rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-12576 
An issue was discovered on the PLANEX CS-QR20 1.30. A hidden and undocumented management page allows an attacker to execute arbitrary code on the device when the user is authenticated. The management page was used for debugging purposes, once you login and access the page directly (/admin/system_command.asp), you can execute any command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-24T19:00:00.000Z
CVE-2017-12577 
An issue was discovered on the PLANEX CS-QR20 1.30. A hardcoded account / password ("admin:password") is used in the Android application that allows attackers to use a hidden API URL "/goform/SystemCommand" to execute any command with root permission.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-24T19:00:00.000Z
CVE-2017-12579 
An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and earlier allows a non-root user to obtain a root shell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-19T13:00:00.000Z
CVE-2017-12580 
An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable (for example, "ntmarta.dll"). When the installer EXE is executed by the user, the DLL located in the EXE's current directory will be loaded instead of the Windows DLL, allowing the attacker to run arbitrary code on the affected system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T15:58:26.000Z
CVE-2017-12581 
GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability. This also affects all applications that bundle Electron code equivalent to 1.6.8 or earlier. Bypassing the Same Origin Policy (SOP) is a precondition; however, recent Electron versions do not have strict SOP enforcement. Combining an SOP bypass with a privileged URL internally used by Electron, it was possible to execute native Node.js primitives in order to run OS commands on the user's host. Specifically, a chrome-devtools://devtools/bundled/inspector.html window could be used to eval a Node.js child_process.execFile API call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-06T02:00:00.000Z
CVE-2017-12582 
Unprivileged user can access all functions in the Surveillance Station component in QNAP TS212P devices with firmware 4.2.1 build 20160601. Unprivileged user cannot login at front end but with that unprivileged user SID, all function can access at Surveillance Station.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T16:00:00.000Z
CVE-2017-12583 
DokuWiki through 2017-02-19b has XSS in the at parameter (aka the DATE_AT variable) to doku.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-06T03:00:00.000Z
CVE-2017-12584 
There is no CSRF mitigation in SLiMS 8 Akasia through 8.3.1. Also, an entire user profile (including the password) can be updated without sending the current password. This allows remote attackers to trick a user into changing to an attacker-controlled password, a complete account takeover, via the passwd1 and passwd2 fields in an admin/modules/system/app_user.php changecurrent=true operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-06T03:00:00.000Z
CVE-2017-12585 
SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX_lookup_handler.php (tableName and tableFields parameters), admin/AJAX_check_id.php, and admin/AJAX_vocabolary_control.php. It can be exploited by remote authenticated librarian users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-06T03:00:00.000Z
CVE-2017-12586 
SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to admin/help.php. It can be exploited by remote authenticated librarian users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-06T03:00:00.000Z
CVE-2017-12587 
ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-06T14:00:00.000Z
CVE-2017-12588 
The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-06T14:00:00.000Z
CVE-2017-12589 
ToMAX R60G R60GV2-V2.0-v.2.6.3-170330 devices do not have any protection against a CSRF attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T17:00:00.000Z
CVE-2017-12590 
ASUS RT-N14UHP devices before 3.0.0.4.380.8015 have a reflected XSS vulnerability in the "flag" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T14:04:00.000Z
CVE-2017-12591 
ASUS DSL-N10S V2.1.16_APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T17:00:00.000Z
CVE-2017-12592 
ASUS DSL-N10S V2.1.16_APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T17:00:00.000Z
CVE-2017-12593 
ASUS DSL-N10S V2.1.16_APAC devices allow CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T17:00:00.000Z
CVE-2017-12595 
The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial of service (stack consumption and segmentation fault) or possibly have unspecified other impact via a PDF document with a deep data structure, as demonstrated by a crash in QPDFObjectHandle::parseInternal in libqpdf/QPDFObjectHandle.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-27T15:00:00.000Z
CVE-2017-12596 
In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-07T01:00:00.000Z
CVE-2017-12597 
OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-07T01:00:00.000Z
CVE-2017-12598 
OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 8-opencv-invalid-read-fread test case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-07T01:00:00.000Z
CVE-2017-12599 
OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the function icvCvt_BGRA2BGR_8u_C4C3R when reading an image file by using cv::imread.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-07T01:00:00.000Z
CVE-2017-12600 
OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (CPU consumption) issue, as demonstrated by the 11-opencv-dos-cpu-exhaust test case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-07T01:00:00.000Z
CVE-2017-12601 
OpenCV (Open Source Computer Vision Library) through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmt_bmp.cpp when reading an image file by using cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-07T01:00:00.000Z
CVE-2017-12602 
OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (memory consumption) issue, as demonstrated by the 10-opencv-dos-memory-exhaust test case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-07T01:00:00.000Z
CVE-2017-12603 
OpenCV (Open Source Computer Vision Library) through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 2-opencv-heapoverflow-fseek test case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-07T01:00:00.000Z
CVE-2017-12604 
OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by using cv::imread.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-07T01:00:00.000Z
CVE-2017-12605 
OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file by using cv::imread.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-07T01:00:00.000Z
CVE-2017-12606 
OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow4 in utils.cpp when reading an image file by using cv::imread.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-07T01:00:00.000Z
CVE-2017-12607 
A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.
Problem types: description: Potential Arbitrary Code Execution
Affected products: vendor: Apache Software Foundation
product: Apache OpenOffice
Published: 2017-11-20T19:00:00.000Z
CVE-2017-12608 
A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.
Problem types: description: Potential Arbitrary Code Execution
Affected products: vendor: Apache Software Foundation
product: Apache OpenOffice
Published: 2017-11-20T20:00:00.000Z
CVE-2017-12610 
In Apache Kafka 0.10.0.0 to 0.10.2.1 and 0.11.0.0 to 0.11.0.1, authenticated Kafka clients may use impersonation via a manually crafted protocol message with SASL/PLAIN or SASL/SCRAM authentication when using the built-in PLAIN or SCRAM server implementations in Apache Kafka.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Kafka
Published: 2018-07-26T14:00:00.000Z
CVE-2017-12611 
In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag instead of string literals can lead to a RCE attack.
Problem types: description: A possible Remote Code Execution attack when using an unintentional expression in Freemarker tag instead of string literals
Affected products: vendor: Apache Software Foundation
product: Apache Struts
Published: 2017-09-20T17:00:00.000Z
CVE-2017-12612 
In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket. This makes applications launched programmatically using the launcher API potentially vulnerable to arbitrary code execution by an attacker with access to any user account on the local machine. It does not affect apps run by spark-submit or spark-shell. The attacker would be able to execute code as the user that ran the Spark application. Users are encouraged to update to version 2.2.0 or later.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-13T16:00:00.000Z
CVE-2017-12613 
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
Problem types: description: n/a
Affected products: vendor: Apache Software Foundation
product: Apache Portable Runtime
Published: 2017-10-24T01:00:00.000Z
CVE-2017-12614 
It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack. Chrome will detect this as a reflected XSS attempt and prevent the page from loading. Firefox and other browsers don't, and are vulnerable to this attack. Mitigation: The fix for this is to upgrade to Apache Airflow 1.9.0 or above.
Problem types: description: XSS Vulnerability
Affected products: vendor: Apache Software Foundation
product: Apache Airflow
Published: 2018-08-06T13:00:00.000Z
CVE-2017-12615 
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
Problem types: description: Remote Code Execution
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2017-09-19T13:00:00.000Z
CVE-2017-12616 
When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2017-09-19T13:00:00.000Z
CVE-2017-12617 
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
Problem types: description: Remote Code Execution
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2017-10-03T15:00:00.000Z
CVE-2017-12618 
Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*() functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and cause a denial of service.
Problem types: description: n/a
Affected products: vendor: Apache Software Foundation
product: Apache Portable Runtime
Published: 2017-10-24T01:00:00.000Z
CVE-2017-12619 
Apache Zeppelin prior to 0.7.3 was vulnerable to session fixation which allowed an attacker to hijack a valid user session. Issue was reported by "stone lone".
Problem types: description: Session Fixation
Affected products: vendor: Apache Software Foundation
product: Apache Zeppelin
Published: 2019-04-23T14:45:16.000Z
CVE-2017-12620 
When loading models or dictionaries that contain XML it is possible to perform an XXE attack, since Apache OpenNLP is a library, this only affects applications that load models or dictionaries from untrusted sources. The versions 1.5.0 to 1.5.3, 1.6.0, 1.7.0 to 1.7.2, 1.8.0 to 1.8.1 of Apache OpenNLP are affected.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache OpenNLP
Published: 2017-10-02T14:00:00.000Z
CVE-2017-12621 
During Jelly (xml) file parsing with Apache Xerces, if a custom doctype entity is declared with a "SYSTEM" entity with a URL and that entity is used in the body of the Jelly file, during parser instantiation the parser will attempt to connect to said URL. This could lead to XML External Entity (XXE) attacks in Apache Commons Jelly before 1.0.1.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Commons Jelly
Published: 2017-09-27T16:00:00.000Z
CVE-2017-12622 
When an Apache Geode cluster before v1.3.0 is operating in secure mode and an authenticated user connects to a Geode cluster using the gfsh tool with HTTP, the user is able to obtain status information and control cluster members even without CLUSTER:MANAGE privileges.
Problem types: description: Improper Access Control
Affected products: vendor: Apache Software Foundation
product: Apache Geode
Published: 2018-01-10T03:00:00.000Z
CVE-2017-12623 
An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity (XXE) attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache NiFi
Published: 2017-10-10T18:00:00.000Z
CVE-2017-12624 
Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to craft a message attachment header that could lead to a Denial of Service (DoS) attack on a CXF web service provider. Both JAX-WS and JAX-RS services are vulnerable to this attack. From Apache CXF 3.2.1 and 3.1.14, message attachment headers that are greater than 300 characters will be rejected by default. This value is configurable via the property "attachment-max-header-size".
Problem types: description: Denial of Service
Affected products: vendor: Apache Software Foundation
product: Apache CXF
Published: 2017-11-14T16:00:00.000Z
CVE-2017-12625 
Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.x before 2.3.1 expose an interface through which masking policies can be defined on tables or views, e.g., using Apache Ranger. When a view is created over a given table, the policy enforcement does not happen correctly on the table for masked columns.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Hive
Published: 2017-11-01T13:00:00.000Z
CVE-2017-12626 
Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1) Infinite Loops while parsing crafted WMF, EMF, MSG and macros (POI bugs 61338 and 61294), and 2) Out of Memory Exceptions while parsing crafted DOC, PPT and XLS (POI bugs 52372 and 61295).
Problem types: description: Denial of Service Vulnerabilities
Affected products: vendor: Apache Software Foundation
product: Apache POI
Published: 2018-01-29T17:00:00.000Z
CVE-2017-12627 
In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer dereference under certain conditions.
Problem types: description: Denial of Service
Affected products: vendor: Apache Software Foundation
product: Apache Xerces C++
Published: 2018-03-01T14:00:00.000Z
CVE-2017-12628 
The JMX server embedded in Apache James, also used by the command line client is exposed to a java de-serialization issue, and thus can be used to execute arbitrary commands. As James exposes JMX socket by default only on local-host, this vulnerability can only be used for privilege escalation. Release 3.0.1 upgrades the incriminated library.
Problem types: description: Privilege escalation
Affected products: vendor: Apache Software Foundation
product: Apache James
Published: 2017-10-20T15:00:00.000Z
CVE-2017-12629 
Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external entity expansion vulnerability occurs in the XML Query Parser which is available, by default, for any query request with parameters deftype=xmlparser and can be exploited to upload malicious data to the /upload request handler or as Blind XXE using ftp wrapper in order to read arbitrary local files from the Solr server. Note also that the second vulnerability relates to remote code execution using the RunExecutableListener available on all affected versions of Solr.
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Apache Solr before 7.1 with Apache Lucene before 7.1
vendor: n/a
product: Apache Solr before 7.1 with Apache Lucene before 7.1
Published: 2017-10-14T21:00:00.000Z
CVE-2017-12630 
In Apache Drill 1.11.0 and earlier when submitting form from Query page users are able to pass arbitrary script or HTML which will take effect on Profile page afterwards. Example: after submitting special script that returns cookie information from Query page, malicious user may obtain this information from Profile page afterwards.
Problem types: description: XSS Vulnerability
Affected products: vendor: Apache Software Foundation
product: Apache Drill
Published: 2017-12-18T14:00:00.000Z
CVE-2017-12631 
Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. A CSRF (Cross Style Request Forgery) style vulnerability has been found in the Spring 2, Spring 3 and Spring 4 plugins in versions before 1.4.3 and 1.3.3. The vulnerability can result in a security context that is set up using a malicious client's roles for the given enduser.
Problem types: description: Cross Site Request Forgery
Affected products: vendor: Apache Software Foundation
product: Apache CXF Fediz
Published: 2017-11-30T14:00:00.000Z
CVE-2017-12632 
A malicious host header in an incoming HTTP request could cause NiFi to load resources from an external server. The fix to sanitize host headers and compare to a controlled whitelist was applied on the Apache NiFi 1.5.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
Problem types: description: Remote Code Execution
Affected products: vendor: Apache Software Foundation
product: Apache NiFi
Published: 2018-01-23T22:00:00.000Z
CVE-2017-12633 
The camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws.
Problem types: description: Apache Camel's Hessian unmarshalling operation is vulnerable to Remote Code Execution attacks
Affected products: vendor: Apache Software Foundation
product: Apache Camel
Published: 2017-11-15T15:00:00.000Z
CVE-2017-12634 
The camel-castor component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws.
Problem types: description: Apache Camel's Castor unmarshalling operation is vulnerable to Remote Code Execution attacks
Affected products: vendor: Apache Software Foundation
product: Apache Camel
Published: 2017-11-15T15:00:00.000Z