rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-16641 
lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrdtool parameter in an action=save request to settings.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-07T20:00:00.000Z
CVE-2017-16642 
In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-07T21:00:00.000Z
CVE-2017-16643 
The parse_hid_report_descriptor function in drivers/input/tablet/gtco.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-07T23:00:00.000Z
CVE-2017-16644 
The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (improper error handling and system crash) or possibly have unspecified other impact via a crafted USB device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-07T23:00:00.000Z
CVE-2017-16645 
The ims_pcu_get_cdc_union_desc function in drivers/input/misc/ims-pcu.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (ims_pcu_parse_cdc_data out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-07T23:00:00.000Z
CVE-2017-16646 
drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (BUG and system crash) or possibly have unspecified other impact via a crafted USB device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-07T23:00:00.000Z
CVE-2017-16647 
drivers/net/usb/asix_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-07T23:00:00.000Z
CVE-2017-16648 
The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device. NOTE: the function was later renamed __dvb_frontend_free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-07T23:00:00.000Z
CVE-2017-16649 
The usbnet_generic_cdc_bind function in drivers/net/usb/cdc_ether.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide-by-zero error and system crash) or possibly have unspecified other impact via a crafted USB device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-07T23:00:00.000Z
CVE-2017-16650 
The qmi_wwan_bind function in drivers/net/usb/qmi_wwan.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide-by-zero error and system crash) or possibly have unspecified other impact via a crafted USB device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-07T23:00:00.000Z
CVE-2017-16651 
Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including configuration files, as exploited in the wild in November 2017. The attacker must be able to authenticate at the target system with a valid username/password as the attack requires an active session. The issue is related to file-based attachment plugins and _task=settings&_action=upload-display&_from=timezone requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-09T14:00:00.000Z
CVE-2017-16652 
An issue was discovered in Symfony 2.7.x before 2.7.38, 2.8.x before 2.8.31, 3.2.x before 3.2.14, and 3.3.x before 3.3.13. DefaultAuthenticationSuccessHandler or DefaultAuthenticationFailureHandler takes the content of the _target_path parameter and generates a redirect response, but no check is performed on the path, which could be an absolute URL to an external domain. This Open redirect vulnerability can be exploited for example to mount effective phishing attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-13T16:00:00.000Z
CVE-2017-16653 
An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. The current implementation of CSRF protection in Symfony (Version >=2) does not use different tokens for HTTP and HTTPS; therefore the token is subject to MITM attacks on HTTP and can then be used in an HTTPS context to do CSRF attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-06T21:00:00.000Z
CVE-2017-16654 
An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. The Intl component includes various bundle readers that are used to read resource bundles from the local filesystem. The read() methods of these classes use a path and a locale to determine the language bundle to retrieve. The locale argument value is commonly retrieved from untrusted user input (like a URL parameter). An attacker can use this argument to navigate to arbitrary directories via the dot-dot-slash attack, aka Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-06T21:00:00.000Z
CVE-2017-16659 
The Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges by leveraging access to the assp user account to install a Trojan horse /usr/share/assp/assp.pl script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-08T05:00:00.000Z
CVE-2017-16660 
Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a remote_agent.php request containing PHP code in a Client-ip header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-08T05:00:00.000Z
CVE-2017-16661 
Cacti 1.1.27 allows remote authenticated administrators to read arbitrary files by placing the Log Path into a private directory, and then making a clog.php?filename= request, as demonstrated by filename=passwd (with a Log Path under /etc) to read /etc/passwd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-08T05:00:00.000Z
CVE-2017-16663 
In sam2p 0.49.4, there are integer overflows (with resultant heap-based buffer overflows) in input-bmp.ci in the function ReadImage, because "width * height" multiplications occur unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-08T06:00:00.000Z
CVE-2017-16664 
Code injection exists in Kernel/System/Spelling.pm in Open Ticket Request System (OTRS) 5 before 5.0.24, 4 before 4.0.26, and 3.3 before 3.3.20. In the agent interface, an authenticated remote attacker can execute shell commands as the webserver user via URL manipulation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-21T14:00:00.000Z
CVE-2017-16665 
RemObjects Remoting SDK 9 1.0.0.0 for Delphi is vulnerable to a reflected Cross Site Scripting (XSS) attack via the service parameter to the /soap URI, triggering an invalid attempt to generate WSDL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-08T17:00:00.000Z
CVE-2017-16666 
Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the name of an uploaded PCAP file.  NOTE: this issue can be exploited without authentication by leveraging the user registration feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-05T16:00:00.000Z
CVE-2017-16667 
backintime (aka Back in Time) before 1.1.24 did improper escaping/quoting of file paths used as arguments to the 'notify-send' command, leading to some parts of file paths being executed as shell commands within an os.system call in qt4/plugins/notifyplugin.py. This could allow an attacker to craft an unreadable file with a specific name to run arbitrary shell commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-08T18:00:00.000Z
CVE-2017-16669 
coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to the AcquireCacheNexus function in magick/pixel_cache.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-09T00:00:00.000Z
CVE-2017-16670 
The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-19T19:00:00.000Z
CVE-2017-16671 
A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. No size checking is done when setting the user field for Party B on a CDR. Thus, it is possible for someone to use an arbitrarily large string and write past the end of the user field storage buffer. NOTE: this is different from CVE-2017-7617, which was only about the Party A buffer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-09T00:00:00.000Z
CVE-2017-16672 
An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. A memory leak occurs when an Asterisk pjsip session object is created and that call gets rejected before the session itself is fully established. When this happens the session object never gets destroyed. Eventually Asterisk can run out of memory and crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-09T00:00:00.000Z
CVE-2017-16673 
Datto Backup Agent 1.0.6.0 and earlier does not authenticate incoming connections. This allows an attacker to impersonate a Datto Backup Appliance to "pair" with the agent and issue requests to this agent, if the attacker can reach the agent on TCP port 25566 or 25568, and send unspecified "specific information" by which the agent identifies a network device that is "appearing to be a valid Datto."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-09T04:00:00.000Z
CVE-2017-16674 
Datto Windows Agent allows unauthenticated remote command execution via a modified command in conjunction with CVE-2017-16673 exploitation, aka an attack with a malformed primary whitelisted command and a secondary non-whitelisted command. This affects Datto Windows Agent (DWA) 1.0.5.0 and earlier. In other words, an attacker could combine this "primary/secondary" attack with the CVE-2017-16673 "rogue pairing" attack to achieve unauthenticated access to all agent machines running these older DWA versions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-09T04:00:00.000Z
CVE-2017-16678 
Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver Knowledge Management Configuration Service, EPBC and EPBC2 from 7.00 to 7.02; KMC-BC 7.30, 7.31, 7.40 and 7.50, that allows an attacker to manipulate the vulnerable application to send crafted requests on behalf of the application.
Problem types: description: Server Side Request Forgery (SSRF)
Affected products: vendor: SAP
product: SAP NetWeaver Knowledge Management Configuration Service
Published: 2017-12-12T14:00:00.000Z
CVE-2017-16679 
URL redirection vulnerability in SAP's Startup Service, SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.52, that allows an attacker to redirect users to a malicious site.
Problem types: description: URL Redirection
Affected products: vendor: SAP
product: SAP Startup Service
Published: 2017-12-12T14:00:00.000Z
CVE-2017-16680 
Two potential audit log injections in SAP HANA extended application services 1.0, advanced model: 1) Certain HTTP/REST endpoints of controller service are missing user input validation which could allow unprivileged attackers to forge audit log lines. Hence the interpretation of audit log files could be hindered or misdirected. 2) User Account and Authentication writes audit logs into syslog and additionally writes the same audit entries into a log file. Entries in the log file miss escaping. Hence the interpretation of audit log files could be hindered or misdirected, while the entries in syslog are correct.
Problem types: description: Audit Log Injections
Affected products: vendor: SAP
product: SAP HANA extended application services
Published: 2017-12-12T14:00:00.000Z
CVE-2017-16681 
Cross-Site Scripting (XSS) vulnerability in SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, 4.30, as user controlled inputs are not sufficiently encoded.
Problem types: description: Cross-Site Scripting (XSS)
Affected products: vendor: SAP
product: SAP Business Intelligence Promotion Management Application.
Published: 2017-12-12T14:00:00.000Z
CVE-2017-16682 
SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator credentials to inject code that can be executed by the application and thereby control the behavior of the application.
Problem types: description: Code Injection
Affected products: vendor: SAP
product: SAP NetWeaver Internet Transaction Server (ITS)
Published: 2017-12-12T14:00:00.000Z
CVE-2017-16683 
Denial of Service (DOS) in SAP Business Objects Platform, Enterprise 4.10 and 4.20, that could allow an attacker to prevent legitimate users from accessing a service.
Problem types: description: Denial of Service (DOS)
Affected products: vendor: SAP
product: SAP Business Objects Platform
Published: 2017-12-12T14:00:00.000Z
CVE-2017-16684 
SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, and 4.30, does not perform authentication checks for functionalities that require user identity.
Problem types: description: Missing Authentication Check
Affected products: vendor: SAP
product: SAP Business Intelligence Promotion Management Application
Published: 2017-12-12T14:00:00.000Z
CVE-2017-16685 
Cross-Site scripting (XSS) in SAP Business Warehouse Universal Data Integration, from 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, due to insufficient encoding of user controlled inputs.
Problem types: description: Cross-Site scripting (XSS).
Affected products: vendor: SAP
product: SAP Business Warehouse Universal Data Integration
Published: 2017-12-12T14:00:00.000Z
CVE-2017-16687 
The user self-service tools of SAP HANA extended application services, classic user self-service, a part of SAP HANA Database versions 1.00 and 2.00, can be misused to enumerate valid and invalid user accounts. An unauthenticated user could use the error messages to determine if a given username is valid.
Problem types: description: Information Disclosure
Affected products: vendor: SAP
product: SAP HANA extended application services
Published: 2017-12-12T14:00:00.000Z
CVE-2017-16689 
A Trusted RFC connection in SAP KERNEL 32NUC, SAP KERNEL 32Unicode, SAP KERNEL 64NUC, SAP KERNEL 64Unicode 7.21, 7.21EXT, 7.22, 7.22EXT; SAP KERNEL from 7.21 to 7.22, 7.45, 7.49, can be established to a different client or a different user on the same system, although no explicit Trusted/Trusting Relation to the same system has been defined.
Problem types: description: Additional authentication check in Trusted RFC on same system
Affected products: vendor: SAP
product: Trusted RFC connection
Published: 2017-12-12T14:00:00.000Z
CVE-2017-16690 
A malicious DLL preload attack possible on NwSapSetup and Installation self-extracting program for SAP Plant Connectivity 2.3 and 15.0. It is possible that SAPSetup / NwSapSetup.exe loads system DLLs like DWMAPI.dll (located in your Syswow64 / System32 folder) from the folder the executable is in and not from the system location. The desired behavior is that system dlls are only loaded from the system folders. If a dll with the same name as the system dll is located in the same folder as the executable, this dll is loaded and code is executed.
Problem types: description: DLL preload attack
Affected products: vendor: SAP
product: SAP Plant Connectivity
Published: 2017-12-12T14:00:00.000Z
CVE-2017-16691 
SAP Note Assistant tool (SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31,7.40, from 7.50 to 7.52) supports upload of digitally signed note file of type 'SAR'. The digital signature verification is done together with the extraction of note file contained in the SAR archive. It is possible to append a tampered file to the SAR archive using SAPCAR tool and during the extraction, digital signature verification fails but the tampered file is extracted.
Problem types: description: Digital signature verification along with note file extraction
Affected products: vendor: SAP
product: SAP Note Assistant
Published: 2017-12-12T14:00:00.000Z
CVE-2017-16709 
Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-11T16:00:00.000Z
CVE-2017-16710 
Cross-site scripting (XSS) vulnerability in Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-11T16:00:00.000Z
CVE-2017-16711 
The swf_DefineLosslessBitsTagToImage function in lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failure, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) because of extractDefinitions in lib/readers/swf.c and fill_line_bitmap in lib/devices/render.c, as demonstrated by swfrender.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-09T17:00:00.000Z
CVE-2017-16714 
In Ice Qube Thermal Management Center versions prior to version 4.13, passwords are stored in plaintext in a file that is accessible without authentication.
Problem types: cwe_id: CWE-256
description: UNPROTECTED STORAGE OF CREDENTIALS CWE-256
Affected products: vendor: Ice Qube
product: Thermal Management Center
Published: 2018-09-06T19:00:00.000Z
CVE-2017-16715 
An Information Exposure issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exploit a flaw in the handling of Ethernet frame padding that may allow for information exposure.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: n/a
product: Moxa NPort 5110, 5130, and 5150
Published: 2017-11-16T21:00:00.000Z
CVE-2017-16716 
A SQL Injection issue was discovered in WebAccess versions prior to 8.3. WebAccess does not properly sanitize its inputs for SQL commands.
Problem types: cwe_id: CWE-89
description: CWE-89
Affected products: vendor: n/a
product: Advantech WebAccess
Published: 2018-01-05T08:00:00.000Z
CVE-2017-16717 
A Heap-based Buffer Overflow issue was discovered in WECON LeviStudio HMI. The heap-based buffer overflow vulnerability has been identified, which may allow remote code execution.
Problem types: cwe_id: CWE-122
description: CWE-122
Affected products: vendor: n/a
product: WECON Technology Co., Ltd. LeviStudio HMI
Published: 2017-12-20T19:00:00.000Z
CVE-2017-16718 
Beckhoff TwinCAT 3 supports communication over ADS. ADS is a protocol for industrial automation in protected environments. This protocol uses user configured routes, that can be edited remotely via ADS. This special command supports encrypted authentication with username/password. The encryption uses a fixed key, that could be extracted by an attacker. Precondition of the exploitation of this weakness is network access at the moment a route is added.
Problem types: cwe_id: CWE-522
description: Insufficiently Protected Credentials CWE-522
Affected products: vendor: ICS-CERT
product: Beckhoff TwinCAT
Published: 2018-06-27T19:00:00.000Z
CVE-2017-16719 
An Injection issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to inject packets that could potentially disrupt the availability of the device.
Problem types: cwe_id: CWE-74
description: CWE-74
Affected products: vendor: n/a
product: Moxa NPort 5110, 5130, and 5150
Published: 2017-11-16T21:00:00.000Z
CVE-2017-16720 
A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within the directory structure of the target device.
Problem types: cwe_id: CWE-22
description: CWE-22
Affected products: vendor: n/a
product: Advantech WebAccess
Published: 2018-01-05T08:00:00.000Z
CVE-2017-16721 
A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated attacker to inject arbitrary code.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: n/a
product: Geovap Reliance SCADA
Published: 2017-12-04T15:00:00.000Z
CVE-2017-16723 
A Cross-site Scripting issue was discovered in PHOENIX CONTACT FL COMSERVER BASIC 232/422/485, FL COMSERVER UNI 232/422/485, FL COMSERVER BAS 232/422/485-T, FL COMSERVER UNI 232/422/485-T, FL COM SERVER RS232, FL COM SERVER RS485, and PSI-MODEM/ETH (running firmware versions prior to 1.99, 2.20, or 2.40). The cross-site scripting vulnerability has been identified, which may allow remote code execution.
Problem types: description: XSS
Affected products: vendor: n/a
product: PHOENIX CONTACT FL COMSERVER, FL COM SERVER, and PSI-MODEM/ETH
Published: 2017-12-11T16:00:00.000Z
CVE-2017-16724 
A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple instances of a vulnerability that allows too much data to be written to a location on the stack.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: n/a
product: Advantech WebAccess
Published: 2018-01-05T08:00:00.000Z