rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-15054 
An arbitrary file upload vulnerability, present in TeamPass before 2.1.27.9, allows remote authenticated users to upload arbitrary files leading to Remote Command Execution. To exploit this vulnerability, an authenticated attacker has to tamper with parameters of a request to upload.files.php, in order to select the correct branch and be able to upload any arbitrary file. From there, it can simply access the file to execute code on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-27T19:00:00.000Z
CVE-2017-15055 
TeamPass before 2.1.27.9 does not properly enforce item access control when requesting items.queries.php. It is then possible to copy any arbitrary item into a directory controlled by the attacker, edit any item within a read-only directory, delete an arbitrary item, delete the file attachments of an arbitrary item, copy the password of an arbitrary item to the copy/paste buffer, access the history of an arbitrary item, and edit attributes of an arbitrary directory. To exploit the vulnerability, an authenticated attacker must tamper with the requests sent directly, for example by changing the "item_id" parameter when invoking "copy_item" on items.queries.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-27T19:00:00.000Z
CVE-2017-15056 
p_lx_elf.cpp in UPX 3.94 mishandles ELF headers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by an Invalid Pointer Read in PackLinuxElf64::unpack().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-06T07:00:00.000Z
CVE-2017-15063 
There are CSRF vulnerabilities in Subrion CMS 4.1.x through 4.1.5, and before 4.2.0, because of a logic error. Although there is functionality to detect CSRF, it is called too late in the ia.core.php code, allowing (for example) an attack against the query parameter to panel/database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-06T07:00:00.000Z
CVE-2017-15079 
The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-06T18:00:00.000Z
CVE-2017-15081 
In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-24T06:00:00.000Z
CVE-2017-15084 
The web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout CSRF, aka R7-2017-22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-06T21:00:00.000Z
CVE-2017-15085 
It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
Problem types: cwe_id: CWE-300
description: CWE-300
Affected products: vendor: Red Hat, Inc.
product: Gluster Storage for RHEL 6
Published: 2017-11-08T19:00:00.000Z
CVE-2017-15086 
It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
Problem types: cwe_id: CWE-300
description: CWE-300
Affected products: vendor: Red Hat, Inc.
product: Gluster Storage for RHEL 6
Published: 2017-11-08T19:00:00.000Z
CVE-2017-15087 
It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Red Hat, Inc.
product: Gluster Storage for RHEL 6
Published: 2017-11-08T19:00:00.000Z
CVE-2017-15088 
plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2 mishandles Distinguished Name (DN) fields, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) in situations involving untrusted X.509 data, related to the get_matching_data and X509_NAME_oneline_ex functions. NOTE: this has security relevance only in use cases outside of the MIT Kerberos distribution, e.g., the use of get_matching_data in KDC certauth plugin code that is specific to Red Hat.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: n/a
product: krb5 1.5
Published: 2017-11-23T17:00:00.000Z
CVE-2017-15089 
It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache. An authenticated attacker could inject a malicious object into the data cache and attain deserialization on the client, and possibly conduct further attacks.
Problem types: cwe_id: CWE-502
description: CWE-502
Affected products: vendor: Infinispan
product: infinispan
Published: 2018-02-15T17:00:00.000Z
CVE-2017-15090 
An issue has been found in the DNSSEC validation component of PowerDNS Recursor from 4.0.0 and up to and including 4.0.6, where the signatures might have been accepted as valid even if the signed data was not in bailiwick of the DNSKEY used to sign it. This allows an attacker in position of man-in-the-middle to alter the content of records by issuing a valid signature for the crafted records.
Problem types: cwe_id: CWE-347
description: CWE-347
Affected products: vendor: PowerDNS
product: PowerDNS
Published: 2018-01-23T15:00:00.000Z
CVE-2017-15091 
An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly keyword. This missing check allows an attacker with valid API credentials to flush the cache, trigger a zone transfer or send a NOTIFY.
Problem types: cwe_id: CWE-863
description: CWE-863
Affected products: vendor: PowerDNS
product: PowerDNS Authoritative
Published: 2018-01-23T15:00:00.000Z
CVE-2017-15092 
A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0.6, where the qname of DNS queries was displayed without any escaping, allowing a remote attacker to inject HTML and Javascript code into the web interface, altering the content.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: PowerDNS
product: PowerDNS Recursor
Published: 2018-01-23T15:00:00.000Z
CVE-2017-15093 
When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized user to update the Recursor's ACL by adding and removing netmasks, and to configure forward zones. It was discovered that the new netmask and IP addresses of forwarded zones were not sufficiently validated, allowing an authenticated user to inject new configuration directives into the Recursor's configuration.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: PowerDNS
product: PowerDNS Recursor
Published: 2018-01-23T15:00:00.000Z
CVE-2017-15094 
An issue has been found in the DNSSEC parsing code of PowerDNS Recursor from 4.0.0 up to and including 4.0.6 leading to a memory leak when parsing specially crafted DNSSEC ECDSA keys. These keys are only parsed when validation is enabled by setting dnssec to a value other than off or process-no-validate (default).
Problem types: cwe_id: CWE-401
description: CWE-401
Affected products: vendor: PowerDNS
product: PowerDNS Recursor
Published: 2018-01-23T15:00:00.000Z
CVE-2017-15095 
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.
Problem types: cwe_id: CWE-184
description: CWE-184
Affected products: vendor: FasterXML
product: jackson-databind
Published: 2018-02-06T15:00:00.000Z
CVE-2017-15096 
A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c may be used to cause denial of service.
Problem types: description: Null pointer dereference
Affected products: vendor: Red Hat, Inc.
product: GlusterFS
Published: 2017-10-26T17:00:00.000Z
CVE-2017-15097 
Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to the postgres user account could use these flaws to obtain root access on the server machine.
Problem types: cwe_id: CWE-59
description: CWE-59
Affected products: vendor: Red Hat
product: postgresql init script
Published: 2018-07-27T20:00:00.000Z
CVE-2017-15098 
Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or disclose a few bytes of server memory.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Red Hat, Inc.
product: postgresql
Published: 2017-11-22T17:00:00.000Z
CVE-2017-15099 
INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE privileges. Exploits bypass row level security policies and lack of SELECT privilege.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Red Hat, Inc.
product: postgresql
Published: 2017-11-22T18:00:00.000Z
CVE-2017-15100 
An attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on certain pages: (1) Facts page, when clicking on the "chart" button and hovering over the chart; (2) Trends page, when checking the graph for a trend based on a such fact; (3) Statistics page, for facts that are aggregated on this page.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Foreman Project
product: Foreman
Published: 2017-11-27T14:00:00.000Z
CVE-2017-15101 
A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. An attacker could cause a denial of service condition or potentially even arbitrary code execution.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: Liblouis
product: liblouis
Published: 2018-07-27T20:00:00.000Z
CVE-2017-15102 
The tower_probe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users (who are physically proximate for inserting a crafted USB device) to gain privileges by leveraging a write-what-where condition that occurs after a race condition and a NULL pointer dereference.
Problem types: description: race condition
Affected products: vendor: n/a
product: Linux kernel through version 4.9-rc1
Published: 2017-11-15T21:00:00.000Z
CVE-2017-15103 
A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user could send specially crafted requests to the Heketi server, resulting in remote command execution as the user running Heketi server and possibly privilege escalation.
Problem types: cwe_id: CWE-78
description: CWE-78
Affected products: vendor: Heketi
product: Heketi
Published: 2017-12-18T19:00:00.000Z
CVE-2017-15104 
An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could read plain-text passwords from the heketi.json file.
Problem types: cwe_id: CWE-552
description: CWE-552
Affected products: vendor: Heketi
product: Heketi
Published: 2017-12-18T19:00:00.000Z
CVE-2017-15105 
A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence (NXDOMAIN answer) of an existing wildcard record, or trick unbound into accepting a NODATA proof.
Problem types: cwe_id: CWE-358
description: CWE-358
Affected products: vendor: NLnet Labs
product: unbound
Published: 2018-01-23T16:00:00.000Z
CVE-2017-15107 
A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.
Problem types: cwe_id: CWE-358
description: CWE-358
Affected products: vendor: Simon Kelley
product: dnsmasq
Published: 2018-01-23T16:00:00.000Z
CVE-2017-15108 
spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed.
Problem types: cwe_id: CWE-78
description: CWE-78
Affected products: vendor: Red Hat, Inc.
product: spice-vdagent
Published: 2018-01-20T00:00:00.000Z
CVE-2017-15110 
In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students.
Problem types: description: improper access control
Affected products: vendor: n/a
product: Moodle 3.x
Published: 2017-11-20T14:00:00.000Z
CVE-2017-15111 
keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.
Problem types: cwe_id: CWE-377
description: CWE-377
Affected products: vendor: jdennis
product: keycloak-httpd-client-install
Published: 2018-01-20T00:00:00.000Z
CVE-2017-15112 
keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: jdennis
product: keycloak-httpd-client-install
Published: 2018-01-20T00:00:00.000Z
CVE-2017-15113 
ovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file without masking. Only administrators can change the log level and only administrators can access the logs. This presents a risk when debug-level logs are shared with vendors or other parties to troubleshoot issues.
Problem types: cwe_id: CWE-212
description: CWE-212
Affected products: vendor: Red Hat
product: ovirt-engine
Published: 2018-07-27T16:00:00.000Z
CVE-2017-15114 
When libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it defaults to the same certificate authority as all non-libvirtd services. As no additional authentication is configured this allows these services to connect to libvirtd (which is equivalent to root access). If a vulnerability exists in another service it could, combined with this flaw, be exploited to escalate privileges to gain control over compute nodes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-27T16:00:00.000Z
CVE-2017-15115 
The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls.
Problem types: description: local crash
Affected products: vendor: n/a
product: Linux kernel before 4.14-rc6
Published: 2017-11-15T21:00:00.000Z
CVE-2017-15116 
The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference).
Problem types: description: null pointer dereference
Affected products: vendor: n/a
product: Linux kernel
Published: 2017-11-30T18:00:00.000Z
CVE-2017-15118 
A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: QEMU
product: Qemu
Published: 2018-07-27T21:00:00.000Z
CVE-2017-15119 
The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from serving other requests, resulting in DoS.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: QEMU
product: qemu
Published: 2018-07-27T16:00:00.000Z
CVE-2017-15120 
An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer containing a CNAME of a different class than IN. An unauthenticated remote attacker could cause a denial of service.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: PowerDNS
product: pdns-recursor
Published: 2018-07-27T15:00:00.000Z
CVE-2017-15121 
A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Red Hat, Inc.
product: Red Hat Enterprise Linux
Published: 2017-12-06T16:00:00.000Z
CVE-2017-15123 
A flaw was found in the CloudForms web interface, versions 5.8 - 5.10, where the RSS feed URLs are not properly restricted to authenticated users only. An attacker could use this flaw to view potentially sensitive information from CloudForms including data such as newly created virtual machines.
Problem types: cwe_id: CWE-306
description: CWE-306
Affected products: vendor: redhat
product: CloudForms
Published: 2019-06-12T13:39:34.000Z
CVE-2017-15124 
VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer updates sent to its client. If the client did not consume these updates, VNC server allocates growing memory to hold onto this data. A malicious remote VNC client could use this flaw to cause DoS to the server host.
Problem types: cwe_id: CWE-770
description: CWE-770
Affected products: vendor: QEMU
product: Qemu
Published: 2018-01-09T21:00:00.000Z
CVE-2017-15125 
A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not properly sanitized for HTML and JavaScript input. An attacker could use this flaw to execute a stored XSS attack on an application administrator using CloudForms. Please note that CSP (Content Security Policy) prevents exploitation of this XSS however not all browsers support CSP.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Red Hat
product: cloudforms
Published: 2018-07-27T15:00:00.000Z
CVE-2017-15126 
A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events with userfaultfd_ctx_put().
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: Linux Kernel before 4.13.6
Published: 2018-01-14T06:00:00.000Z
CVE-2017-15127 
A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VM_SHARED hugetlbfs mapping could trigger a local denial of service (BUG).
Problem types: cwe_id: CWE-460
description: CWE-460
Affected products: vendor: n/a
product: Linux kernel before 4.13
Published: 2018-01-14T06:00:00.000Z
CVE-2017-15128 
A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13.12. A lack of size check could cause a denial of service (BUG).
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: Linux kernel before 4.13.12
Published: 2018-01-14T06:00:00.000Z
CVE-2017-15129 
A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function get_net_ns_by_id() in net/core/net_namespace.c does not check for the net::count value after it has found a peer network in netns_ids idr, which could lead to double free and memory corruption. This vulnerability could allow an unprivileged local user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is thought to be unlikely.
Problem types: cwe_id: CWE-362
description: CWE-362
Affected products: vendor: n/a
product: Linux kernel v4.0-rc1 through v4.15-rc5
Published: 2018-01-09T19:00:00.000Z
CVE-2017-15130 
A denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random SNI server names could exploit TLS SNI configuration lookups, leading to excessive memory usage and the process to restart.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: The Dovecot Project
product: dovecot
Published: 2018-03-02T15:00:00.000Z
CVE-2017-15131 
It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This only affects xdg-user-dirs before 0.15.5 as shipped with Red Hat Enterprise Linux.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: Red Hat, Inc.
product: RHEL shipped xdg-user-dirs and gnome-session
Published: 2018-01-09T21:00:00.000Z
CVE-2017-15132 
A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results in a memory leak in dovecot's auth client used by login processes. The leak has impact in high performance configuration where same login processes are reused and can cause the process to crash due to memory exhaustion.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: The Dovecot Project
product: dovecot
Published: 2018-01-25T20:00:00.000Z
CVE-2017-15133 
A denial of service flaw was found in miekg-dns before 1.0.4. A remote attacker could use carefully timed TCP packets to block the DNS server from accepting new connections.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: Miek Gieben
product: miekg-dns
Published: 2018-01-29T19:00:00.000Z
CVE-2017-15134 
A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x before 1.4.0.5 handled certain LDAP search filters. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.
Problem types: cwe_id: CWE-120
description: CWE-120
Affected products: vendor: Red Hat, Inc.
product: 389-ds-base
Published: 2018-03-01T21:00:00.000Z
CVE-2017-15135 
It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker could potentially use this flaw to bypass the authentication process under very rare and specific circumstances.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: Red Hat, Inc.
product: 389-ds-base
Published: 2018-01-24T15:00:00.000Z