rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-5542 
Cross-site scripting (XSS) vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remote attackers to inject arbitrary web script or HTML via the existing-folder parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-20T08:39:00.000Z
CVE-2017-5543 
includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-20T08:39:00.000Z
CVE-2017-5544 
An issue was discovered on FiberHome Fengine S5800 switches V210R240. An unauthorized attacker can access the device's SSH service, using a password cracking tool to establish SSH connections quickly. This will trigger an increase in the SSH login timeout (each of the login attempts will occupy a connection slot for a longer time). Once this occurs, legitimate login attempts via SSH/telnet will be refused, resulting in a denial of service; you must restart the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T06:49:00.000Z
CVE-2017-5545 
The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Apple Property List data that is too short.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-21T01:00:00.000Z
CVE-2017-5546 
The freelist-randomization feature in mm/slab.c in the Linux kernel 4.8.x and 4.9.x before 4.9.5 allows local users to cause a denial of service (duplicate freelist entries and system crash) or possibly have unspecified other impact in opportunistic circumstances by leveraging the selection of a large value for a random number.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-06T06:04:00.000Z
CVE-2017-5547 
drivers/hid/hid-corsair.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-06T06:04:00.000Z
CVE-2017-5548 
drivers/net/ieee802154/atusb.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-06T06:04:00.000Z
CVE-2017-5549 
The klsi_105_get_line_state function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitialized heap-memory contents into a log entry upon a failure to read the line status, which allows local users to obtain sensitive information by reading the log.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-06T06:04:00.000Z
CVE-2017-5550 
Off-by-one error in the pipe_advance function in lib/iov_iter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized heap-memory locations in opportunistic circumstances by reading from a pipe after an incorrect buffer-release decision.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-06T06:04:00.000Z
CVE-2017-5551 
The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7097.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-06T06:04:00.000Z
CVE-2017-5552 
Memory leak in the virgl_resource_attach_backing function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T15:00:00.000Z
CVE-2017-5553 
Cross-site scripting (XSS) vulnerability in plugins/markdown_plugin/_markdown.plugin.php in b2evolution before 6.8.5 allows remote authenticated users to inject arbitrary web script or HTML via a javascript: URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T06:49:00.000Z
CVE-2017-5554 
An issue was discovered in ABOOT in OnePlus 3 and 3T OxygenOS before 4.0.2. The attacker can reboot the device into the fastboot mode, which could be done without any authentication. A physical attacker can press the "Volume Up" button during device boot, where an attacker with ADB access can issue the adb reboot bootloader command. Then, the attacker can put the platform's SELinux in permissive mode, which severely weakens it, by issuing: fastboot oem selinux permissive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T06:49:00.000Z
CVE-2017-5556 
The ConvertToPDF plugin in Foxit Reader before 8.2 and PhantomPDF before 8.2 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image. The vulnerability could lead to information disclosure; an attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T06:49:00.000Z
CVE-2017-5563 
LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tif_lzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T06:49:00.000Z
CVE-2017-5565 
Code injection vulnerability in Trend Micro Maximum Security 11.0 (and earlier), Internet Security 11.0 (and earlier), and Antivirus+ Security 11.0 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Trend Micro process via a "DoubleAgent" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-21T16:00:00.000Z
CVE-2017-5566 
Code injection vulnerability in AVG Ultimate 17.1 (and earlier), AVG Internet Security 17.1 (and earlier), and AVG AntiVirus FREE 17.1 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any AVG process via a "DoubleAgent" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-21T16:00:00.000Z
CVE-2017-5567 
Code injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3 (and earlier), Pro Antivirus 12.3 (and earlier), and Free Antivirus 12.3 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Avast process via a "DoubleAgent" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-21T16:00:00.000Z
CVE-2017-5569 
An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the template.jsp, which can be exploited without the need of authentication and via an HTTP POST request, and which can be used to dump database data out to a malicious server, using an out-of-band technique such as select_loadfile().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T17:00:00.000Z
CVE-2017-5570 
An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the messageJson.jsp, which can only be exploited by authenticated users via an HTTP POST request and which can be used to dump database data out to a malicious server, using an out-of-band technique such as select_loadfile().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T17:00:00.000Z
CVE-2017-5571 
Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) 11.14.1 and earlier, as used in Citrix License Server for Windows and the Citrix License Server VPX, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2017-5572 
An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T16:00:00.000Z
CVE-2017-5573 
An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other administrators.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T16:00:00.000Z
CVE-2017-5574 
SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activation parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T06:49:00.000Z
CVE-2017-5575 
SQL injection vulnerability in inc/lib/Options.class.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the modules parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T06:49:00.000Z
CVE-2017-5576 
Integer overflow in the vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 allows local users to cause a denial of service or possibly have unspecified other impact via a crafted size value in a VC4_SUBMIT_CL ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-06T06:04:00.000Z
CVE-2017-5577 
The vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 does not set an errno value upon certain overflow detections, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) via inconsistent size values in a VC4_SUBMIT_CL ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-06T06:04:00.000Z
CVE-2017-5578 
Memory leak in the virtio_gpu_resource_attach_backing function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T15:00:00.000Z
CVE-2017-5579 
Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T15:00:00.000Z
CVE-2017-5580 
The parse_instruction function in gallium/auxiliary/tgsi/tgsi_text.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and process crash) via a crafted texture instruction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T15:00:00.000Z
CVE-2017-5581 
Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-28T18:00:00.000Z
CVE-2017-5583 
The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to read arbitrary files via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T14:00:00.000Z
CVE-2017-5584 
Cross-site scripting (XSS) vulnerability in the Management Web Interface in Palo Alto Networks PAN-OS 5.1, 6.x before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T14:00:00.000Z
CVE-2017-5585 
OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and return_top_results_row_based config option is false, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and execute arbitrary DML or DDL commands via a crafted request.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2520.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-22T16:00:00.000Z
CVE-2017-5586 
OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons Collections (ACC) libraries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-22T16:00:00.000Z
CVE-2017-5589 
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for yaxim and Bruno (0.8.6 - 0.8.8; Android).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T20:00:00.000Z
CVE-2017-5590 
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for ChatSecure (3.2.0 - 4.0.0; only iOS) and Zom (all versions up to 1.0.11; only iOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T20:00:00.000Z
CVE-2017-5591 
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for SleekXMPP up to 1.3.1 and Slixmpp all versions up to 1.2.3, as bundled in poezio (0.8 - 0.10) and other products.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T20:00:00.000Z
CVE-2017-5592 
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for profanity (0.4.7 - 0.5.0).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T20:00:00.000Z
CVE-2017-5593 
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Psi+ (0.16.563.580 - 0.16.571.627).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T20:00:00.000Z
CVE-2017-5594 
An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to reset the registered user's password, when the debug toolbar is enabled. The password is successfully recovered using this exploit. The SecureLayer7 ID is SL7_PGKT_01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-25T18:00:00.000Z
CVE-2017-5595 
A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile(), which allows an authenticated attacker to read local system files (e.g., /etc/passwd) in the context of the web server user (www-data). The attack vector is a .. (dot dot) in the path parameter within a zm/index.php?view=file&path= request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-06T17:00:00.000Z
CVE-2017-5596 
In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-asterix.c by changing a data type to avoid an integer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-25T21:00:00.000Z
CVE-2017-5597 
In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-25T21:00:00.000Z
CVE-2017-5598 
An issue was discovered in eClinicalWorks healow@work 8.0 build 8. This is a blind SQL injection within the EmployeePortalServlet, which can be exploited by un-authenticated users via an HTTP POST request and which can be used to dump database data out to a malicious server, using an out-of-band technique, such as select_loadfile(). The vulnerability affects the EmployeePortalServlet page and the following parameter: employer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-27T10:10:00.000Z
CVE-2017-5599 
An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a reflected Cross Site Scripting vulnerability which affects the raceMasterList.jsp page within the Patient Portal. Inserted payload is rendered within the Patient Portal and the raceMasterList.jsp page does not require authentication. The vulnerability can be used to extract sensitive information or perform attacks against the user's browser. The vulnerability affects the raceMasterList.jsp page and the following parameter: race.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-27T10:10:00.000Z
CVE-2017-5600 
The Data Warehouse component in NetApp OnCommand Insight before 7.2.3 allows remote attackers to obtain administrative access by leveraging a default privileged account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-02T15:00:00.000Z
CVE-2017-5601 
An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-27T22:01:00.000Z
CVE-2017-5602 
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for jappix 1.0.0 to 1.1.6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T20:00:00.000Z
CVE-2017-5603 
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Jitsi 2.5.5061 - 2.9.5544.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T20:00:00.000Z
CVE-2017-5604 
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for mcabber 1.0.0 - 1.0.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T20:00:00.000Z
CVE-2017-5605 
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Movim 0.8 - 0.10.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T20:00:00.000Z
CVE-2017-5606 
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Xabber (only if manually enabled: 1.0.30, 1.0.30 VIP, beta 1.0.3 - 1.0.74; Android).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T20:00:00.000Z