rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-6870 
A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2). The existing TLS protocol implementation could allow an attacker to read and modify data within a TLS session while performing a Man-in-the-Middle (MitM) attack.
Problem types: cwe_id: CWE-300
description: CWE-300: Channel Accessible by Non-Endpoint
Affected products: vendor: n/a
product: SIMATIC WinCC Sm@rtClient for Android
Published: 2017-08-08T00:00:00.000Z
CVE-2017-6871 
A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2) and SIMATIC WinCC Sm@rtClient for Android Lite (All versions before V1.0.2.2). An attacker with physical access to an unlocked mobile device, that has the affected app running, could bypass the app's authentication mechanism under certain conditions.
Problem types: cwe_id: CWE-288
description: CWE-288: Authentication Bypass Using an Alternate Path or Channel
Affected products: vendor: n/a
product: SIMATIC WinCC Sm@rtClient for Android, SIMATIC WinCC Sm@rtClient Lite for Android
Published: 2017-08-08T00:00:00.000Z
CVE-2017-6872 
A vulnerability was discovered in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an attacker with access to port 21/tcp to access or alter historical measurement data stored on the device.
Problem types: cwe_id: CWE-306
description: CWE-306: Missing Authentication for Critical Function
Affected products: vendor: n/a
product: OZW672, OZW772
Published: 2017-08-08T00:00:00.000Z
CVE-2017-6873 
A vulnerability was discovered in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle (MITM) attack on the integrated web server on port 443/tcp.
Problem types: cwe_id: CWE-306
description: CWE-306: Missing Authentication for Critical Function
Affected products: vendor: n/a
product: OZW672, OZW772
Published: 2017-08-08T00:00:00.000Z
CVE-2017-6874 
Race condition in kernel/ucount.c in the Linux kernel through 4.10.2 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls that leverage certain decrement behavior that causes incorrect interaction between put_ucounts and get_ucounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-14T09:02:00.000Z
CVE-2017-6877 
Cross-site scripting (XSS) vulnerability in SVG file handling in Lutim 0.7.1 and earlier allows remote attackers to inject arbitrary web script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-14T09:02:00.000Z
CVE-2017-6878 
Cross-site scripting (XSS) vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name_2 parameter to admin/column/delete.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-27T15:00:00.000Z
CVE-2017-6880 
Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long MLST command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-17T17:00:00.000Z
CVE-2017-6883 
The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF image. The vulnerability could lead to information disclosure; an attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-14T09:02:00.000Z
CVE-2017-6884 
A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute arbitrary commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-06T17:00:00.000Z
CVE-2017-6885 
An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon of the Flexera Software FlexNet Manager Suite 2017 before 2017 R1 and 2014 R3 through 2016 R1 SP1 can be exploited to gain elevated privileges.
Problem types: description: Privilege escalation by locally authenticated users
Affected products: vendor: Flexera Software LLC
product: FlexNet Manager Suite
Published: 2017-05-16T15:00:00.000Z
CVE-2017-6886 
An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt memory.
Problem types: description: Denial of Service
Affected products: vendor: LibRaw
product: LibRaw
Published: 2017-05-16T15:00:00.000Z
CVE-2017-6887 
A boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to "DSLR-A100" and containing multiple sequences of 0x100 and 0x14A TAGs.
Problem types: description: Memory Corruption, System Compromise and Denial of Service
Affected products: vendor: LibRaw
product: LibRaw
Published: 2017-05-16T15:00:00.000Z
CVE-2017-6888 
An error in the "read_metadata_vorbiscomment_()" function (src/libFLAC/stream_decoder.c) in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file.
Problem types: description: Denial of Service
Affected products: vendor: FLAC
product: FLAC
Published: 2018-04-25T21:00:00.000Z
CVE-2017-6889 
An integer overflow error within the "foveon_load_camf()" function (dcraw_foveon.c) in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a heap-based buffer overflow.
Problem types: description: Heap-based buffer overflow
Affected products: vendor: LibRaw
product: LibRaw-demosaic-pack-GPL2
Published: 2017-05-15T18:00:00.000Z
CVE-2017-6890 
A boundary error within the "foveon_load_camf()" function (dcraw_foveon.c) when initializing a huffman table in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a stack-based buffer overflow.
Problem types: description: Stack-based buffer overflow
Affected products: vendor: LibRaw
product: LibRaw-demosaic-pack-GPL2
Published: 2017-05-15T18:00:00.000Z
CVE-2017-6891 
Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.
Problem types: description: Stack-based buffer overflow leading to system compromise
Affected products: vendor: Flexera Software LLC
product: GnuTLS libtasn1
Published: 2017-05-22T19:00:00.000Z
CVE-2017-6892 
In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file.
Problem types: description: Out-of-bounds read memory access leading to information disclosure
Affected products: vendor: Flexera Software LLC
product: libsndfile
Published: 2017-06-12T16:00:00.000Z
CVE-2017-6894 
A vulnerability exists in FlexNet Manager Suite releases 2015 R2 SP3 and earlier (including FlexNet Manager Platform 9.2 and earlier) that affects the inventory gathering components and can be exploited by local users to perform certain actions with elevated privileges on the local system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-03-29T00:00:00.000Z
CVE-2017-6895 
USB Pratirodh allows remote attackers to conduct XML External Entity (XXE) attacks via XML data in usb.xml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T20:00:00.000Z
CVE-2017-6896 
Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-14T20:00:00.000Z
CVE-2017-6899 
The msm_bus_dbg_update_request_write function in drivers/platform/msm/msm_bus/msm_bus_dbg.c in android_kernel_huawei_msm8916 through 2017-06-16 in LineageOS, and possibly other kernels for MSM devices, allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted /sys/kernel/debug/msm-bus-dbg/client-data/update-request write request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-16T17:00:00.000Z
CVE-2017-6900 
An issue was discovered in Riello NetMan 204 14-2 and 15-2. The issue is with the login script and wrongpass Python script used for authentication. When calling wrongpass, the variables $VAL0 and $VAL1 should be enclosed in quotes to prevent the potential for Bash command injection. Further to this, VAL0 and VAL1 should be sanitised to ensure they do not contain malicious characters. Passing it the username of '-' will cause it to time out and log the user in because of poor error handling. This will log the attacker in as an administrator where the telnet / ssh services can be enabled, and the credentials for local users can be reset. Also, login.cgi accepts the username as a GET parameter, so login can be achieved by browsing to the /cgi-bin/login.cgi?username=-%20a URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T16:28:27.000Z
CVE-2017-6903 
In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Quake III Arena, OpenArena, OpenJK, iortcw, and other id Tech 3 (aka Quake 3 engine) forks. A malicious auto-downloaded file can trigger loading of crafted auto-downloaded files as native code DLLs. A malicious auto-downloaded file can contain configuration defaults that override the user's. Executable bytecode in a malicious auto-downloaded file can set configuration variables to values that will result in unwanted native code DLLs being loaded, resulting in sandbox escape.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-14T22:00:00.000Z
CVE-2017-6905 
An issue was discovered in concrete5 <= 5.6.3.4. The vulnerability exists due to insufficient filtration of user-supplied data (disable_choose) passed to the "concrete5-legacy-master/web/concrete/tools/files/search_dialog.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T00:00:00.000Z
CVE-2017-6906 
An issue was discovered in SiberianCMS before 4.10.0.  The vulnerability exists due to insufficient filtration of user-supplied data (log) passed to the "SiberianCMS-master/errors/500.php" URL.  An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T00:00:00.000Z
CVE-2017-6907 
An issue was discovered in Open.GL before 2017-03-13. The vulnerability exists due to insufficient filtration of user-supplied data (content) passed to the "Open.GL-master/index.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T00:00:00.000Z
CVE-2017-6908 
An issue was discovered in concrete5 <= 5.6.3.4. The vulnerability exists due to insufficient filtration of user-supplied data (fID) passed to the "concrete5-legacy-master/web/concrete/tools/files/selector_data.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T00:00:00.000Z
CVE-2017-6909 
An issue was discovered in Shimmie <= 2.5.1. The vulnerability exists due to insufficient filtration of user-supplied data (log) passed to the "shimmie2-master/ext/chatbox/history/index.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T00:00:00.000Z
CVE-2017-6910 
The HTTP and WebSocket engine components in the server in Kaazing Gateway before 4.5.3 hotfix-1, Gateway - JMS Edition before 4.0.5 hotfix-15, 4.0.6 before hotfix-4, 4.0.7, 4.0.9 before hotfix-19, 4.4.x before 4.4.2 hotfix-1, 4.5.x before 4.5.3 hotfix-1, and Gateway Community and Enterprise Editions before 5.6.0 allow remote attackers to bypass intended access restrictions and obtain sensitive information via vectors related to HTTP request handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-12T15:00:00.000Z
CVE-2017-6911 
USB Pratirodh is prone to sensitive information disclosure. It stores sensitive information such as username and password in simple usb.xml. An attacker with physical access to the system can modify the file according his own requirements that may aid in further attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T20:00:00.000Z
CVE-2017-6912 
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-22T19:19:21.000Z
CVE-2017-6913 
Cross-site scripting (XSS) vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-18T20:00:00.000Z
CVE-2017-6914 
CSRF exists in BigTree CMS 4.1.18 and 4.2.16 with the id parameter to the admin/ajax/users/delete/ page. A user can be deleted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T16:00:00.000Z
CVE-2017-6915 
CSRF exists in BigTree CMS 4.1.18 with the colophon parameter to the admin/settings/update/ page. The Colophon can be changed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T16:00:00.000Z
CVE-2017-6916 
CSRF exists in BigTree CMS 4.1.18 with the nav-social[#] parameter to the admin/settings/update/ page. The Navigation Social can be changed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T16:00:00.000Z
CVE-2017-6917 
CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Colophon can be changed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T16:00:00.000Z
CVE-2017-6918 
CSRF exists in BigTree CMS 4.2.16 with the value[#][*] parameter to the admin/settings/update/ page. The Navigation Social can be changed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T16:00:00.000Z
CVE-2017-6919 
Drupal 8 before 8.2.8 and 8.3 before 8.3.1 allows critical access bypass by authenticated users if the RESTful Web Services (rest) module is enabled and the site allows PATCH requests.
Problem types: description: access bypass
Affected products: vendor: n/a
product: Drupal
Published: 2017-04-20T02:43:00.000Z
CVE-2017-6920 
Drupal core 8 before versions 8.3.4 allows remote attackers to execute arbitrary code due to the PECL YAML parser not handling PHP objects safely during certain operations.
Problem types: description: Remote Code Execution
Affected products: vendor: Drupal.org
product: Drupal Core
Published: 2018-08-06T15:00:00.000Z
CVE-2017-6921 File REST resource does not properly validate
In Drupal 8 prior to 8.3.4; The file REST resource does not properly validate some fields when manipulating files. A site is only affected by this if the site has the RESTful Web Services (rest) module enabled, the file REST resource is enabled and allows PATCH requests, and an attacker can get or register a user account on the site with permissions to upload files and to modify the file resource.
Problem types: description: Access Bypass
Affected products: vendor: Drupal
product: Drupal Core
Published: 2019-01-15T22:00:00.000Z
CVE-2017-6922 Files uploaded by anonymous users into a private file system can be accessed by other anonymous users
In Drupal core 8.x prior to 8.3.4 and Drupal core 7.x prior to 7.56; Private files that have been uploaded by an anonymous user but not permanently attached to content on the site should only be visible to the anonymous user that uploaded them, rather than all anonymous users. Drupal core did not previously provide this protection, allowing an access bypass vulnerability to occur. This issue is mitigated by the fact that in order to be affected, the site must allow anonymous users to upload files into a private file system.
Problem types: description: Access Bypass
Affected products: vendor: Drupal
product: Drupal Core
Published: 2019-01-22T15:00:00.000Z
CVE-2017-6923 Access bypass in Drupal 8 views
In Drupal 8.x prior to 8.3.7 When creating a view, you can optionally use Ajax to update the displayed data via filter parameters. The views subsystem/module did not restrict access to the Ajax endpoint to only views configured to use Ajax. This is mitigated if you have access restrictions on the view. It is best practice to always include some form of access restrictions on all views, even if you are using another module to display them.
Problem types: description: Access bypass
Affected products: vendor: Drupal
product: Drupal core
Published: 2019-01-22T16:00:00.000Z
CVE-2017-6924 REST API can bypass comment approval - Access Bypass - Moderately Critical
In Drupal 8 prior to 8.3.7; When using the REST API, users without the correct permission can post comments via REST that are approved even if the user does not have permission to post approved comments. This issue only affects sites that have the RESTful Web Services (rest) module enabled, the comment entity REST resource enabled, and where an attacker can access a user account on the site with permissions to post comments, or where anonymous users can post comments.
Problem types: description: Access Bypass
Affected products: vendor: Drupal
product: Drupal Core
Published: 2019-01-15T20:00:00.000Z
CVE-2017-6925 
In versions of Drupal 8 core prior to 8.3.7; There is a vulnerability in the entity access system that could allow unwanted access to view, create, update, or delete entities. This only affects entities that do not use or do not have UUIDs, and entities that have different access restrictions on different revisions of the same entity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-15T17:00:00.000Z
CVE-2017-6926 
In Drupal versions 8.4.x versions before 8.4.5 users with permission to post comments are able to view content and comments they do not have access to, and are also able to add comments to this content. This vulnerability is mitigated by the fact that the comment system must be enabled and the attacker must have permission to post comments.
Problem types: description: Access bypass
Affected products: vendor: Drupal.org
product: Drupal Core
Published: 2018-03-01T22:00:00.000Z
CVE-2017-6927 
Drupal 8.4.x versions before 8.4.5 and Drupal 7.x versions before 7.57 has a Drupal.checkPlain() JavaScript function which is used to escape potentially dangerous text before outputting it to HTML (as JavaScript output does not typically go through Twig autoescaping). This function does not correctly handle all methods of injecting malicious HTML, leading to a cross-site scripting vulnerability under certain circumstances. The PHP functions which Drupal provides for HTML escaping are not affected.
Problem types: description: Cross Site Scripting
Affected products: vendor: Drupal.org
product: Drupal Core
Published: 2018-03-01T22:00:00.000Z
CVE-2017-6928 
Drupal core 7.x versions before 7.57 when using Drupal's private file system, Drupal will check to make sure a user has access to a file before allowing the user to view or download it. This check fails under certain conditions in which one module is trying to grant access to the file and another is trying to deny it, leading to an access bypass vulnerability. This vulnerability is mitigated by the fact that it only occurs for unusual site configurations.
Problem types: description: Access bypass
Affected products: vendor: Drupal.org
product: Drupal Core
Published: 2018-03-01T22:00:00.000Z
CVE-2017-6929 
A jQuery cross site scripting vulnerability is present when making Ajax requests to untrusted domains. This vulnerability is mitigated by the fact that it requires contributed or custom modules in order to exploit. For Drupal 8, this vulnerability was already fixed in Drupal 8.4.0 in the Drupal core upgrade to jQuery 3. For Drupal 7, it is fixed in the current release (Drupal 7.57) for jQuery 1.4.4 (the version that ships with Drupal 7 core) as well as for other newer versions of jQuery that might be used on the site, for example using the jQuery Update module.
Problem types: description: Cross Site Scripting
Affected products: vendor: Drupal.org
product: Drupal Core
Published: 2018-03-01T22:00:00.000Z
CVE-2017-6930 
In Drupal versions 8.4.x versions before 8.4.5 when using node access controls with a multilingual site, Drupal marks the untranslated version of a node as the default fallback for access queries. This fallback is used for languages that do not yet have a translated version of the created node. This can result in an access bypass vulnerability. This issue is mitigated by the fact that it only applies to sites that a) use the Content Translation module; and b) use a node access module such as Domain Access which implement hook_node_access_records().
Problem types: description: Access bypass
Affected products: vendor: Drupal.org
product: Drupal Core
Published: 2018-03-01T22:00:00.000Z
CVE-2017-6931 
In Drupal versions 8.4.x versions before 8.4.5 the Settings Tray module has a vulnerability that allows users to update certain data that they do not have the permissions for. If you have implemented a Settings Tray form in contrib or a custom module, the correct access checks should be added. This release fixes the only two implementations in core, but does not harden against other such bypasses. This vulnerability can be mitigated by disabling the Settings Tray module.
Problem types: description: Access bypass
Affected products: vendor: Drupal.org
product: Drupal Core
Published: 2018-03-01T22:00:00.000Z
CVE-2017-6932 
Drupal core 7.x versions before 7.57 has an external link injection vulnerability when the language switcher block is used. A similar vulnerability exists in various custom and contributed modules. This vulnerability could allow an attacker to trick users into unwillingly navigating to an external site.
Problem types: description: Link injection
Affected products: vendor: Drupal.org
product: Drupal Core
Published: 2018-03-01T22:00:00.000Z
CVE-2017-6949 
An issue was discovered in CHICKEN Scheme through 4.12.0. When using a nonstandard CHICKEN-specific extension to allocate an SRFI-4 vector in unmanaged memory, the vector size would be used in unsanitised form as an argument to malloc(). With an unexpected size, the impact may have been a segfault or buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-16T17:00:00.000Z