rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-11355 
Multiple cross-site scripting (XSS) vulnerabilities in PEGA Platform 7.2 ML0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to the main page; the (2) beanReference parameter to the JavaBean viewer page; or the (3) pyTableName to the System database schema modification page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T19:00:00.000Z
CVE-2017-11356 
The application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows remote authenticated users with certain privileges to obtain sensitive configuration information by leveraging a missing access control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T19:00:00.000Z
CVE-2017-11357 
Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-23T17:00:00.000Z
CVE-2017-11358 
The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted hcom file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-31T00:00:00.000Z
CVE-2017-11359 
The wavwritehdr function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted snd file, during conversion to a wav file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-31T13:00:00.000Z
CVE-2017-11360 
The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge number_pixels value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T06:00:00.000Z
CVE-2017-11361 
Inteno routers have a JUCI ACL misconfiguration that allows the "user" account to read files, write to files, and add root SSH keys via JSON commands to ubus. (Exploitation is sometimes easy because the "user" password might be "user" or might match the Wi-Fi key.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T16:00:00.000Z
CVE-2017-11362 
In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not restrict the locale length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact within International Components for Unicode (ICU) for C/C++ via a long first argument to the msgfmt_parse_message function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T06:00:00.000Z
CVE-2017-11364 
The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the target application by leveraging Certificate Transparency logs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T14:00:00.000Z
CVE-2017-11365 
Certain Symfony products are affected by: Incorrect Access Control. This affects Symfony 2.7.30 and Symfony 2.8.23 and Symfony 3.2.10 and Symfony 3.3.3. The type of exploitation is: remote. The component is: Password validator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T17:20:57.000Z
CVE-2017-11366 
components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by search_file_type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-21T01:00:00.000Z
CVE-2017-11367 
The shoco_decompress function in the API in shoco through 2017-07-17 allows remote attackers to cause a denial of service (buffer over-read and application crash) via malformed compressed data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T13:00:00.000Z
CVE-2017-11368 
In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-09T18:00:00.000Z
CVE-2017-11379 
Configuration and database backup archives are not signed or validated in Trend Micro Deep Discovery Director 1.1.
Problem types: description: Other
Affected products: vendor: Trend Micro, Inc.
product: Trend Micro Deep Discovery Director
Published: 2017-08-01T15:00:00.000Z
CVE-2017-11380 
Backup archives were found to be encrypted with a static password across different installations, which suggest the same password may be used in all virtual appliance instances of Trend Micro Deep Discovery Director 1.1.
Problem types: description: Insecure Permissions
Affected products: vendor: Trend Micro, Inc.
product: Trend Micro Deep Discovery Director
Published: 2017-08-01T15:00:00.000Z
CVE-2017-11381 
A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can access the pre-configuration console.
Problem types: description: Command Injection
Affected products: vendor: Trend Micro, Inc.
product: Trend Micro Deep Discovery Director
Published: 2017-08-01T15:00:00.000Z
CVE-2017-11382 
Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2.5.1 allows remote attackers to delete arbitrary files on vulnerable installations, thus disabling the service. Formerly ZDI-CAN-4350.
Problem types: description: Denial of Service Vulnerability
Affected products: vendor: Trend Micro
product: Trend Micro Deep Discovery Email Inspector
Published: 2017-08-03T15:00:00.000Z
CVE-2017-11383 
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x1b07 due to lack of proper user input validation in cmdHandlerTVCSCommander.dll. Formerly ZDI-CAN-4560.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T21:00:00.000Z
CVE-2017-11384 
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x3b21 due to lack of proper user input validation in mdHandlerLicenseManager.dll. Formerly ZDI-CAN-4561.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T21:00:00.000Z
CVE-2017-11385 
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x6b1b due to lack of proper user input validation in cmdHandlerStatusMonitor.dll. Formerly ZDI-CAN-4545.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T21:00:00.000Z
CVE-2017-11386 
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x4707 due to lack of proper user input validation in cmdHandlerNewReportScheduler.dll. Formerly ZDI-CAN-4549.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T21:00:00.000Z
CVE-2017-11387 
Authentication Bypass in Trend Micro Control Manager 6.0 causes Information Disclosure when authentication validation is not done for functionality that can change debug logging level. Formerly ZDI-CAN-4512.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T21:00:00.000Z
CVE-2017-11388 
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when RestfulServiceUtility.NET.dll doesn't properly validate user provided strings before constructing SQL queries. Formerly ZDI-CAN-4639 and ZDI-CAN-4638.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T21:00:00.000Z
CVE-2017-11389 
Directory traversal vulnerability in Trend Micro Control Manager 6.0 allows remote code execution by attackers able to drop arbitrary files in a web-facing directory. Formerly ZDI-CAN-4684.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T21:00:00.000Z
CVE-2017-11390 
XML external entity (XXE) processing vulnerability in Trend Micro Control Manager 6.0, if exploited, could lead to information disclosure. Formerly ZDI-CAN-4706.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T21:00:00.000Z
CVE-2017-11391 
Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the "t" parameter within modTMCSS Proxy. Formerly ZDI-CAN-4744.
Problem types: description: Proxy Command Injection
Affected products: vendor: Trend Micro
product: Trend Micro InterScan Messaging Security Virtual Appliance
Published: 2017-08-03T15:00:00.000Z
CVE-2017-11392 
Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the "T" parameter within modTMCSS Proxy. Formerly ZDI-CAN-4745.
Problem types: description: Proxy Command Injection
Affected products: vendor: Trend Micro
product: Trend Micro InterScan Messaging Security Virtual Appliance
Published: 2017-08-03T15:00:00.000Z
CVE-2017-11393 
Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the tr parameter within Proxy.php. Formerly ZDI-CAN-4543.
Problem types: description: Proxy Command Injection
Affected products: vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2017-08-03T15:00:00.000Z
CVE-2017-11394 
Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter within Proxy.php. Formerly ZDI-CAN-4544.
Problem types: description: Proxy Command Injection
Affected products: vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2017-08-03T15:00:00.000Z
CVE-2017-11395 
Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations.
Problem types: description: OS Command Injection
Affected products: vendor: Trend Micro
product: Smart Protection Server (Standalone)
Published: 2017-09-22T16:00:00.000Z
CVE-2017-11396 
Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potential attackers who already have administration rights to the console to implement remote code injections.
Problem types: description: Other (Input Parameter Inspection)
Affected products: vendor: Trend Micro
product: InterScan Web Security Virtual Appliance
Published: 2017-09-22T16:00:00.000Z
CVE-2017-11397 
A service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below could allow an unauthenticated remote attacker to execute arbitrary code on a vulnerable system.
Problem types: description: OTHER - DLL Preloacding vulnerability
Affected products: vendor: Trend Micro
product: Trend Micro Encryption for Email
Published: 2017-12-15T14:00:00.000Z
CVE-2017-11398 
A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authenticated requests on a vulnerable system.
Problem types: cwe_id: CWE-285
description: OTHER - Information Exposure Through Log Files (CWE-285)
Affected products: vendor: Trend Micro
product: Trend Micro Smart Protection Server (Standalone)
Published: 2018-01-19T19:00:00.000Z
CVE-2017-11399 
Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access and application crash) or possibly have unspecified other impact via a crafted APE file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T19:00:00.000Z
CVE-2017-11400 
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. An incomplete firmware signature allows a local attacker to upgrade the equipment (kernel, file system) with unsigned, attacker-controlled, data. This occurs because the appliance_config file is signed but the .tar.sec file is unsigned.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-20T15:00:00.000Z
CVE-2017-11401 
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-20T15:00:00.000Z
CVE-2017-11402 
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OPC classic and in custom netfilter modules allow an attacker to remotely activate rules on the firewall and to connect to any TCP port of a protected asset, thus bypassing the firewall. The attack methodology is a crafted OPC dynamic port shift.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-20T15:00:00.000Z
CVE-2017-11403 
The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T00:00:00.000Z
CVE-2017-11404 
In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a FileManager action to admin/moduleinterface.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T00:00:00.000Z
CVE-2017-11405 
In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a CMSContentManager action to admin/moduleinterface.php, followed by a FilePicker action to admin/moduleinterface.php in which type=image is changed to type=file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T00:00:00.000Z
CVE-2017-11406 
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T21:00:00.000Z
CVE-2017-11407 
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T21:00:00.000Z
CVE-2017-11408 
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T21:00:00.000Z
CVE-2017-11409 
In Wireshark 2.0.0 to 2.0.13, the GPRS LLC dissector could go into a large loop. This was addressed in epan/dissectors/packet-gprs-llc.c by using a different integer data type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T21:00:00.000Z
CVE-2017-11410 
In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding validation of the relationships between indexes and lengths. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-7702.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T21:00:00.000Z
CVE-2017-11411 
In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by adding length validation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9350.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T21:00:00.000Z
CVE-2017-11412 
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/controller/comment_status.php via $_GET['id'].
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T05:00:00.000Z
CVE-2017-11413 
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/comment_status.php via $_GET['id'].
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T05:00:00.000Z
CVE-2017-11414 
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/sys_comment.php via $_POST['comment'], $_POST['name'], $_POST['web'], $_POST['email'], $_POST['status'], $_POST['id'], and $_REQUEST['id'].
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T05:00:00.000Z
CVE-2017-11415 
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/sys_article.php via $_POST['parent_id'], $_POST['desc'], $_POST['keys'], and $_POST['level'].
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T05:00:00.000Z
CVE-2017-11416 
Fiyo CMS 2.0.7 has SQL injection in /apps/app_comment/controller/insert.php via the name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T05:00:00.000Z
CVE-2017-11417 
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_status.php via $_GET['id'].
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T05:00:00.000Z
CVE-2017-11418 
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_list.php via $_GET['cat'], $_GET['user'], $_GET['level'], and $_GET['iSortCol_'.$i].
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T05:00:00.000Z
CVE-2017-11419 
Fiyo CMS 2.0.7 has SQL injection in /apps/app_article/controller/editor.php via $_POST['id'] and $_POST['art_title'].
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T05:00:00.000Z
CVE-2017-11420 
Stack-based buffer overflow in ASUS_Discovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to execute arbitrary code via long device information that is mishandled during a strcat to a device list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T05:00:00.000Z
CVE-2017-11421 
gnome-exe-thumbnailer before 0.9.5 is prone to a VBScript Injection when generating thumbnails for MSI files, aka the "Bad Taste" issue. There is a local attack if the victim uses the GNOME Files file manager, and navigates to a directory containing a .msi file with VBScript code in its filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T19:00:00.000Z
CVE-2017-11422 
Statamic framework before 2.6.0 does not correctly check a session's permissions when the methods from a user's class are called. Problematic methods include reset password, create new account, create new role, etc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-24T12:00:00.000Z
CVE-2017-11423 
The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted CAB file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-18T20:00:00.000Z
CVE-2017-11424 
In PyJWT 1.5.0 and below the `invalid_strings` check in `HMACAlgorithm.prepare_key` does not account for all PEM encoded public keys. Specifically, the PKCS1 PEM encoded format would be allowed because it is prefaced with the string `-----BEGIN RSA PUBLIC KEY-----` which is not accounted for. This enables symmetric/asymmetric key confusion attacks against users using the PKCS1 PEM encoded public keys, which would allow an attacker to craft JWTs from scratch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-24T16:00:00.000Z
CVE-2017-11427 Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.
Problem types: cwe_id: CWE-287
description: CWE-287: Improper Authentication
Affected products: vendor: OneLogin
product: PythonSAML
Credits: lang: en
value: Kelby Ludwig of Duo Security
Published: 2019-04-17T13:59:19.000Z
CVE-2017-11428 Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.
Problem types: cwe_id: CWE-287
description: CWE-287: Improper Authentication
Affected products: vendor: OneLogin
product: Ruby-SAML
Credits: lang: en
value: Kelby Ludwig of Duo Security
Published: 2019-04-17T13:59:53.000Z
CVE-2017-11429 Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
Clever saml2-js 2.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.
Problem types: cwe_id: CWE-287
description: CWE-287: Improper Authentication
Affected products: vendor: Clever
product: saml2-js
Credits: lang: en
value: Kelby Ludwig of Duo Security
Published: 2019-04-17T14:00:08.000Z