17:00:00.000Z
CVE-2017-16950 
Cross - site scripting (XSS) vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-17T05:00:00.000Z
CVE-2017-16951 
Winamp Pro 5.66 Build 3512 allows remote attackers to cause a denial of service via a crafted WAV, WMV, AU, ASF, AIFF, or AIF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-28T15:00:00.000Z
CVE-2017-16952 
KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-28T15:00:00.000Z
CVE-2017-16953 
connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE configuration or set up a malicious configuration via a GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-01T17:00:00.000Z
CVE-2017-16955 
SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitrary SQL commands via the "keyword" parameter to /wp-admin/options-general.php?page=inlinks/inlinks.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-27T10:00:00.000Z
CVE-2017-16956 
b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-27T10:00:00.000Z
CVE-2017-16957 
TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of an admin/diagnostic command to cgi-bin/luci, related to the zone_get_effect_devices function in /usr/lib/lua/luci/controller/admin/diagnostic.lua in uhttpd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-27T10:00:00.000Z
CVE-2017-16958 
TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/bridge command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/bridge.lua in uhttpd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-27T10:00:00.000Z
CVE-2017-16959 
The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an operation=write;locale=%0d request, and then making an operation=read request with a crafted Accept-Language HTTP header, related to the set_sysinfo and get_sysinfo functions in /usr/lib/lua/luci/controller/locale.lua in uhttpd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-27T10:00:00.000Z
CVE-2017-16960 
TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-27T10:00:00.000Z
CVE-2017-16961 
A SQL injection vulnerability in core/inc/auto-modules.php in BigTree CMS through 4.2.19 allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The attack uses an admin/trees/add/process request with a crafted _tags[] parameter that is mishandled in a later admin/ajax/dashboard/approve-change request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-27T10:00:00.000Z
CVE-2017-16962 
The WebMail components (Crystal, pronto, and pronto4) in CommuniGate Pro before 6.2.1 have stored XSS vulnerabilities via (1) the location or details field of a Google Calendar invitation, (2) a crafted Outlook.com calendar (aka Hotmail Calendar) invitation, (3) e-mail granting access to a directory that has JavaScript in its name, (4) JavaScript in a note name, (5) JavaScript in a task name, or (6) HTML e-mail that is mishandled in the Inbox component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-27T10:00:00.000Z
CVE-2017-16994 
The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-27T19:00:00.000Z
CVE-2017-16995 
The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension.
Problem types: description: incorrect sign extension
Affected products: vendor: n/a
product: n/a
Published: 2017-12-22T10:00:00.000Z
CVE-2017-16996 
kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging register truncation mishandling.
Problem types: description: did not properly handle register truncation to a smaller size
Affected products: vendor: n/a
product: Linux kernel through 4.14.8
Published: 2017-12-22T10:00:00.000Z
CVE-2017-16997 
elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the "./" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.
Problem types: description: improper RPATH/RUNPATH validation
Affected products: vendor: n/a
product: glibc 2.19 through 2.26
Published: 2017-12-18T01:00:00.000Z
CVE-2017-17010 
Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Sony Interactive Entertainment Inc.
product: Content Manager Assistant for PlayStation
Published: 2017-12-22T14:00:00.000Z
CVE-2017-17020 
On D-Link DCS-5009 devices with firmware 1.08.11 and earlier, DCS-5010 devices with firmware 1.14.09 and earlier, and DCS-5020L devices with firmware before 1.15.01, command injection in alphapd (binary responsible for running the camera's web server) allows remote authenticated attackers to execute code through sanitized /setSystemAdmin user input in the AdminID field being passed directly to a call to system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-01T16:00:00.000Z
CVE-2017-17023 
The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e.com). The affected client software, "Sophos IPSec Client" 11.04 is a rebranded version of NCP "Secure Entry Client" 10.11 r32792. A vulnerability in the software update feature of the VPN client allows a man-in-the-middle (MITM) or man-on-the-side (MOTS) attacker to execute arbitrary, malicious software on a target user's computer. This is related to SIC_V11.04-64.exe (Sophos), NCP_EntryCl_Windows_x86_1004_31799.exe (NCP), and ncpmon.exe (both Sophos and NCP). The vulnerability exists because: (1) the VPN client requests update metadata over an insecure HTTP connection; and (2) the client software does not check if the software update is signed before running it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-09T17:13:22.000Z
CVE-2017-17027 
A buffer overflow vulnerability in FTP service in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.
Problem types: description: Buffer Overflow
Affected products: vendor: QNAP
product: QTS FTP service
Published: 2017-12-21T15:00:00.000Z
CVE-2017-17028 
A buffer overflow vulnerability in external device function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.
Problem types: description: Buffer Overflow
Affected products: vendor: QNAP
product: QTS External Device function
Published: 2017-12-21T15:00:00.000Z
CVE-2017-17029 
A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.
Problem types: description: Buffer Overflow
Affected products: vendor: QNAP
product: QTS Login function
Published: 2017-12-21T15:00:00.000Z
CVE-2017-17030 
A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.
Problem types: description: Buffer Overflow
Affected products: vendor: QNAP
product: QTS Login function
Published: 2017-12-21T15:00:00.000Z
CVE-2017-17031 
A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.
Problem types: description: Buffer Overflow
Affected products: vendor: QNAP
product: QTS Password function
Published: 2017-12-21T15:00:00.000Z
CVE-2017-17032 
A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.
Problem types: description: Buffer Overflow
Affected products: vendor: QNAP
product: QTS Password function
Published: 2017-12-21T15:00:00.000Z
CVE-2017-17033 
A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.
Problem types: description: Buffer Overflow
Affected products: vendor: QNAP
product: QTS Notification function
Published: 2017-12-21T15:00:00.000Z
CVE-2017-17042 
lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-28T20:00:00.000Z
CVE-2017-17043 
The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter "post" to /wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php is not filtered correctly.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-28T22:00:00.000Z
CVE-2017-17044 
An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of service (infinite loop and host OS hang) by leveraging the mishandling of Populate on Demand (PoD) errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-28T23:00:00.000Z
CVE-2017-17045 
An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and host OS crash) by leveraging the mishandling of Populate on Demand (PoD) Physical-to-Machine (P2M) errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-28T23:00:00.000Z
CVE-2017-17046 
An issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to obtain sensitive information from DRAM after a reboot, because disjoint blocks, and physical addresses that do not start at zero, are mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-28T23:00:00.000Z
CVE-2017-17049 
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730010 DeviceIoControl request to \\.\Viragtlt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-29T03:00:00.000Z
CVE-2017-17050 
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730020 DeviceIoControl request to \\.\Viragtlt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-29T03:00:00.000Z
CVE-2017-17051 
An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was introduced with the fix for OSSA-2017-005 (CVE-2017-16239); however, only Nova stable/pike or later deployments with that fix applied and relying on the default FilterScheduler are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-05T18:00:00.000Z
CVE-2017-17052 
The mm_init function in kernel/fork.c in the Linux kernel before 4.12.10 does not clear the ->exe_file member of a new process's mm_struct, allowing a local attacker to achieve a use-after-free or possibly have unspecified other impact by running a specially crafted program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-29T03:00:00.000Z
CVE-2017-17053 
The init_new_context function in arch/x86/include/asm/mmu_context.h in the Linux kernel before 4.12.10 does not correctly handle errors from LDT table allocation when forking a new process, allowing a local attacker to achieve a use-after-free or possibly have unspecified other impact by running a specially crafted program. This vulnerability only affected kernels built with CONFIG_MODIFY_LDT_SYSCALL=y.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-29T03:00:00.000Z
CVE-2017-17054 
In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() in source_wavread.c, which may lead to DoS when playing a crafted audio file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-29T07:00:00.000Z
CVE-2017-17055 
Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) attack involving the username-form-id parameter to freeradius.users.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-06T16:00:00.000Z
CVE-2017-17056 
The ZKTime Web Software 2.0.1.12280 allows the Administrator to elevate the privileges of the application user using a 'password_change()' function of the Modify Password component, reachable via the old_password, new_password1, and new_password2 parameters to the /accounts/password_change/ URI. An attacker takes advantage of this scenario and creates a crafted CSRF link to add himself as an administrator to the ZKTime Web Software. He then uses social engineering methods to trick the administrator into clicking the forged HTTP request. The request is executed and the attacker becomes the Administrator of the ZKTime Web Software. If the vulnerability is successfully exploited, then an attacker (who would be a normal user of the web application) can escalate his privileges and become the administrator of ZKTime Web Software.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-04T14:00:00.000Z
CVE-2017-17057 
There is a reflected XSS vulnerability in ZKTime Web 2.0.1.12280. The vulnerability exists due to insufficient filtration of user-supplied data in the 'Range' field of the 'Department' module in a Personnel Advanced Query. A remote attacker can execute arbitrary HTML and script code in the browser in the context of the vulnerable application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-04T14:00:00.000Z
CVE-2017-17058 
The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/emails/plain/ URI, which accesses a parent directory. NOTE: a software maintainer indicates that Directory Traversal is not possible because all of the template files have "if (!defined('ABSPATH')) {exit;}" code
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-29T07:00:00.000Z
CVE-2017-17059 
XSS exists in the amtyThumb amty-thumb-recent-post (aka amtyThumb posts or wp-thumb-post) plugin 8.1.3 for WordPress via the query string to amtyThumbPostsAdminPg.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-29T17:00:00.000Z
CVE-2017-17060 
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T14:44:38.000Z
CVE-2017-17061 
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T14:42:19.000Z
CVE-2017-17062 
The backend component in Open-Xchange OX App Suite before 7.6.3-rev35, 7.8.x before 7.8.2-rev38, 7.8.3 before 7.8.3-rev41, and 7.8.4 before 7.8.4-rev19 allows remote authenticated users to save arbitrary user attributes by leveraging improper privilege management.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-15T21:00:00.000Z
CVE-2017-17065 
An issue was discovered on D-Link DIR-605L Model B before FW2.11betaB06_hbrf devices, related to the code that handles the authentication values for HNAP. An attacker can cause a denial of service (device crash) or possibly have unspecified other impact by sending a sufficiently long string in the password field of the HTTP Basic Authentication section of the HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-30T17:00:00.000Z
CVE-2017-17066 
The (1) i2pd before 2.17 and (2) kovri pre-alpha implementations of the I2P routing protocol do not properly handle Garlic DeliveryTypeTunnel packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading sensitive router memory, aka the GarlicRust bug.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-05T09:00:00.000Z
CVE-2017-17067 
Splunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6.4.x before 6.4.9, and 6.3.x before 6.3.12, when the SAML authType is enabled, mishandles SAML, which allows remote attackers to bypass intended access restrictions or conduct impersonation attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-30T02:00:00.000Z
CVE-2017-17068 
A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions < 8.12. This vulnerability allows an attacker to acquire authenticated users' tokens and invoke services on a user's behalf if the target site or application uses a popup callback page with auth0.popup.callback().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-06T19:00:00.000Z
CVE-2017-17069 
ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is launched from a directory where an attacker has already created a Trojan horse dwmapi.dll file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-06T05:00:00.000Z