rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-7961 
The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an "outside the range of representable values of type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CSS file. NOTE: third-party analysis reports "This is not a security issue in my view. The conversion surely is truncating the double into a long value, but there is no impact as the value is one of the RGB components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T15:00:00.000Z
CVE-2017-7962 
The iwgif_read_image function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T15:00:00.000Z
CVE-2017-7963 
The GNU Multiple Precision Arithmetic Library (GMP) interfaces for PHP through 7.1.4 allow attackers to cause a denial of service (memory consumption and application crash) via operations on long strings. NOTE: the vendor disputes this, stating "There is no security issue here, because GMP safely aborts in case of an OOM condition. The only attack vector here is denial of service. However, if you allow attacker-controlled, unbounded allocations you have a DoS vector regardless of GMP's OOM behavior.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T15:00:00.000Z
CVE-2017-7964 
Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS hijacking attacks by reconfiguring the built-in dnshijacker process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T16:00:00.000Z
CVE-2017-7965 
A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon M171/M172 Controller.
Problem types: description: Buffer Overflow
Affected products: vendor: Schneider Electric SE
product: SoMachine HVAC Programming Software
Published: 2017-06-07T19:00:00.000Z
CVE-2017-7966 
A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to the improper loading of a DLL.
Problem types: description: DLL Hijacking
Affected products: vendor: Schneider Electric SE
product: SoMachine HVAC Programming Software
Published: 2017-06-07T19:00:00.000Z
CVE-2017-7967 
All versions of VAMPSET software produced by Schneider Electric, prior to V2.2.189, are susceptible to a memory corruption vulnerability when a corrupted vf2 file is used. This vulnerability causes the software to halt or not start when trying to open the corrupted file. This vulnerability occurs when fill settings are intentionally malformed and is opened in a standalone state, without connection to a protection relay. This attack is not considered to be remotely exploitable. This vulnerability has no effect on the operation of the protection relay to which VAMPSET is connected. As Windows operating system remains operational and VAMPSET responds, it is able to be shut down through its normal closing protocol.
Problem types: description: Memory Corruption
Affected products: vendor: Schneider Electric SE
product: VAMPSET
Published: 2017-05-09T17:00:00.000Z
CVE-2017-7968 
An Incorrect Default Permissions issue was discovered in Schneider Electric Wonderware InduSoft Web Studio v8.0 Patch 3 and prior versions. Upon installation, Wonderware InduSoft Web Studio creates a new directory and two files, which are placed in the system's path and can be manipulated by non-administrators. This could allow an authenticated user to escalate his or her privileges.
Problem types: cwe_id: CWE-276
description: CWE-276
Affected products: vendor: n/a
product: Schneider Electric Wonderware InduSoft Web Studio
Published: 2017-05-19T15:00:00.000Z
CVE-2017-7969 
A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 for multiple state-changing requests. This type of attack requires some level of social engineering in order to get a legitimate user to click on or access a malicious link/site containing the CSRF attack.
Problem types: description: Cross Site Request Forgery
Affected products: vendor: Schneider Electric SE
product: PowerSCADA Anywhere
vendor: Schneider Electric SE
product: Citect Anywhere
Published: 2017-09-25T19:00:00.000Z
CVE-2017-7970 
A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to specify Arbitrary Server Target Nodes in connection requests to the Secure Gateway and Server components.
Problem types: description: Information Exposure
Affected products: vendor: Schneider Electric SE
product: PowerSCADA Anywhere
vendor: Schneider Electric SE
product: Citect Anywhere
Published: 2017-09-25T19:00:00.000Z
CVE-2017-7971 
A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the use of outdated cipher suites and improper verification of peer SSL Certificate.
Problem types: description: Improper Validaiton of Certificate Expiration
Affected products: vendor: Schneider Electric SE
product: PowerSCADA Anywhere
vendor: Schneider Electric SE
product: Citect Anywhere
Published: 2017-09-25T19:00:00.000Z
CVE-2017-7972 
A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to escape out of remote PowerSCADA Anywhere applications and launch other processes.
Problem types: description: Escaping PowerSCADA Application
Affected products: vendor: Schneider Electric SE
product: PowerSCADA Anywhere
vendor: Schneider Electric SE
product: Citect Anywhere
Published: 2017-09-25T19:00:00.000Z
CVE-2017-7973 
A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can use calls to various paths allowing performance of arbitrary SQL commands against the underlying database.
Problem types: description: SQL Injection
Affected products: vendor: Schneider Electric SE
product: U.Motion
Published: 2017-09-25T19:00:00.000Z
CVE-2017-7974 
A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can execute arbitrary code and exfiltrate files.
Problem types: description: Path Traversal
Affected products: vendor: Schneider Electric SE
product: U.Motion
Published: 2017-09-25T19:00:00.000Z
CVE-2017-7975 
Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2_build_huffman_table function in jbig2_huffman.c during operations on a crafted JBIG2 file, leading to a denial of service (application crash) or possibly execution of arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T16:00:00.000Z
CVE-2017-7976 
Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_compose function in jbig2_image.c during operations on a crafted .jb2 file, leading to a denial of service (application crash) or disclosure of sensitive information from process memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T17:00:00.000Z
CVE-2017-7977 
The Screensavercc component in eLux RP before 5.5.0 allows attackers to bypass intended configuration restrictions and execute arbitrary commands with root privileges by inserting commands in a local configuration dialog in the control panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T18:00:00.000Z
CVE-2017-7978 
Samsung Android devices with L(5.0/5.1), M(6.0), and N(7.x) software allow attackers to obtain sensitive information by reading a world-readable log file after an unexpected reboot. The Samsung ID is SVE-2017-8290.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T22:00:00.000Z
CVE-2017-7979 
The cookie feature in the packet action API implementation in net/sched/act_api.c in the Linux kernel 4.11.x through 4.11-rc7 mishandles the tb nlattr array, which allows local users to cause a denial of service (uninitialized memory access and refcount underflow, and system hang or crash) or possibly have unspecified other impact via "tc filter add" commands in certain contexts. NOTE: this does not affect stable kernels, such as 4.10.x, from kernel.org.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T23:00:00.000Z
CVE-2017-7980 
Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC client updating its display after a VGA operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T14:00:00.000Z
CVE-2017-7981 
Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin. This occurs in the Project Wiki component because the proc_open PHP function is used within PhpWiki before 1.5.5 with a syntax value in its first argument, and an authenticated Tuleap user can control this value, even with shell metacharacters, as demonstrated by a '<?plugin SyntaxHighlighter syntax="c;id"' line to execute the id command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-29T16:00:00.000Z
CVE-2017-7982 
Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted plist file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T14:00:00.000Z
CVE-2017-7983 
In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), mail sent using the JMail API leaked the used PHPMailer version in the mail headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-25T18:00:00.000Z
CVE-2017-7984 
In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering leads to XSS in the template manager component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-25T18:00:00.000Z
CVE-2017-7985 
In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of multibyte characters leads to XSS vulnerabilities in various components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-25T18:00:00.000Z
CVE-2017-7986 
In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of specific HTML attributes leads to XSS vulnerabilities in various components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-25T18:00:00.000Z
CVE-2017-7987 
In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate escaping of file and folder names leads to XSS vulnerabilities in the template manager component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-25T18:00:00.000Z
CVE-2017-7988 
In Joomla! 1.6.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of form contents allows overwriting the author of an article.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-25T18:00:00.000Z
CVE-2017-7989 
In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate MIME type checks allowed low-privilege users to upload swf files even if they were explicitly forbidden.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-25T18:00:00.000Z
CVE-2017-7990 
The Reporting Module 1.12.0 for OpenMRS allows CSRF attacks with resultant XSS, in which administrative authentication is hijacked to insert JavaScript into a name field in webapp/reports/manageReports.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-21T00:00:00.000Z
CVE-2017-7991 
Exponent CMS 2.4.1 and earlier has SQL injection via a base64 serialized API key (apikey parameter) in the api function of framework/modules/eaas/controllers/eaasController.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-22T01:00:00.000Z
CVE-2017-7992 
Heartland Payment Systems Payment Gateway PHP SDK hps/heartland-php v2.8.17 is vulnerable to a reflected XSS in examples/consumer-authentication/cruise.php via the URI, as demonstrated by the cavv parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-21T14:00:00.000Z
CVE-2017-7994 
The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-21T16:00:00.000Z
CVE-2017-7995 
Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-03T19:00:00.000Z
CVE-2017-7997 
Multiple SQL injection vulnerabilities in Gespage before 7.4.9 allow remote attackers to execute arbitrary SQL commands via the (1) show_prn parameter to webapp/users/prnow.jsp or show_month parameter to (2) webapp/users/blhistory.jsp or (3) webapp/users/prhistory.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-08T19:00:00.000Z
CVE-2017-7998 
Multiple cross-site scripting (XSS) vulnerabilities in Gespage before 7.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) printer name when adding a printer in the admin panel or (2) username parameter to webapp/users/user_reg.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-08T19:00:00.000Z
CVE-2017-7999 
Atlassian Eucalyptus before 4.4.1, when in EDGE mode, allows remote authenticated users with certain privileges to cause a denial of service (E2 service outage) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-01T16:00:00.000Z
CVE-2017-8000 
In EMC RSA Authentication Manager 8.2 SP1 and earlier, a malicious RSA Security Console Administrator could craft a token profile and store the profile name in the RSA Authentication Manager database. The profile name could include a crafted script (with an XSS payload) that could be executed when viewing or editing the assigned token profile in the token by another administrator's browser session.
Problem types: description: Stored Cross-Site Scripting Vulnerabilities
Affected products: vendor: n/a
product: RSA Authentication Manager 8.2 SP1 and earlier
Published: 2017-07-17T14:00:00.000Z
CVE-2017-8001 
An issue was discovered in EMC ScaleIO 2.0.1.x. In a Linux environment, one of the support scripts saves the credentials of the ScaleIO MDM user who executed the script in clear text in temporary log files. The temporary files may potentially be read by an unprivileged user with access to the server where the script was executed to recover exposed credentials.
Problem types: description: Sensitive Information Disclosure
Affected products: vendor: n/a
product: EMC ScaleIO EMC ScaleIO 2.0.1.x
Published: 2017-11-28T07:00:00.000Z
CVE-2017-8002 
EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities. A remote authenticated attacker may potentially exploit these vulnerabilities to gain information about the application by causing execution of arbitrary SQL commands.
Problem types: description: Multiple Blind SQL Injection Vulnerabilities
Affected products: vendor: n/a
product: EMC Data Protection Advisor prior to 6.4
Published: 2017-07-09T20:00:00.000Z
CVE-2017-8003 
EMC Data Protection Advisor prior to 6.4 contains a path traversal vulnerability. A remote authenticated high privileged user may potentially exploit this vulnerability to access unauthorized information from the underlying OS server by supplying specially crafted strings in input parameters of the application.
Problem types: description: Path Traversal Vulnerability
Affected products: vendor: n/a
product: EMC Data Protection Advisor prior to 6.4
Published: 2017-07-09T20:00:00.000Z
CVE-2017-8004 
The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance and RSA IMG products (RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels; RSA Via Lifecycle and Governance version 7.0, all patch levels; RSA Identity Management and Governance (RSA IMG) versions 6.9.1, all patch levels) allow an application administrator to upload arbitrary files that may potentially contain a malicious code. The malicious file could be then executed on the affected system with the privileges of the user the application is running under.
Problem types: description: unrestricted file upload
Affected products: vendor: n/a
product: RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, RSA Identity Management and Governance (RSA IMG)
Published: 2017-07-17T14:00:00.000Z
CVE-2017-8005 
The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG products (RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels; RSA Via Lifecycle and Governance version 7.0, all patch levels; RSA Identity Management and Governance (RSA IMG) versions 6.9.1, all patch levels) are affected by multiple stored cross-site scripting vulnerabilities. Remote authenticated malicious users could potentially inject arbitrary HTML code to the application.
Problem types: description: Multiple Stored Cross-Site Scripting Vulnerabilities
Affected products: vendor: n/a
product: RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, RSA Identity Management and Governance (RSA IMG)
Published: 2017-07-17T14:00:00.000Z
CVE-2017-8006 
In EMC RSA Authentication Manager 8.2 SP1 Patch 1 and earlier, a malicious user logged into the Self-Service Console of RSA Authentication Manager as a target user can use a brute force attack to attempt to identify that user's PIN. The malicious user could potentially reset the compromised PIN to affect victim's ability to obtain access to protected resources.
Problem types: description: Brute Force PIN-Guessing Vulnerability
Affected products: vendor: n/a
product: RSA Authentication Manager 8.2 SP1 Patch 1 and earlier
Published: 2017-07-17T14:00:00.000Z
CVE-2017-8007 
In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Webservice Gateway is affected by a directory traversal vulnerability. Attackers with knowledge of Webservice Gateway credentials could potentially exploit this vulnerability to access unauthorized information, and modify or delete data, by supplying specially crafted strings in input parameters of the web service call.
Problem types: description: Directory Traversal
Affected products: vendor: n/a
product: EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R (Watch4Net) for SAS Solution Packs
Published: 2017-09-22T01:00:00.000Z
CVE-2017-8011 
EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs (EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX M&R all versions, EMC M&R (Watch4Net) for SAS Solution Packs all versions) contain undocumented accounts with default passwords for Webservice Gateway and RMI JMX components. A remote attacker with the knowledge of the default password may potentially use these accounts to run arbitrary web service and remote procedure calls on the affected system.
Problem types: description: undocumented accounts vulnerability
Affected products: vendor: n/a
product: EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R (Watch4Net)
Published: 2017-07-17T14:00:00.000Z
CVE-2017-8012 
In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Java Management Extensions (JMX) protocol used to communicate between components in the Alerting and/or Compliance components can be leveraged to create a denial of service (DoS) condition. Attackers with knowledge of JMX agent user credentials could potentially exploit this vulnerability to create arbitrary files on the affected system and create a DoS condition by leveraging inherent JMX protocol capabilities.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R (Watch4Net) for SAS Solution Packs
Published: 2017-09-22T01:00:00.000Z
CVE-2017-8013 
EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges. Affected accounts are: "Apollo System Test", "emc.dpa.agent.logon" and "emc.dpa.metrics.logon". An attacker with knowledge of the password could potentially use these accounts via REST APIs to gain unauthorized access to EMC Data Protection Advisor (including potentially access with administrative privileges).
Problem types: description: Hardcoded Password Vulnerability
Affected products: vendor: Dell EMC
product: EMC Data Protection Advisor
Published: 2018-03-16T20:00:00.000Z
CVE-2017-8015 
EMC AppSync (all versions prior to 3.5) contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system.
Problem types: description: SQL Injection Vulnerability
Affected products: vendor: n/a
product: EMC AppSync all versions prior to 3.5
Published: 2017-09-12T20:00:00.000Z
CVE-2017-8016 
RSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting via the Questionnaire ID field. An authenticated attacker may potentially exploit this to execute arbitrary HTML in the user's browser session in the context of the affected RSA Archer application.
Problem types: description: Stored Cross Site Scripting
Affected products: vendor: n/a
product: RSA Archer GRC Platform versions prior to 6.2.0.5
Published: 2017-10-11T19:00:00.000Z
CVE-2017-8017 
EMC Network Configuration Manager (NCM) 9.3.x, 9.4.0.x, 9.4.1.x, and 9.4.2.x is affected by a reflected cross-site scripting Vulnerability that could potentially be exploited by malicious users to compromise the affected system.
Problem types: description: Reflected Cross-Site Scripting Vulnerability
Affected products: vendor: n/a
product: EMC Network Configuration Manager (NCM) 9.3.x, 9.4.0.x, 9.4.1.x, 9.4.2.x
Published: 2017-10-11T19:00:00.000Z
CVE-2017-8018 
EMC AppSync host plug-in versions 3.5 and below (Windows platform only) includes a denial of service (DoS) vulnerability that could potentially be exploited by malicious users to compromise the affected system.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: EMC AppSync host plug-in versions 3.5 and below (Windows platform only)
Published: 2017-10-02T05:00:00.000Z