rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-16869 
p_mach.cpp in UPX 3.94 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted Mach-O file, related to canPack and unpack functions. NOTE: the vendor has stated "there is no security implication whatsoever.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-17T09:00:00.000Z
CVE-2017-16870 
The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the updraft_ajax_handler function in /wp-content/plugins/updraftplus/admin.php via an httpget subaction. NOTE: the vendor reports that this does not cross a privilege boundary
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-17T09:00:00.000Z
CVE-2017-16871 
The UpdraftPlus plugin through 1.13.12 for WordPress allows remote PHP code execution because the plupload_action function in /wp-content/plugins/updraftplus/admin.php has a race condition before deleting a file associated with the name parameter. NOTE: the vendor reports that this does not cross a privilege boundary
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-17T09:00:00.000Z
CVE-2017-16872 
An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. Parsing the numeric header fields in a SIP message (like cseq, ttl, port, etc.) all had the potential to overflow, either causing unintended values to be captured or, if the values were subsequently converted back to strings, a buffer overrun. This will lead to a potential exploit using carefully crafted invalid values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-17T09:00:00.000Z
CVE-2017-16873 
It is possible to exploit an unsanitized PATH in the suid binary that ships with vagrant-vmware-fusion 4.0.25 through 5.0.4 in order to escalate to root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-29T22:00:00.000Z
CVE-2017-16875 
An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow, which may cause ioqueue backends to reject future key registrations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-17T16:00:00.000Z
CVE-2017-16876 
Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-29T15:00:00.000Z
CVE-2017-16877 
ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-17T17:00:00.000Z
CVE-2017-16878 
Cross-site scripting (XSS) vulnerability in the Captive Portal function in Palo Alto Networks PAN-OS before 8.0.7 allows remote attackers to inject arbitrary web script or HTML by leveraging an unspecified configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-10T18:00:00.000Z
CVE-2017-16879 
Stack-based buffer overflow in the _nc_write_entry function in tinfo/write_entry.c in ncurses 6.0 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted terminfo file, as demonstrated by tic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-22T22:00:00.000Z
CVE-2017-16880 
The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-17T21:00:00.000Z
CVE-2017-16881 
b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarURL value to /settings/avatar, related to processor/AdminProcessor.java, processor/ArticleProcessor.java, processor/UserProcessor.java, service/ArticleQueryService.java, service/AvatarQueryService.java, and service/CommentQueryService.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-18T13:00:00.000Z
CVE-2017-16882 
Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file is owned by a non-root account (and similarly can have etc/icinga.cfg owned by a non-root account), which allows local users to gain privileges by leveraging access to this non-root account, a related issue to CVE-2017-14312. This also affects bin/icingastats, bin/ido2db, and bin/log2ido.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-18T18:00:00.000Z
CVE-2017-16883 
The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-18T18:00:00.000Z
CVE-2017-16884 
Cross-site scripting (XSS) vulnerability in MistServer before 2.13 allows remote attackers to inject arbitrary web script or HTML via vectors related to failed authentication requests alerts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-06T16:00:00.000Z
CVE-2017-16885 
Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices (intended for obtaining information about Internet Usage, Changing Passwords, etc.) allows remote attackers to look for the information without authenticating. The information includes Version of device, Firmware ID, Connected users to device along their MAC Addresses, etc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-12T17:00:00.000Z
CVE-2017-16886 
The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or password of the administrator of the portal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-12T17:00:00.000Z
CVE-2017-16887 
The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-12T17:00:00.000Z
CVE-2017-16890 
SWFTools 0.9.2 has a divide-by-zero error in the wav_convert2mono function in lib/wav.c because the align value may be zero.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-09T11:00:00.000Z
CVE-2017-16892 
In Bftpd before 4.7, there is a memory leak in the file rename function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-19T17:00:00.000Z
CVE-2017-16893 
The application Piwigo is affected by an SQL injection vulnerability in version 2.9.2 and possibly prior. This vulnerability allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. tags.php is affected: values of the edit_list parameters are not sanitized; these are used to construct an SQL query and retrieve a list of registered users into the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-01T17:00:00.000Z
CVE-2017-16894 
In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwords) via a direct request for the /.env URI. NOTE: this CVE is only about Laravel framework's writeNewEnvironmentFileWith function in src/Illuminate/Foundation/Console/KeyGenerateCommand.php, which uses file_put_contents without restricting the .env permissions. The .env filename is not used exclusively by Laravel framework.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-20T01:00:00.000Z
CVE-2017-16895 
The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges via a crafted data packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-01T17:00:00.000Z
CVE-2017-16896 
A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-20T16:00:00.000Z
CVE-2017-16897 
A vulnerability has been discovered in the Auth0 passport-wsfed-saml2 library affecting versions < 3.0.5. This vulnerability allows an attacker to impersonate another user and potentially elevate their privileges if the SAML identity provider does not sign the full SAML response (e.g., only signs the assertion within the response).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-23T21:00:00.000Z
CVE-2017-16898 
The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, which may allow attackers to cause a denial of service via a crafted file, a different vulnerability than CVE-2016-9264.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-20T17:00:00.000Z
CVE-2017-16899 
An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the read_textobject functions in read.c and read1_3.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-20T18:00:00.000Z
CVE-2017-16900 
Incorrect Access Control in Hunesion i-oneNet 3.0.6042.1200 allows the local user to access other user's information which is unauthorized via brute force.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-27T17:39:44.000Z
CVE-2017-16902 
On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-20T18:00:00.000Z
CVE-2017-16903 
LvyeCMS through 3.1 allows remote attackers to upload and execute arbitrary PHP code via directory traversal sequences in the dir parameter, in conjunction with PHP code in the content parameter, within a template Style add request to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-20T19:00:00.000Z
CVE-2017-16904 
The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled during later log viewing by an administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-20T19:00:00.000Z
CVE-2017-16905 
The DuoLingo TinyCards application before 1.0 for Android has one use of unencrypted HTTP, which allows remote attackers to spoof content, and consequently achieve remote code execution, via a man-in-the-middle attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-05T08:00:00.000Z
CVE-2017-16906 
In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL field in a "Calendar -> New Event" action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-20T20:00:00.000Z
CVE-2017-16907 
In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-20T20:00:00.000Z
CVE-2017-16908 
In Horde Groupware 5.2.19, there is XSS via the Name field during creation of a new Resource. This can be leveraged for remote code execution after compromising an administrator account, because the CVE-2015-7984 CSRF protection mechanism can then be bypassed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-20T20:00:00.000Z
CVE-2017-16909 
An error related to the "LibRaw::panasonic_load_raw()" function (dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially crafted TIFF image.
Problem types: description: DoS (Denial of Service) through heap-based buffer overflow
Affected products: vendor: n/a
product: LibRaw
Published: 2018-12-07T22:00:00.000Z
CVE-2017-16910 
An error within the "LibRaw::xtrans_interpolate()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service condition.
Problem types: description: DoS (Denial of Service) through invalid read memory access
Affected products: vendor: n/a
product: LibRaw
Published: 2018-12-07T22:00:00.000Z
CVE-2017-16911 
The vhci_hcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows allows local attackers to disclose kernel memory addresses. Successful exploitation requires that a USB device is attached over IP.
Problem types: description: Kernel memory address disclosure
Affected products: vendor: Flexera Software LLC
product: Linux Kernel
Published: 2018-01-31T22:00:00.000Z
CVE-2017-16912 
The "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of service (out-of-bounds read) via a specially crafted USB over IP packet.
Problem types: description: Denial of service (out-of-bounds read)
Affected products: vendor: Flexera Software LLC
product: Linux Kernel
Published: 2018-01-31T22:00:00.000Z
CVE-2017-16913 
The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMD_SUBMIT packets allows attackers to cause a denial of service (arbitrary memory allocation) via a specially crafted USB over IP packet.
Problem types: description: Denial of service (arbitrary memory allocation)
Affected products: vendor: Flexera Software LLC
product: Linux Kernel
Published: 2018-01-31T22:00:00.000Z
CVE-2017-16914 
The "stub_send_ret_submit()" function (drivers/usb/usbip/stub_tx.c) in the Linux Kernel before version 4.14.8, 4.9.71, 4.1.49, and 4.4.107 allows attackers to cause a denial of service (NULL pointer dereference) via a specially crafted USB over IP packet.
Problem types: description: Denial of service (NULL pointer dereference)
Affected products: vendor: Flexera Software LLC
product: Linux Kernel
Published: 2018-01-31T22:00:00.000Z
CVE-2017-16919 
MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-21T08:00:00.000Z
CVE-2017-16920 
v5/config/system.php in dayrui FineCms 5.2.0 has a default SYS_KEY value and does not require key regeneration for each installation, which allows remote attackers to upload arbitrary .php files via a member api swfupload action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-21T13:00:00.000Z
CVE-2017-16921 
In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who is logged into OTRS as an agent can manipulate form parameters (related to PGP) and execute arbitrary shell commands with the permissions of the OTRS or web server user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-08T15:00:00.000Z
CVE-2017-16922 
In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1, traversal of the directory structure and retrieval of a file are possible via a remote, specifically crafted HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T18:00:00.000Z
CVE-2017-16923 
Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15 US_AC15V1.0BR_V15.03.05.18_multi_TD01, Ac15 US_AC15V1.0BR_V15.03.05.19_multi_TD01, Ac18 US_AC18V1.0BR_V15.03.05.05_multi_TD01, and Ac18 ac18_kf_V15.03.05.19(6318_)_cn devices allows remote unauthenticated attackers to execute arbitrary OS commands via a crafted cgi-bin/luci/usbeject?dev_name= GET request from the LAN. This occurs because the "sub_A6E8 usbeject_process_entry" function executes a system function with untrusted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-21T14:00:00.000Z
CVE-2017-16924 
Remote Information Disclosure and Escalation of Privileges in ManageEngine Desktop Central MSP 10.0.137 allows attackers to download unencrypted XML files containing all data for configuration policies via a predictable /client-data/<client_id>/collections/##/usermgmt.xml URL, as demonstrated by passwords and Wi-Fi keys. This is fixed in build 100157.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-19T04:00:00.000Z
CVE-2017-16926 
Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing a source tree for Ohcount processing) to execute arbitrary code as the user running Ohcount.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-22T08:00:00.000Z
CVE-2017-16927 
The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted input stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-23T06:00:00.000Z
CVE-2017-16928 
The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted update URL, as demonstrated by file:///tmp/blah/Arq.zip.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-31T20:00:00.000Z
CVE-2017-16929 
The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversal vulnerability exploited by issuing a specially crafted request, allowing a remote attacker to read/write arbitrary files. This can be exploited via ../ sequences in the pathname to miner_file or miner_getfile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-05T09:00:00.000Z
CVE-2017-16930 
The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the request handler. This can be exploited via a long API request that is mishandled during logging.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-05T09:00:00.000Z
CVE-2017-16931 
parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-23T21:00:00.000Z
CVE-2017-16932 
parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-23T21:00:00.000Z
CVE-2017-16933 
etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging access to the $ICINGA2_USER account for creation of a link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-24T05:00:00.000Z
CVE-2017-16934 
The web server on DBL DBLTek devices allows remote attackers to execute arbitrary OS commands by obtaining the admin password via a frame.html?content=/dev/mtdblock/5 request, and then using this password for the HTTP Basic Authentication needed for a change_password.csp request, which supports a "<%%25call system.exec:" string in the passwd parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-24T07:00:00.000Z
CVE-2017-16935 
Ametys before 4.0.3 requires authentication only for URIs containing a /cms/ substring, which allows remote attackers to bypass intended access restrictions via a direct request to /plugins/core-ui/servercomm/messages.xml, as demonstrated by changing the admin password by obtaining account details via a users/search.json request, and then modifying the account via an editUser request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-24T07:00:00.000Z
CVE-2017-16936 
Directory Traversal vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15 US_AC15V1.0BR_V15.03.05.18_multi_TD01, Ac15 US_AC15V1.0BR_V15.03.05.19_multi_TD01, Ac18 US_AC18V1.0BR_V15.03.05.05_multi_TD01, and Ac18 ac18_kf_V15.03.05.19(6318_)_cn devices allows remote unauthenticated attackers to read arbitrary files via a cgi-bin/luci/request?op=1&path= URI that uses directory traversal sequences after a /usb/ substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-24T07:00:00.000Z
CVE-2017-16938 
A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-24T07:00:00.000Z
CVE-2017-16939 
The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-24T10:00:00.000Z
CVE-2017-16941 
October CMS through 1.0.428 does not prevent use of .htaccess in themes, which allows remote authenticated users to execute arbitrary PHP code by downloading a theme ZIP archive from /backend/cms/themes, and then uploading and importing a modified archive with two new files: a .php file and a .htaccess file. NOTE: the vendor says "I don't think [an attacker able to login to the system under an account that has access to manage/upload themes] is a threat model that we need to be considering.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-25T05:00:00.000Z