rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-9938 
A vulnerability was discovered in Siemens SIMATIC Logon (All versions before V1.6) that could allow specially crafted packets sent to the SIMATIC Logon Remote Access service on port 16389/tcp to cause a Denial-of-Service condition. The service restarts automatically.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: n/a
product: SIMATIC Logon All versions before V1.6
Published: 2017-08-08T00:00:00.000Z
CVE-2017-9939 
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with network access to the SiPass integrated server to bypass the authentication mechanism and perform administrative operations.
Problem types: cwe_id: CWE-287
description: CWE-287: Improper Authentication
Affected products: vendor: n/a
product: SiPass integrated All versions before V2.70
Published: 2017-08-08T00:00:00.000Z
CVE-2017-9940 
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a low-privileged user account to read or write files on the file system of the SiPass integrated server over the network.
Problem types: cwe_id: CWE-269
description: CWE-269: Improper Privilege Management
Affected products: vendor: n/a
product: SiPass integrated All versions before V2.70
Published: 2017-08-08T00:00:00.000Z
CVE-2017-9941 
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker in a Man-in-the-Middle position between the SiPass integrated server and SiPass integrated clients to read or modify the network communication.
Problem types: cwe_id: CWE-300
description: CWE-300: Channel Accessible by Non-Endpoint
Affected products: vendor: n/a
product: SiPass integrated All versions before V2.70
Published: 2017-08-08T00:00:00.000Z
CVE-2017-9942 
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass integrated client to potentially obtain credentials from the systems.
Problem types: cwe_id: CWE-257
description: CWE-257: Storing Passwords in a Recoverable Format
Affected products: vendor: n/a
product: SiPass integrated All versions before V2.70
Published: 2017-08-08T00:00:00.000Z
CVE-2017-9944 
A vulnerability has been identified in Siemens 7KT PAC1200 data manager (7KT1260) in all versions < V2.03. The integrated web server (port 80/tcp) of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network.
Problem types: cwe_id: CWE-288
description: CWE-288: Authentication Bypass Using an Alternate Path or Channel
Affected products: vendor: n/a
product: Siemens 7KT PAC1200 data manager (7KT1260) All versions < V2.03
Published: 2017-12-26T04:00:00.000Z
CVE-2017-9945 
In the Siemens 7KM PAC Switched Ethernet PROFINET expansion module (All versions < V2.1.3), a Denial-of-Service condition could be induced by a specially crafted PROFINET DCP packet sent as a local Ethernet (Layer 2) broadcast. The affected component requires a manual restart via the main device to recover.
Problem types: description: Denial-of-Service
Affected products: vendor: n/a
product: Siemens 7KM PAC Switched Ethernet PROFINET expansion module: All versions < V2.1.3
Published: 2017-08-30T19:00:00.000Z
CVE-2017-9946 
A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. An attacker with network access to the integrated web server (80/tcp and 443/tcp) could bypass the authentication and download sensitive information from the device.
Problem types: cwe_id: CWE-287
description: CWE-287: Improper Authentication
Affected products: vendor: n/a
product: APOGEE PXC and TALON TC BACnet Automation Controllers All versions <V3.5
Published: 2017-10-23T00:00:00.000Z
CVE-2017-9947 
A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. A directory traversal vulnerability could allow a remote attacker with network access to the integrated web server (80/tcp and 443/tcp) to obtain information on the structure of the file system of the affected devices.
Problem types: cwe_id: CWE-538
description: CWE-538: File and Directory Information Exposure
Affected products: vendor: n/a
product: APOGEE PXC and TALON TC BACnet Automation Controllers All versions <V3.5
Published: 2017-10-23T00:00:00.000Z
CVE-2017-9948 
A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving MSFTEDIT.DLL mishandling of remote RDP clipboard content within the message box.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-26T14:00:00.000Z
CVE-2017-9949 
The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (stack-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GNU GRUB 2.02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-26T20:00:00.000Z
CVE-2017-9951 
The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service (segmentation fault) via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8705.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T06:00:00.000Z
CVE-2017-9953 
There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-26T23:00:00.000Z
CVE-2017-9954 
The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted tekhex file, as demonstrated by mishandling within the nm program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-26T23:00:00.000Z
CVE-2017-9955 
The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file in which a certain size field is larger than a corresponding data field, as demonstrated by mishandling within the objdump program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-26T23:00:00.000Z
CVE-2017-9956 
An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system contains a hard-coded valid session. An attacker can use that session ID as part of the HTTP cookie of a web request, resulting in authentication bypass
Problem types: description: Improper Authentication
Affected products: vendor: Schneider Electric SE
product: U.Motion
Published: 2017-09-25T19:00:00.000Z
CVE-2017-9957 
A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account with a hardcoded password. An attacker can use this information to log into the system with high-privilege credentials.
Problem types: description: Use of Hardcoded Password
Affected products: vendor: Schneider Electric SE
product: U.Motion
Published: 2017-09-25T19:00:00.000Z
CVE-2017-9958 
An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an improper handling of the system configuration can allow an attacker to execute arbitrary code under the context of root.
Problem types: description: Improper Access Control
Affected products: vendor: Schneider Electric SE
product: U.Motion
Published: 2017-09-25T19:00:00.000Z
CVE-2017-9959 
A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system accepts reboot in session from unauthenticated users, supporting a denial of service condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-25T19:00:00.000Z
CVE-2017-9960 
An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system response to error provides more information than should be available to an unauthenticated user.
Problem types: description: Information Exposure through an error message
Affected products: vendor: Schneider Electric SE
product: U.Motion
Published: 2017-09-25T19:00:00.000Z
CVE-2017-9961 
A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code installation requires an access to the computer. By placing a specific DLL/OCX file, an attacker is able to force the process to load arbitrary DLL and execute arbitrary code in the context of the process.
Problem types: description: Arbitrary Code Execution
Affected products: vendor: Schneider Electric SE
product: ProFace GP-Pro EX
Published: 2017-09-25T19:00:00.000Z
CVE-2017-9962 
Schneider Electric's ClearSCADA versions released prior to August 2017 are susceptible to a memory allocation vulnerability, whereby malformed requests can be sent to ClearSCADA client applications to cause unexpected behavior. Client applications affected include ViewX and the Server Icon.
Problem types: description: Memory Allocation
Affected products: vendor: Schneider Electric SE
product: ClearSCADA
Published: 2017-09-25T19:00:00.000Z
CVE-2017-9963 
A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 for multiple state-changing requests. This type of attack requires some level of social engineering in order to get a legitimate user to click on or access a malicious link/site containing the CSRF attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-12T23:00:00.000Z
CVE-2017-9964 
A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized person can execute a directory traversal attack resulting in authentication bypass or session hijack.
Problem types: description: Security bypass
Affected products: vendor: Schneider Electric SE
product: Pelco VideoXpert Enterprise
Published: 2018-01-02T03:00:00.000Z
CVE-2017-9965 
An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory traversal attack, an unauthorized person can view web server files.
Problem types: description: Exposure of sensitive information
Affected products: vendor: Schneider Electric SE
product: Pelco VideoXpert Enterprise
Published: 2018-01-02T03:00:00.000Z
CVE-2017-9966 
A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges and the inserted code would execute at an elevated privilege level.
Problem types: description: Privilege Escalation
Affected products: vendor: Schneider Electric SE
product: Pelco VideoXpert Enterprise
Published: 2018-01-02T03:00:00.000Z
CVE-2017-9967 
A security misconfiguration vulnerability exists in Schneider Electric's IGSS SCADA Software versions 12 and prior. Security configuration settings such as Address Space Layout Randomization (ASLR) and Data Execution prevention (DEP) were not properly configured resulting in weak security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-12T23:00:00.000Z
CVE-2017-9968 
A security misconfiguration vulnerability exists in Schneider Electric's IGSS Mobile application versions 3.01 and prior in which a lack of certificate pinning during the TLS/SSL connection establishing process can result in a man-in-the-middle attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-12T23:00:00.000Z
CVE-2017-9969 
An information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application version 3.01 and prior. Passwords are stored in clear text in the configuration which can result in exposure of sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-12T23:00:00.000Z
CVE-2017-9970 
A remote code execution vulnerability exists in Schneider Electric's StruxureOn Gateway versions 1.1.3 and prior. Uploading a zip which contains carefully crafted metadata allows for the file to be uploaded to any directory on the host machine information which could lead to remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-12T23:00:00.000Z
CVE-2017-9977 
AVG AntiVirus for MacOS with scan engine before 4668 might allow remote attackers to bypass malware detection by leveraging failure to scan inside disk image (aka DMG) files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-12T16:00:00.000Z
CVE-2017-9978 
On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, a flaw was found with the error message sent as a response for users that don't exist on the system. An attacker could leverage this information to fine-tune and enumerate valid accounts on the system by searching for common usernames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2017-9979 
On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, if the REST call invoked does not exist, an error will be triggered containing the invalid method previously invoked. The response sent to the user isn't sanitized in this case. An attacker can leverage this issue by including arbitrary HTML or JavaScript code as a parameter, aka XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2017-9980 
In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" (aka tag_ipPing) feature within the web interface allows performing command injection, via the "pip" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-21T06:00:00.000Z
CVE-2017-9982 
TeamSpeak Client 3.0.19 allows remote attackers to cause a denial of service (application crash) via the &#5610; Unicode character followed by the &#3903; Unicode character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-27T16:00:00.000Z
CVE-2017-9984 
The snd_msnd_interrupt function in sound/isa/msnd/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "double fetch" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-28T06:00:00.000Z
CVE-2017-9985 
The snd_msndmidi_input_read function in sound/isa/msnd/msnd_midi.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "double fetch" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-28T06:00:00.000Z
CVE-2017-9986 
The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "double fetch" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-28T06:00:00.000Z
CVE-2017-9987 
There is a heap-based buffer overflow in the function hpel_motion in mpegvideo_motion.c in libav 12.1. A crafted input can lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-28T06:00:00.000Z
CVE-2017-9988 
The readEncUInt30 function in util/read.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack against parser.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-28T06:00:00.000Z
CVE-2017-9989 
util/outputtxt.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-28T06:00:00.000Z
CVE-2017-9990 
Stack-based buffer overflow in the color_string_to_rgba function in libavcodec/xpmdec.c in FFmpeg 3.3 before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-28T06:00:00.000Z
CVE-2017-9991 
Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-28T06:00:00.000Z
CVE-2017-9992 
Heap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-28T06:00:00.000Z
CVE-2017-9993 
FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streaming filename extensions and demuxer names, which allows attackers to read arbitrary files via crafted playlist data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-28T06:00:00.000Z
CVE-2017-9994 
libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pix_fmt is set, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to the vp8_decode_mb_row_no_filter and pred8x8_128_dc_8_c functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-28T06:00:00.000Z
CVE-2017-9995 
libavcodec/scpr.c in FFmpeg 3.3 before 3.3.1 does not properly validate height and width data, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-28T06:00:00.000Z
CVE-2017-9996 
The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not exclude the CHUNKY format, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-28T06:00:00.000Z
CVE-2017-9998 
The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-28T11:14:00.000Z
CVE-2018-0001 Junos: Unauthenticated Remote Code Execution through J-Web interface
A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D67; 12.3 versions prior to 12.3R12-S5; 12.3X48 versions prior to 12.3X48-D35; 14.1 versions prior to 14.1R8-S5, 14.1R9; 14.1X53 versions prior to 14.1X53-D44, 14.1X53-D50; 14.2 versions prior to 14.2R7-S7, 14.2R8; 15.1 versions prior to 15.1R3; 15.1X49 versions prior to 15.1X49-D30; 15.1X53 versions prior to 15.1X53-D70.
Problem types: description: Remote code execution
Affected products: vendor: Juniper Networks
product: Junos OS
Credits: lang: en
value: Cure53 for responsibly reporting this vulnerability.
Published: 2018-01-10T22:00:00.000Z
CVE-2018-0002 MX series, SRX series: Junos OS:  Denial of service vulnerability in Flowd on devices with ALG enabled.
On SRX Series and MX Series devices with a Service PIC with any ALG enabled, a crafted TCP/IP response packet processed through the device results in memory corruption leading to a flowd daemon crash. Sustained crafted response packets lead to repeated crashes of the flowd daemon which results in an extended Denial of Service condition. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D60 on SRX series; 12.3X48 versions prior to 12.3X48-D35 on SRX series; 14.1 versions prior to 14.1R9 on MX series; 14.2 versions prior to 14.2R8 on MX series; 15.1X49 versions prior to 15.1X49-D60 on SRX series; 15.1 versions prior to 15.1R5-S8, 15.1F6-S9, 15.1R6-S4, 15.1R7 on MX series; 16.1 versions prior to 16.1R6 on MX series; 16.2 versions prior to 16.2R3 on MX series; 17.1 versions prior to 17.1R2-S4, 17.1R3 on MX series. No other Juniper Networks products or platforms are affected by this issue.
Problem types: description: denial of service
Affected products: vendor: Juniper Networks
product: Junos OS
vendor: Juniper Networks
product: Junos OS
Published: 2018-01-10T22:00:00.000Z