rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-16593 
This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.restore.del_005fdo_jsp servlet, which listens on TCP port 8081 by default. When parsing the filenames parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to delete any files accessible to the Administrator user. Was ZDI-CAN-5104.
Problem types: cwe_id: CWE-22
description: CWE-22-Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: NetGain Systems
product: NetGain Systems Enterprise Manager
Published: 2018-01-23T01:00:00.000Z
CVE-2017-16594 
This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.db.save_005fimage_jsp servlet, which listens on TCP port 8081 by default. When parsing the id parameter, the process does not properly validate user-supplied data, which can allow for the upload of files. An attacker can leverage this vulnerability to execute code under the context of Administrator. Was ZDI-CAN-5117.
Problem types: cwe_id: CWE-434
description: CWE-434-Unrestricted Upload of File with Dangerous Type
Affected products: vendor: NetGain Systems
product: NetGain Systems Enterprise Manager
Published: 2018-01-23T01:00:00.000Z
CVE-2017-16595 
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.reports.export_005fdownload_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of Administrator. Was ZDI-CAN-5118.
Problem types: cwe_id: CWE-22
description: CWE-22-Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: NetGain Systems
product: NetGain Systems Enterprise Manager
Published: 2018-01-23T01:00:00.000Z
CVE-2017-16596 
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.designer.script_005fsamples_jsp servlet, which listens on TCP port 8081 by default. When parsing the type parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of Administrator. Was ZDI-CAN-5119.
Problem types: cwe_id: CWE-22
description: CWE-22-Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: NetGain Systems
product: NetGain Systems Enterprise Manager
Published: 2018-01-23T01:00:00.000Z
CVE-2017-16597 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of WRQ requests. When parsing the Filename field, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code under the context of Administrator. Was ZDI-CAN-5137.
Problem types: cwe_id: CWE-22
description: CWE-22-Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: NetGain Systems
product: NetGain Systems Enterprise Manager
Published: 2018-01-23T01:00:00.000Z
CVE-2017-16598 
This vulnerability allows remote attackers to execute code by overwriting arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.tools.snmpwalk.snmpwalk_005fdo_jsp servlet, which listens on TCP port 8081 by default. When parsing the ip parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code under the context of Administrator. Was ZDI-CAN-5138.
Problem types: cwe_id: CWE-22
description: CWE-22-Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: NetGain Systems
product: NetGain Systems Enterprise Manager
Published: 2018-01-23T01:00:00.000Z
CVE-2017-16599 
This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.reports.templates.misc.sample_jsp servlet, which listens on TCP port 8081 by default. When parsing the type parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of Administrator. Was ZDI-CAN-5190.
Problem types: cwe_id: CWE-22
description: CWE-22-Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: NetGain Systems
product: NetGain Systems Enterprise Manager
Published: 2018-01-23T01:00:00.000Z
CVE-2017-16600 
This vulnerability allows remote attackers to overwrite files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.reports.templates.network.traffic_005freport_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to overwrite any files accessible to the Administrator. Was ZDI-CAN-5191.
Problem types: cwe_id: CWE-22
description: CWE-22-Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: NetGain Systems
product: NetGain Systems Enterprise Manager
Published: 2018-01-23T01:00:00.000Z
CVE-2017-16601 
This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.reports.templates.service.service_005ffailures_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to overwrite any files accessible to the Administrator. Was ZDI-CAN-5192.
Problem types: cwe_id: CWE-22
description: CWE-22-Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: NetGain Systems
product: NetGain Systems Enterprise Manager
Published: 2018-01-23T01:00:00.000Z
CVE-2017-16602 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.tools.exec_jsp servlet, which listens on TCP port 8081 by default. When parsing the command parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of Administrator. Was ZDI-CAN-5193.
Problem types: cwe_id: CWE-78
description: CWE-78-Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: NetGain Systems
product: NetGain Systems Enterprise Manager
Published: 2018-01-23T01:00:00.000Z
CVE-2017-16603 
This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.settings.upload_005ffile_005fdo_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate user-supplied data, which can allow for the upload of files. An attacker can leverage this vulnerability to execute code under the context of Administrator. Was ZDI-CAN-5194.
Problem types: cwe_id: CWE-22
description: CWE-22-Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: NetGain Systems
product: NetGain Systems Enterprise Manager
Published: 2018-01-23T01:00:00.000Z
CVE-2017-16604 
This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.cnnic.asset.deviceReport.deviceReport_005fexport_005fdo_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to overwrite any files accessible to the Administrator. Was ZDI-CAN-5195.
Problem types: cwe_id: CWE-22
description: CWE-22-Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: NetGain Systems
product: NetGain Systems Enterprise Manager
Published: 2018-01-23T01:00:00.000Z
CVE-2017-16605 
This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.db.save_005fattrs_jsp servlet, which listens on TCP port 8081 by default. When parsing the id parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to overwrite any files accessible to the Administrator. Was ZDI-CAN-5196.
Problem types: cwe_id: CWE-22
description: CWE-22-Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: NetGain Systems
product: NetGain Systems Enterprise Manager
Published: 2018-01-23T01:00:00.000Z
CVE-2017-16606 
This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp._3d.add_005f3d_005fview_005fdo_jsp servlet, which listens on TCP port 8081 by default. When parsing the filename parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code under the context of Administrator. Was ZDI-CAN-5197.
Problem types: cwe_id: CWE-22
description: CWE-22-Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: NetGain Systems
product: NetGain Systems Enterprise Manager
Published: 2018-01-23T01:00:00.000Z
CVE-2017-16607 
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within heapdumps.jsp. The issue results from the lack of proper validation of a user-supplied string before using it to download heap memory dump. An attacker can leverage this in conjunction with other vulnerabilities to disclose sensitive information in the context of the current process. Was ZDI-CAN-4718.
Problem types: cwe_id: CWE-200
description: CWE-200-Information Exposure
Affected products: vendor: NetGain Systems
product: NetGain Systems Enterprise Manager
Published: 2018-01-23T01:00:00.000Z
CVE-2017-16608 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within exec.jsp. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current user. Was ZDI-CAN-4749.
Problem types: cwe_id: CWE-78
description: CWE-78-Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: NetGain Systems
product: NetGain Systems Enterprise Manager
Published: 2018-01-23T01:00:00.000Z
CVE-2017-16609 
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within download.jsp. The issue results from the lack of proper validation of a user-supplied string before using it to download a file. An attacker can leverage this vulnerability to expose sensitive information. Was ZDI-CAN-4750.
Problem types: cwe_id: CWE-39
description: CWE-39-Path Traversal: 'C:dirname'
Affected products: vendor: NetGain Systems
product: NetGain Systems Enterprise Manager
Published: 2018-01-23T01:00:00.000Z
CVE-2017-16610 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within upload_save_do.jsp. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code under the context of the current user. Was ZDI-CAN-4751.
Problem types: cwe_id: CWE-22
description: CWE-22-Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: NetGain Systems
product: NetGain Systems Enterprise Manager
Published: 2018-01-23T01:00:00.000Z
CVE-2017-16611 
In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-01T17:00:00.000Z
CVE-2017-16612 
libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like GIMP. It is also possible that an attack vector exists against the related code in cursor/xcursor.c in Wayland through 1.14.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-01T17:00:00.000Z
CVE-2017-16613 
An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving (unhashed) tokens retrieved from the Swauth middleware authentication mechanism to a log file as part of a GET URI. This allows attackers to bypass authentication by inserting a token into an X-Auth-Token header of a new request. NOTE: github.com/openstack/swauth URLs do not mean that Swauth is maintained by an official OpenStack project team.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-21T13:00:00.000Z
CVE-2017-16614 
SSRF (Server Side Request Forgery) in tpshop 2.0.5 and 2.0.6 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the plugins/payment/weixin/lib/WxPay.tedatac.php fBill parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-30T21:00:00.000Z
CVE-2017-16615 
An exploitable vulnerability exists in the YAML parsing functionality in the parse_yaml_query method in parser.py in MLAlchemy before 0.2.2. When processing YAML-Based queries for data, a YAML parser can execute arbitrary Python commands resulting in command execution because load is used where safe_load should have been used. An attacker can insert Python into loaded YAML to trigger this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-08T03:00:00.000Z
CVE-2017-16616 
An exploitable vulnerability exists in the YAML parsing functionality in the YAMLParser method in Interfaces.py in PyAnyAPI before 0.6.1. A YAML parser can execute arbitrary Python commands resulting in command execution because load is used where safe_load should have been used. An attacker can insert Python into loaded YAML to trigger this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-08T03:00:00.000Z
CVE-2017-16618 
An exploitable vulnerability exists in the YAML loading functionality of util.py in OwlMixin before 2.0.0a12. A "Load YAML" string or file (aka load_yaml or load_yamlf) can execute arbitrary Python commands resulting in command execution because load is used where safe_load should have been used. An attacker can insert Python into loaded YAML to trigger this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-08T03:00:00.000Z
CVE-2017-16629 
In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives out for each type of user on the Login form. For "Incorrect User" - it gives an error "The application failed to identify the user. Please contact administrator for help." For "Correct User and Incorrect Password" - it gives an error "Authentication failed. Please login again."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-11T20:08:19.000Z
CVE-2017-16630 
In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an Insecure Direct Object Reference (IDOR) in the local user creation function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-11T20:09:18.000Z
CVE-2017-16631 
In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference (IDOR) in the "Account Password Reset" functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-11T20:10:30.000Z
CVE-2017-16632 
In SapphireIMS 4097_1, the password in the database is stored in Base64 format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-11T20:11:26.000Z
CVE-2017-16633 
In Joomla! before 3.8.2, a logic bug in com_fields exposed read-only information about a site's custom fields to unauthorized users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-09T19:00:00.000Z
CVE-2017-16634 
In Joomla! before 3.8.2, a bug allowed third parties to bypass a user's 2-factor authentication method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-09T19:00:00.000Z
CVE-2017-16635 
In TinyWebGallery v2.4, an XSS vulnerability is located in the `mkname`, `mkitem`, and `item` parameters of the `Add/Create` module. Remote attackers with low-privilege user accounts for backend access are able to inject malicious script codes into the `TWG Explorer` item listing. The request method to inject is POST and the attack vector is located on the application-side of the service. The injection point is the add/create input field and the execution point occurs in the item listing after the add or create.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-06T22:00:00.000Z
CVE-2017-16636 
In Bludit v1.5.2 and v2.0.1, an XSS vulnerability is located in the new page, new category, and edit post function body message context. Remote attackers are able to bypass the basic editor validation to trigger cross site scripting. The XSS is persistent and the request method to inject via editor is GET. To save the editor context, the followup POST method request must be processed to perform the attack via the application side. The basic validation of the editor does not allow injecting script codes and blocks the context. Attackers can inject the code by using an editor tag that is not recognized by the basic validation. Thus allows a restricted user account to inject malicious script code to perform a persistent attack against higher privilege web-application user accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-06T22:00:00.000Z
CVE-2017-16637 
In Vectura Perfect Privacy VPN Manager v1.10.10 and v1.10.11, when resetting the network data via the software client, with a running VPN connection, a critical error occurs which leads to a "FrmAdvancedProtection" crash. Although the mechanism malfunctions and an error occurs during the runtime with the stack trace being issued, the software process is not properly terminated. The software client is still attempting to maintain the connection even though the network connection information is being reset live. In that insecure mode, the "FrmAdvancedProtection" component crashes, but the process continues to run with different errors and process corruptions. This local corruption vulnerability can be exploited by local attackers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-06T22:00:00.000Z
CVE-2017-16638 
The Gentoo net-misc/vde package before version 2.3.2-r4 may allow members of the "qemu" group to gain root privileges by creating a hard link in a directory on which "chown" is called recursively by the OpenRC service script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-06T23:00:00.000Z
CVE-2017-16639 
Tor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity feature and discover a client IP address, a different vulnerability than CVE-2017-16541. User interaction is required to trigger this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-14T21:00:00.000Z