rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-14141 
The wiki_decode Developer System Helper function in the admin panel in Kaltura before 13.2.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-19T15:00:00.000Z
CVE-2017-14142 
Multiple cross-site scripting (XSS) vulnerabilities in Kaltura before 13.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) partnerId or (2) playerVersion parameter to server/admin_console/web/tools/bigRedButton.php; the (3) partnerId, (4) playerVersion, (5) secret, (6) entryId, (7) adminUiConfId, or (8) uiConfId parameter to server/admin_console/web/tools/bigRedButtonPtsPoc.php; the (9) streamUsername, (10) streamPassword, (11) streamRemoteId, (12) streamRemoteBackupId, or (13) entryId parameter to server/admin_console/web/tools/AkamaiBroadcaster.php; the (14) entryId parameter to server/admin_console/web/tools/XmlJWPlayer.php; or the (15) partnerId or (16) playerVersion parameter to server/alpha/web/lib/bigRedButtonPtsPocHlsjs.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-19T15:00:00.000Z
CVE-2017-14143 
The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, which allows remote attackers to bypass an intended protection mechanism and consequently conduct PHP object injection attacks and execute arbitrary PHP code via a crafted userzone cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-19T15:00:00.000Z
CVE-2017-14145 
HelpDEZk 1.1.1 has SQL Injection in app\modules\admin\controllers\loginController.php via the admin/login/getWarningInfo/id/ PATH_INFO, related to the selectWarning function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-05T07:00:00.000Z
CVE-2017-14146 
HelpDEZk 1.1.1 allows remote authenticated users to execute arbitrary PHP code by uploading a .php attachment and then requesting it in the helpdezk\app\uploads\helpdezk\attachments\ directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-05T07:00:00.000Z
CVE-2017-14147 
An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link http://[Default-Router-IP]/restoreinfo.cgi & execute it. Due to improper authentication on this page, the software accepts the request hence allowing attacker to reset the router to its default configurations which later could allow attacker to login to router by using default username/password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T14:00:00.000Z
CVE-2017-14149 
GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a "POST / HTTP/1.1" request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-05T07:00:00.000Z
CVE-2017-14151 
An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_mqc_flush in lib/openjp2/mqc.c and opj_t1_encode_cblk in lib/openjp2/t1.c) or possibly remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-05T16:00:00.000Z
CVE-2017-14152 
A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib/openjp2/cio.c and opj_j2k_write_sot in lib/openjp2/j2k.c) or possibly remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-05T16:00:00.000Z
CVE-2017-14153 
This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x953824b7 by the windrvr1240 kernel driver. The issue lies in the failure to properly validate user-supplied data which can result in a kernel pool overflow. An attacker can leverage this vulnerability to execute arbitrary code under the context of kernel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T17:00:00.000Z
CVE-2017-14156 
The atyfb_ioctl function in drivers/video/fbdev/aty/atyfb_base.c in the Linux kernel through 4.12.10 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading locations associated with padding bytes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-05T17:00:00.000Z
CVE-2017-14158 
Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by interaction between dataReceived (in core/downloader/handlers/http11.py) and S3FilesStore.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-05T17:00:00.000Z
CVE-2017-14159 
slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat /pathname`" command, as demonstrated by openldap-initscript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-05T18:00:00.000Z
CVE-2017-14160 
The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact via a crafted mp4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T14:00:00.000Z
CVE-2017-14163 
An issue was discovered in Mahara before 15.04.14, 16.x before 16.04.8, 16.10.x before 16.10.5, and 17.x before 17.04.3. When one closes the browser without logging out of Mahara, the value in the usr_session table is not removed. If someone were to open a browser, visit the Mahara site, and adjust the 'mahara' cookie to the old value, they can get access to the user's account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-31T18:00:00.000Z
CVE-2017-14164 
A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib/openjp2/cio.c) or possibly remote code execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-14152.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-06T18:00:00.000Z
CVE-2017-14165 
The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has an issue where memory allocation is excessive because it depends only on a length field in a header. This may lead to remote denial of service in the MagickMalloc function in magick/memory.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-06T18:00:00.000Z
CVE-2017-14166 
libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archive_read_support_format_xar.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-06T18:00:00.000Z
CVE-2017-14167 
Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, which trigger an out-of-bounds write.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-08T18:00:00.000Z
CVE-2017-14169 
In the mxf_read_primer_pack function in libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, an integer signedness error might occur when a crafted file, which claims a large "item_num" field such as 0xffffffff, is provided. As a result, the variable "item_num" turns negative, bypassing the check for a large value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T06:00:00.000Z
CVE-2017-14170 
In libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, a DoS in mxf_read_index_entry_array() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted MXF file, which claims a large "nb_index_entries" field in the header but does not contain sufficient backing data, is provided, the loop would consume huge CPU resources, since there is no EOF check inside the loop. Moreover, this big loop can be invoked multiple times if there is more than one applicable data segment in the crafted MXF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T06:00:00.000Z
CVE-2017-14171 
In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted NSV file, which claims a large "table_entries_used" field in the header but does not contain sufficient backing data, is provided, the loop over 'table_entries_used' would consume huge CPU resources, since there is no EOF check inside the loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T06:00:00.000Z
CVE-2017-14172 
In coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims a large "extent" field in the header but does not contain sufficient backing data, is provided, the loop over "length" would consume huge CPU resources, since there is no EOF check inside the loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T06:00:00.000Z
CVE-2017-14173 
In the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRange(depth)+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a very large "max_value" value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T06:00:00.000Z
CVE-2017-14174 
In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims a large "length" field in the header but does not contain sufficient backing data, is provided, the loop over "length" would consume huge CPU resources, since there is no EOF check inside the loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T06:00:00.000Z
CVE-2017-14175 
In coders/xbm.c in ImageMagick 7.0.6-1 Q16, a DoS in ReadXBMImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted XBM file, which claims large rows and columns fields in the header but does not contain sufficient backing data, is provided, the loop over the rows would consume huge CPU resources, since there is no EOF check inside the loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T06:00:00.000Z
CVE-2017-14176 
Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands via a bzr+ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117.
Problem types: description: command injection
Affected products: vendor: n/a
product: Bazaar through 2.7.0
Published: 2017-11-27T10:00:00.000Z
CVE-2017-14177 
Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1324.
Problem types: description: Denial of service via resource exhaustion and privilege escalation
Affected products: vendor: n/a
product: Apport
Credits: lang: en
value: Sander Bos
Published: 2018-02-02T14:00:00.000Z
CVE-2017-14178 
In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.
Problem types: description: Information leak
Affected products: vendor: n/a
product: snapd
Credits: lang: en
value: Robert Ancell
Published: 2018-02-02T14:00:00.000Z
CVE-2017-14179 
Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers.
Problem types: description: Denial of service via resource exhaustion, privilege escalation, and escape from containers
Affected products: vendor: n/a
product: Apport
Credits: lang: en
value: Sander Bos
Published: 2018-02-02T14:00:00.000Z
CVE-2017-14180 
Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges, a different vulnerability than CVE-2017-14179.
Problem types: description: Denial of service via resource exhaustion and privilege escalation
Affected products: vendor: na/
product: Apport
Credits: lang: en
value: Sander Bos
Published: 2018-02-02T14:00:00.000Z
CVE-2017-14181 
DeleteBitBuffer in libbitbuf/bitbuffer.c in mp4tools aacplusenc 0.17.5 allows remote attackers to cause a denial of service (invalid memory write, SEGV on unknown address 0x000000000030, and application crash) or possibly have unspecified other impact via a crafted .wav file, aka a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T16:00:00.000Z
CVE-2017-14182 
A Denial of Service (DoS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an authenticated user to cause the web GUI to be temporarily unresponsive, via passing a specially crafted payload to the 'params' parameter of the JSON web API.
Problem types: description: Denial of Service (DoS)
Affected products: vendor: Fortinet
product: Fortinet FortiOS
Published: 2017-10-27T13:00:00.000Z
CVE-2017-14184 
An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334 and below versions allows regular users to see each other's VPN authentication credentials due to improperly secured storage locations.
Problem types: description: Information Disclosure
Affected products: vendor: Fortinet, Inc.
product: FortiClient for Windows
vendor: Fortinet, Inc.
product: FortiClient for Mac OSX
vendor: Fortinet, Inc.
product: FortiClient SSLVPN Client for Linux
Published: 2017-12-15T21:00:00.000Z
CVE-2017-14185 
An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal users to access internal FortiOS configuration information (eg:addresses) via specifically crafted URLs inside the SSL-VPN web portal.
Problem types: description: Information disclosure
Affected products: vendor: Fortinet, Inc.
product: FortiOS
Published: 2018-05-25T16:00:00.000Z
CVE-2017-14186 
A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below versions under SSL VPN web portal allows a remote user to inject arbitrary web script or HTML in the context of the victim's browser via the login redir parameter. An URL Redirection attack may also be feasible by injecting an external URL via the affected parameter.
Problem types: description: Cross-site Scripting (XSS), URL Redirection Attack
Affected products: vendor: Fortinet, Inc.
product: FortiOS
Published: 2017-11-29T19:00:00.000Z
CVE-2017-14187 
A local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and 5.2 and below versions allows attacker to execute unauthorized binary program contained on an USB drive plugged into a FortiGate via linking the aforementioned binary program to a command that is allowed to be run by the fnsysctl CLI command.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet, Inc.
product: FortiOS
Published: 2018-05-24T20:00:00.000Z
CVE-2017-14189 
An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webUI to successfully log-in regardless the provided password.
Problem types: description: Improper Access Control
Affected products: vendor: Fortinet, Inc.
product: FortiWebManager
Published: 2017-11-29T19:00:00.000Z
CVE-2017-14190 
A Cross-site Scripting vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.7, 5.2 and earlier, allows attacker to inject arbitrary web script or HTML via maliciously crafted "Host" header in user HTTP requests.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet, Inc.
product: FortiOS
Published: 2018-01-29T16:00:00.000Z
CVE-2017-14191 
An Improper Access Control vulnerability in Fortinet FortiWeb 5.6.0 up to but not including 6.1.0 under "Signed Security Mode", allows attacker to bypass the signed user cookie protection by removing the FortiWeb own protection session cookie.
Problem types: description: Improper Access Control
Affected products: vendor: Fortinet, Inc.
product: FortiWeb
Published: 2018-03-20T13:00:00.000Z
CVE-2017-14192 
The checktitle function in controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the module field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T17:00:00.000Z
CVE-2017-14193 
The oauth function in controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the Referer HTTP header with Internet Explorer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T17:00:00.000Z
CVE-2017-14194 
The out function in controllers/member/Login.php in dayrui FineCms 5.0.11 has XSS related to the Referer HTTP header with Internet Explorer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T17:00:00.000Z
CVE-2017-14195 
The call_msg function in controllers/Form.php in dayrui FineCms 5.0.11 might have XSS related to the Referer HTTP header with Internet Explorer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T17:00:00.000Z
CVE-2017-14196 
An issue was discovered in Squiz Matrix from 5.3 through to 5.3.6.1 and 5.4.1.3. An information disclosure caused by a Path Traversal issue in the 'File Bridge' plugin allowed the existence of files outside of the bridged path to be confirmed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-30T02:00:00.000Z
CVE-2017-14197 
An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. There are multiple reflected Cross-Site Scripting (XSS) issues in Matrix WYSIWYG plugins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-30T02:00:00.000Z
CVE-2017-14198 
An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated users with permissions to edit design assets can cause Remote Code Execution (RCE) via a maliciously crafted time_format tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-30T02:00:00.000Z
CVE-2017-14199 
A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0.
Problem types: description: Buffer Overflow
Affected products: vendor: Zephyr
product: getaddrinfo
Published: 2019-04-12T16:20:02.000Z
CVE-2017-14201 The shell DNS command can cause unpredictable results due to misuse of stack variables.
Use After Free vulnerability in the Zephyr shell allows a serial or telnet connected user to cause denial of service, and possibly remote code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all.
Problem types: cwe_id: CWE-416
description: CWE-416 Use After Free
Affected products: vendor: Zephyr
product: shell
Published: 2019-08-29T00:44:16.325Z
CVE-2017-14202 The shell implementation does not protect against buffer overruns resulting in unpredictable behavior.
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all.
Problem types: cwe_id: CWE-119
description: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: Zephyr
product: shell
Published: 2019-08-29T00:44:13.046Z
CVE-2017-14219 
XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless credentials without being connected to the network, related to userRpm/popupSiteSurveyRpm.htm and userRpm/WlanSecurityRpm.htm. The attack vector is a crafted ESSID, as demonstrated by an "airbase-ng -e" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T22:00:00.000Z
CVE-2017-14222 
In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "item_count" field in the header but does not contain sufficient backing data, is provided, the loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-09T01:00:00.000Z
CVE-2017-14223 
In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but does not contain sufficient backing data, is provided, the for loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-09T01:00:00.000Z
CVE-2017-14224 
A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-09T01:00:00.000Z