rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-7539 
An assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD) server's initial connection negotiation, where the I/O coroutine was undefined. This could crash the qemu-nbd server if a client sent unexpected data during connection negotiation. A remote user or process could use this flaw to crash the qemu-nbd server resulting in denial of service.
Problem types: cwe_id: CWE-617
description: CWE-617
Affected products: vendor: QEMU
product: Qemu
Published: 2018-07-26T14:00:00.000Z
CVE-2017-7540 
rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation.
Problem types: cwe_id: CWE-184
description: CWE-184
Affected products: vendor: Red Hat, Inc.
product: rubygem-safemode
Published: 2017-07-21T22:00:00.000Z
CVE-2017-7541 
The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.12.3 allows local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted NL80211_CMD_FRAME Netlink packet.
Problem types: description: memory corruption
Affected products: vendor: n/a
product: Linux kernel before 4.12.3
Published: 2017-07-25T04:00:00.000Z
CVE-2017-7542 
The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3 allows local users to cause a denial of service (integer overflow and infinite loop) by leveraging the ability to open a raw socket.
Problem types: cwe_id: CWE-190
description: CWE-190
Affected products: vendor: n/a
product: Linux kernel versions up to and including 4.12
Published: 2017-07-21T16:00:00.000Z
CVE-2017-7543 
A race-condition flaw was discovered in openstack-neutron before 7.2.0-12.1, 8.x before 8.3.0-11.1, 9.x before 9.3.1-2.1, and 10.x before 10.0.2-1.1, where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an update, at which point an attacker could access exposed tenant VMs and network resources.
Problem types: cwe_id: CWE-362
description: CWE-362
Affected products: vendor: Red Hat
product: openstack-neutron
Published: 2018-07-26T14:00:00.000Z
CVE-2017-7544 
libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: Red Hat, Inc.
product: libexif
Published: 2017-09-21T20:00:00.000Z
CVE-2017-7545 
It was discovered that the XmlUtils class in jbpmmigration 6.5 performed expansion of external parameter entities while parsing XML files. A remote attacker could use this flaw to read files accessible to the user running the application server and, potentially, perform other more advanced XML eXternal Entity (XXE) attacks.
Problem types: cwe_id: CWE-611
description: CWE-611
Affected products: vendor: KIE
product: jbpm-designer
Published: 2018-07-26T15:00:00.000Z
CVE-2017-7546 
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: PostgreSQL
product: postgresql
Published: 2017-08-16T18:00:00.000Z
CVE-2017-7547 
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.
Problem types: cwe_id: CWE-522
description: CWE-522
Affected products: vendor: PostgreSQL
product: postgresql
Published: 2017-08-16T18:00:00.000Z
CVE-2017-7548 
PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: PostgreSQL
product: postgresql
Published: 2017-08-16T18:00:00.000Z
CVE-2017-7549 
A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.
Problem types: cwe_id: CWE-377
description: CWE-377
Affected products: vendor: Red Hat, Inc.
product: instack-undercloud
Published: 2017-09-21T20:00:00.000Z
CVE-2017-7550 
A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in the module documentation.
Problem types: cwe_id: CWE-532
description: CWE-532
Affected products: vendor: Red Hat, Inc.
product: ansible
Published: 2017-11-21T17:00:00.000Z
CVE-2017-7551 
389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.
Problem types: cwe_id: CWE-209
description: CWE-209
Affected products: vendor: 389 Directory Server
product: 389-ds-base
Published: 2017-08-16T18:00:00.000Z
CVE-2017-7552 
A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as created. An attacker could use this flaw to compromise other users or teams projects stored in source control management of the RHMAP Core installation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-28T20:00:00.000Z
CVE-2017-7553 
The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-28T20:00:00.000Z
CVE-2017-7554 
It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker could use this flaw to execute a stored XSS attack on an application administrator using App Studio.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-28T20:00:00.000Z
CVE-2017-7555 
Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings. Attacker could send crafted strings that would cause the application using augeas to copy past the end of a buffer, leading to a crash or possible code execution.
Problem types: cwe_id: CWE-122
description: CWE-122
Affected products: vendor: Red Hat, Inc.
product: augeas
Published: 2017-08-17T19:00:00.000Z
CVE-2017-7556 
Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.
Problem types: cwe_id: CWE-352
description: CWE-352
Affected products: vendor: Red Hat, Inc.
product: hawtio
Published: 2017-08-17T19:00:00.000Z
CVE-2017-7557 
dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: Red Hat, Inc.
product: dnsdist
Published: 2017-08-22T14:00:00.000Z
CVE-2017-7558 
A kernel data leak due to an out-of-bound read was found in the Linux kernel in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() functions present since version 4.7-rc1 through version 4.13. A data leak happens when these functions fill in sockaddr data structures used to export socket's diagnostic information. As a result, up to 100 bytes of the slab data could be leaked to a userspace.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: Linux
product: kernel
Published: 2018-07-26T15:00:00.000Z
CVE-2017-7559 
In Undertow 2.x before 2.0.0.Alpha2, 1.4.x before 1.4.17.Final, and 1.3.x before 1.3.31.Final, it was found that the fix for CVE-2017-2666 was incomplete and invalid characters are still allowed in the query string and path parameters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own.
Problem types: cwe_id: CWE-444
description: CWE-444
Affected products: vendor: Red Hat, Inc.
product: undertow
Published: 2018-01-10T15:00:00.000Z
CVE-2017-7560 
It was found that rhnsd PID files are created as world-writable that allows local attackers to fill the disks or to kill selected processes.
Problem types: cwe_id: CWE-377
description: CWE-377
Affected products: vendor: Red Hat, Inc.
product: rhnsd
Published: 2017-09-13T17:00:00.000Z
CVE-2017-7561 
Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact.
Problem types: cwe_id: CWE-346
description: CWE-346
Affected products: vendor: Red Hat, Inc.
product: resteasy
Published: 2017-09-13T17:00:00.000Z
CVE-2017-7562 
An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A remote attacker able to communicate with the KDC could potentially use this flaw to impersonate arbitrary principals under rare and erroneous circumstances.
Problem types: cwe_id: CWE-295
description: CWE-295
cwe_id: CWE-287
description: CWE-287
Affected products: vendor: MIT
product: krb5
Published: 2018-07-26T15:00:00.000Z
CVE-2017-7563 
In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_EXECUTE_NEVER protection mechanism. This issue occurs because of inconsistency in the number of execute-never bits (one bit versus two bits).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-07T15:00:00.000Z
CVE-2017-7564 
In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attackers to cause a denial of service (secure world panic) via vectors involving debug exceptions and debug registers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-07T15:00:00.000Z
CVE-2017-7565 
Splunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated users to execute arbitrary code, aka ERP-2041.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-06T15:00:00.000Z
CVE-2017-7566 
MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-06T16:00:00.000Z
CVE-2017-7568 
NetApp OnCommand Unified Manager for 7-Mode (core package) versions prior to 5.2.3 may disclose sensitive LDAP account information to authenticated users when the LDAP authentication configuration is tested via the user interface.
Problem types: description: Sensitive Information Disclosure
Affected products: vendor: NetApp
product: OnCommand Unified Manager for 7-Mode (core package)
Published: 2018-06-22T15:00:00.000Z
CVE-2017-7569 
In vBulletin before 5.3.0, remote attackers can bypass the CVE-2016-6483 patch and conduct SSRF attacks by leveraging the behavior of the PHP parse_url function, aka VBV-17037.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-06T17:00:00.000Z
CVE-2017-7570 
PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a safe file extension (such as .jpg) and then invoking the duplicate function to change to the .php extension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-07T04:33:00.000Z
CVE-2017-7571 
public/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-06T17:00:00.000Z
CVE-2017-7572 
The _checkPolkitPrivilege function in serviceHelper.py in Back In Time (aka backintime) 1.1.18 and earlier uses a deprecated polkit authorization method (unix-process) that is subject to a race condition (time of check, time of use). With this authorization method, the owner of a process requesting a polkit operation is checked by polkitd via /proc/<pid>/status, by which time the requesting process may have been replaced by a different process with the same PID that has different privileges then the original requester.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-06T18:00:00.000Z
CVE-2017-7574 
Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection feature is used to prevent unauthorized users from opening an XML protected project file, by prompting the user for a password. This XML file is AES-CBC encrypted; however, the key used for encryption (SoMachineBasicSoMachineBasicSoMa) cannot be changed. After decrypting the XML file with this key, the user password can be found in the decrypted data. After reading the user password, the project can be opened and modified with the Schneider product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-06T21:00:00.000Z
CVE-2017-7575 
Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01\x5a\x00\x03\x00 request to the Modbus port (502/tcp). Subsequently the application may be arbitrarily downloaded, modified, and uploaded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-06T21:00:00.000Z
CVE-2017-7576 
DragonWave Horizon 1.01.03 wireless radios have hardcoded login credentials (such as the username of energetic and password of wireless) meant to allow the vendor to access the devices. These credentials can be used in the web interface or by connecting to the device via TELNET. This is fixed in recent versions including 1.4.8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-06T22:00:00.000Z
CVE-2017-7577 
XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../" HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-07T04:33:00.000Z
CVE-2017-7578 
Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application crash) or possibly have unspecified other impact via a crafted SWF file. NOTE: this issue exists because of an incomplete fix for CVE-2016-9831.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-07T04:33:00.000Z
CVE-2017-7579 
inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-07T16:00:00.000Z
CVE-2017-7581 
SQL injection vulnerability in NewsController.php in the News module 5.3.2 and earlier for TYPO3 allows unauthenticated users to execute arbitrary SQL commands via vectors involving overwriteDemand for order and OrderByAllowed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-07T19:00:00.000Z
CVE-2017-7583 
ILIAS before 5.2.3 has XSS via SVG documents.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-07T19:00:00.000Z
CVE-2017-7584 
Memory Corruption Vulnerability in Foxit PDF Toolkit before 2.1 allows an attacker to cause Denial of Service & Remote Code Execution when a victim opens a specially crafted PDF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-07T20:00:00.000Z
CVE-2017-7585 
In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-07T20:00:00.000Z
CVE-2017-7586 
In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-07T20:00:00.000Z
CVE-2017-7588 
On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempt. Affected models are: MFC-J6973CDW MFC-J4420DW MFC-8710DW MFC-J4620DW MFC-L8850CDW MFC-J3720 MFC-J6520DW MFC-L2740DW MFC-J5910DW MFC-J6920DW MFC-L2700DW MFC-9130CW MFC-9330CDW MFC-9340CDW MFC-J5620DW MFC-J6720DW MFC-L8600CDW MFC-L9550CDW MFC-L2720DW DCP-L2540DW DCP-L2520DW HL-3140CW HL-3170CDW HL-3180CDW HL-L8350CDW HL-L2380DW ADS-2500W ADS-1000W ADS-1500W.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T10:00:00.000Z
CVE-2017-7589 
In OpenIDM through 4.0.0 before 4.5.0, the info endpoint may leak sensitive information upon a request by the "anonymous" user, as demonstrated by responses with a 200 HTTP status code and a JSON object containing IP address strings. This is related to a missing access-control check in bin/defaults/script/info/login.js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T01:32:00.000Z
CVE-2017-7590 
OpenIDM through 4.0.0 and 4.5.0 is vulnerable to persistent cross-site scripting (XSS) attacks within the Admin UI, as demonstrated by a crafted Managed Object Name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T01:32:00.000Z
CVE-2017-7591 
OpenIDM through 4.0.0 and 4.5.0 is vulnerable to reflected cross-site scripting (XSS) attacks within the Admin UI, as demonstrated by the _sortKeys parameter to the authzRoles script under managed/user/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T01:32:00.000Z
CVE-2017-7592 
The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7593 
tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7594 
The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (memory leak) via a crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7595 
The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7596 
LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7597 
tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7598 
tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7599 
LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7600 
LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7601 
LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7602 
LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7603 
au_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7604 
au_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z
CVE-2017-7605 
aacplusenc.c in HE-AAC+ Codec (aka libaacplus) 2.0.2 has an assertion failure, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-09T14:00:00.000Z