rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-10900 
PTW-WMS1 firmware version 2.000.012 allows remote attackers to bypass access restrictions to obtain or delete data on the disk via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Princeton Ltd.
product: PTW-WMS1
Published: 2017-12-01T14:00:00.000Z
CVE-2017-10901 
Buffer overflow in PTW-WMS1 firmware version 2.000.012 allows remote attackers to conduct denial-of-service attacks via unspecified vectors.
Problem types: description: Buffer Overflow
Affected products: vendor: Princeton Ltd.
product: PTW-WMS1
Published: 2017-12-01T14:00:00.000Z
CVE-2017-10902 
PTW-WMS1 firmware version 2.000.012 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: Princeton Ltd.
product: PTW-WMS1
Published: 2017-12-01T14:00:00.000Z
CVE-2017-10903 
Improper authentication issue in PTW-WMS1 firmware version 2.000.012 allows remote attackers to log in to the device with root privileges and conduct arbitrary operations via unspecified vectors.
Problem types: description: Improper authentication
Affected products: vendor: Princeton Ltd.
product: PTW-WMS1
Published: 2017-12-01T14:00:00.000Z
CVE-2017-10904 
Qt for Android prior to 5.9.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: The Qt Company
product: Qt for Android
Published: 2017-12-15T14:00:00.000Z
CVE-2017-10905 
A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variables via unspecified vectors.
Problem types: description: External Control of Critical State Data
Affected products: vendor: The Qt Company
product: Qt for Android
Published: 2017-12-15T14:00:00.000Z
CVE-2017-10906 
Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.
Problem types: description: Escape Sequence Injection
Affected products: vendor: Cloud Native Computing Foundation (CNCF)
product: Fluentd
Published: 2017-12-08T15:00:00.000Z
CVE-2017-10907 
Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. Show Off v1.85 en and earlier allows an attacker to read arbitrary files via unspecified vectors.
Problem types: description: Directory traversal
Affected products: vendor: SpiQe Software
product: OneThird CMS
Published: 2017-12-22T14:00:00.000Z
CVE-2017-10908 
H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/2 header.
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: Kazuho Oku
product: H2O
Published: 2017-12-22T14:00:00.000Z
CVE-2017-10909 
Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Sony Video & Sound Products Inc.
product: Music Center for PC
Published: 2017-12-22T14:00:00.000Z
CVE-2017-10910 
MQTT.js 2.x.x prior to 2.15.0 issue in handling PUBLISH tickets may lead to an attacker causing a denial-of-service condition.
Problem types: description: Buffer error
Affected products: vendor: MQTT.js.
product: MQTT.js
Published: 2017-12-27T18:00:00.000Z
CVE-2017-10911 
The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interface response structures, aka XSA-216.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T01:00:00.000Z
CVE-2017-10912 
Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T01:00:00.000Z
CVE-2017-10913 
The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain privileges, aka XSA-218 bug 1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T01:00:00.000Z
CVE-2017-10914 
The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service (memory consumption), or possibly obtain sensitive information or gain privileges, aka XSA-218 bug 2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T01:00:00.000Z
CVE-2017-10915 
The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition, which allows guest OS users to obtain Xen privileges, aka XSA-219.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T01:00:00.000Z
CVE-2017-10916 
The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions (MPX) and Protection Key (PKU) features, which makes it easier for guest OS users to defeat ASLR and other protection mechanisms, aka XSA-220.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T01:00:00.000Z
CVE-2017-10917 
Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) or possibly obtain sensitive information, aka XSA-221.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T01:00:00.000Z
CVE-2017-10918 
Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T01:00:00.000Z
CVE-2017-10919 
Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-223.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T01:00:00.000Z
CVE-2017-10920 
The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a GNTMAP_host_map unmapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T01:00:00.000Z
CVE-2017-10921 
The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T01:00:00.000Z
CVE-2017-10922 
The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to cause a denial of service (loss of grant trackability), aka XSA-224 bug 3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T01:00:00.000Z
CVE-2017-10923 
Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-225.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T01:00:00.000Z
CVE-2017-10924 
IrfanView 4.44 (32bit) with FPX Plugin 4.47 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000a529."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T19:00:00.000Z
CVE-2017-10925 
IrfanView 4.44 (32bit) with FPX Plugin 4.47 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000b3ae."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T19:00:00.000Z
CVE-2017-10926 
IrfanView 4.44 (32bit) with FPX Plugin 4.47 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at wow64!Wow64NotifyDebugger+0x000000000000001d."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T19:00:00.000Z
CVE-2017-10928 
In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue function in coders/svg.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T11:00:00.000Z
CVE-2017-10929 
The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a read overflow in the grub_disk_read_small_real function in kern/disk.c in GNU GRUB 2.02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-05T12:00:00.000Z
CVE-2017-10930 
The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource from an unauthorized actor, resulting in ordinary users being able to download configuration files to steal information like administrator accounts and passwords.
Problem types: description: Improper Access Control
Affected products: vendor: ZTE
product: ZX10 1800-2S
Published: 2017-09-19T14:00:00.000Z
CVE-2017-10931 
The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to download any files and cause information leaks such as system configuration.
Problem types: description: Path Traversal
Affected products: vendor: ZTE
product: ZX10 1800-2S
Published: 2017-09-19T14:00:00.000Z
CVE-2017-10932 
All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the applications of C/S architecture using the Java RMI service in which the servers use the Apache Commons Collections (ACC) library that may result in Java deserialization vulnerabilities. An unauthenticated remote attacker can exploit the vulnerabilities by sending a crafted RMI request to execute arbitrary code on the target host.
Problem types: description: Remote Code Execution
Affected products: vendor: ZTE
product: NR8000 Series
Published: 2017-09-27T16:00:00.000Z
CVE-2017-10933 
All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulnerability that allows remote attackers to read arbitrary files on the system via a full path name after host address.
Problem types: description: Directory Traversal
Affected products: vendor: ZTE
product: ZXDT22 SF01
Published: 2017-10-19T21:00:00.000Z
CVE-2017-10934 
All versions prior to V5.09.02.02T4 of the ZTE ZXIPTV-EPG product use the Java RMI service in which the servers use the Apache Commons Collections (ACC) library that may result in Java deserialization vulnerabilities. An unauthenticated remote attacker can exploit the vulnerabilities by sending a crafted RMI request to execute arbitrary code on the target host.
Problem types: description: Remote Code Execution
Affected products: vendor: ZTE
product: ZXIPTV-EPG
Published: 2018-07-25T15:00:00.000Z
CVE-2017-10935 
All versions prior to ZSRV2 V3.00.40 of the ZTE ZXR10 1800-2S products allow remote authenticated users to bypass the original password authentication protection to change other user's password.
Problem types: description: Weak Password Recovery Mechanism
Affected products: vendor: ZTE
product: ZXR10 1800-2S
Published: 2018-07-25T15:00:00.000Z
CVE-2017-10936 
SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information.
Problem types: description: SQL Injection
Affected products: vendor: ZTE
product: ZXCDN-SNS
Published: 2018-07-25T15:00:00.000Z
CVE-2017-10937 
SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers to execute arbitrary SQL commands via the opertype parameter, resulting in the disclosure of database information.
Problem types: description: SQL injection
Affected products: vendor: ZTE
product: ZXIPTV-UCM
Published: 2018-07-25T15:00:00.000Z
CVE-2017-10940 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Joyent Smart Data Center prior to agentsshar@1.0.0-release-20160901-20160901T051624Z-g3fd5adf (e469cf49-4de3-4658-8419-ab42837916ad). An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the docker API. The process does not properly validate user-supplied data which can allow for the upload of arbitrary files. An attacker can leverage this vulnerability to execute arbitrary code under the context of root. Was ZDI-CAN-3853.
Problem types: cwe_id: CWE-22
description: CWE-22-Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Joyent
product: Joyent Smart Data Center
Published: 2017-10-31T19:00:00.000Z
CVE-2017-10941 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AFParseDateEx function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4816.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2017-10-31T19:00:00.000Z
CVE-2017-10942 
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-4737.
Problem types: cwe_id: CWE-125
description: CWE-125-Out-of-bounds Read
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2017-10-31T19:00:00.000Z
CVE-2017-10943 
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-4738.
Problem types: cwe_id: CWE-125
description: CWE-125-Out-of-bounds Read
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2017-10-31T19:00:00.000Z
CVE-2017-10944 
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ObjStm objects. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-4846.
Problem types: cwe_id: CWE-125
description: CWE-125-Out-of-bounds Read
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2017-10-31T19:00:00.000Z
CVE-2017-10945 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the app.alert function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4855.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2017-10-31T19:00:00.000Z
CVE-2017-10946 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.1.6871. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the setItem function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4721.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2017-10-31T19:00:00.000Z
CVE-2017-10947 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.1.6871. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the print function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4722.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2017-10-31T19:00:00.000Z
CVE-2017-10948 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.1.6871. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the app.execMenuItem function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4723.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2017-10-31T19:00:00.000Z
CVE-2017-10949 
Directory Traversal in Dell Storage Manager 2016 R2.1 causes Information Disclosure when the doGet method of the EmWebsiteServlet class doesn't properly validate user provided path before using it in file operations. Was ZDI-CAN-4459.
Problem types: description: Directory Traversal
Affected products: vendor: Zero Day Initiative
product: Dell Storage Manager
Published: 2017-08-04T15:00:00.000Z
CVE-2017-10950 
This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Bitdefender Total Security 21.0.24.62. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within processing of the 0x8000E038 IOCTL in the bdfwfpf driver. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker could leverage this vulnerability to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-4776.
Problem types: cwe_id: CWE-415
description: CWE-415-Double Free
Affected products: vendor: Zero Day Initiative
product: Bitdefender Total Security
Published: 2017-08-29T13:00:00.000Z
CVE-2017-10951 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within app.launchURL method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4724.
Problem types: cwe_id: CWE-78
description: CWE-78-Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: Zero Day Initiative
product: Foxit Reader
Published: 2017-08-29T13:00:00.000Z
CVE-2017-10952 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.0.2051. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the saveAs JavaScript function. The issue results from the lack of proper validation of user-supplied data, which can lead to writing arbitrary files into attacker controlled locations. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4518.
Problem types: cwe_id: CWE-693
description: CWE-693-Protection Mechanism Failure
Affected products: vendor: Zero Day Initiative
product: Foxit Reader
Published: 2017-08-29T13:00:00.000Z
CVE-2017-10953 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the gotoURL method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5030.
Problem types: cwe_id: CWE-78
description: CWE-78-Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2017-10-31T19:00:00.000Z