rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-14974 
The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain canonicalization step, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-01T23:00:00.000Z
CVE-2017-14975 
The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability because a data structure is not initialized, which allows an attacker to launch a denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-01T23:00:00.000Z
CVE-2017-14976 
The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a heap-based buffer over-read vulnerability if an out-of-bounds font dictionary index is encountered, which allows an attacker to launch a denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-01T23:00:00.000Z
CVE-2017-14977 
The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table pointer, which allows an attacker to launch a denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-01T23:00:00.000Z
CVE-2017-14979 
Gxlcms uses an unsafe character-replacement approach in an attempt to restrict access, which allows remote attackers to read arbitrary files via modified pathnames in the s parameter to index.php, related to Lib/Admin/Action/TplAction.class.php and Lib/Admin/Common/function.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T17:00:00.000Z
CVE-2017-14980 
Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-09T14:00:00.000Z
CVE-2017-14981 
Cross-Site Scripting (XSS) was discovered in ATutor before 2.2.3. The vulnerability exists due to insufficient filtration of data (url in /mods/_standard/rss_feeds/edit_feed.php). An attacker could inject arbitrary HTML and script code into a browser in the context of the vulnerable website.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T01:00:00.000Z
CVE-2017-14983 
Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the object parameter to module/admin_conf/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T05:00:00.000Z
CVE-2017-14984 
Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the bp_name parameter to /module/admin_bp/add_services.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T05:00:00.000Z
CVE-2017-14985 
Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the url parameter to module/module_frame/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T05:00:00.000Z
CVE-2017-14988 
Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T05:00:00.000Z
CVE-2017-14989 
A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FT_Done_Glyph function (from FreeType 2) is called at an incorrect place in the ImageMagick code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T05:00:00.000Z
CVE-2017-14990 
WordPress 4.8.2 stores cleartext wp_signups.activation_key values (but stores the analogous wp_users.user_activation_key values as hashes), which might make it easier for remote attackers to hijack unactivated user accounts by leveraging database read access (such as access gained through an unspecified SQL injection vulnerability).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T17:00:00.000Z
CVE-2017-14991 
The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4 allows local users to obtain sensitive information from uninitialized kernel heap-memory locations via an SG_GET_REQUEST_TABLE ioctl call for /dev/sg0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-03T07:00:00.000Z
CVE-2017-14992 
Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0, 1.10.3, 17.03.0, 17.03.1, 17.03.2, 17.06.0, 17.06.1, 17.06.2, 17.09.0, and earlier allows a remote attacker to cause a Denial of Service via a crafted image layer payload, aka gzip bombing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-01T17:00:00.000Z
CVE-2017-14993 
OXID eShop Community Edition before 6.0.0 RC3 (development), 4.10.x before 4.10.6 (maintenance), and 4.9.x before 4.9.11 (legacy), Enterprise Edition before 6.0.0 RC3 (development), 5.2.x before 5.2.11 (legacy), and 5.3.x before 5.3.6 (maintenance), and Professional Edition before 6.0.0 RC3 (development), 4.9.x before 4.9.11 (legacy) and 4.10.x before 4.10.6 (maintenance) allow remote attackers to crawl specially crafted URLs (aka "forced browsing") in order to overflow the database of the shop and consequently make it stop working. Prerequisite: the shop allows rendering empty categories to the storefront via an admin option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-20T23:00:00.000Z
CVE-2017-14994 
ReadDCMImage in coders/dcm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted DICOM image, related to the ability of DCM_ReadNonNativeImages to yield an image list with zero frames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-03T07:00:00.000Z
CVE-2017-14995 
The Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2 Business Rules Server 2.2.0, WSO2 Complex Event Processor 4.2.0, WSO2 Dashboard Server 2.0.0, WSO2 Data Analytics Server 3.1.0, WSO2 Data Services Server 3.5.1, and WSO2 Machine Learner 1.2.0 is affected by stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-03T07:00:00.000Z
CVE-2017-14997 
GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (excessive memory allocation) because of an integer underflow in ReadPICTImage in coders/pict.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-03T07:00:00.000Z
CVE-2017-15008 
PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all sensor titles, related to incorrect error handling for a %00 in the SRC attribute of an IMG element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-03T16:00:00.000Z
CVE-2017-15009 
PRTG Network Monitor version 17.3.33.2830 is vulnerable to reflected Cross-Site Scripting on error.htm (the error page), via the errormsg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-03T16:00:00.000Z
CVE-2017-15010 
A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-03T16:00:00.000Z
CVE-2017-15011 
The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-03T20:00:00.000Z
CVE-2017-15012 
OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 does not properly validate the input of the PUT_FILE RPC-command, which allows any authenticated user to hijack an arbitrary file from the Content Server filesystem; because some files on the Content Server filesystem are security-sensitive, this leads to privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-13T16:00:00.000Z
CVE-2017-15013 
OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an authenticated user to gain superuser privileges: Content Server stores information about uploaded files in dmr_content objects, which are queryable and "editable" (before release 7.2P02, any authenticated user was able to edit dmr_content objects; now any authenticated user may delete a dmr_content object and then create a new one with the old identifier) by authenticated users; this allows any authenticated user to replace the content of security-sensitive dmr_content objects (for example, dmr_content related to dm_method objects) and gain superuser privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-13T16:00:00.000Z
CVE-2017-15014 
OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows authenticated users to download arbitrary content files regardless of the attacker's repository permissions: When an authenticated user uploads content to the repository, he performs the following steps: (1) calls the START_PUSH RPC-command; (2) uploads the file to the content server; (3) calls the END_PUSH_V2 RPC-command (here, Content Server returns a DATA_TICKET integer, intended to identify the location of the uploaded file on the Content Server filesystem); (4) creates a dmr_content object in the repository, which has a value of data_ticket equal to the value of DATA_TICKET returned at the end of END_PUSH_V2 call. As the result of this design, any authenticated user may create his own dmr_content object, pointing to already existing content in the Content Server filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-13T16:00:00.000Z
CVE-2017-15015 
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-04T07:00:00.000Z
CVE-2017-15016 
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-04T07:00:00.000Z
CVE-2017-15017 
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-04T07:00:00.000Z
CVE-2017-15018 
LAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3.98.2 and 3.98 have a heap-based buffer over-read when handling a malformed file in k_34_4 in vbrquantize.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-04T07:00:00.000Z
CVE-2017-15019 
LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame/mpglib_interface.c via a malformed mpg file, because of an incorrect calloc call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-04T07:00:00.000Z
CVE-2017-15020 
dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles pointers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file, related to parse_die and parse_line_table, as demonstrated by a parse_die heap-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-04T07:00:00.000Z
CVE-2017-15021 
bfd_get_debug_link_info_1 in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to bfd_getl32.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-04T07:00:00.000Z
CVE-2017-15022 
dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the DW_AT_name data type, which allows remote attackers to cause a denial of service (bfd_hash_hash NULL pointer dereference, or out-of-bounds access, and application crash) via a crafted ELF file, related to scan_unit_for_symbols and parse_comp_unit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-04T07:00:00.000Z
CVE-2017-15023 
read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not properly validate the format count, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-04T07:00:00.000Z
CVE-2017-15024 
find_abstract_instance_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-04T07:00:00.000Z
CVE-2017-15025 
decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-04T07:00:00.000Z
CVE-2017-15029 
Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T15:00:32.000Z
CVE-2017-15030 
Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T14:57:58.000Z
CVE-2017-15031 
In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMCR_EL0 register can leak secure world timing information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-18T16:00:00.000Z
CVE-2017-15032 
ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-05T07:00:00.000Z
CVE-2017-15033 
ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-05T07:00:00.000Z
CVE-2017-15035 
EmTec PyroBatchFTP before 3.18 allows remote servers to cause a denial of service (application crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-05T07:00:00.000Z
CVE-2017-15037 
In FreeBSD through 11.1, the smb_strdupin function in sys/netsmb/smb_subr.c has a race condition with a resultant out-of-bounds read, because it can cause t2p->t_name strings to lack a final '\0' character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-05T07:00:00.000Z
CVE-2017-15038 
Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-09T14:00:00.000Z
CVE-2017-15039 
Cross-site scripting (XSS) exists in Zurmo 3.2.1.57987acc3018 via a data: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-06T08:00:00.000Z
CVE-2017-15041 
Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom domains, it is possible to arrange things so that example.com/pkg1 points to a Subversion repository but example.com/pkg1/pkg2 points to a Git repository. If the Subversion repository includes a Git checkout in its pkg2 directory and some other work is done to ensure the proper ordering of operations, "go get" can be tricked into reusing this Git checkout for the fetch of code from pkg2. If the Subversion repository's Git checkout has malicious commands in .git/hooks/, they will execute on the system running "go get."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-05T21:00:00.000Z
CVE-2017-15042 
An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires that, during SMTP, the PLAIN auth scheme must only be used on network connections secured with TLS. The original implementation of smtp.PlainAuth in Go 1.0 enforced this requirement, and it was documented to do so. In 2013, upstream issue #5184, this was changed so that the server may decide whether PLAIN is acceptable. The result is that if you set up a man-in-the-middle SMTP server that doesn't advertise STARTTLS and does advertise that PLAIN auth is OK, the smtp.PlainAuth implementation sends the username and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-05T21:00:00.000Z
CVE-2017-15043 
A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.5 and GX450, ES450, RV50, RV50X, MP70, and MP70E routers with firmware before 4.9 could allow an authenticated remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges. This vulnerability is due to insufficient input validation on user-controlled input in an HTTP request to the targeted device. An attacker in possession of router login credentials could exploit this vulnerability by sending a crafted HTTP request to an affected system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-04T20:00:00.000Z
CVE-2017-15044 
The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by modifying text. The default installation is unsafe because the server listens on the network interface, not the localhost interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-21T13:00:00.000Z
CVE-2017-15045 
LAME 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4, 3.99.5, 3.98.4, 3.98.2 and 3.98 has a heap-based buffer over-read in fill_buffer in libmp3lame/util.c, related to lame_encode_buffer_sample_t in libmp3lame/lame.c, a different vulnerability than CVE-2017-9410.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-06T04:00:00.000Z
CVE-2017-15046 
LAME 3.99.5, 3.99.4, 3.98.4, 3.98.2, 3.98 and 3.97 have a stack-based buffer overflow in unpack_read_samples in frontend/get_audio.c, a different vulnerability than CVE-2017-9412.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-06T04:00:00.000Z
CVE-2017-15047 
The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) or possibly have unspecified other impact by leveraging "limited access to the machine."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-06T04:00:00.000Z
CVE-2017-15048 
Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-19T15:00:00.000Z
CVE-2017-15049 
The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-19T15:00:00.000Z
CVE-2017-15051 
Multiple stored cross-site scripting (XSS) vulnerabilities in TeamPass before 2.1.27.9 allow authenticated remote attackers to inject arbitrary web script or HTML via the (1) URL value of an item or (2) user log history. To exploit the vulnerability, the attacker must be first authenticated to the application. For the first one, the attacker has to simply inject XSS code within the URL field of a shared item. For the second one however, the attacker must prepare a payload within its profile, and then ask an administrator to modify its profile. From there, whenever the administrator accesses the log, it can be XSS'ed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-27T19:00:00.000Z
CVE-2017-15052 
TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting users.queries.php. It is then possible for a manager user to delete an arbitrary user (including admin), or modify attributes of any arbitrary user except administrator. To exploit the vulnerability, an authenticated attacker must have the manager rights on the application, then tamper with the requests sent directly, for example by changing the "id" parameter when invoking "delete_user" on users.queries.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-27T19:00:00.000Z
CVE-2017-15053 
TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting roles.queries.php. It is then possible for a manager user to modify any arbitrary roles within the application, or delete any arbitrary role. To exploit the vulnerability, an authenticated attacker must have the manager rights on the application, then tamper with the requests sent directly, for example by changing the "id" parameter when invoking "delete_role" on roles.queries.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-27T19:00:00.000Z