rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-9227 
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in mbc_enc_len() during regular expression searching. Invalid handling of reg->dmin in forward_search_range() could result in an invalid pointer dereference, as an out-of-bounds read from a stack buffer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-24T15:00:00.000Z
CVE-2017-9228 
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-24T15:00:00.000Z
CVE-2017-9229 
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A SIGSEGV occurs in left_adjust_char_head() during regular expression compilation. Invalid handling of reg->dmax in forward_search_range() could result in an invalid pointer dereference, normally as an immediate denial-of-service condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-24T15:00:00.000Z
CVE-2017-9230 
The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers with a variety of initial 64-byte chunks followed by the same 16-byte chunk, multiple candidate root values ending with the same 4 bytes, and calculations involving sqrt numbers. This violates the security assumptions of (1) the choice of input, outside of the dedicated nonce area, fed into the Proof-of-Work function should not change its difficulty to evaluate and (2) every Proof-of-Work function execution should be independent. NOTE: a number of persons feel that this methodology is a benign mining optimization, not a vulnerability
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-24T16:00:00.000Z
CVE-2017-9231 
XML external entity (XXE) vulnerability in Citrix XenMobile Server 9.x and 10.x before 10.5 RP3 allows attackers to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-16T22:00:00.000Z
CVE-2017-9232 
Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-28T00:00:00.000Z
CVE-2017-9233 
XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T20:00:00.000Z
CVE-2017-9239 
An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage will use the value of pValue() to cause a segmentation fault. To exploit this vulnerability, someone must open a crafted tiff file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-26T10:00:00.000Z
CVE-2017-9242 
The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel through 4.11.3 is too late in checking whether an overwrite of an skb data structure may occur, which allows local users to cause a denial of service (system crash) via crafted system calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-27T00:00:00.000Z
CVE-2017-9243 
Aries QWR-1104 Wireless-N Router with Firmware Version WRC.253.2.0913 has XSS on the Wireless Site Survey page, exploitable with the name of an access point.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-28T18:00:00.000Z
CVE-2017-9244 
Cross-site scripting (XSS) vulnerability in the Trello app before 4.0.8 for iOS might allow remote attackers to inject arbitrary web script or HTML by uploading and attaching a crafted photo to a Card.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T19:00:00.000Z
CVE-2017-9245 
The Google News and Weather application before 3.3.1 for Android allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T03:00:00.000Z
CVE-2017-9246 
New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving failure to escape quotes during use of the Slow Queries feature, as demonstrated by a mishandled quote in a VALUES clause of an INSERT statement, after bypassing a SET SHOWPLAN_ALL ON protection mechanism.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-13T18:00:00.000Z
CVE-2017-9247 
Multiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver Package (MBDP) with build ID < 4657 allows local users to launch processes with elevated privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T19:00:00.000Z
CVE-2017-9248 
Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leading to a MachineKey leak, arbitrary file uploads or downloads, XSS, or ASP.NET ViewState compromise.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-03T19:00:00.000Z
CVE-2017-9249 
Cross-site scripting (XSS) vulnerability in Allen Disk 1.6 allows remote authenticated users to inject arbitrary web script or HTML persistently by uploading a crafted HTML file. The attack vector is the content of this file, and the filename must be specified in the PATH_INFO to readfile.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-28T20:00:00.000Z
CVE-2017-9250 
The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty strings, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via malformed JavaScript source code, related to the jmem_heap_free_block function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-28T20:00:00.000Z
CVE-2017-9251 
andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the sitename parameter to admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-28T20:00:00.000Z
CVE-2017-9252 
andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the search page via the text-search parameter to index.php in a route=search action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-28T20:00:00.000Z
CVE-2017-9253 
The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-27T12:00:00.000Z
CVE-2017-9254 
The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-27T12:00:00.000Z
CVE-2017-9255 
The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-27T12:00:00.000Z
CVE-2017-9256 
The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-27T12:00:00.000Z
CVE-2017-9257 
The mp4ff_read_ctts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-27T12:00:00.000Z
CVE-2017-9258 
The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted wav file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-27T06:00:00.000Z
CVE-2017-9259 
The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (memory allocation error and application crash) via a crafted wav file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-27T06:00:00.000Z
CVE-2017-9260 
The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sse_optimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted wav file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-27T06:00:00.000Z
CVE-2017-9261 
In ImageMagick 7.0.5-6 Q16, the ReadMNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T03:52:00.000Z
CVE-2017-9262 
In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T03:52:00.000Z
CVE-2017-9263 
In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T03:52:00.000Z
CVE-2017-9264 
In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T03:52:00.000Z
CVE-2017-9265 
In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_ofp15_group_mod`.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T03:52:00.000Z
CVE-2017-9267 eDirectory LDAP peer certificate validation issue
In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations.
Problem types: cwe_id: CWE-757
description: CWE-757
Affected products: vendor: Novell
product: eDirectory
Published: 2018-03-02T20:00:00.000Z
CVE-2017-9268 open-build-service retrigger / wipebinaries hitting the wrong project bypassing access permissions
In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service (resource consumption).
Problem types: description: incorrect permission checking lead to authenticated users to cause rebuilds or allowing wiping binaries in other projects.
cwe_id: CWE-285
description: CWE-285
Affected products: vendor: SUSE
product: open build service
Credits: lang: en
value: Adrian Schröter of SUSE
Published: 2018-03-01T19:00:00.000Z
CVE-2017-9269 lack of keypinning in libzypp could lead to repository switching
In libzypp before August 2018 GPG keys attached to YUM repositories were not correctly pinned, allowing malicious repository mirrors to silently downgrade to unsigned repositories with potential malicious content.
Problem types: description: Malicious mirrors could downgrade repositories from trusted signed repositories to unsigned malicious repositories.
cwe_id: CWE-757
description: CWE-757
Affected products: vendor: SUSE
product: libzypp
Credits: lang: en
value: Moritz Duge and Till Doerges from PRESENSE
Published: 2018-03-01T19:00:00.000Z
CVE-2017-9270 post-auth arbitrary file write on cryptctl server
In cryptctl before version 2.0 a malicious server could send RPC requests that could overwrite files outside of the cryptctl key database.
Problem types: description: A directory traversal due to insufficient parameter checking could allow malicious servers to get a cryptctl client overwrite  and corrupt files outside of the key storage directory.
cwe_id: CWE-22
description: CWE-22
Affected products: vendor: SUSE
product: cryptctl
Credits: lang: en
value: Sebastian Krahmer of SUSE
Published: 2018-03-01T19:00:00.000Z
CVE-2017-9271 proxy credentials written to log files by zypper
The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.
Problem types: description: Proxy credentials are writting into logfiles
description: CVE-532
Affected products: vendor: SUSE
product: zypper
Credits: lang: en
value: Mario Biberhofer
Published: 2018-03-01T19:00:00.000Z
CVE-2017-9272 
The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to a denial of service attack.
Problem types: description: Denial of Service.
Affected products: vendor: *** n/a ***
product: IDM 4.5 bidirectional eDir Driver Version
Published: 2017-10-06T17:00:00.000Z
CVE-2017-9273 
The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to unauthorized log configuration changes.
Problem types: description: Improper Access.
Affected products: vendor: *** n/a ***
product: IDM 4.5 bidirectional eDir Driver Version
Published: 2017-10-06T17:00:00.000Z
CVE-2017-9274 osc executes spec code during "osc commit"
A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.
Problem types: description: Shell code injection due to insufficient escaping of RPM spec file macros.
cwe_id: CWE-78
description: CWE-78
Affected products: vendor: SUSE
product: obs-service-source_validator
Credits: lang: en
value: Christian Boltz of openSUSE
Published: 2018-03-01T19:00:00.000Z
CVE-2017-9275 NetIQ Identity Reporting XSS exposure
NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack.
Problem types: description: XSS Issue
Affected products: vendor: NetIQ
product: Identity Reporting
Published: 2018-04-26T15:00:00.000Z
CVE-2017-9276 XSS Vulnerability in iManager
Novell Access Manager iManager before 4.3.3 did not validate parameters so that cross site scripting content could be reflected back into the result page using the "a" parameter.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: NetIQ
product: Access Manager
Published: 2018-03-02T20:00:00.000Z
CVE-2017-9277 existing connection is being used even though eDirectory LDAP server is upgraded to EBA
The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open connections without EBA.
Problem types: description: inconsistent enabling of security feature
Affected products: vendor: Novell
product: eDirectory
Published: 2018-03-02T20:00:00.000Z
CVE-2017-9278 Avoid password disclosure via EBS event logging in the iManager Oracle driver
The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password, potentially disclosing this to attackers able to read the EBS tables.
Problem types: description: password disclosure via logging
cwe_id: CWE-532
description: CWE-532
Affected products: vendor: NetIQ
product: Identity Manager Oracle EBS driver
Published: 2018-03-02T20:00:00.000Z
CVE-2017-9279 NetIQ Identity Manager allowed uploading of user icons with incorrect types or extensions
NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Administration, allowing malicious user administrators to potentially execute code or mislead users.
Problem types: description: Upload of files possible that could be misused for other purposes
cwe_id: CWE-434
description: CWE-434
Affected products: vendor: NetIQ
product: Identity Manager
Published: 2018-03-02T20:00:00.000Z
CVE-2017-9280 Novell Identity Manager User Application get request url contains the session token.
Some NetIQ Identity Manager Applications before Identity Manager 4.5.6.1 included the session token in GET URLs, potentially allowing exposure of user sessions to untrusted third parties via proxies, referer urls or similar.
Problem types: description: information exposure due to unencrypted credentials in GET Urls
cwe_id: CWE-598
description: CWE-598
Affected products: vendor: NetIQ
product: Identity Manager Applications
Published: 2018-03-02T20:00:00.000Z
CVE-2017-9281 
An integer overflow (CWE-190) potentially causing an out-of-bounds read (CWE-125) vulnerability in Micro Focus VisiBroker 8.5 can lead to a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T21:00:00.000Z
CVE-2017-9282 
An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed.
Problem types: cwe_id: CWE-190
description: Integer Overflow (CWE-190) and Out-of-Bounds Write (CWE-787)
Affected products: vendor: Micro Focus
product: Micro Focus VisiBroker
Published: 2017-09-21T21:00:00.000Z
CVE-2017-9283 
An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed.
Problem types: cwe_id: CWE-125
description: Out-of-Bounds Read (CWE-125)
Affected products: vendor: Micro Focus
product: Micro Focus VisiBroker
Published: 2017-09-21T21:00:00.000Z
CVE-2017-9284 IDM 4.6 Identity Applications information leakage
IDM 4.6 Identity Applications prior to 4.6.2.1 may expose sensitive information.
Problem types: description: Information Leakage
Affected products: vendor: NetIQ
product: IDM - Identity Applications
Published: 2018-04-26T15:00:00.000Z
CVE-2017-9285 Login restrictions not applied when using ebaclient against NetIQ eDirectory EBA interface
NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services.
Problem types: description: Lack of access checks
cwe_id: CWE-284
description: CWE-284
Affected products: vendor: NetIQ
product: eDirectory
Published: 2018-03-02T20:00:00.000Z
CVE-2017-9286 nextcloud package security issues with /srv/www/htdocs
The packaging of NextCloud in openSUSE used /srv/www/htdocs in an unsafe manner, which could have allowed scripts running as wwwrun user to escalate privileges to root during nextcloud package upgrade.
Problem types: description: Using the untrusted hierarchy under /srv/wwwroot/htdocs during update as root user could be used to overwrite root files.
Affected products: vendor: SUSE
product: nextcloud
Credits: lang: en
value: Ludwig Nussel of SUSE
Published: 2018-03-01T19:00:00.000Z
CVE-2017-9287 
servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T16:00:00.000Z
CVE-2017-9288 
The Raygun4WP plugin 1.8.0 for WordPress is vulnerable to a reflected XSS in sendtesterror.php (backurl parameter).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T16:00:00.000Z
CVE-2017-9289 
Bram Korsten Note through 1.2.0 is vulnerable to a reflected XSS in note-source\ui\editor.php (edit parameter).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T17:00:00.000Z
CVE-2017-9292 
Lansweeper before 6.0.0.65 has XSS in an image retrieval URI, aka Bug 542782.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T17:00:00.000Z
CVE-2017-9294 
RMI vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to execute internal commands without authentication via RMI ports.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T18:00:00.000Z
CVE-2017-9295 
XXE vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to read arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T18:00:00.000Z
CVE-2017-9296 
Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Tuning Manager before 8.5.2-00 allows remote attackers to redirect authenticated users to arbitrary web sites.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T18:00:00.000Z
CVE-2017-9297 
Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to redirect users to arbitrary web sites.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T18:00:00.000Z
CVE-2017-9298 
Cross-site scripting vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to execute arbitrary JavaScript code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T18:00:00.000Z
CVE-2017-9299 
Open Ticket Request System (OTRS) 3.3.9 has XSS in index.pl?Action=AgentStats requests, as demonstrated by OrderBy=[XSS] and Direction=[XSS] attacks. NOTE: this CVE may have limited relevance because it represents a 2017 discovery of an issue in software from 2014. The 3.3.20 release, for example, is not affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-29T19:00:00.000Z