rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-16796 
In SWFTools 0.9.2, the png_load function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of service (invalid write and application crash) or possibly have unspecified other impact via vectors involving an IDAT tag in a crafted PNG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-12T18:00:00.000Z
CVE-2017-16797 
In SWFTools 0.9.2, the png_load function in lib/png.c does not properly validate an alloclen_64 multiplication of width and height values, which allows remote attackers to cause a denial of service (integer overflow, heap-based buffer overflow, and application crash) or possibly have unspecified other impact via a crafted PNG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-12T18:00:00.000Z
CVE-2017-16798 
In CMS Made Simple 2.2.3.1, the is_file_acceptable function in modules/FileManager/action.upload.php only blocks file extensions that begin or end with a "php" substring, which allows remote attackers to bypass intended access restrictions or trigger XSS via other extensions, as demonstrated by .phtml, .pht, .html, or .svg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-12T18:00:00.000Z
CVE-2017-16799 
In CMS Made Simple 2.2.3.1, in modules/New/action.addcategory.php, stored XSS is possible via the m1_name parameter to admin/moduleinterface.php during addition of a category, a related issue to CVE-2010-3882.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-12T18:00:00.000Z
CVE-2017-16801 
Cross-site scripting (XSS) vulnerability in Octopus Deploy 3.7.0-3.17.13 (fixed in 3.17.14) allows remote authenticated users to inject arbitrary web script or HTML via the Step Template Name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-13T09:00:00.000Z
CVE-2017-16802 
In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-13T16:00:00.000Z
CVE-2017-16803 
In Libav through 11.11 and 12.x through 12.1, the smacker_decode_tree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service (bitstream.c:build_table() out-of-bounds read and application crash) via a crafted Smacker stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-13T17:00:00.000Z
CVE-2017-16804 
In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-13T20:00:00.000Z
CVE-2017-16805 
In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file, related to r_bin_dwarf_parse_comp_unit in dwarf.c and sdb_set_internal in shlr/sdb/src/sdb.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-13T21:00:00.000Z
CVE-2017-16806 
The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0 allows HTTP server directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-13T21:00:00.000Z
CVE-2017-16807 
A cross-site Scripting (XSS) vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exists when displaying a specially prepared SVG document that has been uploaded as a content file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-13T21:00:00.000Z
CVE-2017-16808 
tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-13T21:00:00.000Z
CVE-2017-16810 
Cross-site scripting (XSS) vulnerability in the All Variables tab in Octopus Deploy 3.4.0-3.13.6 (fixed in 3.13.7) allows remote attackers to inject arbitrary web script or HTML via the Variable Set Name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-14T03:00:00.000Z
CVE-2017-16813 
A denial-of-service issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. This occurs when a user uploads a file that includes a hexadecimal Unicode character in the "filename" parameter via Wi-Fi, since the app could fail to parse this.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-26T22:00:00.000Z
CVE-2017-16814 
A Directory Traversal issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. This occurs by abusing the URL + escape character during a Wi-Fi transfer, which could be exploited by attackers to bypass intended restrictions on local application files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-26T22:00:00.000Z
CVE-2017-16815 
installer.php in the Snap Creek Duplicator (WordPress Site Migration & Backup) plugin before 1.2.30 for WordPress has XSS because the values "url_new" (/wp-content/plugins/duplicator/installer/build/view.step4.php) and "logging" (wp-content/plugins/duplicator/installer/build/view.step2.php) are not filtered correctly.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-14T19:00:00.000Z
CVE-2017-16816 
The condor_schedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote authenticated users to cause a denial of service (daemon crash) by leveraging use of GSI and VOMS extensions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-05T20:00:00.000Z
CVE-2017-16818 
RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by leveraging "full" (not necessarily admin) privileges to post an invalid profile to the admin API, related to rgw/rgw_iam_policy.cc, rgw/rgw_basic_types.h, and rgw/rgw_iam_types.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-20T17:00:00.000Z
CVE-2017-16819 
A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to inject arbitrary JavaScript in the nameFirst (aka First Name) field for the employee details page (/employee.html) that is then reflected in multiple pages where that field data is utilized, resulting in session hijacking and possible elevation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-17T17:00:00.000Z
CVE-2017-16820 
The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other impact).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-14T21:00:00.000Z
CVE-2017-16821 
b3log Symphony (aka Sym) 2.2.0 has XSS in processor/AdminProcessor.java in the admin console, as demonstrated by a crafted X-Forwarded-For HTTP header that is mishandled during display of a client IP address in /admin/user/userid.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-15T03:00:00.000Z
CVE-2017-16826 
The coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted PE file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-15T08:00:00.000Z
CVE-2017-16827 
The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (slurp_symtab invalid free and application crash) or possibly have unspecified other impact via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-15T08:00:00.000Z
CVE-2017-16828 
The display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (integer overflow and heap-based buffer over-read, and application crash) or possibly have unspecified other impact via a crafted ELF file, related to print_debug_frame.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-15T08:00:00.000Z
CVE-2017-16829 
The _bfd_elf_parse_gnu_properties function in elf-properties.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not prevent negative pointers, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-15T08:00:00.000Z
CVE-2017-16830 
The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-15T08:00:00.000Z
CVE-2017-16831 
coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate the symbol count, which allows remote attackers to cause a denial of service (integer overflow and application crash, or excessive memory allocation) or possibly have unspecified other impact via a crafted PE file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-15T08:00:00.000Z
CVE-2017-16832 
The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate size and offset values in the data dictionary, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted PE file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-15T08:00:00.000Z
CVE-2017-16833 
Stored cross-site scripting (XSS) vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the "homepage" value of a ".gemspec" file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-15T09:00:00.000Z
CVE-2017-16834 
PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account but root code execution depends on these files, which allows local users to gain privileges by leveraging access to this unprivileged account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T02:00:00.000Z
CVE-2017-16835 
The "Photo,Video Locker-Calculator" application 12.0 for Android has android:allowBackup="true" in AndroidManifest.xml, which allows attackers to obtain sensitive cleartext information via an "adb backup '-f smart.calculator.gallerylock'" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-20T06:00:00.000Z
CVE-2017-16836 
Arris TG1682G devices with Comcast TG1682_2.0s7_PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via the actionHandler/ajax_managed_services.php service parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T02:00:00.000Z
CVE-2017-16837 
Certain function pointers in Trusted Boot (tboot) through 1.9.6 are not validated and can cause arbitrary code execution, which allows local users to overwrite dynamic PCRs of Trusted Platform Module (TPM) by hooking these function pointers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T02:00:00.000Z
CVE-2017-16839 
Hashicorp vagrant-vmware-fusion 5.0.4 allows local users to steal root privileges if VMware Fusion is not installed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-29T22:00:00.000Z
CVE-2017-16840 
The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service (out-of-bounds read) because of incorrect buffer padding for non-Haar wavelets, related to libavcodec/vc2enc.c and libavcodec/vc2enc_dwt.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-21T08:00:00.000Z
CVE-2017-16841 
LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T03:00:00.000Z
CVE-2017-16842 
Cross-site scripting (XSS) vulnerability in admin/google_search_console/class-gsc-table.php in the Yoast SEO plugin before 5.8.0 for WordPress allows remote attackers to inject arbitrary web script or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T03:00:00.000Z
CVE-2017-16843 
Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T21:00:00.000Z
CVE-2017-16844 
Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T15:00:00.000Z
CVE-2017-16845 
hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-17T20:00:00.000Z
CVE-2017-16846 
Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /manageApplications.do?method=AddSubGroup haid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T17:00:00.000Z
CVE-2017-16847 
Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a showPlasmaView action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T17:00:00.000Z
CVE-2017-16848 
Zoho ManageEngine Applications Manager 13 allows SQL injection via the /manageConfMons.do groupname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T17:00:00.000Z
CVE-2017-16849 
Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do?method=viewDashBoard forpage parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T17:00:00.000Z
CVE-2017-16850 
Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a getResourceProfiles action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T17:00:00.000Z
CVE-2017-16851 
Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do widgetid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T17:00:00.000Z
CVE-2017-16852 
shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity periods, and other checks specific to deployments, aka SSPCPP-763.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T17:00:00.000Z
CVE-2017-16853 
The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity periods, and other checks specific to deployments, aka CPPOST-105.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T17:00:00.000Z
CVE-2017-16854 
In Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in as a customer can use the ticket search form to disclose internal article information of their customer tickets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-08T17:00:00.000Z
CVE-2017-16856 
The RSS Feed macro in Atlassian Confluence before version 6.5.2 allows remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS) vulnerabilities in various rss properties which were used as links without restriction on their scheme.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Confluence
Published: 2017-12-05T16:00:00.000Z
CVE-2017-16857 
It is possible to bypass the bitbucket auto-unapprove plugin via minimal brute-force because it is relying on asynchronous events on the back-end. This allows an attacker to merge any code into unsuspecting repositories. This affects all versions of the auto-unapprove plugin, however since the auto-unapprove plugin is not bundled with Bitbucket Server it does not affect any particular version of Bitbucket.
Problem types: description: Brute Force Attack
Affected products: vendor: Atlassian
product: Auto-Unapprove Plugin (for Bitbucket Server)
Published: 2017-12-05T16:00:00.000Z
CVE-2017-16858 
The 'crowd-application' plugin module (notably used by the Google Apps plugin) in Atlassian Crowd from version 1.5.0 before version 3.1.2 allowed an attacker to impersonate a Crowd user in REST requests by being able to authenticate to a directory bound to an application using the feature. Given the following situation: the Crowd application is bound to directory 1 and has a user called admin and the Google Apps application is bound to directory 2, which also has a user called admin, it was possible to authenticate REST requests using the credentials of the user coming from directory 2 and impersonate the user from directory 1.
Problem types: cwe_id: CWE-863
description: Incorrect Authorization (CWE-863)
Affected products: vendor: Atlassian
product: Crowd
Published: 2018-01-31T14:00:00.000Z
CVE-2017-16859 
The review attachment resource in Atlassian Fisheye and Crucible before version 4.3.2, from version 4.4.0 before 4.4.3 and before version 4.5.0 allows remote attackers to read files contained within context path of the running application through a path traversal vulnerability in the command parameter.
Problem types: description: Path Traversal
Affected products: vendor: Atlassian
product: Fisheye and Crucible
Published: 2018-06-28T14:00:00.000Z
CVE-2017-16860 
The invalidRedirectUrl template in Atlassian Application Links before version 5.2.7, from version 5.3.0 before version 5.3.4 and from version 5.4.0 before version 5.4.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the redirectUrl parameter link in the redirect warning message.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Application Links
Published: 2018-05-14T13:00:00.000Z
CVE-2017-16861 
It was possible for double OGNL evaluation in certain redirect action and in WebWork URL and Anchor tags in JSP files to occur. An attacker who can access the web interface of Fisheye or Crucible or who hosts a website that a user who can access the web interface of Fisheye or Crucible visits, is able to exploit this vulnerability to execute Java code of their choice on systems that run a vulnerable version of Fisheye or Crucible. All versions of Fisheye and Crucible before 4.4.5 (the fixed version for 4.4.x) and from 4.5.0 before 4.5.2 (the fixed version for 4.5.x) are affected by this vulnerability.
Problem types: description: Remote Code Execution
Affected products: vendor: Atlassian
product: Fisheye and Crucible
Published: 2018-02-01T04:00:00.000Z
CVE-2017-16862 
The IncomingMailServers resource in Atlassian Jira before version 7.6.2 allows remote attackers to modify the "incoming mail" whitelist setting via a Cross-site request forgery (CSRF) vulnerability.
Problem types: description: Cross-Site Request Forgery (CSRF)
Affected products: vendor: Atlassian
product: Jira
Published: 2018-01-12T14:00:00.000Z
CVE-2017-16863 
The PieChart gadget in Atlassian Jira before version 7.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the name of a project or filter.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Atlassian Jira
Published: 2018-01-18T18:00:00.000Z
CVE-2017-16864 
The issue search resource in Atlassian Jira before version 7.4.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the orderby parameter.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Jira
Published: 2018-01-12T14:00:00.000Z
CVE-2017-16865 
The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF). When running in an environment like Amazon EC2, this flaw maybe used to access to a metadata resource that provides access credentials and other potentially confidential information.
Problem types: description: Server-Side Request Forgery (SSRF)
Affected products: vendor: Atlassian
product: Jira
Published: 2018-01-17T14:00:00.000Z
CVE-2017-16866 
dayrui FineCms 5.2.0 before 2017.11.16 has Cross Site Scripting (XSS) in core/M_Controller.php via the DR_URI field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T21:00:00.000Z
CVE-2017-16867 
Amazon Key through 2017-11-16 mishandles Cloud Cam 802.11 deauthentication frames during the delivery process, which makes it easier for (1) delivery drivers to freeze a camera and re-enter a house for unfilmed activities or (2) attackers to freeze a camera and enter a house if a delivery driver failed to ensure a locked door before leaving.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T21:00:00.000Z
CVE-2017-16868 
In SWFTools 0.9.2, the wav_convert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to cause a denial of service (integer overflow and NULL pointer dereference) via a crafted WAV file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-17T09:00:00.000Z