rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-7666 
Apache OpenMeetings 1.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks, XSS attacks, click-jacking, and MIME based attacks.
Problem types: description: CSRF
Affected products: vendor: Apache Software Foundation
product: Apache OpenMeetings
Published: 2017-07-14T15:00:00.000Z
CVE-2017-7667 
Apache NiFi before 0.7.4 and 1.x before 1.3.0 need to establish the response header telling browsers to only allow framing with the same origin.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache NiFi
Published: 2017-06-12T16:00:00.000Z
CVE-2017-7668 
The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.
Problem types: cwe_id: CWE-126
description: Denial of Service, Integrity Violation (CWE-126)
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Published: 2017-06-20T01:00:00.000Z
CVE-2017-7669 
In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with insufficient input validation. When the docker feature is enabled, authenticated users can run commands as root.
Problem types: description: Privilege escalation
Affected products: vendor: Apache Software Foundation
product: Apache Hadoop
Published: 2017-06-02T17:00:00.000Z
CVE-2017-7670 
The Traffic Router component of the incubating Apache Traffic Control project is vulnerable to a Slowloris style Denial of Service attack. TCP connections made on the configured DNS port will remain in the ESTABLISHED state until the client explicitly closes the connection or Traffic Router is restarted. If connections remain in the ESTABLISHED state indefinitely and accumulate in number to match the size of the thread pool dedicated to processing DNS requests, the thread pool becomes exhausted. Once the thread pool is exhausted, Traffic Router is unable to service any DNS request, regardless of transport protocol.
Problem types: description: Denial of Service
Affected products: vendor: Apache Software Foundation
product: Apache Traffic Control
Published: 2017-07-10T18:00:00.000Z
CVE-2017-7671 
There is a DOS attack vulnerability in Apache Traffic Server (ATS) 5.2.0 to 5.3.2, 6.0.0 to 6.2.0, and 7.0.0 with the TLS handshake. This issue can cause the server to coredump.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Traffic Server
Published: 2018-02-27T20:00:00.000Z
CVE-2017-7672 
If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Solution is to upgrade to Apache Struts version 2.5.12.
Problem types: description: DoS Attack
Affected products: vendor: Apache Software Foundation
product: Apache Struts
Published: 2017-07-13T15:00:00.000Z
CVE-2017-7673 
Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection.
Problem types: description: n/a
Affected products: vendor: Apache Software Foundation
product: Apache OpenMeetings
Published: 2017-07-14T15:00:00.000Z
CVE-2017-7674 
The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances.
Problem types: description: Cache Poisoning
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2017-08-11T02:00:00.000Z
CVE-2017-7675 
The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented directory traversal attacks. It was therefore possible to bypass security constraints using a specially crafted URL.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2017-08-11T02:00:00.000Z
CVE-2017-7676 
Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '*' wildcard character - like my*test, test*.txt. This can result in unintended behavior.
Problem types: description: Authorization
Affected products: vendor: Apache Software Foundation
product: Apache Ranger
Published: 2017-06-14T17:00:00.000Z
CVE-2017-7677 
In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table.
Problem types: description: Authorization
Affected products: vendor: Apache Software Foundation
product: Apache Ranger
Published: 2017-06-14T17:00:00.000Z
CVE-2017-7678 
In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could contain a script, would then be reflected back to the user and could be evaluated and executed by MS Windows-based clients. It is not an attack on Spark itself, but on the user, who may then execute the script inadvertently when viewing elements of the Spark web UIs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-12T13:00:00.000Z
CVE-2017-7679 
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.
Problem types: cwe_id: CWE-126
description: Buffer Overread (CWE-126)
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Published: 2017-06-20T01:00:00.000Z
CVE-2017-7680 
Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains.
Problem types: description: Insecure crossdomain.xml policy
Affected products: vendor: Apache Software Foundation
product: Apache OpenMeetings
Published: 2017-07-14T15:00:00.000Z
CVE-2017-7681 
Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the application in the back-end.
Problem types: description: SQL injection
Affected products: vendor: Apache Software Foundation
product: Apache OpenMeetings
Published: 2017-07-14T15:00:00.000Z
CVE-2017-7682 
Apache OpenMeetings 3.2.0 is vulnerable to parameter manipulation attacks, as a result attacker has access to restricted areas.
Problem types: description: Business Logic Bypass
Affected products: vendor: Apache Software Foundation
product: Apache OpenMeetings
Published: 2017-07-14T15:00:00.000Z
CVE-2017-7683 
Apache OpenMeetings 1.0.0 displays Tomcat version and detailed error stack trace, which is not secure.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache OpenMeetings
Published: 2017-07-14T15:00:00.000Z
CVE-2017-7684 
Apache OpenMeetings 1.0.0 doesn't check contents of files being uploaded. An attacker can cause a denial of service by uploading multiple large files to the server.
Problem types: description: Insecure File Upload
Affected products: vendor: Apache Software Foundation
product: Apache OpenMeetings
Published: 2017-07-14T15:00:00.000Z
CVE-2017-7685 
Apache OpenMeetings 1.0.0 responds to the following insecure HTTP methods: PUT, DELETE, HEAD, and PATCH.
Problem types: description: Insecure HTTP Methods
Affected products: vendor: Apache Software Foundation
product: Apache OpenMeetings
Published: 2017-07-14T15:00:00.000Z
CVE-2017-7686 
Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that include additional functionality, bug fixes and performance improvements. To do that the component communicates to an external PHP server (http://ignite.run) where it needs to send some system properties like Apache Ignite or Java version. Some of the properties might contain user sensitive information.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Ignite
Published: 2017-06-28T13:00:00.000Z
CVE-2017-7687 
When handling a decoding failure for a malformed URL path of an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev might crash because the code accidentally calls inappropriate function. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.
Problem types: description: Denial of Service
Affected products: vendor: Apache Software Foundation
product: Apache Mesos
Published: 2017-09-28T20:00:00.000Z
CVE-2017-7688 
Apache OpenMeetings 1.0.0 updates user password in insecure manner.
Problem types: description: Insecure Password Update
Affected products: vendor: Apache Software Foundation
product: Apache OpenMeetings
Published: 2017-07-14T15:00:00.000Z
CVE-2017-7689 
A Command Injection vulnerability in Schneider Electric homeLYnk Controller exists in all versions before 1.5.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-11T21:00:00.000Z
CVE-2017-7690 
Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary with a Trojan horse program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-14T18:00:00.000Z
CVE-2017-7691 
A code injection vulnerability exists in SAP TREX / Business Warehouse Accelerator (BWA). The vendor response is SAP Security Note 2419592.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-11T21:00:00.000Z
CVE-2017-7692 
SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a sendmail.cf file that is mishandled in a popen call. It's possible to exploit this vulnerability to execute arbitrary shell commands on the remote server. The problem is in the Deliver_SendMail.class.php with the initStream function that uses escapeshellcmd() to sanitize the sendmail command before executing it. The use of escapeshellcmd() is not correct in this case since it doesn't escape whitespaces, allowing the injection of arbitrary command parameters. The problem is in -f$envelopefrom within the sendmail command line. Hence, if the target server uses sendmail and SquirrelMail is configured to use it as a command-line program, it's possible to trick sendmail into using an attacker-provided configuration file that triggers the execution of an arbitrary command. For exploitation, the attacker must upload a sendmail.cf file as an email attachment, and inject the sendmail.cf filename with the -C option within the "Options > Personal Informations > Email Address" setting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T14:00:00.000Z
CVE-2017-7693 
Directory traversal vulnerability in viewer_script.jsp in Riverbed OPNET App Response Xpert (ARX) version 9.6.1 allows remote authenticated users to inject arbitrary commands to read OS files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-26T04:00:00.000Z
CVE-2017-7694 
Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in Symphony CMS through 2.6.11 allows remote attackers to execute code and get a webshell from the back-end. The attacker must be authenticated and enter PHP code in the datasource editor or event editor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-11T23:00:00.000Z
CVE-2017-7695 
Unrestricted File Upload exists in BigTree CMS before 4.2.17: if an attacker uploads an 'xxx.php[space]' file, they could bypass a safety check and execute any code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-11T23:00:00.000Z
CVE-2017-7696 
SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service (memory consumption) via large values in the width and height parameters to otp_logon_ui_resources/qr, aka SAP Security Note 2389042.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-14T18:00:00.000Z
CVE-2017-7697 
In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted audio file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-11T23:00:00.000Z
CVE-2017-7698 
A Use After Free in the pdf2swf part of swftools 0.9.2 and earlier allows remote attackers to execute arbitrary code via a malformed PDF document, possibly a consequence of an error in Gfx.cc in Xpdf 3.02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-10T14:00:00.000Z
CVE-2017-7700 
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by ensuring a nonzero record size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T23:00:00.000Z
CVE-2017-7701 
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T23:00:00.000Z
CVE-2017-7702 
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding length validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T23:00:00.000Z
CVE-2017-7703 
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-imap.c by calculating a line's end correctly.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T23:00:00.000Z
CVE-2017-7704 
In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T23:00:00.000Z
CVE-2017-7705 
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T23:00:00.000Z
CVE-2017-7716 
The read_u32_leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Web Assembly file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T15:00:00.000Z
CVE-2017-7717 
SQL injection vulnerability in the getUserUddiElements method in the ES UDDI component in SAP NetWeaver AS Java 7.4 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2356504.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-14T18:00:00.000Z
CVE-2017-7718 
hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T17:00:00.000Z
CVE-2017-7719 
SQL injection in the Spider Event Calendar (aka spider-event-calendar) plugin before 1.5.52 for WordPress is exploitable with the order_by parameter to calendar_functions.php or widget_Theme_functions.php, related to front_end/frontend_functions.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T15:00:00.000Z
CVE-2017-7720 
Buffer overflow in PrivateTunnel 2.7 and 2.8 allows local attackers to cause a denial of service (SEH overwrite) or possibly have unspecified other impact via a long password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-26T14:00:00.000Z
CVE-2017-7721 
IrfanView version 4.44 (32bit) with FPX Plugin before 4.45 has an Access Violation and crash in processing a FlashPix (.FPX) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-30T17:00:00.000Z
CVE-2017-7722 
In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and "password" (the default username and password). By exploiting a vulnerability in the restrictssh feature of the menuing script, an attacker can escape from the restricted shell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T16:00:00.000Z
CVE-2017-7723 
XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-24T18:00:00.000Z
CVE-2017-7725 
concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "canonical" URL on installation of concrete5 using the "Advanced Options" settings. Remote attackers can make a GET request with any domain name in the Host header; this is stored and allows for arbitrary domains to be set for certain links displayed to subsequent visitors, potentially an XSS vector.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-13T17:00:00.000Z
CVE-2017-7726 
iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-11T17:00:00.000Z
CVE-2017-7728 
On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands (e.g., setting the alarm on/off), related to incorrect cryptography.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-11T17:00:00.000Z
CVE-2017-7729 
On iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted in cleartext.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-11T17:00:00.000Z
CVE-2017-7730 
iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze the "cube" and it will stop responding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-11T17:00:00.000Z
CVE-2017-7731 
A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature.
Problem types: description: Information disclosure
Affected products: vendor: Fortinet, Inc.
product: Fortinet FortiPortal
Published: 2017-05-26T22:00:00.000Z
CVE-2017-7732 
A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized pre-authentication webmail login page allows attacker to inject arbitrary web script or HTML via crafted HTTP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-26T13:00:00.000Z
CVE-2017-7733 
A Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 and 5.6.0 allows a remote unauthenticated attacker to execute arbitrary javascript code via webUI "Login Disclaimer" redir parameter.
Problem types: description: Cross-Site Scripting (XSS)
Affected products: vendor: Fortinet
product: Fortinet FortiOS
Published: 2017-10-27T13:00:00.000Z
CVE-2017-7734 
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via 'Comments' while saving Config Revisions.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet, Inc.
product: Fortinet FortiOS
Published: 2017-09-12T02:00:00.000Z
CVE-2017-7735 
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the "Groups" input while creating or editing User Groups.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet, Inc.
product: Fortinet FortiOS
Published: 2017-09-12T02:00:00.000Z
CVE-2017-7736 
A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attackers to inject arbitrary web script or HTML via special crafted malicious certificate import.
Problem types: description: Cross-site Scripting (XSS)
Affected products: vendor: Fortinet, Inc.
product: Fortinet FortiWeb
Published: 2017-11-22T17:00:00.000Z
CVE-2017-7737 
An information disclosure vulnerability in Fortinet FortiWeb 5.8.2 and below versions allows logged-in admin user to view SNMPv3 user password in cleartext in webui via the HTML source code.
Problem types: description: Information Disclosure
Affected products: vendor: Fortinet, Inc.
product: Fortinet FortiWeb
Published: 2017-08-10T21:00:00.000Z
CVE-2017-7738 
An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, 5.2 and below versions allow an admin user with super_admin privileges to view the current SSL VPN web portal session info which may contains user credentials through the fnsysctl CLI command.
Problem types: description: Information Disclosure
Affected products: vendor: Fortinet, Inc.
product: FortiOS
Published: 2017-12-13T22:00:00.000Z
CVE-2017-7739 
A reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5.2.0 to 5.2.11 allows an unauthenticated attacker to inject arbitrary web script or HTML in the context of the victim's browser via sending a maliciously crafted URL to the victim.
Problem types: description: Cross-site Scripting (XSS)
Affected products: vendor: Fortinet, Inc.
product: FortiOS
Published: 2017-11-13T14:00:00.000Z
CVE-2017-7741 
In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with write memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T18:00:00.000Z
CVE-2017-7742 
In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T18:00:00.000Z