rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-7475 
Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash.
Problem types: description: NULL pointer dereference
Affected products: vendor: Red Hat, Inc.
product: Cairo
Published: 2017-05-19T20:00:00.000Z
CVE-2017-7476 
Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the save_abbr function in time_rz.c.
Problem types: description: heap-based buffer overflow
Affected products: vendor: n/a
product: Gnulib before 2017-04-26
Published: 2017-05-02T17:00:00.000Z
CVE-2017-7477 
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
Problem types: description: heap overflow
Affected products: vendor: n/a
product: Linux kernel
Published: 2017-04-25T14:00:00.000Z
CVE-2017-7478 
OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that this issue is fixed in 2.3.15 and 2.4.2.
Problem types: cwe_id: CWE-617
description: CWE-617
Affected products: vendor: OpenVPN Technologies, Inc
product: openvpn
Published: 2017-05-15T18:00:00.000Z
CVE-2017-7479 
OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into Denial of Service of server by authenticated attacker.
Problem types: cwe_id: CWE-617
description: CWE-617
Affected products: vendor: OpenVPN Technologies, Inc
product: openvpn
Published: 2017-05-15T18:00:00.000Z
CVE-2017-7480 
rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution.
Problem types: cwe_id: CWE-300
description: CWE-300
Affected products: vendor: Red Hat, Inc.
product: rkhunter
Published: 2017-07-21T22:00:00.000Z
CVE-2017-7481 
Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: [UNKNOWN]
product: ansible
Published: 2018-07-19T13:00:00.000Z
CVE-2017-7482 
In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.
Problem types: cwe_id: CWE-190
description: CWE-190
Affected products: vendor: [UNKNOWN]
product: kernel:
Published: 2018-07-30T14:00:00.000Z
CVE-2017-7483 
Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to an out of bounds read.
Problem types: description: Integer overflow
Affected products: vendor: The RXVT Project
product: rxvt
Published: 2017-05-02T14:00:00.000Z
CVE-2017-7484 
It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pg_statistic, possibly leaking information. An unprivileged attacker could use this flaw to steal some information from tables they are otherwise not allowed to access.
Problem types: cwe_id: CWE-285
description: CWE-285
Affected products: vendor: The PostgreSQL Global Development Group
product: PostgreSQL
Published: 2017-05-12T19:00:00.000Z
CVE-2017-7485 
In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that the PGREQUIRESSL environment variable was no longer enforcing a SSL/TLS connection to a PostgreSQL server. An active Man-in-the-Middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client and a server.
Problem types: cwe_id: CWE-390
description: CWE-390
Affected products: vendor: The PostgreSQL Global Development Group
product: PostgreSQL
Published: 2017-05-12T19:00:00.000Z
CVE-2017-7486 
PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.
Problem types: cwe_id: CWE-522
description: CWE-522
Affected products: vendor: The PostgreSQL Global Development Group
product: PostgreSQL
Published: 2017-05-12T19:00:00.000Z
CVE-2017-7487 
The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel through 4.11.1 mishandles reference counts, which allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a failed SIOCGIFADDR ioctl call for an IPX interface.
Problem types: description: mishandles reference counts
Affected products: vendor: n/a
product: Linux kernel through 4.11.1
Published: 2017-05-14T22:00:00.000Z
CVE-2017-7488 
Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames.
Problem types: description: Information exposure
Affected products: vendor: authconfig
product: authconfig
Published: 2017-05-16T18:00:00.000Z
CVE-2017-7489 
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link.
Problem types: description: incorrect access control
Affected products: vendor: n/a
product: Moodle 2.x and 3.x
Published: 2017-05-15T14:00:00.000Z
CVE-2017-7490 
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing.
Problem types: description: incorrect access control
Affected products: vendor: n/a
product: Moodle 2.x and 3.x
Published: 2017-05-15T14:00:00.000Z
CVE-2017-7491 
In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting.
Problem types: description: CSRF
Affected products: vendor: n/a
product: Moodle 2.x and 3.x
Published: 2017-05-15T14:00:00.000Z
CVE-2017-7493 
Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could use this flaw to escalate their privileges inside guest.
Problem types: description: Improper access control issue
Affected products: vendor: QEMU
product: qemu
Published: 2017-05-17T15:00:00.000Z
CVE-2017-7494 
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.
Problem types: description: remote code execution
Affected products: vendor: Samba
product: samba
Published: 2017-05-30T18:00:00.000Z
CVE-2017-7495 
fs/ext4/inode.c in the Linux kernel before 4.6.2, when ext4 data=ordered mode is used, mishandles a needs-flushing-before-commit list, which allows local users to obtain sensitive information from other users' files in opportunistic circumstances by waiting for a hardware reset, creating a new file, making write system calls, and reading this file.
Problem types: description: filesystem mishandling
Affected products: vendor: n/a
product: Linux kernel before 4.6.2
Published: 2017-05-15T18:00:00.000Z
CVE-2017-7496 
fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount operation failure on unsafely created temporary directories.
Problem types: cwe_id: CWE-391
description: CWE-391
Affected products: vendor: Red Hat, Inc.
product: fedora-arm-installer
Published: 2017-06-26T14:00:00.000Z
CVE-2017-7497 
The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker with the ability to create storage volumes could use this to create storage volumes for any other tenant.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: [UNKNOWN]
product: CFME
Published: 2018-07-27T15:00:00.000Z
CVE-2017-7500 
It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being placed in an arbitrary destination. An attacker, with write access to a directory in which a subdirectory will be installed, could redirect that directory to an arbitrary location and gain root privilege.
Problem types: cwe_id: CWE-59
description: CWE-59
Affected products: vendor: [UNKNOWN]
product: rpm
Published: 2018-08-13T17:00:00.000Z
CVE-2017-7501 
It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a directory where files will be installed could create symbolic links to an arbitrary location and modify content, and possibly permissions to arbitrary files, which could be used for denial of service or possibly privilege escalation.
Problem types: cwe_id: CWE-59
description: CWE-59
Affected products: vendor: Red Hat, Inc.
product: rpm
Published: 2017-11-22T22:00:00.000Z
CVE-2017-7502 
Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: NSS project
product: nss
Published: 2017-05-30T18:00:00.000Z
CVE-2017-7503 
It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFactory is vulnerable to XXE. An attacker could use this flaw to launch DoS or SSRF attacks, or read files from the server where EAP is deployed.
Problem types: description: Improper Restriction of XML External Entity Reference ('XXE')
Affected products: vendor: Red Hat, Inc.
product: JBoss Enterprise Application Platform
Published: 2017-05-18T15:00:00.000Z
CVE-2017-7504 
HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default in Red Hat Jboss Application Server <= Jboss 4.X does not restrict the classes for which it performs deserialization, which allows remote attackers to execute arbitrary code via crafted serialized data.
Problem types: cwe_id: CWE-502
description: CWE-502
Affected products: vendor: Red Hat, Inc.
product: JBoss
Published: 2017-05-19T20:00:00.000Z
CVE-2017-7505 
Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigned to some organization(s) can do all operations granted by these permissions on all administrator user object outside of their scope, such as editing global admin accounts including changing their passwords.
Problem types: cwe_id: CWE-863
description: CWE-863
Affected products: vendor: Foreman
product: foreman
Published: 2017-05-26T16:00:00.000Z
CVE-2017-7506 
spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: The SPICE Project
product: spice
Published: 2017-07-18T15:00:00.000Z
CVE-2017-7507 
GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could lead to a crash of the GnuTLS server application.
Problem types: description: NULL pointer dereference
Affected products: vendor: GnuTLS
product: gnutls
Published: 2017-06-16T19:00:00.000Z
CVE-2017-7508 
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet.
Problem types: description: CVE-2017-7508
Affected products: vendor: OpenVPN Technologies, Inc
product: OpenVPN
Published: 2017-06-27T13:00:00.000Z
CVE-2017-7509 
An input validation error was found in Red Hat Certificate System's handling of client provided certificates before 8.1.20-1. If the certreq field is not present in a certificate an assertion error is triggered causing a denial of service.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Red Hat
product: Certificate System
Published: 2018-07-26T16:00:00.000Z
CVE-2017-7510 
In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be revealed through the REST interface.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: [UNKNOWN]
product: RHV
Published: 2019-03-25T17:50:15.000Z
CVE-2017-7511 
poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: Poppler
product: poppler
Published: 2017-05-30T18:00:00.000Z
CVE-2017-7512 
Red Hat 3scale (aka RH-3scale) API Management Platform (AMP) before 2.0.0 would permit creation of an access token without a client secret. An attacker could use this flaw to circumvent authentication controls and gain access to restricted APIs. NOTE: some sources have a typo in which CVE-2017-7512 maps to an OpenVPN vulnerability. The proper CVE ID for that OpenVPN vulnerability is CVE-2017-7521. Specifically, CVE-2017-7521 is the correct CVE ID for TWO closely related findings in OpenVPN. Any source that lists BOTH CVE-2017-7512 and CVE-2017-7521 for OpenVPN should have listed ONLY CVE-2017-7521.
Problem types: description: authentication bypass
Affected products: vendor: n/a
product: 3scale AMP before 2.0.0
Published: 2017-07-07T22:00:00.000Z
CVE-2017-7513 
It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields. A man-in-the-middle attacker could use this flaw to spoof a PostgreSQL server using a specially crafted X.509 certificate.
Problem types: cwe_id: CWE-295
description: CWE-295
Affected products: vendor: Red Hat
product: Red Hat Satellite
Published: 2018-08-22T15:00:00.000Z
CVE-2017-7514 
A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Red Hat
product: Red Hat Satellite
Published: 2018-07-30T13:00:00.000Z
CVE-2017-7515 
poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service.
Problem types: cwe_id: CWE-674
description: CWE-674
Affected products: vendor: Red Hat, Inc.
product: poppler
Published: 2017-06-06T14:00:00.000Z
CVE-2017-7517 
An input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants in Hawkular Metrics and projects/namespaces in OpenShift. If a user creates a project called "MyProject", and then later deletes it another user can then create a project called "MyProject" and access the metrics stored from the original "MyProject" instance.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: n/a
product: Hawkular Metrics
Published: 2022-10-17T00:00:00.000Z
CVE-2017-7518 
A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exception(#DB) being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges inside the guest. Linux guests are not affected by this.
Problem types: cwe_id: CWE-250
description: CWE-250
Affected products: vendor: [UNKNOWN]
product: Kernel:
Published: 2018-07-30T13:00:00.000Z
CVE-2017-7519 
In Ceph, a format string flaw was found in the way libradosstriper parses input from user. A user could crash an application or service using the libradosstriper library.
Problem types: cwe_id: CWE-134
description: CWE-134
Affected products: vendor: [UNKNOWN]
product: ceph
Published: 2018-07-27T14:00:00.000Z
CVE-2017-7520 
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-in-the-middle attacker.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: OpenVPN Technologies, Inc
product: OpenVPN
Published: 2017-06-27T13:00:00.000Z
CVE-2017-7521 
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extract_x509_extension().
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: OpenVPN Technologies, Inc
product: OpenVPN
Published: 2017-06-27T13:00:00.000Z
CVE-2017-7522 
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: OpenVPN Technologies, Inc
product: OpenVPN
Published: 2017-06-27T13:00:00.000Z
CVE-2017-7523 
Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting into denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input string.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: Red Hat, Inc.
product: cygwin
Published: 2017-07-21T22:00:00.000Z
CVE-2017-7524 
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.
Problem types: cwe_id: CWE-522
description: CWE-522
Affected products: vendor: TPM 2.0 Tools
product: tpm2-tools
Published: 2017-06-27T14:00:00.000Z
CVE-2017-7525 
A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.
Problem types: cwe_id: CWE-184
description: CWE-184
Affected products: vendor: FasterXML
product: jackson-databind
Published: 2018-02-06T15:00:00.000Z
CVE-2017-7526 
libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: GnuPG
product: libgcrypt
Published: 2018-07-26T13:00:00.000Z
CVE-2017-7528 
Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection. It was found that X-Forwarded-For header allows internal servers to deploy other systems (using callback).
Problem types: cwe_id: CWE-113
description: CWE-113
Affected products: vendor: Red Hat
product: Ansible Tower
Published: 2018-08-22T16:00:00.000Z
CVE-2017-7529 
Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.
Problem types: cwe_id: CWE-190
description: CWE-190
Affected products: vendor: nginx
product: nginx
Published: 2017-07-13T13:00:00.000Z
CVE-2017-7530 
In CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1, it was found that privilege check is missing when invoking arbitrary methods via filtering on VMs that MiqExpression will execute that is triggerable by API users. An attacker could use this to execute actions they should not be allowed to (e.g. destroying VMs).
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: Red Hat
product: cfme
Published: 2018-07-26T13:00:00.000Z
CVE-2017-7531 
In Moodle 3.3, the course overview block reveals activities in hidden courses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T16:00:00.000Z
CVE-2017-7532 
In Moodle 3.x, course creators are able to change system default settings for courses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T16:00:00.000Z
CVE-2017-7533 
Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_rename functions.
Problem types: description: race condition
Affected products: vendor: n/a
product: Linux kernel through 4.12.4
Published: 2017-08-05T16:00:00.000Z
CVE-2017-7534 
OpenShift Enterprise version 3.x is vulnerable to a stored XSS via the log viewer for pods. The flaw is due to lack of sanitation of user input, specifically terminal escape characters, and the creation of clickable links automatically when viewing the log files for a pod.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Red Hat, Inc.
product: Openshift
Published: 2018-04-11T19:00:00.000Z
CVE-2017-7535 
foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organization that contains html in its name which is visible to the user prior to taking action.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Foreman
product: foreman
Published: 2018-07-26T13:00:00.000Z
CVE-2017-7536 
In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an attacker may be able to validate an invalid instance and access the private member value via ConstraintViolation#getInvalidValue().
Problem types: cwe_id: CWE-592
description: CWE-592
Affected products: vendor: Red Hat, Inc.
product: hibernate-validator
Published: 2018-01-10T15:00:00.000Z
CVE-2017-7537 
It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.
Problem types: cwe_id: CWE-592
description: CWE-592
Affected products: vendor: Dogtag PKI
product: pki-core
Published: 2018-07-26T13:00:00.000Z
CVE-2017-7538 
A cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite 5, before 5.8. A user able to change an organization's name could exploit this flaw to perform XSS attacks against other Satellite users.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Red Hat
product: Satellite
Published: 2018-07-26T15:00:00.000Z