rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-7253 
Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request to a certain URI. 2. Login to the IP camera with admin credentials so as to obtain full control of the target IP camera. During exploitation, the first JSON object encountered has a "Component error: login challenge!" message. The second JSON object encountered has a result indicating a successful admin login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-30T18:00:00.000Z
CVE-2017-7255 
XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_title parameter. Someone must login to conduct the attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-24T15:00:00.000Z
CVE-2017-7256 
XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_summary parameter. Someone must login to conduct the attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-24T15:00:00.000Z
CVE-2017-7257 
XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_content parameter. Someone must login to conduct the attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-24T15:00:00.000Z
CVE-2017-7258 
HTTP Exploit in eMLi Portal in AuroMeera Technometrix Pvt. Ltd. eMLi allows an Attacker to View Restricted Information or (even more seriously) execute powerful commands on the web server which can lead to a full compromise of the system via Directory Path Traversal, as demonstrated by reading core-emli/Storage. The affected versions are eMLi School Management 1.0, eMLi College Campus Management 1.0, and eMLi University Management 1.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-29T20:00:00.000Z
CVE-2017-7261 
The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.5 does not check for a zero value of certain levels data, which allows local users to cause a denial of service (ZERO_SIZE_PTR dereference, and GPF and possibly panic) via a crafted ioctl call for a /dev/dri/renderD* device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-24T21:00:00.000Z
CVE-2017-7262 
The AMD Ryzen processor with AGESA microcode through 2017-01-27 allows local users to cause a denial of service (system hang) via an application that makes a long series of FMA3 instructions, as demonstrated by the Flops test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-25T00:00:00.000Z
CVE-2017-7263 
The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8698.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-26T05:47:00.000Z
CVE-2017-7264 
Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-26T05:47:00.000Z
CVE-2017-7266 
Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-26T05:47:00.000Z
CVE-2017-7269 
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-27T01:55:00.000Z
CVE-2017-7271 
Reflected Cross-site scripting (XSS) vulnerability in Yii Framework before 2.0.11, when development mode is used, allows remote attackers to inject arbitrary web script or HTML via crafted request data that is mishandled on the debug-mode exception screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-27T17:00:00.000Z
CVE-2017-7272 
PHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen hostname argument with an expectation that the port number is constrained. Because a :port syntax is recognized, fsockopen will use the port number that is specified in the hostname argument, instead of the port number in the second argument of the function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-27T17:00:00.000Z
CVE-2017-7273 
The cp_report_fixup function in drivers/hid/hid-cypress.c in the Linux kernel 3.2 and 4.x before 4.9.4 allows physically proximate attackers to cause a denial of service (integer underflow) or possibly have unspecified other impact via a crafted HID report.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-27T17:00:00.000Z
CVE-2017-7274 
The r_pkcs7_parse_cms function in libr/util/r_pkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PE file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-27T17:00:00.000Z
CVE-2017-7275 
The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service (attempted large memory allocation and application crash) via a crafted file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862 and CVE-2016-8866.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-27T18:00:00.000Z
CVE-2017-7276 
There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-04T18:00:00.000Z
CVE-2017-7277 
The TCP stack in the Linux kernel through 4.10.6 mishandles the SCM_TIMESTAMPING_OPT_STATS feature, which allows local users to obtain sensitive information from the kernel's internal socket data structures or cause a denial of service (out-of-bounds read) via crafted system calls, related to net/core/skbuff.c and net/socket.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-28T06:04:00.000Z
CVE-2017-7278 
Unspecified vulnerability in ASSA ABLOY APTUS Styra Porttelefonkort 4400 before A2 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T14:00:00.000Z
CVE-2017-7279 
An unprivileged user of the Unitrends Enterprise Backup before 9.0.0 web server can escalate to root privileges by modifying the "token" cookie issued at login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T22:00:00.000Z
CVE-2017-7280 
An issue was discovered in api/includes/systems.php in Unitrends Enterprise Backup before 9.0.0. User input is not properly filtered before being sent to a popen function. This allows for remote code execution by sending a specially crafted user variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T22:00:00.000Z
CVE-2017-7281 
An issue was discovered in Unitrends Enterprise Backup before 9.1.2. A lack of sanitization of user input in the createReportName and saveReport functions in recoveryconsole/bpl/reports.php allows for an authenticated user to create a randomly named file on disk with a user-controlled extension, contents, and path, leading to remote code execution, aka Unrestricted File Upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T22:00:00.000Z
CVE-2017-7282 
An issue was discovered in Unitrends Enterprise Backup before 9.1.1. The function downloadFile in api/includes/restore.php blindly accepts any filename passed to /api/restore/download as valid. This allows an authenticated attacker to read any file in the filesystem that the web server has access to, aka Local File Inclusion (LFI).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T02:43:00.000Z
CVE-2017-7283 
An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T02:43:00.000Z
CVE-2017-7284 
An attacker that has hijacked a Unitrends Enterprise Backup (before 9.1.2) web server session can leverage api/includes/users.php to change the password of the logged in account without knowing the current password. This allows for an account takeover.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T22:00:00.000Z
CVE-2017-7285 
A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of TCP RST packets, preventing the affected router from accepting new TCP connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-29T14:00:00.000Z
CVE-2017-7288 
Cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (ZCS) before 8.7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-23T03:56:00.000Z
CVE-2017-7290 
SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via the url parameter to findusers.php. An example attack uses "into outfile" to create a backdoor program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-30T07:00:00.000Z
CVE-2017-7293 
The Dolby DAX2 and DAX3 API services are vulnerable to a privilege escalation vulnerability that allows a normal user to get arbitrary system privileges, because these services have .NET code for DCOM. This affects Dolby Audio X2 (DAX2) 1.0, 1.0.1, 1.1, 1.1.1, 1.2, 1.3, 1.3.1, 1.3.2, 1.4, 1.4.1, 1.4.2, 1.4.3, and 1.4.4 and Dolby Audio X3 (DAX3) 1.0 and 1.1. An example affected driver is Realtek Audio Driver 6.0.1.7898 on a Lenovo P50.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-26T05:28:00.000Z
CVE-2017-7294 
The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.6 does not validate addition of certain levels data, which allows local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-29T01:32:00.000Z
CVE-2017-7295 
An issue was discovered in Contiki Operating System 3.0. A use-after-free vulnerability exists in httpd-simple.c in cc26xx-web-demo httpd, where upon a connection close event, the http_state structure was not deallocated properly, resulting in a NULL pointer dereference in the output processing function. This resulted in a board crash, which can be used to perform denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-28T00:00:00.000Z
CVE-2017-7296 
An issue was discovered in Contiki Operating System 3.0. A Persistent XSS vulnerability is present in the MQTT/IBM Cloud Config page (aka mqtt.html) of cc26xx-web-demo. The cc26xx-web-demo features a webserver that runs on a constrained device. That particular page allows a user to remotely configure that device's operation by sending HTTP POST requests. The vulnerability consists of improper input sanitisation of the text fields on the MQTT/IBM Cloud config page, allowing for JavaScript code injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-28T00:00:00.000Z
CVE-2017-7297 
Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call. This is fixed in versions rancher/server:v1.2.4, rancher/server:v1.3.5, rancher/server:v1.4.3, and rancher/server:v1.5.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-29T00:00:00.000Z
CVE-2017-7298 
In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-29T05:23:00.000Z
CVE-2017-7299 
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the code to emit relocs (bfd_elf_final_link function in bfd/elflink.c) does not check the format of the input file before trying to read the ELF reloc section header. The vulnerability leads to a GNU linker (ld) program crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-29T15:00:00.000Z
CVE-2017-7300 
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that is vulnerable to a heap-based buffer over-read (off-by-one) because of an incomplete check for invalid string offsets while loading symbols, leading to a GNU linker (ld) program crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-29T15:00:00.000Z
CVE-2017-7301 
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that has an off-by-one vulnerability because it does not carefully check the string offset. The vulnerability could lead to a GNU linker (ld) program crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-29T15:00:00.000Z
CVE-2017-7302 
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out function in bfd/aoutx.h that is vulnerable to an invalid read (of size 4) because of missing checks for relocs that could not be recognised. This vulnerability causes Binutils utilities like strip to crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-29T15:00:00.000Z
CVE-2017-7303 
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 4) because of missing a check (in the find_link function) for null headers before attempting to match them. This vulnerability causes Binutils utilities like strip to crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-29T15:00:00.000Z
CVE-2017-7304 
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 8) because of missing a check (in the copy_special_section_fields function) for an invalid sh_link field before attempting to follow it. This vulnerability causes Binutils utilities like strip to crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-29T15:00:00.000Z
CVE-2017-7305 
Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism via a crafted boot. NOTE: the vendor believes that this does not meet the definition of a vulnerability. The product contains correct computational logic for a bootloader password; however, this password is optional to meet different customers' needs
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-04T16:00:00.000Z
CVE-2017-7306 
Riverbed RiOS through 9.6.0 has a weak default password for the secure vault, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism by leveraging knowledge of the password algorithm and the appliance serial number. NOTE: the vendor believes that this does not meet the definition of a vulnerability. The product contains correct computational logic for supporting arbitrary password changes by customers; however, a password change is optional to meet different customers' needs
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-04T16:00:00.000Z
CVE-2017-7307 
Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-04T16:00:00.000Z
CVE-2017-7308 
The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service (integer signedness error and out-of-bounds write), or gain privileges (if the CAP_NET_RAW capability is held), via crafted system calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-29T20:00:00.000Z
CVE-2017-7309 
A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code (if CSP settings permit it) through a crafted 'config_option' parameter. This is fixed in 1.3.9, 2.1.3, and 2.2.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-31T04:26:00.000Z
CVE-2017-7310 
A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitrary code via a crafted XML file containing a long name attribute of a classify element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-29T21:00:00.000Z
CVE-2017-7312 
An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, anyone can add a vendor account or read existing vendor account data (including usernames and passwords).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-07T13:00:00.000Z
CVE-2017-7313 
An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, it is possible to read any customer name, master Customer Id, and email address. In other words, anyone can search for users/customers in the system - no authentication is required.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-07T13:00:00.000Z
CVE-2017-7314 
An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, while creating a new role, a list of database tables and their columns is available.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-07T13:00:00.000Z
CVE-2017-7315 
An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-04T02:00:00.000Z
CVE-2017-7316 
An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-04T02:00:00.000Z
CVE-2017-7317 
An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-04T02:00:00.000Z
CVE-2017-7318 
Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-30T07:00:00.000Z
CVE-2017-7320 
setup/controllers/language.php in MODX Revolution 2.5.4-pl and earlier does not properly constrain the language parameter, which allows remote attackers to conduct Cookie-Bombing attacks and cause a denial of service (cookie quota exhaustion), or conduct HTTP Response Splitting attacks with resultant XSS, via an invalid parameter value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-30T07:00:00.000Z
CVE-2017-7321 
setup/controllers/welcome.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the config_key parameter to the setup/index.php?action=welcome URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-30T07:00:00.000Z
CVE-2017-7322 
The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and trigger the execution of arbitrary code via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-30T07:00:00.000Z
CVE-2017-7323 
The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier use http://rest.modx.com by default, which allows man-in-the-middle attackers to spoof servers and trigger the execution of arbitrary code by leveraging the lack of the HTTPS protection mechanism.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-30T07:00:00.000Z
CVE-2017-7324 
setup/templates/findcore.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the core_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-30T07:00:00.000Z
CVE-2017-7325 
Yandex Browser before 16.9.0 allows remote attackers to spoof the address bar via window.open.
Problem types: description: Address bar spoofing
Affected products: vendor: Yandex N.V.
product: Yandex Browser
Published: 2018-01-19T17:00:00.000Z
CVE-2017-7326 
Race condition issue in Yandex Browser for Android before 17.4.0.16 allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page
Problem types: description: Memory corruption
Affected products: vendor: Yandex N.V.
product: Yandex Browser for Android
Published: 2018-01-19T17:00:00.000Z
CVE-2017-7327 
Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll.
Problem types: description: Dll hijacking
Affected products: vendor: Yandex N.V.
product: Yandex Browser for Desktop
Published: 2018-01-19T17:00:00.000Z