rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-18345 
The Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue, resulting in exposing the credentials of the database via an index.php?option=com_joomanager&controller=details&task=download&path=configuration.php request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-26T21:00:00.000Z
CVE-2017-18346 
SQL injection vulnerability in /wbg/core/_includes/authorization.inc.php in CMS Web-Gooroo through 2013-01-19 allows remote attackers to execute arbitrary SQL commands via the wbg_login parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T16:33:38.000Z
CVE-2017-18347 
Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full initialization of the SWD interface and the setup of flash protection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-12T15:00:00.000Z
CVE-2017-18348 
Splunk Enterprise 6.6.x, when configured to run as root but drop privileges to a specific non-root account, allows local users to gain privileges by leveraging access to that non-root account to modify $SPLUNK_HOME/etc/splunk-launch.conf and insert Trojan horse programs into $SPLUNK_HOME/bin, because the non-root setup instructions state that chown should be run across all of $SPLUNK_HOME to give non-root access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-19T08:00:00.000Z
CVE-2017-18349 
parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi:// URI in the dataSourceName field of HTTP POST data to the Pippo /json URI, which is mishandled in AjaxApplication.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-23T20:00:00.000Z
CVE-2017-18350 
bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-12T20:13:32.000Z
CVE-2017-18352 
Error reporting within Rendertron 1.0.0 allows reflected Cross Site Scripting (XSS) from invalid URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T06:00:00.000Z
CVE-2017-18353 
Rendertron 1.0.0 includes an _ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users. Visiting this route with a GET request allows any unauthorized remote attacker to disable the core service of the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T06:00:00.000Z
CVE-2017-18354 
Rendertron 1.0.0 allows for alternative protocols such as 'file://' introducing a Local File Inclusion (LFI) bug where arbitrary files can be read by a remote attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T06:00:00.000Z
CVE-2017-18355 
Installed packages are exposed by node_modules in Rendertron 1.0.0, allowing remote attackers to read absolute paths on the server by examining the "_where" attribute of package.json files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T06:00:00.000Z
CVE-2017-18356 
In the Automattic WooCommerce plugin before 3.2.4 for WordPress, an attack is possible after gaining access to the target site with a user account that has at least Shop manager privileges. The attacker then constructs a specifically crafted string that will turn into a PHP object injection involving the includes/shortcodes/class-wc-shortcode-products.php WC_Shortcode_Products::get_products() use of cached queries within shortcodes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-15T16:00:00.000Z
CVE-2017-18357 
Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the Shopware_Controllers_Backend_ProductStream controller, with resultant XXE via instantiation of a SimpleXMLElement object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-15T16:00:00.000Z
CVE-2017-18358 
LimeSurvey before 2.72.4 has Stored XSS by using the Continue Later (aka Resume later) feature to enter an email address, which is mishandled in the admin panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-15T16:00:00.000Z
CVE-2017-18359 
PostGIS 2.x before 2.3.3, as used with PostgreSQL, allows remote attackers to cause a denial of service via crafted ST_AsX3D function input, as demonstrated by an abnormal server termination for "SELECT ST_AsX3D('LINESTRING EMPTY');" because empty geometries are mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-25T05:00:00.000Z
CVE-2017-18360 
In change_port_settings in drivers/usb/serial/io_ti.c in the Linux kernel before 4.11.3, local users could cause a denial of service by division-by-zero in the serial device layer by trying to set very high baud rates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-31T09:00:00.000Z
CVE-2017-18361 
In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-01T09:00:00.000Z
CVE-2017-18362 
ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all endpoints managed by the VSA server. If the ManagedIT.asmx page is available via the Kaseya VSA web interface, anyone with access to the page is able to run arbitrary SQL queries, both read and write, without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-05T05:00:00.000Z
CVE-2017-18364 
phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-27T16:59:39.000Z
CVE-2017-18365 
The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code. This occurs because the enterprise session secret is always the same, and can be found in the product's source code. By sending a crafted cookie signed with this secret, one can call Marshal.load with arbitrary data, which is a problem because the Marshal data format allows Ruby objects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-28T05:23:18.000Z
CVE-2017-18366 
Subrion CMS 4.1.5 has CSRF in blog/delete/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-12T20:53:04.000Z
CVE-2017-18367 
libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them. A process running under a restrictive seccomp filter that specified multiple syscall arguments could bypass intended access restrictions by specifying a single matching argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T20:02:19.000Z
CVE-2017-18368 
The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the ViewLog.asp page and can be exploited through the remote_host parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-02T16:14:16.000Z
CVE-2017-18369 
The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the adv_remotelog.asp page and can be exploited through the syslogServerAddr parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-02T16:14:35.000Z
CVE-2017-18370 
The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is only accessible by an authenticated user. The vulnerability is in the logSet.asp page and can be exploited through the ServerIP parameter. Authentication can be achieved by exploiting CVE-2017-18371.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-02T16:14:52.000Z
CVE-2017-18371 
The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username supervisor and password zyad1234. These accounts can be used to login to the web interface, exploit authenticated command injections, and change router settings for malicious purposes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-02T16:15:05.000Z
CVE-2017-18372 
The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user. The vulnerability is in the tools_time.asp page and can be exploited through the uiViewSNTPServer parameter. Authentication can be achieved by exploiting CVE-2017-18373.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-02T16:15:22.000Z
CVE-2017-18373 
The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username user3 and and a long password consisting of a repetition of the string 0123456789. These accounts can be used to login to the web interface, exploit authenticated command injections, and change router settings for malicious purposes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-02T16:15:34.000Z
CVE-2017-18374 
The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has two user accounts with default passwords, including a hardcoded service account with the username true and password true. These accounts can be used to login to the web interface, exploit authenticated command injections and change router settings for malicious purposes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-02T16:15:47.000Z
CVE-2017-18375 
Ampache 3.8.3 allows PHP Object Instantiation via democratic.ajax.php and democratic.class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-24T17:42:10.000Z
CVE-2017-18376 
An improper authorization check in the User API in TheHive before 2.13.4 and 3.x before 3.3.1 allows users with read-only or read/write access to escalate their privileges to the administrator's privileges. This affects app/controllers/UserCtrl.scala.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-02T19:12:55.000Z
CVE-2017-18377 
An issue was discovered on Wireless IP Camera (P2P) WIFICAM cameras. There is Command Injection in the set_ftp.cgi script via shell metacharacters in the pwd variable, as demonstrated by a set_ftp.cgi?svr=192.168.1.1&port=21&user=ftp URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-11T20:44:37.000Z
CVE-2017-18378 
In NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $_GET['uploaddir'] is not escaped and is passed to system() through $tmp_upload_dir, leading to upgrade_handle.php?cmd=writeuploaddir remote command execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-11T20:44:55.000Z
CVE-2017-18379 
In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-27T21:38:52.000Z
CVE-2017-18380 
edx-platform before 2017-08-03 allows attackers to trigger password-reset e-mail messages in which the reset link has an attacker-controlled domain name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-30T12:30:50.000Z
CVE-2017-18381 
The installation process in Open edX before 2017-01-10 exposes a MongoDB instance to external connections with default credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-30T18:38:51.000Z
CVE-2017-18382 
cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records (SEC-306).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T12:19:16.000Z
CVE-2017-18383 
cPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T12:20:15.000Z
CVE-2017-18384 
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail (SEC-310).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T12:21:31.000Z
CVE-2017-18385 
cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores (SEC-311).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T12:22:29.000Z
CVE-2017-18386 
cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin (SEC-313).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T12:29:42.000Z
CVE-2017-18387 
cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload (SEC-314).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T12:30:29.000Z
CVE-2017-18388 
cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask (SEC-315).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T12:31:29.000Z
CVE-2017-18389 
cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T12:32:21.000Z
CVE-2017-18390 
cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups (SEC-322).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T12:33:10.000Z
CVE-2017-18391 
cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval (SEC-323).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T12:33:59.000Z
CVE-2017-18392 
cPanel before 68.0.15 allows collisions because PostgreSQL databases can be assigned to multiple accounts (SEC-325).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:03:23.000Z
CVE-2017-18393 
cPanel before 68.0.15 does not block a username of postmaster, which might allow reception of private e-mail (SEC-326).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:04:12.000Z
CVE-2017-18394 
cPanel before 68.0.15 does not have a sufficient list of reserved usernames (SEC-327).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:04:57.000Z
CVE-2017-18395 
cPanel before 68.0.15 does not block a username of ssl (SEC-328).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:05:48.000Z
CVE-2017-18396 
cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases (SEC-329).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:06:34.000Z
CVE-2017-18397 
cPanel before 68.0.15 does not preserve permissions for local backup transport (SEC-330).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:07:22.000Z
CVE-2017-18398 
DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains (SEC-331).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:08:11.000Z
CVE-2017-18399 
cPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval upon enabling or disabling sqloptimizer (SEC-332).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:08:56.000Z
CVE-2017-18400 
cPanel before 68.0.15 allows local root code execution via cpdavd (SEC-333).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:09:42.000Z
CVE-2017-18401 
cPanel before 68.0.15 allows user accounts to be partially created with invalid username formats (SEC-334).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:10:36.000Z
CVE-2017-18402 
cPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade (SEC-336).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:11:24.000Z
CVE-2017-18403 
cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives (SEC-337).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:12:10.000Z
CVE-2017-18404 
cPanel before 68.0.15 allows domain data to be deleted for domains with the .lock TLD (SEC-341).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:12:55.000Z
CVE-2017-18405 
cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic (SEC-345).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:13:42.000Z
CVE-2017-18406 
cPanel before 67.9999.103 allows SQL injection during eximstats processing (SEC-276).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:45:54.000Z
CVE-2017-18407 
cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download (SEC-279).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:46:48.000Z
CVE-2017-18408 
cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces (SEC-282).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:47:37.000Z
CVE-2017-18409 
In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases (SEC-283).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:48:25.000Z
CVE-2017-18410 
In cPanel before 67.9999.103, a user account's backup archive could contain all MySQL databases on the server (SEC-284).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:49:13.000Z
CVE-2017-18411 
The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account (SEC-285).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:50:09.000Z
CVE-2017-18412 
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename (SEC-296).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:50:57.000Z
CVE-2017-18413 
In cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disappears (SEC-299).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:51:49.000Z
CVE-2017-18414 
cPanel before 67.9999.103 allows an open redirect in /unprotected/redirect.html (SEC-300).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:52:33.000Z
CVE-2017-18415 
cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering (SEC-302).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:53:15.000Z
CVE-2017-18416 
cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update (SEC-303).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T13:53:59.000Z
CVE-2017-18417 
cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation (SEC-263).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T15:33:52.000Z
CVE-2017-18418 
cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations (SEC-265).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T15:34:44.000Z
CVE-2017-18419 
cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation (SEC-266).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T15:35:25.000Z
CVE-2017-18420 
cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing (SEC-269).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T15:36:08.000Z
CVE-2017-18421 
cPanel before 66.0.2 allows demo accounts to create databases and users (SEC-271).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T15:36:53.000Z
CVE-2017-18422 
In cPanel before 66.0.2, EasyApache 4 conversion sets weak domlog ownership and permissions (SEC-272).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T15:37:45.000Z
CVE-2017-18423 
In cPanel before 66.0.2, domain log files become readable after log processing (SEC-273).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T15:38:29.000Z
CVE-2017-18424 
In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt (SEC-274).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T15:42:47.000Z
CVE-2017-18425 
In cPanel before 66.0.2, the cpdavd_error_log file can be created with weak permissions (SEC-280).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T15:43:39.000Z
CVE-2017-18426 
cPanel before 66.0.2 allows resellers to read other accounts' domain log files (SEC-288).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T15:44:36.000Z