rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-2825 
In the trapper functionality of Zabbix Server 2.4.x, specifically crafted trapper packets can pass database logic checks, resulting in database writes. An attacker can set up a Man-in-the-Middle server to alter trapper requests made between an active Zabbix proxy and Server to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Talos
product: Zabbix
Published: 2018-04-20T21:00:00.000Z
CVE-2017-2826 
An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X. A specially crafted iConfig proxy request can cause the Zabbix server to send the configuration information of any Zabbix proxy, resulting in information disclosure. An attacker can make requests from an active Zabbix proxy to trigger this vulnerability.
Problem types: description: server config proxy vulnerability
Affected products: vendor: Talos
product: Zabbix
Published: 2018-04-09T20:00:00.000Z
CVE-2017-2827 
An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Problem types: description: command injection vulnerability
Affected products: vendor: Foscam
product: Indoor IP Camera C1 Series
Published: 2017-06-21T13:00:00.000Z
CVE-2017-2828 
An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Problem types: description: command injection vulnerability
Affected products: vendor: Foscam
product: Indoor IP Camera C1 Series
Published: 2017-06-21T13:00:00.000Z
CVE-2017-2829 
An exploitable directory traversal vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause the application to read a file from disk but a failure to adequately filter characters results in allowing an attacker to specify a file outside of a directory. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Problem types: description: directory traversal vulnerability
Affected products: vendor: Foscam
product: Indoor IP Camera C1 Series
Published: 2017-06-21T13:00:00.000Z
CVE-2017-2830 
An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Problem types: description: buffer overflow
Affected products: vendor: Foscam
product: Indoor IP Camera C1 Series
Published: 2017-06-21T13:00:00.000Z
CVE-2017-2831 
An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Problem types: description: buffer overflow
Affected products: vendor: Foscam
product: Indoor IP Camera C1 Series
Published: 2017-06-21T13:00:00.000Z
CVE-2017-2832 
An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during a password change resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Problem types: description: command injection
Affected products: vendor: Foscam
product: Indoor IP Camera
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2833 
An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters resulting in command injection during the boot process. To trigger this vulnerability, an attacker needs to send an HTTP request and reboot the device.
Problem types: description: command injection
Affected products: vendor: Foscam
product: Indoor IP Camera
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2834 
An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle attack to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: FreeRDP
product: FreeRDP
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2835 
An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: FreeRDP
product: FreeRDP
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2836 
An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
Problem types: description: denial of service
Affected products: vendor: FreeRDP
product: FreeRDP
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2837 
An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
Problem types: description: denial of service
Affected products: vendor: FreeRDP
product: FreeRDP
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2838 
An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
Problem types: description: denial of service
Affected products: vendor: FreeRDP
product: FreeRDP
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2839 
An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
Problem types: description: denial of service
Affected products: vendor: FreeRDP
product: FreeRDP
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2840 
A buffer overflow vulnerability exists in the ISO parsing functionality of EZB Systems UltraISO 9.6.6.3300. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can provide a specific .ISO file to trigger this vulnerability.
Problem types: description: buffer overflow
Affected products: vendor: EZB Systems
product: UltraISO
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2841 
An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Problem types: description: command injection
Affected products: vendor: Foscam
product: Indoor IP Camera C1 Series
Published: 2017-06-27T15:00:00.000Z
CVE-2017-2842 
In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Problem types: description: command injection
Affected products: vendor: Foscam
product: Indoor IP Camera C1 Series
Published: 2017-06-27T15:00:00.000Z
CVE-2017-2843 
In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Problem types: description: command injection
Affected products: vendor: Foscam
product: Indoor IP Camera C1 Series
Published: 2017-06-27T15:00:00.000Z
CVE-2017-2844 
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Problem types: description: command injection
Affected products: vendor: Foscam
product: Indoor IP Camera C1 Series
Published: 2017-06-29T17:00:00.000Z
CVE-2017-2845 
An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SMTP configuration tests resulting in command execution
Problem types: description: command injection
Affected products: vendor: Foscam
product: Indoor IP Camera C1 Series
Published: 2017-06-29T17:00:00.000Z
CVE-2017-2846 
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Problem types: description: command injection
Affected products: vendor: Foscam
product: Indoor IP Camera C1 Series
Published: 2017-06-29T17:00:00.000Z
CVE-2017-2847 
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Problem types: description: command injection
Affected products: vendor: Foscam
product: Indoor IP Camera C1 Series
Published: 2017-06-29T17:00:00.000Z
CVE-2017-2848 
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Problem types: description: command injection
Affected products: vendor: Foscam
product: Indoor IP Camera C1 Series
Published: 2017-06-29T17:00:00.000Z
CVE-2017-2849 
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during NTP server configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Problem types: description: command injection
Affected products: vendor: Foscam
product: Indoor IP Camera C1 Series
Published: 2017-06-29T17:00:00.000Z
CVE-2017-2850 
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary characters in the pureftpd.passwd file during a username change, which in turn allows for bypassing chroot restrictions in the FTP server. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Problem types: description: password injection
Affected products: vendor: Foscam
product: Indoor IP Camera C1 Series
Published: 2017-06-29T17:00:00.000Z
CVE-2017-2851 
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can cause a buffer overflow.
Problem types: description: remote code execution
Affected products: vendor: Foscam
product: Indoor IP Camera C1 Series
Published: 2017-06-29T17:00:00.000Z
CVE-2017-2852 
An exploitable denial-of-service vulnerability exists in the unserialization of lists functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability.
Problem types: description: denial of service
Affected products: vendor: Talos
product: Natus
Published: 2018-06-01T15:00:00.000Z
CVE-2017-2853 
An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in arbitrary command execution. An attacker can send a malicious packet to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Natus Medical Incorporated
product: Natus
Published: 2018-04-05T19:00:00.000Z
CVE-2017-2854 
An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server.
Problem types: description: buffer overflow
Affected products: vendor: Foscam
product: Foscam Indoor IP Camera C1 Series
Published: 2018-09-17T20:00:00.000Z
CVE-2017-2855 
An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server.
Problem types: description: Buffer Overflow
Affected products: vendor: Foscam
product: Foscam C1 Indoor HD Camera
Published: 2018-09-19T16:00:00.000Z
CVE-2017-2856 
An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server.
Problem types: description: buffer overflow
Affected products: vendor: Foscam
product: Foscam Indoor IP Camera C1 Series
Published: 2018-09-17T20:00:00.000Z
CVE-2017-2857 
An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server.
Problem types: description: buffer overflow
Affected products: vendor: Foscam
product: Foscam Indoor IP Camera C1 Series
Published: 2018-09-17T20:00:00.000Z
CVE-2017-2858 
An exploitable denial-of-service vulnerability exists in the traversal of lists functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability.
Problem types: description: denial of service
Affected products: vendor: Talos
product: Natus
Published: 2018-06-01T15:00:00.000Z
CVE-2017-2860 
An exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability.
Problem types: description: denial of service
Affected products: vendor: Talos
product: Natus
Published: 2018-06-01T15:00:00.000Z
CVE-2017-2861 
An exploitable Denial of Service vulnerability exists in the use of a return value in the NewProducerStream command in Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out of bounds read resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability.
Problem types: description: denial of service
Affected products: vendor: Natus Medical Incorporated
product: Natus
Published: 2018-04-05T19:00:00.000Z
CVE-2017-2862 
An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: GNOME
product: Gdk-Pixbuf
Published: 2017-09-05T18:00:00.000Z
CVE-2017-2863 
An out-of-bounds write vulnerability exists in the PDF parsing functionality of Infix 7.1.5. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Iceni
product: Infix
Published: 2017-07-12T17:00:00.000Z
CVE-2017-2864 
An exploitable vulnerability exists in the generation of authentication token functionality of Circle with Disney. Specially crafted network packets can cause a valid authentication token to be returned to the attacker resulting in authentication bypass. An attacker can send a series of packets to trigger this vulnerability.
Problem types: description: authentication bypass
Affected products: vendor: Circle Media
product: Circle
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2865 
An exploitable vulnerability exists in the firmware update functionality of Circle with Disney. Specially crafted network packets can cause the product to run an attacker-supplied shell script. An attacker can intercept and alter network traffic to trigger this vulnerability.
Problem types: description: command injection
Affected products: vendor: Circle Media
product: Circle
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2866 
An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: command injection
Affected products: vendor: Circle Media
product: Circle
Published: 2017-11-07T16:00:00.000Z
CVE-2017-2867 
An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can a malicious packet to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Natus Medical Incorporated
product: Natus
Published: 2018-04-05T19:00:00.000Z
CVE-2017-2868 
An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Natus Medical Incorporated
product: Natus
Published: 2018-04-05T19:00:00.000Z
CVE-2017-2869 
An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Natus Medical Incorporated
product: Natus
Published: 2018-04-05T19:00:00.000Z
CVE-2017-2870 
An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: GNOME
product: Gdk-Pixbuf
Published: 2017-09-05T18:00:00.000Z
CVE-2017-2871 
Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. An attacker who is in the same subnetwork of the camera or has remote administrator access can fully compromise the device by performing a firmware recovery using a custom image.
Problem types: description: Improper Authentication
Affected products: vendor: Talos
product: Foscam
Published: 2018-04-17T20:00:00.000Z
CVE-2017-2872 
Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A HTTP request can allow for a user to perform a firmware upgrade using a crafted image. Before any firmware upgrades in this image are flashed to the device, binaries as well as arguments to shell commands contained in the image are executed with elevated privileges.
Problem types: description: Improper Authentication
Affected products: vendor: Foscam
product: Foscam Indoor IP Camera C1 Series
Published: 2018-09-17T20:00:00.000Z
CVE-2017-2873 
An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SoftAP configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Problem types: description: OS Command Injection
Affected products: vendor: Foscam
product: Foscam C1 Indoor HD Camera
Published: 2018-09-19T18:00:00.000Z
CVE-2017-2874 
An information disclosure vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 can allow for a user to retrieve sensitive information without authentication.
Problem types: description: Information Exposure
Affected products: vendor: Foscam
product: Foscam Indoor IP Camera C1 Series
Published: 2018-09-17T18:00:00.000Z