rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-13673 
The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service (assertion failure) in the cpu_physical_memory_snapshot_get_dirty function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T16:00:00.000Z
CVE-2017-13674 
Symantec ProxyClient 3.4 for Windows is susceptible to a privilege escalation vulnerability. A malicious local Windows user can, under certain circumstances, exploit this vulnerability to escalate their privileges on the system and execute arbitrary code with LocalSystem privileges.
Problem types: description: Privilege escalation
Affected products: vendor: Symantec Corporation
product: ProxyClient
Published: 2017-09-01T13:00:00.000Z
CVE-2017-13675 
A denial of service (DoS) attack in Symantec Endpoint Encryption before SEE 11.1.3HF2 allows remote attackers to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a specific host within a network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-10T19:00:00.000Z
CVE-2017-13676 
Norton Remove & Reinstall can be susceptible to a DLL preloading vulnerability. These types of issues occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will generally follow a specific search path to locate the DLL. The vulnerability can be exploited by a simple file write (or potentially an over-write) which results in a foreign DLL running under the context of the application. A Norton Remove & Reinstall update, version 4.4.0.58, has been released which addresses the aforementioned vulnerability.
Problem types: description: DLL Preloading
Affected products: vendor: Symantec Corporation
product: Norton Remove & Reinstall
Published: 2017-09-27T15:00:00.000Z
CVE-2017-13677 
Denial-of-service (DoS) vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A remote attacker can use crafted HTTP/HTTPS requests to cause denial-of-service through management console application crashes.
Problem types: description: Denial of service
Affected products: vendor: Symantec Corporation
product: Advanced Secure Gateway (ASG)
vendor: Symantec Corporation
product: ProxySG
Published: 2018-04-11T14:00:00.000Z
CVE-2017-13678 
Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can inject arbitrary JavaScript code in the management console web client application.
Problem types: description: Stored XSS
Affected products: vendor: Symantec Corporation
product: Advanced Secure Gateway (ASG)
vendor: Symantec Corporation
product: ProxySG
Published: 2018-04-11T14:00:00.000Z
CVE-2017-13679 
A denial of service (DoS) attack in Symantec Encryption Desktop before SED 10.4.1 MP2HF1 allows remote attackers to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a specific host within a network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-10T19:00:00.000Z
CVE-2017-13680 
Prior to SEP 12.1 RU6 MP9 & SEP 14 RU1 Symantec Endpoint Protection Windows endpoint can encounter a situation whereby an attacker could use the product's UI to perform unauthorized file deletes on the resident file system.
Problem types: description: Arbitrary File Deletion
Affected products: vendor: Symantec Corporation
product: Symantec Endpoint Protection
Published: 2017-11-06T23:00:00.000Z
CVE-2017-13681 
Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels. In the circumstances of this issue, the capability of exploit is limited by the need to perform multiple file and directory writes to the local filesystem and as such, is not feasible in a standard drive-by type attack.
Problem types: description: Privilege Escalation
Affected products: vendor: Symantec Corporation
product: Symantec Endpoint Protection
Published: 2017-11-06T23:00:00.000Z
CVE-2017-13682 
In Symantec Encryption Desktop before SED 10.4.1 MP2HF1, a kernel memory leak is a type of resource leak that can occur when a computer program incorrectly manages memory allocations in such a way that memory which is no longer needed is not released. In object-oriented programming, a memory leak may happen when an object is stored in memory but cannot be accessed by the running code.
Problem types: description: Kernel Memory Leak
Affected products: vendor: Symantec Corporation
product: Symantec Encryption Desktop
Published: 2017-10-23T20:00:00.000Z
CVE-2017-13683 
In Symantec Endpoint Encryption before SEE 11.1.3HF3, a kernel memory leak is a type of resource leak that can occur when a computer program incorrectly manages memory allocations in such a way that memory which is no longer needed is not released. In object-oriented programming, a memory leak may happen when an object is stored in memory but cannot be accessed by the running code.
Problem types: description: Kernel Memory Leak
Affected products: vendor: Symantec Corporation
product: Symantec Endpoint Encryption
Published: 2017-10-23T20:00:00.000Z
CVE-2017-13684 
Unisys Libra 64xx and 84xx and FS601 class systems with MCP-FIRMWARE before 43.211 allow remote authenticated users to cause a denial of service (program crash) or have unspecified other impact via vectors related to incorrect literal handling, which trigger CPM stack corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-29T20:00:00.000Z
CVE-2017-13685 
The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T06:00:00.000Z
CVE-2017-13686 
net/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-rc6 is too late to check for a NULL fi field when RTM_F_FIB_MATCH is set, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via crafted system calls. NOTE: this does not affect any stable release.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-24T22:00:00.000Z
CVE-2017-13687 
The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13688 
The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13689 
The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13690 
The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13692 
In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated by an invalid ISALNUM argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-25T07:00:00.000Z
CVE-2017-13693 
The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-25T07:00:00.000Z
CVE-2017-13694 
The acpi_ps_complete_final_op() function in drivers/acpi/acpica/psobject.c in the Linux kernel through 4.12.9 does not flush the node and node_ext caches and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-25T07:00:00.000Z
CVE-2017-13695 
The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-25T07:00:00.000Z
CVE-2017-13696 
A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, and Disk Pulse Enterprise 9.9.16 where an attacker can craft a malicious GET request and exploit the web server component. Successful exploitation of the software will allow an attacker to gain complete access to the system with NT AUTHORITY / SYSTEM level privileges. The vulnerability lies due to improper handling and sanitization of the incoming request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-24T15:00:00.000Z
CVE-2017-13697 
controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the dirname variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-25T17:00:00.000Z
CVE-2017-13698 
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. An attacker could extract public and private keys from the firmware image available on the MOXA website and could use them against a production switch that has the default keys embedded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-23T21:00:00.000Z
CVE-2017-13699 
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The password encryption method can be retrieved from the firmware. This encryption method is based on a chall value that is sent in cleartext as a POST parameter. An attacker could reverse the password encryption algorithm to retrieve it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-23T21:00:00.000Z
CVE-2017-13700 
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. There is XSS in the administration interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-17T18:00:00.000Z
CVE-2017-13701 
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The backup file contains sensitive information in a insecure way. There is no salt for password hashing. Indeed passwords are stored without being ciphered with a timestamped ciphering method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-23T21:00:00.000Z
CVE-2017-13702 
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen, manipulated, and reused.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-17T18:00:00.000Z
CVE-2017-13703 
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. A denial of service may occur.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-17T18:00:00.000Z
CVE-2017-13704 
In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0xffffffff zero's (0xffffffffffffffff in 64 bit platforms), making dnsmasq crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T21:00:00.000Z
CVE-2017-13706 
XML external entity (XXE) vulnerability in the import package functionality of the deployment module in Lansweeper before 6.0.100.67 allows remote authenticated users to obtain sensitive information, cause a denial of service, conduct server-side request forgery (SSRF) attacks, conduct internal port scans, or have unspecified other impact via an XML request, aka bug #572705.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-10T13:00:00.000Z
CVE-2017-13707 
Privilege escalation in Replibit Backup Manager earlier than version 2017.08.04 allows attackers to gain root privileges via sudo command execution. The vi program can be accessed through sudo, in order to navigate the filesystem and modify a critical file such as /etc/passwd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-27T15:00:00.000Z
CVE-2017-13708 
Buffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers to execute arbitrary code via a crafted GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T14:00:00.000Z
CVE-2017-13709 
In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-27T16:00:00.000Z
CVE-2017-13710 
The setup_group function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a group section that is too small.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-27T16:00:00.000Z
CVE-2017-13711 
Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to cause a denial of service (QEMU instance crash) by leveraging failure to properly clear ifq_so from pending packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-01T13:00:00.000Z
CVE-2017-13712 
NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of Service by triggering a NULL first argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2017-13713 
T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to cgi-bin/webupg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T13:00:00.000Z
CVE-2017-13715 
The __skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel before 4.3 does not ensure that n_proto, ip_proto, and thoff are initialized, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a single crafted MPLS packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T20:00:00.000Z
CVE-2017-13716 
The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T21:00:00.000Z
CVE-2017-13717 
Starry Station (aka Starry Router) sets the Access-Control-Allow-Origin header to "*". This allows any hosted file on any domain to make calls to the device's webserver and brute force the credentials and pull any information that is stored on the device. In this case, a user's Wi-Fi credentials are stored in clear text on the device and can be pulled easily.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-10T21:35:19.000Z
CVE-2017-13718 
The HTTP API supported by Starry Station (aka Starry Router) allows brute forcing the PIN setup by the user on the device, and this allows an attacker to change the Wi-Fi settings and PIN, as well as port forward and expose any internal device's port to the Internet. It was identified that the device uses custom Python code called "rodman" that allows the mobile appication to interact with the device. The APIs that are a part of this rodman Python file allow the mobile application to interact with the device using a secret, which is a uuid4 based session identifier generated by the device the first time it is set up. However, in some cases, these APIs can also use a security code. This security code is nothing but the PIN number set by the user to interact with the device when using the touch interface on the router. This allows an attacker on the Internet to interact with the router's HTTP interface when a user navigates to the attacker's website, and brute force the credentials. Also, since the device's server sets the Access-Control-Allow-Origin header to "*", an attacker can easily interact with the JSON payload returned by the device and steal sensitive information about the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-10T21:31:30.000Z
CVE-2017-13719 
The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of the camera by using HTTP APIs, instead of the web management interface that is provided by the application. This HTTP API receives the credentials as base64 encoded in the Authorization HTTP header. However, a missing length check in the code allows an attacker to send a string of 1024 characters in the password field, and allows an attacker to exploit a memory corruption issue. This can allow an attacker to circumvent the account protection mechanism and brute force the credentials. If the firmware version Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 is dissected using the binwalk tool, one obtains a _user-x.squashfs.img.extracted archive which contains the filesystem set up on the device that has many of the binaries in the /usr folder. The binary "sonia" is the one that has the vulnerable function that performs the credential check in the binary for the HTTP API specification. If we open this binary in IDA Pro we will notice that this follows an ARM little-endian format. The function at address 00415364 in IDA Pro starts the HTTP authentication process. This function calls another function at sub_ 0042CCA0 at address 0041549C. This function performs a strchr operation after base64 decoding the credentials, and stores the result on the stack, which results in a stack-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T19:40:57.000Z
CVE-2017-13720 
In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts, leading to information disclosure or a crash (denial of service). This occurs because '\0' characters are incorrectly skipped in situations involving ? characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-11T17:00:00.000Z
CVE-2017-13721 
In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared memory segments of other X clients in the same session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-09T14:00:00.000Z
CVE-2017-13722 
In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0.2, a missing boundary check (for PCF files) could be used by local attackers authenticated to an Xserver for a buffer over-read, for information disclosure or a crash of the X server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-11T17:00:00.000Z
CVE-2017-13723 
In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-09T14:00:00.000Z
CVE-2017-13724 
On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the APN parameter under the "Basic Settings" page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-13T08:00:00.000Z
CVE-2017-13725 
The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13726 
There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T06:00:00.000Z
CVE-2017-13727 
There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T06:00:00.000Z
CVE-2017-13728 
There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T06:00:00.000Z
CVE-2017-13729 
There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T06:00:00.000Z
CVE-2017-13730 
There is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in ncurses 6.0 that might lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T06:00:00.000Z
CVE-2017-13731 
There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T06:00:00.000Z
CVE-2017-13732 
There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T06:00:00.000Z
CVE-2017-13733 
There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T06:00:00.000Z