rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-2603 
Jenkins before versions 2.44, 2.32.2 is vulnerable to a user data leak in disconnected agents' config.xml API. This could leak sensitive data such as API tokens (SECURITY-362).
Problem types: cwe_id: CWE-325
description: CWE-325
Affected products: vendor: [UNKNOWN]
product: jenkins
Published: 2018-05-15T21:00:00.000Z
CVE-2017-2604 
In Jenkins before versions 2.44, 2.32.2 low privilege users were able to act on administrative monitors due to them not being consistently protected by permission checks (SECURITY-371).
Problem types: cwe_id: CWE-358
description: CWE-358
Affected products: vendor: [UNKNOWN]
product: jenkins
Published: 2018-05-15T21:00:00.000Z
CVE-2017-2606 
Jenkins before versions 2.44, 2.32.2 is vulnerable to an information exposure in the internal API that allows access to item names that should not be visible (SECURITY-380). This only affects anonymous users (other users legitimately have access) that were able to get a list of items via an UnprotectedRootAction.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: unspecified
product: jenkins
Published: 2018-05-08T20:00:00.000Z
CVE-2017-2607 
jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting vulnerability in console notes (SECURITY-382). Jenkins allows plugins to annotate build logs, adding new content or changing the presentation of existing content while the build is running. Malicious Jenkins users, or users with SCM access, could configure jobs or modify build scripts such that they print serialized console notes that perform cross-site scripting attacks on Jenkins users viewing the build logs.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: [UNKNOWN]
product: jenkins
Published: 2018-05-21T23:00:00.000Z
CVE-2017-2608 
Jenkins before versions 2.44, 2.32.2 is vulnerable to a remote code execution vulnerability involving the deserialization of various types in javax.imageio in XStream-based APIs (SECURITY-383).
Problem types: cwe_id: CWE-502
description: CWE-502
Affected products: vendor: [UNKNOWN]
product: jenkins
Published: 2018-05-15T20:00:00.000Z
CVE-2017-2609 
jenkins before versions 2.44, 2.32.2 is vulnerable to an information disclosure vulnerability in search suggestions (SECURITY-385). The autocomplete feature on the search box discloses the names of the views in its suggestions, including the ones for which the current user does not have access to.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: [UNKNOWN]
product: jenkins
Published: 2018-05-22T17:00:00.000Z
CVE-2017-2610 
jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in search suggestions due to improperly escaping users with less-than and greater-than characters in their names (SECURITY-388).
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: [UNKNOWN]
product: jenkins
Published: 2018-05-15T21:00:00.000Z
CVE-2017-2611 
Jenkins before versions 2.44, 2.32.2 is vulnerable to an insufficient permission check for periodic processes (SECURITY-389). The URLs /workspaceCleanup and /fingerprintCleanup did not perform permission checks, allowing users with read access to Jenkins to trigger these background processes (that are otherwise performed daily), possibly causing additional load on Jenkins master and agents.
Problem types: cwe_id: CWE-358
description: CWE-358
Affected products: vendor: unspecified
product: jenkins
Published: 2018-05-08T18:00:00.000Z
CVE-2017-2612 
In Jenkins before versions 2.44, 2.32.2 low privilege users were able to override JDK download credentials (SECURITY-392), resulting in future builds possibly failing to download a JDK.
Problem types: cwe_id: CWE-358
description: CWE-358
Affected products: vendor: [UNKNOWN]
product: jenkins
Published: 2018-05-15T20:00:00.000Z
CVE-2017-2613 
jenkins before versions 2.44, 2.32.2 is vulnerable to a user creation CSRF using GET by admins. While this user record was only retained until restart in most cases, administrators' web browsers could be manipulated to create a large number of user records (SECURITY-406).
Problem types: cwe_id: CWE-770
description: CWE-770
Affected products: vendor: [UNKNOWN]
product: jenkins
Published: 2018-05-15T22:00:00.000Z
CVE-2017-2614 
When updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools before 1.1.3 fail to correctly check for the current password if it is expired. This would allow access to an attacker with access to change the password on accounts with expired passwords, gaining access to those accounts.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Red Hat
product: ovirt-engine-extension-aaa-jdbc
Published: 2018-07-27T18:00:00.000Z
CVE-2017-2615 
Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: qemu
product: display
Published: 2018-07-02T18:00:00.000Z
CVE-2017-2616 
A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.
Problem types: cwe_id: CWE-267
description: CWE-267
Affected products: vendor: Linux
product: util-linux
Published: 2018-07-27T19:00:00.000Z
CVE-2017-2617 
hawtio before version 1.5.5 is vulnerable to remote code execution via file upload. An attacker could use this vulnerability to upload a crafted file which could be executed on a target machine where hawtio is deployed.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: [UNKNOWN]
product: hawtio
Published: 2018-05-22T17:00:00.000Z
CVE-2017-2618 
A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty (null) write to this file can crash the system by causing the system to attempt to access unmapped kernel memory.
Problem types: cwe_id: CWE-193
description: CWE-193
Affected products: vendor: Linux
product: kernel
Published: 2018-07-27T19:00:00.000Z
CVE-2017-2619 
Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.
Problem types: cwe_id: CWE-362
description: CWE-362
Affected products: vendor: Samba
product: samba
Published: 2018-03-12T15:00:00.000Z
CVE-2017-2620 
Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: QEMU
product: Qemu:
Published: 2018-07-27T19:00:00.000Z
CVE-2017-2621 
An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.
Problem types: cwe_id: CWE-552
description: CWE-552
Affected products: vendor: Red Hat
product: openstack-heat
Published: 2018-07-27T18:00:00.000Z
CVE-2017-2622 
An accessibility flaw was found in the OpenStack Workflow (mistral) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.
Problem types: cwe_id: CWE-552
description: CWE-552
Affected products: vendor: [UNKNOWN]
product: openstack-mistral
Published: 2018-07-27T13:00:00.000Z
CVE-2017-2623 
It was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG signatures on packages when doing layering. Packages with unsigned or badly signed content could fail to be rejected as expected. This issue is partially mitigated on RHEL Atomic Host, where certificate pinning is used by default.
Problem types: cwe_id: CWE-295
description: CWE-295
Affected products: vendor: Project Atomic
product: rpm-ostree,
Published: 2018-07-27T18:00:00.000Z
CVE-2017-2624 
It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp() implementations return after an invalid byte is seen, this causes a time difference between a valid and invalid byte, which could allow an efficient brute force attack.
Problem types: cwe_id: CWE-385
description: CWE-385
Affected products: vendor: Xorg
product: xorg-x11-server
Published: 2018-07-27T18:00:00.000Z
CVE-2017-2625 
It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions.
Problem types: cwe_id: CWE-331
description: CWE-331
Affected products: vendor: Xorg
product: libXdmcp
Published: 2018-07-27T18:00:00.000Z
CVE-2017-2626 
It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.
Problem types: cwe_id: CWE-331
description: CWE-331
Affected products: vendor: Xorg
product: libICE
Published: 2018-07-27T19:00:00.000Z
CVE-2017-2627 
A flaw was found in openstack-tripleo-common as shipped with Red Hat Openstack Enterprise 10 and 11. The sudoers file as installed with OSP's openstack-tripleo-common package is much too permissive. It contains several lines for the mistral user that have wildcards that allow directory traversal with '..' and it grants full passwordless root access to the validations user.
Problem types: cwe_id: CWE-22
description: CWE-22
Affected products: vendor: Red Hat
product: openstack-tripleo-common
Published: 2018-08-22T17:00:00.000Z
CVE-2017-2628 
curl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly backport the fix for CVE-2015-3148 because it did not reflect the fact that the HAVE_GSSAPI define was meanwhile substituted by USE_HTTP_NEGOTIATE. This issue was introduced in RHEL 6.7 and affects RHEL 6 curl only.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: Red Hat, Inc.
product: curl
Published: 2018-03-12T15:00:00.000Z
CVE-2017-2629 
curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server's certificate's validity in the code that checks for a test success or failure. It ends up always thinking there's valid proof, even when there is none or if the server doesn't support the TLS extension in question. This could lead to users not detecting when a server's certificate goes invalid or otherwise be mislead that the server is in a better shape than it is in reality. This flaw also exists in the command line tool (--cert-status).
Problem types: cwe_id: CWE-295
description: CWE-295
Affected products: vendor: CURL
product: curl
Published: 2018-07-27T19:00:00.000Z
CVE-2017-2630 
A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. The flaw could occur while processing server's response to a 'NBD_OPT_LIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or potentially execute arbitrary code on client host with privileges of the QEMU process.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: QEMU
product: Qemu:
Published: 2018-07-27T18:00:00.000Z
CVE-2017-2632 
A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should have. This would allow an attacker with tenant administration access to elevate privileges.
Problem types: cwe_id: CWE-285
description: CWE-285
Affected products: vendor: Red Hat
product: cfme
Published: 2018-07-27T19:00:00.000Z
CVE-2017-2633 
An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.
Problem types: cwe_id: CWE-120
description: CWE-120
Affected products: vendor: QEMU
product: Qemu:
Published: 2018-07-27T19:00:00.000Z
CVE-2017-2634 
It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used the IPv4-only inet_sk_rebuild_header() function for both IPv4 and IPv6 DCCP connections, which could result in memory corruptions. A remote attacker could use this flaw to crash the system.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: Linux
product: kernel:
Published: 2018-07-27T19:00:00.000Z
CVE-2017-2635 
A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could use this flaw to crash libvirtd daemon resulting in denial of service.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: The libvirt Project
product: libvirt
Published: 2018-08-22T21:00:00.000Z
CVE-2017-2636 
Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-07T22:00:00.000Z
CVE-2017-2637 
A design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable libvirtd based live-migration. Libvirtd is deployed by default (by director) listening on 0.0.0.0 (all interfaces) with no-authentication or encryption. Anyone able to make a TCP connection to any compute host IP address, including 127.0.0.1, other loopback interface addresses, or in some cases possibly addresses that have been exposed beyond the management interface, could use this to open a virsh session to the libvirtd instance and gain control of virtual machine instances or possibly take over the host.
Problem types: cwe_id: CWE-306
description: CWE-306
Affected products: vendor: [UNKNOWN]
product: rhosp-director
Published: 2018-07-26T12:00:00.000Z
CVE-2017-2638 
It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints. An attacker could use this vulnerability to read or modify data in the default cache or a known cache name.
Problem types: cwe_id: CWE-306
description: CWE-306
Affected products: vendor: [UNKNOWN]
product: infinispan
Published: 2018-07-16T13:00:00.000Z
CVE-2017-2639 
It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift. This would allow an attacker to spoof RHEV or OpenShift systems and potentially harvest sensitive information from CloudForms.
Problem types: cwe_id: CWE-295
description: CWE-295
Affected products: vendor: [UNKNOWN]
product: CloudForms
Published: 2018-07-27T13:00:00.000Z
CVE-2017-2640 
An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: Pidgin
product: pidgin
Published: 2018-07-27T18:00:00.000Z
CVE-2017-2641 
In Moodle 2.x and 3.x, SQL injection can occur via user preferences.
Problem types: description: SQL injection
Affected products: vendor: n/a
product: Moodle 2.x and 3.x
Published: 2017-03-26T18:00:00.000Z
CVE-2017-2642 
Moodle 3.x has user fullname disclosure on the user preferences page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-17T16:00:00.000Z
CVE-2017-2643 
In Moodle 3.2.x, global search displays user names for unauthenticated users.
Problem types: description: Global search displays user names for unauthenticated users
Affected products: vendor: n/a
product: Moodle 3.2.x
Published: 2017-03-26T18:00:00.000Z
CVE-2017-2644 
In Moodle 3.x, XSS can occur via evidence of prior learning.
Problem types: description: XSS
Affected products: vendor: n/a
product: Moodle 3.x
Published: 2017-03-26T18:00:00.000Z
CVE-2017-2645 
In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.
Problem types: description: XSS
Affected products: vendor: n/a
product: Moodle 3.x
Published: 2017-03-26T18:00:00.000Z
CVE-2017-2646 
It was found that when Keycloak before 2.5.5 receives a Logout request with a Extensions in the middle of the request, the SAMLSloRequestParser.parse() method ends in a infinite loop. An attacker could use this flaw to conduct denial of service attacks.
Problem types: cwe_id: CWE-835
description: CWE-835
Affected products: vendor: Red Hat
product: keycloak
Published: 2018-07-27T18:00:00.000Z
CVE-2017-2647 
The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving a NULL value for a certain match field, related to the keyring_search_iterator function in keyring.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-31T04:26:00.000Z
CVE-2017-2648 
It was found that jenkins-ssh-slaves-plugin before version 1.15 did not perform host key verification, thereby enabling Man-in-the-Middle attacks.
Problem types: cwe_id: CWE-295
description: CWE-295
Affected products: vendor: Jenkins
product: jenkins-ssh-slaves-plugin
Published: 2018-07-27T20:00:00.000Z
CVE-2017-2649 
It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active Directory server, thereby enabling Man-in-the-Middle attacks.
Problem types: cwe_id: CWE-295
description: CWE-295
Affected products: vendor: Jenkins project
product: Active Directory Jenkins plugin
Published: 2018-07-27T20:00:00.000Z
CVE-2017-2650 
It was found that the use of Pipeline: Classpath Step Jenkins plugin enables a bypass of the Script Security sandbox for users with SCM commit access, as well as users with e.g. Job/Configure permission in Jenkins.
Problem types: cwe_id: CWE-592
description: CWE-592
Affected products: vendor: Jenkins project
product: Pipeline: Classpath Step Jenkins plugin
Published: 2018-07-27T20:00:00.000Z
CVE-2017-2651 
jenkins-mailer-plugin before version 1.20 is vulnerable to an information disclosure while using the feature to send emails to a dynamically created list of users based on the changelogs. This could in some cases result in emails being sent to people who have no user account in Jenkins, and in rare cases even people who were not involved in whatever project was being built, due to some mapping based on the local-part of email addresses.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Jenkins
product: jenkins-mailer-plugin
Published: 2018-07-27T18:00:00.000Z
CVE-2017-2652 
It was found that there were no permission checks performed in the Distributed Fork plugin before and including 1.5.0 for Jenkins that provides the dist-fork CLI command beyond the basic check for Overall/Read permission, allowing anyone with that permission to run arbitrary shell commands on all connected nodes.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: Jenkins project
product: DistFork Jenkins plugin
Published: 2018-07-27T20:00:00.000Z
CVE-2017-2653 
A number of unused delete routes are present in CloudForms before 5.7.2.1 which can be accessed via GET requests instead of just POST requests. This could allow an attacker to bypass the protect_from_forgery XSRF protection causing the routes to be used. This attack would require additional cross-site scripting or similar attacks in order to execute.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Red Hat
product: CloudForms
Published: 2018-07-27T18:00:00.000Z
CVE-2017-2654 
jenkins-email-ext before version 2.57.1 is vulnerable to an Information Exposure. The Email Extension Plugins is able to send emails to a dynamically created list of users based on the changelogs, like authors of SCM changes since the last successful build. This could in some cases result in emails being sent to people who have no user account in Jenkins, and in rare cases even people who were not involved in whatever project was being built, due to some mapping based on the local-part of email addresses.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: [UNKNOWN]
product: jenkins-email-ext
Published: 2018-08-06T22:00:00.000Z
CVE-2017-2658 
It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a user into performing arbitrary actions in the Console (clickjacking).
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Red Hat
product: BPMS
vendor: Red Hat
product: JDV
Published: 2018-07-27T18:00:00.000Z
CVE-2017-2659 
It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an invalid username is given, the GSSAPI authentication failure was incorrectly counted towards the maximum allowed number of password attempts.
Problem types: cwe_id: CWE-209
description: CWE-209
Affected products: vendor: [UNKNOWN]
product: dropbear
Published: 2019-03-20T20:44:51.000Z
CVE-2017-2661 
ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: ClusterLabs
product: pcs
Published: 2018-03-12T15:00:00.000Z
CVE-2017-2662 
A flaw was found in Foreman's katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: The Foreman Project
product: foreman katello plugin
Published: 2018-08-22T16:00:00.000Z
CVE-2017-2663 
It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user access the com.redhat.RHSM1.Facts.GetFacts and com.redhat.RHSM1.Config.Set methods. An unprivileged local attacker could use these methods to gain access to private information, or launch a privilege escalation attack.
Problem types: cwe_id: CWE-270
description: CWE-270
Affected products: vendor: Red Hat
product: subscription-manager
Published: 2018-07-27T20:00:00.000Z
CVE-2017-2664 
CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on certain methods in the rails application portion of CloudForms. An attacker with access could use a variety of methods within the rails application portion of CloudForms to escalate privileges.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: Red Hat
product: CloudForms
Published: 2018-07-26T14:00:00.000Z