rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-16725 
A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the device restores itself to a more vulnerable state in which Telnet is accessible.
Problem types: description: stack-based buffer overflow
Affected products: vendor: n/a
product: Xiongmai Technology IP Cameras and DVRs
Published: 2017-12-20T19:00:00.000Z
CVE-2017-16726 
Beckhoff TwinCAT supports communication over ADS. ADS is a protocol for industrial automation in protected environments. ADS has not been designed to achieve security purposes and therefore does not include any encryption algorithms because of their negative effect on performance and throughput. An attacker can forge arbitrary ADS packets when legitimate ADS traffic is observable.
Problem types: cwe_id: CWE-285
description: Improper Authorization CWE-285
Affected products: vendor: ICS-CERT
product: Beckhoff TwinCAT
Published: 2018-06-27T19:00:00.000Z
CVE-2017-16727 
A Credentials Management issue was discovered in Moxa NPort W2150A versions prior to 1.11, and NPort W2250A versions prior to 1.11. The default password is empty on the device. An unauthorized user can access the device without a password. An unauthorized user has the ability to completely compromise the confidentiality and integrity of the wireless traffic.
Problem types: cwe_id: CWE-255
description: CWE-255
Affected products: vendor: n/a
product: Moxa NPort W2150A and W2250A
Published: 2017-12-22T02:00:00.000Z
CVE-2017-16728 
An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attacker to cause the program to use an invalid memory address, resulting in a program crash.
Problem types: cwe_id: CWE-822
description: CWE-822
Affected products: vendor: n/a
product: Advantech WebAccess
Published: 2018-01-05T08:00:00.000Z
CVE-2017-16731 
An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through Ellipse 8.9 released prior to December 2017 (including Ellipse Select). A vulnerability exists in the authentication of Ellipse to LDAP/AD using the LDAP protocol. An attacker could exploit the vulnerability by sniffing local network traffic, allowing the discovery of authentication credentials.
Problem types: cwe_id: CWE-523
description: CWE-523
Affected products: vendor: n/a
product: ABB Ellipse
Published: 2017-12-20T19:00:00.000Z
CVE-2017-16732 
A use-after-free issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows an unauthenticated attacker to specify an arbitrary address.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: n/a
product: Advantech WebAccess
Published: 2018-01-12T02:00:00.000Z
CVE-2017-16733 
A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL Injection vulnerability has been identified, which an attacker can leverage to disclose sensitive information from the database.
Problem types: description: SQL Injection
Affected products: vendor: n/a
product: Ecava IntegraXor
Published: 2017-12-20T19:00:00.000Z
CVE-2017-16735 
A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL Injection vulnerability has been identified, which generates an error in the database log.
Problem types: description: SQL Injection
Affected products: vendor: n/a
product: Ecava IntegraXor
Published: 2017-12-20T19:00:00.000Z
CVE-2017-16736 
An Unrestricted Upload Of File With Dangerous Type issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows a remote attacker to upload arbitrary files.
Problem types: cwe_id: CWE-434
description: CWE-434
Affected products: vendor: n/a
product: Advantech WebAccess
Published: 2018-01-12T02:00:00.000Z
CVE-2017-16737 
An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. A specially-crafted malicious file may be able to cause a heap-based buffer overflow vulnerability when opened by a user.
Problem types: cwe_id: CWE-122
description: CWE-122
Affected products: vendor: n/a
product: WECON Technology Co., Ltd. LeviStudio HMI Editor
Published: 2018-01-12T20:00:00.000Z
CVE-2017-16739 
An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. Specially-crafted malicious files may be able to cause stack-based buffer overflow vulnerabilities, which may allow remote code execution.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: n/a
product: WECON Technology Co., Ltd. LeviStudio HMI Editor
Published: 2018-01-12T20:00:00.000Z
CVE-2017-16740 
A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and earlier. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution.
Problem types: cwe_id: CWE-120
description: CWE-120
Affected products: vendor: n/a
product: Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers
Published: 2018-01-09T21:00:00.000Z
CVE-2017-16741 
An Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to use Monitor Mode on the device to read diagnostic information.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: n/a
product: PHOENIX CONTACT FL SWITCH
Published: 2018-01-12T20:00:00.000Z
CVE-2017-16743 
An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing the attacker to obtain administrative privileges on the device.
Problem types: cwe_id: CWE-285
description: CWE-285
Affected products: vendor: n/a
product: PHOENIX CONTACT FL SWITCH
Published: 2018-01-12T20:00:00.000Z
CVE-2017-16744 
A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid platform (administrator) credentials.
Problem types: cwe_id: CWE-22
description: IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22
Affected products: vendor: ICS-CERT
product: Niagara AX Framework and Niagara 4 Framework
Published: 2018-08-20T21:00:00.000Z
CVE-2017-16745 
A Type Confusion issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. An access of resource using incompatible type ('type confusion') vulnerability may allow an attacker to execute remote code when processing specially crafted .dpb files.
Problem types: cwe_id: CWE-843
description: CWE-843
Affected products: vendor: n/a
product: Delta Electronics Delta Industrial Automation Screen Editor
Published: 2018-03-15T23:00:00.000Z
CVE-2017-16747 
An Out-of-bounds Write issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Specially crafted .dpb files may cause the system to write outside the intended buffer area.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: n/a
product: Delta Electronics Delta Industrial Automation Screen Editor
Published: 2018-03-15T23:00:00.000Z
CVE-2017-16748 
An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and prior) using a disabled account name and a blank password, granting the attacker administrator access to the Niagara system.
Problem types: cwe_id: CWE-287
description: IMPROPER AUTHENTICATION CWE-287
Affected products: vendor: ICS-CERT
product: Niagara AX Framework and Niagara 4 Framework
Published: 2018-08-20T21:00:00.000Z
CVE-2017-16749 
A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Specially crafted .dpb files could exploit a use-after-free vulnerability.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: n/a
product: Delta Electronics Delta Industrial Automation Screen Editor
Published: 2018-03-15T23:00:00.000Z
CVE-2017-16751 
A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Stack-based buffer overflow vulnerabilities caused by processing specially crafted .dpb files may allow an attacker to remotely execute arbitrary code.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: n/a
product: Delta Electronics Delta Industrial Automation Screen Editor
Published: 2018-03-15T23:00:00.000Z
CVE-2017-16753 
An Improper Input Validation issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows some inputs that may cause the program to crash.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: n/a
product: Advantech WebAccess
Published: 2018-01-05T08:00:00.000Z
CVE-2017-16754 
Bolt before 3.3.6 does not properly restrict access to _profiler routes, related to EventListener/ProfilerListener.php and Provider/EventListenerServiceProvider.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-09T19:00:00.000Z
CVE-2017-16755 
An issue was discovered in Userscape HelpSpot before 4.7.2. A reflected cross-site scripting vulnerability exists in the "return" parameter of the "index.php?pg=moderated" endpoint. It executes when the return link is clicked.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-19T14:00:00.000Z
CVE-2017-16756 
An issue was discovered in Userscape HelpSpot before 4.7.2. A cross-site request forgery vulnerability exists on POST requests to the "index.php?pg=password.change" endpoint. This allows an attacker to change the password of another user's HelpSpot account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-19T14:00:00.000Z
CVE-2017-16757 
Hola VPN 1.34 has weak permissions (Everyone:F) under %PROGRAMFILES%, which allows local users to gain privileges via a Trojan horse 7za.exe or hola.exe file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-09T21:00:00.000Z
CVE-2017-16758 
Cross-site scripting (XSS) vulnerability in admin/partials/uif-access-token-display.php in the Ultimate Instagram Feed plugin before 1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "access_token" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-09T22:00:00.000Z
CVE-2017-16759 
The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-09T22:00:00.000Z
CVE-2017-16760 
Inedo BuildMaster before 5.8.2 has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-10T09:00:00.000Z
CVE-2017-16761 
An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-10T09:00:00.000Z
CVE-2017-16762 
Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-10T09:00:00.000Z
CVE-2017-16763 
An exploitable vulnerability exists in the YAML parsing functionality in config.py in Confire 0.2.0. Due to the user-specific configuration being loaded from "~/.confire.yaml" using the yaml.load function, a YAML parser can execute arbitrary Python commands resulting in command execution. An attacker can insert Python into loaded YAML to trigger this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-10T09:00:00.000Z
CVE-2017-16764 
An exploitable vulnerability exists in the YAML parsing functionality in the read_yaml_file method in io_utils.py in django_make_app 0.1.3. A YAML parser can execute arbitrary Python commands resulting in command execution. An attacker can insert Python into loaded YAML to trigger this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-10T09:00:00.000Z
CVE-2017-16765 
XSS exists on D-Link DWR-933 1.00(WW)B17 devices via cgi-bin/gui.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-10T16:00:00.000Z
CVE-2017-16766 
An improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM) before 6.1.4-15217 and before 6.0.3-8754-6 allows local users to inject arbitrary web script or HTML via the -fn option.
Problem types: cwe_id: CWE-284
description: Improper Access Control (CWE-284)
Affected products: vendor: Synology
product: DiskStation Manager (DSM)
Published: 2017-12-22T14:00:00.000Z
CVE-2017-16767 
Cross-site scripting (XSS) vulnerability in User Profile in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to inject arbitrary web script or HTML via the userDesc parameter.
Problem types: cwe_id: CWE-79
description: Improper Neutralization of Input During Web Page Generation (CWE-79)
Affected products: vendor: Synology
product: Surveillance Station
Published: 2018-02-27T15:00:00.000Z
CVE-2017-16768 
Cross-site scripting (XSS) vulnerability in User Policy editor in Synology MailPlus Server before 1.4.0-0415 allows remote authenticated users to inject arbitrary HTML via the name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-27T17:00:00.000Z
CVE-2017-16769 
Exposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1-3458 allows remote attackers to obtain metadata from password-protected photographs via the map viewer mode.
Problem types: cwe_id: CWE-359
description: Exposure of Private Information (CWE-359)
Affected products: vendor: Synology
product: Synology Photo Station
Published: 2018-02-23T22:00:00.000Z
CVE-2017-16770 
File and directory information exposure vulnerability in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to obtain other user's sensitive files via the filename parameter.
Problem types: cwe_id: CWE-538
description: File and Directory Information Exposure (CWE-538)
Affected products: vendor: Synology
product: Surveillance Station
Published: 2018-02-27T15:00:00.000Z
CVE-2017-16771 
Cross-site scripting (XSS) vulnerability in Log Viewer in Synology Photo Station before 6.8.3-3463 and before 6.3-2971 allows remote attackers to inject arbitrary web script or HTML via the username parameter.
Problem types: cwe_id: CWE-79
description: Improper Neutralization of Input During Web Page Generation (CWE-79)
Affected products: vendor: Synology
product: Photo Station
Published: 2018-03-22T14:00:00.000Z
CVE-2017-16772 
Improper input validation vulnerability in SYNOPHOTO_Flickr_MultiUpload in Synology Photo Station before 6.8.3-3463 and before 6.3-2971 allows remote authenticated users to execute arbitrary codes via the prog_id parameter.
Problem types: cwe_id: CWE-434
description: Unrestricted Upload of File with Dangerous Type (CWE-434)
Affected products: vendor: Synology
product: Photo Station
Published: 2018-03-22T14:00:00.000Z
CVE-2017-16773 
Improper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0.5-0135 allows remote authenticated users to bypass permission checks for directories in POSIX mode.
Problem types: cwe_id: CWE-285
description: Improper Authorization (CWE-285)
Affected products: vendor: Synology
product: Universal Search
Published: 2018-07-05T13:00:00.000Z
CVE-2017-16774 
Cross-site scripting (XSS) vulnerability in SYNO.Core.PersonalNotification.Event in Synology DiskStation Manager (DSM) before 6.1.4-15217-3 allows remote authenticated users to inject arbitrary web script or HTML via the package parameter.
Problem types: cwe_id: CWE-79
description: Improper Neutralization of Input During Web Page Generation (CWE-79)
Affected products: vendor: Synology
product: DiskStation Manager (DSM)
Published: 2019-04-01T14:24:13.925Z
CVE-2017-16775 
Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-0129 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
Problem types: cwe_id: CWE-1021
description: Improper Restriction of Rendered UI Layers or Frames (CWE-1021)
Affected products: vendor: Synology
product: SSO Server
Published: 2019-04-01T14:25:15.494Z
CVE-2017-16776 
Security researchers discovered an authentication bypass vulnerability in version 2.0.2 of the Conserus Workflow Intelligence application by McKesson Medical Imaging Company, which is now a Change Healthcare company. The attacker must send a malicious HTTP GET request to exploit the vulnerability. The vulnerability allows an attacker to bypass authentication and escalate privileges of valid users. An unauthenticated attacker can exploit the vulnerability and be granted limited access to other accounts. An authenticated attacker can exploit the vulnerability and be granted access reserved for higher privilege users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-15T18:00:00.000Z
CVE-2017-16777 
If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake application directory and exploit the suid sudo helper in order to escalate to root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T15:00:00.000Z
CVE-2017-16778 
An access control weakness in the DTMF tone receiver of Fermax Outdoor Panel allows physical attackers to inject a Dual-Tone-Multi-Frequency (DTMF) tone to invoke an access grant that would allow physical access to a restricted floor/level. By design, only a residential unit owner may allow such an access grant. However, due to incorrect access control, an attacker could inject it via the speaker unit to perform an access grant to gain unauthorized access, as demonstrated by a loud DTMF tone representing '1' and a long '#' (697 Hz and 1209 Hz, followed by 941 Hz and 1477 Hz).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-24T13:54:56.000Z
CVE-2017-16780 
The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-10T23:00:00.000Z
CVE-2017-16781 
The installer in MyBB before 1.8.13 has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-10T23:00:00.000Z
CVE-2017-16782 
In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-10T23:00:00.000Z
CVE-2017-16783 
In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-10T23:00:00.000Z
CVE-2017-16784 
In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-10T23:00:00.000Z
CVE-2017-16785 
Cacti 1.1.27 has reflected XSS via the PATH_INFO to host.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-10T23:00:00.000Z
CVE-2017-16786 
The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with certain privileges to read arbitrary files via (1) the ntpclientcounterlogfile parameter to cgi-bin/mainv2 or (2) vectors involving curl support of the "file" schema in the firmware update functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-19T15:00:00.000Z
CVE-2017-16787 
The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote attackers to read arbitrary files by leveraging failure to restrict URL access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-15T18:00:00.000Z
CVE-2017-16788 
Directory traversal vulnerability in the "Upload Groupkey" functionality in the Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with Admin-User access to write to arbitrary files and consequently gain root privileges by uploading a file, as demonstrated by storing a file in the cron.d directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-15T18:00:00.000Z
CVE-2017-16789 
Cross-site scripting (XSS) vulnerability in Integration Matters nJAMS 3 before 3.2.0 Hotfix 7, as used in TIBCO BusinessWorks Process Monitor through 3.0.1.3 and other products, allows remote authenticated administrators to inject arbitrary web script or HTML via the users management panel of the web interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T02:00:00.000Z
CVE-2017-16790 
An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. When a form is submitted by the user, the request handler classes of the Form component merge POST data and uploaded files data into one array. This big array forms the data that are then bound to the form. At this stage there is no difference anymore between submitted POST data and uploaded files. A user can send a crafted HTTP request where the value of a "FileType" is sent as normal POST data that could be interpreted as a local file path on the server-side (for example, "file:///etc/passwd"). If the application did not perform any additional checks about the value submitted to the "FileType", the contents of the given file on the server could have been exposed to the attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-06T21:00:00.000Z
CVE-2017-16792 
Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject arbitrary web script via the "homepage" value of a ".gemspec" file, related to views/gem.erb and views/index.erb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-13T09:00:00.000Z
CVE-2017-16793 
The wav_convert2mono function in lib/wav.c in SWFTools 0.9.2 does not properly validate WAV data, which allows remote attackers to cause a denial of service (incorrect malloc and heap-based buffer overflow) or possibly have unspecified other impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-12T05:00:00.000Z
CVE-2017-16794 
The png_load function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an erroneous png_load call that occurs because of incorrect integer data types in png2swf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-12T05:00:00.000Z