rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-15262 
IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at PDF!xmlParserInputRead+0x0000000000048d0c."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-11T18:00:00.000Z
CVE-2017-15263 
IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Address controls Branch Selection starting at PDF!xmlListWalk+0x00000000000166c4."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-11T18:00:00.000Z
CVE-2017-15264 
IrfanView version 4.44 (32bit) allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at image00000000_00400000+0x00000000000236e4."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-11T18:00:00.000Z
CVE-2017-15265 
Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seq_clientmgr.c and sound/core/seq/seq_ports.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-16T18:00:00.000Z
CVE-2017-15266 
In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in wav_extractor.c via a zero sample rate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-11T17:00:00.000Z
CVE-2017-15267 
In GNU Libextractor 1.4, there is a NULL Pointer Dereference in flac_metadata in flac_extractor.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-11T17:00:00.000Z
CVE-2017-15268 
Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-12T15:00:00.000Z
CVE-2017-15269 
The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default. These can be performed using "nmap -b" and allow performing scans via the FTP server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-15T16:00:00.000Z
CVE-2017-15270 
The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values (CSV) file. This can be used by attackers to hide data in the Graphical User Interface (GUI) view and create arbitrary entries to a certain extent. Special characters such as '"' and ',' and '\r' are not escaped and can be used to add new entries to the log.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-15T16:00:00.000Z
CVE-2017-15271 
A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729. This issue could be triggered prior to authentication. The PSFTPd server did not automatically restart, which enabled attackers to perform a very effective DoS attack against this service. By sending a crafted SSH identification / version string to the server, a NULL pointer dereference could be caused, apparently because of a race condition in the window message handling, performing the cleanup for invalid connections. This incorrect cleanup code has a use-after-free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-15T16:00:00.000Z
CVE-2017-15272 
The PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat. This file is a Microsoft Access Database and can be extracted. The application sets the encrypt flag with the password "ITsILLEGAL"; however, this password is not required to extract the data. Cleartext is used for a user password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-15T16:00:00.000Z
CVE-2017-15273 
Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a user submitting a potential dangerous payload, e.g., XSS code, to be saved as titles in internal artefacts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-31T18:00:00.000Z
CVE-2017-15274 
security/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL payload in conjunction with a nonzero length value, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call, a different vulnerability than CVE-2017-12192.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-12T00:00:00.000Z
CVE-2017-15275 
Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-27T22:00:00.000Z
CVE-2017-15276 
OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an authenticated user to gain superuser privileges: Content Server allows uploading content using batches (TAR archives). When unpacking TAR archives, Content Server fails to verify the contents of an archive, which causes a path traversal vulnerability via symlinks. Because some files on the Content Server filesystem are security-sensitive, this leads to privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-13T16:00:00.000Z
CVE-2017-15277 
ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-12T08:00:00.000Z
CVE-2017-15278 
Cross-Site Scripting (XSS) was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data (in /sources/folders.queries.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-12T08:00:00.000Z
CVE-2017-15279 
Cross-site scripting (XSS) vulnerability in Umbraco CMS before 7.7.3 allows remote attackers to inject arbitrary web script or HTML via the "page name" (aka nodename) parameter during the creation of a new page, related to Umbraco.Web.UI/umbraco/dialogs/Publish.aspx.cs and Umbraco.Web/umbraco.presentation/umbraco/dialogs/notifications.aspx.cs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-12T08:00:00.000Z
CVE-2017-15280 
XML external entity (XXE) vulnerability in Umbraco CMS before 7.7.3 allows attackers to obtain sensitive information by reading files on the server or sending TCP requests to intranet hosts (aka SSRF), related to Umbraco.Web/umbraco.presentation/umbraco/dialogs/importDocumenttype.aspx.cs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-12T08:00:00.000Z
CVE-2017-15281 
ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to "Conditional jump or move depends on uninitialised value(s)."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-12T08:00:00.000Z
CVE-2017-15284 
Cross-Site Scripting exists in OctoberCMS 1.0.425 (aka Build 425), allowing a least privileged user to upload an SVG file containing malicious code as the Avatar for the profile. When this is opened by the Admin, it causes JavaScript execution in the context of the Admin account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-12T08:00:00.000Z
CVE-2017-15285 
X-Cart 5.2.23, 5.3.1.9, 5.3.2.13, and 5.3.3 is vulnerable to Remote Code Execution. This vulnerability exists because the application fails to check remote file extensions before saving locally. This vulnerability can be exploited by anyone with Vendor access or higher. One attack methodology is to upload an image file in the Attachments section of a product catalog, upload a .php file with an "Add File Via URL" action, and change the image's Description URL to reference the .php URL in the attachments/ directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-12T08:00:00.000Z
CVE-2017-15286 
SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-12T08:00:00.000Z
CVE-2017-15287 
There is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox devices, as demonstrated by the "Name des Bouquets" field, or the file parameter to the /file URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-12T15:00:00.000Z
CVE-2017-15288 
The compilation daemon in Scala before 2.10.7, 2.11.x before 2.11.12, and 2.12.x before 2.12.4 uses weak permissions for private files in /tmp/scala-devel/${USER:shared}/scalac-compile-server-port, which allows local users to write to arbitrary class files and consequently gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-15T16:00:00.000Z
CVE-2017-15289 
The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-16T18:00:00.000Z
CVE-2017-15290 
Mirasys Video Management System (VMS) 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 has a login process in which cleartext data is sent from a server to a client, and not all of this data is required for the client functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-12T16:00:00.000Z
CVE-2017-15291 
Cross-site scripting (XSS) vulnerability in the Wireless MAC Filtering page in TP-LINK TL-MR3220 wireless routers allows remote attackers to inject arbitrary web script or HTML via the Description field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-20T17:00:00.000Z
CVE-2017-15293 
Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 2520064.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-16T16:00:00.000Z
CVE-2017-15294 
The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-16T16:00:00.000Z
CVE-2017-15295 
Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 2520064.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-16T16:00:00.000Z
CVE-2017-15296 
The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-16T16:00:00.000Z
CVE-2017-15297 
SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. This is SAP Security Note 2442993.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-16T16:00:00.000Z
CVE-2017-15298 
Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service (memory consumption) via a crafted repository, aka a Git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attempt to build the data structure in memory before writing to disk.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-14T19:00:00.000Z
CVE-2017-15299 
The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of add_key for a key that already exists but is uninstantiated, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted system call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-14T21:00:00.000Z
CVE-2017-15300 
The miner statistics HTTP API in EWBF Cuda Zcash Miner Version 0.3.4b hangs on incoming TCP connections until some sort of request is made (such as "GET / HTTP/1.1"), which allows for a Denial of Service attack preventing a user from viewing their mining statistics by an attacker opening a session with telnet or netcat and connecting to the miner on the HTTP API port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-15T08:00:00.000Z
CVE-2017-15302 
In CPUID CPU-Z through 1.81, there are improper access rights to a kernel-mode driver (e.g., cpuz143_x64.sys for version 1.43) that can result in information disclosure or elevation of privileges, because of an arbitrary read of any physical address via ioctl 0x9C402604. Any application running on the system (Windows), including sandboxed users, can issue an ioctl to this driver without any validation. Furthermore, the driver can map any physical page on the system and returns the allocated map page address to the user: that results in an information leak and EoP. NOTE: the vendor indicates that the arbitrary read itself is intentional behavior (for ACPI scan functionality); the security issue is the lack of an ACL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-16T01:00:00.000Z
CVE-2017-15303 
In CPUID CPU-Z before 1.43, there is an arbitrary memory write that results directly in elevation of privileges, because any program running on the local machine (while CPU-Z is running) can issue an ioctl 0x9C402430 call to the kernel-mode driver (e.g., cpuz141_x64.sys for version 1.41).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-16T01:00:00.000Z
CVE-2017-15304 
/bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own session id via a "Cookie: PHPSESSID=" header. This can be used to achieve persistent access to the admin panel even after an admin password change.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-15T03:00:00.000Z
CVE-2017-15305 
XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-15T03:00:00.000Z
CVE-2017-15306 
The kvm_vm_ioctl_check_extension function in arch/powerpc/kvm/powerpc.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) via a KVM_CHECK_EXTENSION KVM_CAP_PPC_HTM ioctl call to /dev/kvm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-06T18:00:00.000Z
CVE-2017-15307 
Huawei Honor 8 smartphone with software versions earlier than FRD-L04C567B389 and earlier than FRD-L14C567B389 have a permission control vulnerability due to improper authorization configuration on specific device information.
Problem types: description: Permission Control
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Honor 8
Published: 2017-12-22T17:00:00.000Z
CVE-2017-15308 
Huawei iReader app before 8.0.2.301 has an input validation vulnerability due to insufficient validation on the URL used for loading network data. An attacker can control app access and load malicious websites created by the attacker, and the code in webpages would be loaded and run.
Problem types: description: input validation
Affected products: vendor: Huawei Technologies Co., Ltd.
product: iReader
Published: 2017-12-22T17:00:00.000Z
CVE-2017-15309 
Huawei iReader app before 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths. An attacker can exploit this vulnerability to store downloaded malicious files in an arbitrary directory.
Problem types: description: path traversal
Affected products: vendor: Huawei Technologies Co., Ltd.
product: iReader
Published: 2017-12-22T17:00:00.000Z
CVE-2017-15310 
Huawei iReader app before 8.0.2.301 has an arbitrary file deletion vulnerability due to the lack of input validation. An attacker can exploit this vulnerability to delete specific files from the SD card.
Problem types: description: arbitrary file deletion
Affected products: vendor: Huawei Technologies Co., Ltd.
product: iReader
Published: 2017-12-22T17:00:00.000Z
CVE-2017-15311 
The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120(SP2C00), before BLA-AL00 8.0.0.120(SP2C00), before MHA-AL00B 8.0.0.334(C00), and before LON-AL00B 8.0.0.334(C00) have a stack overflow vulnerability due to the lack of parameter validation. An attacker could send malicious packets to the smart phones within radio range by special wireless device, which leads stack overflow when the baseband module handles these packets. The attacker could exploit this vulnerability to perform a denial of service attack or remote code execution in baseband module.
Problem types: description: Stack Overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Mate 10
vendor: Huawei Technologies Co., Ltd.
product: Mate 10 Pro
vendor: Huawei Technologies Co., Ltd.
product: Mate 9
vendor: Huawei Technologies Co., Ltd.
product: Mate 9 Pro
Published: 2017-12-22T17:00:00.000Z
CVE-2017-15312 
Huawei SmartCare V200R003C10 has a stored XSS (cross-site scripting) vulnerability in the dashboard module. A remote authenticated attacker could exploit this vulnerability to inject malicious scripts in the affected device.
Problem types: description: XSS
Affected products: vendor: Huawei Technologies Co., Ltd.
product: SmartCare
Published: 2017-12-22T17:00:00.000Z
CVE-2017-15313 
Huawei SmartCare V200R003C10 has a CSV injection vulnerability. An remote authenticated attacker could inject malicious CSV expression to the affected device.
Problem types: description: CSV Injection
Affected products: vendor: Huawei Technologies Co., Ltd.
product: SmartCare
Published: 2017-12-22T17:00:00.000Z
CVE-2017-15314 
Huawei DP300 V500R002C00, RP200 V500R002C00SPC200, V600R006C00, TE30 V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, TE40 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, TE50 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a memory leak vulnerability due to memory don't be released when the XML parser process some node fail. An attacker could exploit it to cause memory leak, which may further lead to system exceptions.
Problem types: description: Memory Leak
Affected products: vendor: Huawei Technologies Co., Ltd.
product: DP300,RP200,TE30,TE40,TE50,TE60
Published: 2018-03-09T21:00:00.000Z
CVE-2017-15315 
Patch module of Huawei NIP6300 V500R001C20SPC100, V500R001C20SPC200, NIP6600 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6300 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6500 V500R001C20SPC100, V500R001C20SPC200 has a memory leak vulnerability. An authenticated attacker could execute special commands many times, the memory leaking happened, which would cause the device to reset finally.
Problem types: description: Memory Leak
Affected products: vendor: Huawei Technologies Co., Ltd.
product: NIP6300,NIP6600,Secospace USG6300,Secospace USG6500
Published: 2018-03-09T21:00:00.000Z
CVE-2017-15316 
The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334(C00) and Mate 9 Pro Huawei smart phones with software before LON-AL00B 8.0.0.334(C00) has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call special API, which triggers double free and causes a system crash or arbitrary code execution.
Problem types: description: Memory Double Free
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Mate 9
vendor: Huawei Technologies Co., Ltd.
product: Mate 9 Pro
Published: 2017-12-22T17:00:00.000Z
CVE-2017-15317 
AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an input validation vulnerability in Huawei multiple products. Due to the insufficient input validation, an unauthenticated, remote attacker may craft a malformed Stream Control Transmission Protocol (SCTP) packet and send it to the device, causing the device to read out of bounds and restart.
Problem types: description: Input Validation
Affected products: vendor: Huawei Technologies Co., Ltd.
product: AR120-S
vendor: Huawei Technologies Co., Ltd.
product: AR1200
vendor: Huawei Technologies Co., Ltd.
product: AR1200-S
vendor: Huawei Technologies Co., Ltd.
product: AR150
vendor: Huawei Technologies Co., Ltd.
product: AR150-S
vendor: Huawei Technologies Co., Ltd.
product: AR160
vendor: Huawei Technologies Co., Ltd.
product: AR200
vendor: Huawei Technologies Co., Ltd.
product: AR200-S
vendor: Huawei Technologies Co., Ltd.
product: AR2200
vendor: Huawei Technologies Co., Ltd.
product: AR2200-S
vendor: Huawei Technologies Co., Ltd.
product: AR3200
vendor: Huawei Technologies Co., Ltd.
product: AR510
vendor: Huawei Technologies Co., Ltd.
product: SRG1300
vendor: Huawei Technologies Co., Ltd.
product: SRG2300
vendor: Huawei Technologies Co., Ltd.
product: SRG3300
Published: 2017-12-22T17:00:00.000Z