rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-7606 
coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7607 
The handle_gnu_hash function in readelf.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7608 
The ebl_object_note_type_name function in eblobjnotetypename.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7609 
elf_compress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7610 
The check_group function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7611 
The check_symtab_shndx function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7612 
The check_sysv_hash function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7613 
elflint.c in elfutils 0.168 does not validate the number of sections and the number of segments, which allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7614 
elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an "int main() {return 0;}" program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7615 
MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-16T14:45:00.000Z
CVE-2017-7616 
Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-10T14:00:00.000Z
CVE-2017-7617 
Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asterisk 13.13 before 13.13-cert3 because of a buffer overflow in a CDR user field, related to X-ClientCode in chan_sip, the CDR dialplan function, and the AMI Monitor action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-10T14:00:00.000Z
CVE-2017-7618 
crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling its own callback, and infinite recursion) by triggering EBUSY on a full queue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-10T14:00:00.000Z
CVE-2017-7619 
In ImageMagick 7.0.4-9, an infinite loop can occur because of a floating-point rounding error in some of the color algorithms. This affects ModulateHSL, ModulateHCL, ModulateHCLp, ModulateHSB, ModulateHSI, ModulateHSV, ModulateHWB, ModulateLCHab, and ModulateLCHuv.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-10T14:00:00.000Z
CVE-2017-7620 
MantisBT before 1.3.11, 2.x before 2.3.3, and 2.4.x before 2.4.1 omits a backslash check in string_api.php and consequently has conflicting interpretations of an initial \/ substring as introducing either a local pathname or a remote hostname, which leads to (1) arbitrary Permalink Injection via CSRF attacks on a permalink_page.php?url= URI and (2) an open redirect via a login_page.php?return= URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-21T14:00:00.000Z
CVE-2017-7621 
Cross Site Scripting Vulnerability in core-eMLi in AuroMeera Technometrix Pvt. Ltd. eMLi V1.0 allows an Attacker to send malicious code, generally in the form of a browser-side script, to a different end user via the page parameter to code/student_portal/home.php. The affected versions are eMLi School Management 1.0, eMLi College Campus Management 1.0, and eMLi University Management 1.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-11T10:00:00.000Z
CVE-2017-7622 
dde-daemon, the daemon process of DDE (Deepin Desktop Environment) 15.0 through 15.3, runs with root privileges and hardly does anything to identify the user who calls the function through D-Bus. Anybody can change the grub config, even to append some arguments to make a backdoor or privilege escalation, by calling DoWriteGrubSettings() provided by dde-daemon.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-10T17:00:00.000Z
CVE-2017-7623 
The iwmiffr_convert_row32 function in imagew-miff.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-10T17:00:00.000Z
CVE-2017-7624 
The iw_read_bmp_file function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to consume an amount of available memory via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-10T17:00:00.000Z
CVE-2017-7625 
In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/app_theme/libs/save_file.php" and then execute code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-10T17:00:00.000Z
CVE-2017-7626 
The "Smart related articles" extension 1.1 for Joomla! has XSS in dialog.php (n_art,type in GET Method).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-13T03:20:00.000Z
CVE-2017-7627 
The "Smart related articles" extension 1.1 for Joomla! does not prevent direct requests to dialog.php (there is a missing _JEXEC check).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-13T03:20:00.000Z
CVE-2017-7628 
The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php (attacker must use search_cats variable in POST method to exploit this vulnerability).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-13T03:20:00.000Z
CVE-2017-7629 
QNAP QTS before 4.2.6 build 20170517 has a flaw in the change password function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-15T20:00:00.000Z
CVE-2017-7630 
QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to obtain potentially sensitive information (firmware version and running services) via a request to sysinfoReq.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T21:00:00.000Z
CVE-2017-7631 
Cross-site scripting (XSS) vulnerability in the share link function of File Station of QNAP 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T21:00:00.000Z
CVE-2017-7632 
Cross-site scripting (XSS) vulnerability in File Station of QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T21:00:00.000Z
CVE-2017-7633 
QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices. If exploited, this may allow attackers to further compromise the device.
Problem types: description: Missing Encryption of Sensitive Data
Affected products: vendor: QNAP
product: Qfinder Pro
Published: 2018-03-05T17:00:00.000Z
CVE-2017-7634 
Cross-site scripting (XSS) vulnerability in QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to inject arbitrary web script or HTML. The injected code will only be triggered by a crafted link, not the normal page.
Problem types: description: Cross-site scripting
Affected products: vendor: QNAP
product: QNAP Media Streaming Add-On
Published: 2018-03-08T14:00:00.000Z
CVE-2017-7635 
QNAP NAS application Proxy Server through version 1.2.0 does not utilize CSRF protections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T21:00:00.000Z
CVE-2017-7636 
Cross-site scripting (XSS) vulnerability in QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to inject arbitrary web script or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T21:00:00.000Z
CVE-2017-7637 
QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to run arbitrary OS commands against the system with root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T21:00:00.000Z
CVE-2017-7638 
QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not authenticate requests properly. Successful exploitation could lead to change of the Media Streaming settings, and leakage of sensitive information of the QNAP NAS.
Problem types: description: Incorrect Access Control
Affected products: vendor: QNAP
product: QNAP Media Streaming Add-On
Published: 2018-03-08T14:00:00.000Z
CVE-2017-7639 
QNAP NAS application Proxy Server through version 1.2.0 does not authenticate requests properly. Successful exploitation can lead to change of the settings of Proxy Server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T21:00:00.000Z
CVE-2017-7640 
QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system with root privileges.
Problem types: description: OS Command Injection
Affected products: vendor: QNAP
product: QNAP Media Streaming Add-On
Published: 2018-03-08T14:00:00.000Z
CVE-2017-7641 
QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections.
Problem types: description: Cross-site request forgery
Affected products: vendor: QNAP
product: QNAP Media Streaming Add-On
Published: 2018-03-08T14:00:00.000Z
CVE-2017-7642 
The sudo helper in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.21 allows local users to gain root privileges by leveraging failure to verify the path to the encoded ruby script or scrub the PATH variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T19:00:00.000Z
CVE-2017-7643 
Proxifier for Mac before 2.19 allows local users to gain privileges via the first parameter to the KLoader setuid program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-14T14:00:00.000Z
CVE-2017-7644 
The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, and 7.1.x before 7.1.9 allows remote authenticated users to obtain sensitive information by leveraging incorrect permission validation, aka PAN-SA-2017-0013 and PAN-70541.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-29T00:00:00.000Z
CVE-2017-7645 
The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-18T14:00:00.000Z
CVE-2017-7646 
SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to browse the server's filesystem and read the contents of arbitrary files contained within.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-10T19:00:00.000Z
CVE-2017-7647 
SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-10T19:00:00.000Z
CVE-2017-7648 
Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-10T19:00:00.000Z
CVE-2017-7649 
The network enabled distribution of Kura before 2.1.0 takes control over the device's firewall setup but does not allow IPv6 firewall rules to be configured. Still the Equinox console port 5002 is left open, allowing to log into Kura without any user credentials over unencrypted telnet and executing commands using the Equinox "exec" command. As the process is running as "root" full control over the device can be acquired. IPv6 is also left in auto-configuration mode, accepting router advertisements automatically and assigns a MAC address based IPv6 address.
Problem types: description: privileged remote code execution
Affected products: vendor: Eclipse Foundation
product: Eclipse Kura Installer
Published: 2017-09-11T16:00:00.000Z
CVE-2017-7650 
In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username/client id to '#' or '+'. This allows locally or remotely connected clients to access MQTT topics that they do have the rights to. The same issue may be present in third party authentication/access control plugins for Mosquitto.
Problem types: description: loss of confidentiality
Affected products: vendor: Eclipse Foundation
product: Mosquitto
Published: 2017-09-11T16:00:00.000Z
CVE-2017-7651 
In Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM memory with a lot of connections with large payload. This can be done without authentications if occur in connection phase of MQTT protocol.
Problem types: cwe_id: CWE-789
description: CWE-789: Uncontrolled Memory Allocation
Affected products: vendor: The Eclipse Foundation
product: Eclipse Mosquitto
Published: 2018-04-24T14:00:00.000Z
CVE-2017-7652 
In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from disk. If there are lots of clients connected so that there are no more file descriptors/sockets available (default limit typically 1024 file descriptors on Linux), then opening the configuration file will fail.
Problem types: cwe_id: CWE-789
description: CWE-789: Uncontrolled Memory Allocation
Affected products: vendor: The Eclipse Foundation
product: Eclipse Mosquitto
Published: 2018-04-25T13:00:00.000Z
CVE-2017-7653 
The Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF-8. A malicious client could cause other clients that do reject invalid UTF-8 strings to disconnect themselves from the broker by sending a topic string which is not valid UTF-8, and so cause a denial of service for the clients.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: The Eclipse Foundation
product: Eclipse Mosquitto
Published: 2018-06-05T20:00:00.000Z
CVE-2017-7654 
In Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the Mosquitto Broker. Unauthenticated clients can send crafted CONNECT packets which could cause a denial of service in the Mosquitto Broker.
Problem types: cwe_id: CWE-401
description: CWE-401: Improper Release of Memory Before Removing Last Reference
Affected products: vendor: The Eclipse Foundation
product: Eclipse Mosquitto
Published: 2018-06-05T20:00:00.000Z
CVE-2017-7655 
In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in the Mosquitto library which could lead to crashes for those applications using the library.
Problem types: cwe_id: CWE-476
description: CWE-476: NULL Pointer Dereference
Affected products: vendor: The Eclipse Foundation
product: Eclipse Mosquitto
Published: 2019-03-27T19:20:36.000Z
CVE-2017-7656 
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is handled poorly. An HTTP/1 style request line (i.e. method space URI space version) that declares a version of HTTP/0.9 was accepted and treated as a 0.9 request. If deployed behind an intermediary that also accepted and passed through the 0.9 version (but did not act on it), then the response sent could be interpreted by the intermediary as HTTP/1 headers. This could be used to poison the cache if the server allowed the origin client to generate arbitrary content in the response.
Problem types: cwe_id: CWE-444
description: CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
Affected products: vendor: The Eclipse Foundation
product: Eclipse Jetty
Published: 2018-06-26T15:00:00.000Z
CVE-2017-7657 
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request.
Problem types: cwe_id: CWE-444
description: CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
Affected products: vendor: The Eclipse Foundation
product: Eclipse Jetty
Published: 2018-06-26T16:00:00.000Z
CVE-2017-7658 
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the content-length was ignored (as per RFC 2616). If an intermediary decided on the shorter length, but still passed on the longer body, then body content could be interpreted by Jetty as a pipelined request. If the intermediary was imposing authorization, the fake pipelined request would bypass that authorization.
Problem types: cwe_id: CWE-444
description: CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
Affected products: vendor: The Eclipse Foundation
product: Eclipse Jetty
Published: 2018-06-26T17:00:00.000Z
CVE-2017-7659 
A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process.
Problem types: description: n/a
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Published: 2017-07-26T21:00:00.000Z
CVE-2017-7660 
Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to create a specially crafted node name that does not exist as part of the cluster and point it to a malicious node. This can trick the nodes in cluster to believe that the malicious node is a member of the cluster. So, if Solr users have enabled BasicAuth authentication mechanism using the BasicAuthPlugin or if the user has implemented a custom Authentication plugin, which does not implement either "HttpClientInterceptorPlugin" or "HttpClientBuilderPlugin", his/her servers are vulnerable to this attack. Users who only use SSL without basic authentication or those who use Kerberos are not affected.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Solr
Published: 2017-07-07T19:00:00.000Z
CVE-2017-7661 
Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. A CSRF (Cross Style Request Forgery) style vulnerability has been found in the Spring 2, Spring 3, Jetty 8 and Jetty 9 plugins in Apache CXF Fediz prior to 1.4.0, 1.3.2 and 1.2.4.
Problem types: description: Cross Site Request Forgery
Affected products: vendor: Apache Software Foundation
product: Apache CXF Fediz
Published: 2017-05-16T17:00:00.000Z
CVE-2017-7662 
Apache CXF Fediz ships with an OpenId Connect (OIDC) service which has a Client Registration Service, which is a simple web application that allows clients to be created, deleted, etc. A CSRF (Cross Style Request Forgery) style vulnerability has been found in this web application in Apache CXF Fediz prior to 1.4.0 and 1.3.2, meaning that a malicious web application could create new clients, or reset secrets, etc, after the admin user has logged on to the client registration service and the session is still active.
Problem types: description: Cross Site Request Forgery
Affected products: vendor: Apache Software Foundation
product: Apache CXF Fediz
Published: 2017-05-16T17:00:00.000Z
CVE-2017-7663 
Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0.
Problem types: description: XSS
Affected products: vendor: Apache Software Foundation
product: Apache OpenMeetings
Published: 2017-07-14T15:00:00.000Z
CVE-2017-7664 
Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0.
Problem types: description: XML Validation
Affected products: vendor: Apache Software Foundation
product: Apache OpenMeetings
Published: 2017-07-14T15:00:00.000Z
CVE-2017-7665 
In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache NiFi
Published: 2017-06-12T16:00:00.000Z