rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-1000387 
Jenkins Build-Publisher plugin version 1.21 and earlier stores credentials to other Jenkins instances in the file hudson.plugins.build_publisher.BuildPublisher.xml in the Jenkins master home directory. These credentials were stored unencrypted, allowing anyone with local file system access to access them. Additionally, the credentials were also transmitted in plain text as part of the configuration form. This could result in exposure of the credentials through browser extensions, cross-site scripting vulnerabilities, and similar situations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T02:00:00.000Z
CVE-2017-1000388 
Jenkins Dependency Graph Viewer plugin 0.12 and earlier did not perform permission checks for the API endpoint that modifies the dependency graph, allowing anyone with Overall/Read permission to modify this data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T02:00:00.000Z
CVE-2017-1000389 
Some URLs provided by Jenkins global-build-stats plugin version 1.4 and earlier returned a JSON response that contained request parameters. These responses had the Content Type: text/html, so could have been interpreted as HTML by clients, resulting in a potential reflected cross-site scripting vulnerability. Additionally, some URLs provided by global-build-stats plugin that modify data did not require POST requests to be sent, resulting in a potential cross-site request forgery vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T02:00:00.000Z
CVE-2017-1000390 
Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T02:00:00.000Z
CVE-2017-1000391 
Jenkins versions 2.88 and earlier and 2.73.2 and earlier stores metadata related to 'people', which encompasses actual user accounts, as well as users appearing in SCM, in directories corresponding to the user ID on disk. These directories used the user ID for their name without additional escaping, potentially resulting in problems like overwriting of unrelated configuration files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T02:00:00.000Z
CVE-2017-1000392 
Jenkins 2.88 and earlier; 2.73.2 and earlier Autocompletion suggestions for text fields were not escaped, resulting in a persisted cross-site scripting vulnerability if the source for the suggestions allowed specifying text that includes HTML metacharacters like less-than and greater-than characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T02:00:00.000Z
CVE-2017-1000393 
Jenkins 2.73.1 and earlier, 2.83 and earlier users with permission to create or configure agents in Jenkins could configure a launch method called 'Launch agent via execution of command on master'. This allowed them to run arbitrary shell commands on the master node whenever the agent was supposed to be launched. Configuration of this launch method now requires the Run Scripts permission typically only granted to administrators.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T02:00:00.000Z
CVE-2017-1000394 
Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-fileupload library with the denial-of-service vulnerability known as CVE-2016-3092. The fix for that vulnerability has been backported to the version of the library bundled with Jenkins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T02:00:00.000Z
CVE-2017-1000395 
Jenkins 2.73.1 and earlier, 2.83 and earlier provides information about Jenkins user accounts which is generally available to anyone with Overall/Read permissions via the /user/(username)/api remote API. This included e.g. Jenkins users' email addresses if the Mailer Plugin is installed. The remote API now no longer includes information beyond the most basic (user ID and name) unless the user requesting it is a Jenkins administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T02:00:00.000Z
CVE-2017-1000396 
Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks. This library is widely used as a transitive dependency in Jenkins plugins. The fix for CVE-2012-6153 was backported to the version of commons-httpclient that is bundled in core and made available to plugins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T02:00:00.000Z
CVE-2017-1000397 
Jenkins Maven Plugin 2.17 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks. Maven Plugin 3.0 no longer has a dependency on commons-httpclient.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T02:00:00.000Z
CVE-2017-1000398 
The remote API in Jenkins 2.73.1 and earlier, 2.83 and earlier at /computer/(agent-name)/api showed information about tasks (typically builds) currently running on that agent. This included information about tasks that the current user otherwise has no access to, e.g. due to lack of Item/Read permission. This has been fixed, and the API now only shows information about accessible tasks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T02:00:00.000Z
CVE-2017-1000399 
The Jenkins 2.73.1 and earlier, 2.83 and earlier remote API at /queue/item/(ID)/api showed information about tasks in the queue (typically builds waiting to start). This included information about tasks that the current user otherwise has no access to, e.g. due to lack of Item/Read permission. This has been fixed, and the API endpoint is now only available for tasks that the current user has access to.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T02:00:00.000Z
CVE-2017-1000400 
The Jenkins 2.73.1 and earlier, 2.83 and earlier remote API at /job/(job-name)/api contained information about upstream and downstream projects. This included information about tasks that the current user otherwise has no access to, e.g. due to lack of Item/Read permission. This has been fixed, and the API now only lists upstream and downstream projects that the current user has access to.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T02:00:00.000Z
CVE-2017-1000401 
The Jenkins 2.73.1 and earlier, 2.83 and earlier default form control for passwords and other secrets, <f:password/>, supports form validation (e.g. for API keys). The form validation AJAX requests were sent via GET, which could result in secrets being logged to a HTTP access log in non-default configurations of Jenkins, and made available to users with access to these log files. Form validation for <f:password/> is now always sent via POST, which is typically not logged.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T02:00:00.000Z
CVE-2017-1000402 
Jenkins Swarm Plugin Client 3.4 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T02:00:00.000Z
CVE-2017-1000403 
Jenkins Speaks! Plugin, all current versions, allows users with Job/Configure permission to run arbitrary Groovy code inside the Jenkins JVM, effectively elevating privileges to Overall/Run Scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T02:00:00.000Z
CVE-2017-1000404 
The Jenkins Delivery Pipeline Plugin version 1.0.7 and earlier used the unescaped content of the query parameter 'fullscreen' in its JavaScript, resulting in a cross-site scripting vulnerability through specially crafted URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T02:00:00.000Z
CVE-2017-1000405 
The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside the THP implementation. touch_pmd() can be reached by get_user_pages(). In such case, the pmd will become dirty. This scenario breaks the new can_follow_write_pmd()'s logic - pmd can become dirty without going through a COW cycle. This bug is not as severe as the original "Dirty cow" because an ext4 file (or any other regular file) cannot be mapped using THP. Nevertheless, it does allow us to overwrite read-only huge pages. For example, the zero huge page and sealed shmem files can be overwritten (since their mapping can be populated using THP). Note that after the first write page-fault to the zero page, it will be replaced with a new fresh (and zeroed) thp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-30T22:00:00.000Z
CVE-2017-1000406 
OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cache is manually cleared (e.g. via restart).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-30T21:00:00.000Z
CVE-2017-1000407 
The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exception can be triggered leading to a kernel panic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T21:00:00.000Z
CVE-2017-1000408 
A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-01T04:00:00.000Z
CVE-2017-1000409 
A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-01T04:00:00.000Z
CVE-2017-1000410 
The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. This info leak is a result of uninitialized stack variables that may be returned to an attacker in their uninitialized state. By manipulating the code flows that precede the handling of these configuration messages, an attacker can also gain some control over which data will be held in the uninitialized stack variables. This can allow him to bypass KASLR, and stack canaries protection - as both pointers and stack canaries may be leaked in this manner. Combining this vulnerability (for example) with the previously disclosed RCE vulnerability in L2CAP configuration parsing (CVE-2017-1000251) may allow an attacker to exploit the RCE against kernels which were built with the above mitigations. These are the specifics of this vulnerability: In the function l2cap_parse_conf_rsp and in the function l2cap_parse_conf_req the following variable is declared without initialization: struct l2cap_conf_efs efs; In addition, when parsing input configuration parameters in both of these functions, the switch case for handling EFS elements may skip the memcpy call that will write to the efs variable: ... case L2CAP_CONF_EFS: if (olen == sizeof(efs)) memcpy(&efs, (void *)val, olen); ... The olen in the above if is attacker controlled, and regardless of that if, in both of these functions the efs variable would eventually be added to the outgoing configuration request that is being built: l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, sizeof(efs), (unsigned long) &efs); So by sending a configuration request, or response, that contains an L2CAP_CONF_EFS element, but with an element length that is not sizeof(efs) - the memcpy to the uninitialized efs variable can be avoided, and the uninitialized variable would be returned to the attacker (16 bytes).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-07T19:00:00.000Z
CVE-2017-1000411 
OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil Vishnoi contain a flaw when multiple 'expired' flows take up the memory resource of CONFIG DATASTORE which leads to CONTROLLER shutdown. If multiple different flows with 'idle-timeout' and 'hard-timeout' are sent to the Openflow Plugin REST API, the expired flows will eventually crash the controller once its resource allocations set with the JVM size are exceeded. Although the installed flows (with timeout set) are removed from network (and thus also from controller's operations DS), the expired entries are still present in CONFIG DS. The attack can originate both from NORTH or SOUTH. The above description is for a north bound attack. A south bound attack can originate when an attacker attempts a flow flooding attack and since flows come with timeouts, the attack is not successful. However, the attacker will now be successful in CONTROLLER overflow attack (resource consumption). Although, the network (actual flow tables) and operational DS are only (~)1% occupied, the controller requests for resource consumption. This happens because the installed flows get removed from the network upon timeout.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-31T14:00:00.000Z
CVE-2017-1000412 
Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T17:00:00.000Z
CVE-2017-1000413 
Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T17:00:00.000Z
CVE-2017-1000414 
ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode handling resulting denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-25T16:00:00.000Z
CVE-2017-1000415 
MatrixSSL version 3.7.2 has an incorrect UTCTime date range validation in its X.509 certificate validation process resulting in some certificates have their expiration (beginning) year extended (delayed) by 100 years.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-09T20:00:00.000Z
CVE-2017-1000416 
axTLS version 1.5.3 has a coding error in the ASN.1 parser resulting in the year (19)50 of UTCTime being misinterpreted as 2050.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-22T23:00:00.000Z
CVE-2017-1000417 
MatrixSSL version 3.7.2 adopts a collision-prone OID comparison logic resulting in possible spoofing of OIDs (e.g. in ExtKeyUsage extension) on X.509 certificates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-22T23:00:00.000Z
CVE-2017-1000418 
The WildMidi_Open function in WildMIDI since commit d8a466829c67cacbb1700beded25c448d99514e5 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T18:00:00.000Z
CVE-2017-1000419 
phpBB version 3.2.0 is vulnerable to SSRF in the Remote Avatar function resulting allowing an attacker to perform port scanning, requesting internal content and potentially attacking such internal services via the web application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T19:00:00.000Z
CVE-2017-1000420 
Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T19:00:00.000Z
CVE-2017-1000421 
Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the read_gif function resulting potential code execution
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T19:00:00.000Z
CVE-2017-1000422 
Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gif_get_lzw function resulting in memory corruption and potential code execution
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T20:00:00.000Z
CVE-2017-1000423 
b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation (backslash and single quote escape) in basic install functionality resulting in unauthenticated attacker gaining PHP code execution on the victim's setup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T20:00:00.000Z
CVE-2017-1000424 
Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T20:00:00.000Z
CVE-2017-1000425 
Cross-site scripting (XSS) vulnerability in the /html/portal/flash.jsp page in Liferay Portal CE 7.0 GA4 and older allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the "movie" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T23:00:00.000Z
CVE-2017-1000426 
MapProxy version 1.10.3 and older is vulnerable to a Cross Site Scripting attack in the demo service resulting in possible information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T21:00:00.000Z
CVE-2017-1000427 
marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T23:00:00.000Z
CVE-2017-1000428 
flatCore-CMS 1.4.6 is vulnerable to reflected XSS in user_management.php due to the use of $_SERVER['PHP_SELF'] to build links and a stored XSS in the admin log panel by specifying a malformed User-Agent string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-10T02:00:00.000Z
CVE-2017-1000429 
rui Li finecms 5.0.10 is vulnerable to a reflected XSS in the file Weixin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-09T21:00:00.000Z
CVE-2017-1000430 
rust-base64 version <= 0.5.1 is vulnerable to a buffer overflow when calculating the size of a buffer to use when encoding base64 using the 'encode_config_buf' and 'encode_config' functions
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T20:00:00.000Z
CVE-2017-1000431 
eZ Systems eZ Publish version 5.4.0 to 5.4.9, and 5.3.12 and older, is vulnerable to an XSS issue in the search module, resulting in a risk of attackers injecting scripts which may e.g. steal authentication credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T20:00:00.000Z
CVE-2017-1000432 
Vanilla Forums below 2.1.5 are affected by CSRF leading to Deleting topics and comments from forums Admin access
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T23:00:00.000Z
CVE-2017-1000433 
pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T23:00:00.000Z
CVE-2017-1000434 
Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to an attacker controlled page classes/Furigana.php: header('location:'.urldecode($_GET['furikake-redirect']));
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T23:00:00.000Z
CVE-2017-1000437 
Creolabs Gravity 1.0 contains a stack based buffer overflow in the operator_string_add function, resulting in remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T23:00:00.000Z
CVE-2017-1000438 
In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T23:00:00.000Z
CVE-2017-1000442 
Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T14:00:00.000Z
CVE-2017-1000443 
Eleix Openhacker version 0.1.47 is vulnerable to a XSS vulnerability in the bank transactions component resulting in arbitrary code execution in the browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T14:00:00.000Z
CVE-2017-1000444 
Eleix Openhacker version 0.1.47 is vulnerable to an SQL injection in the account registration and login component resulting in information disclosure and remote code execution
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T15:00:00.000Z
CVE-2017-1000445 
ImageMagick 7.0.7-1 and older version are vulnerable to null pointer dereference in the MagickCore component and might lead to denial of service
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T15:00:00.000Z
CVE-2017-1000448 
Structured Data Linter versions 2.4.1 and older are vulnerable to a directory traversal attack in the URL input field resulting in the possibility of disclosing information about the remote host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T17:00:00.000Z
CVE-2017-1000450 
In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T17:00:00.000Z
CVE-2017-1000451 
fs-git is a file system like api for git repository. The fs-git version 1.0.1 module relies on child_process.exec, however, the buildCommand method used to construct exec strings does not properly sanitize data and is vulnerable to command injection across all methods that use it and call exec.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T17:00:00.000Z
CVE-2017-1000452 
An XML Signature Wrapping vulnerability exists in Samlify 2.2.0 and earlier, and in predecessor Express-saml2 which could allow attackers to impersonate arbitrary users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-02T17:00:00.000Z