rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-0807 
An elevation of privilege vulnerability in the Android framework (ui framework). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35056974.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0808 
An information disclosure vulnerability in the Android framework (file system). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62301183.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0809 
A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62673128.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0810 
A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38207066.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0811 
A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37930177.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0812 
An elevation of privilege vulnerability in the Android media framework (audio hal). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62873231.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0813 
A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36531046.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0814 
An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62800140.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0815 
An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63526567.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0816 
An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63662938.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0817 
An information disclosure vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63522430.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0818 
A vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63581671.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0819 
A vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63045918.
Problem types: description: Other
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0820 
A vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62187433.
Problem types: description: Other
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0822 
An elevation of privilege vulnerability in the Android system (camera). Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63787722.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0823 
An information disclosure vulnerability in the Android system (rild). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37896655.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0824 
An elevation of privilege vulnerability in the Broadcom wifi driver. Product: Android. Versions: Android kernel. Android ID: A-37622847. References: B-V2017063001.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0825 
An information disclosure vulnerability in the Broadcom wifi driver. Product: Android. Versions: Android kernel. Android ID: A-37305633. References: B-V2017063002.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0826 
An elevation of privilege vulnerability in the HTC bootloader. Product: Android. Versions: Android kernel. Android ID: A-34949781.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0827 
An elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions: Android kernel. Android ID: A-62539960. References: M-ALPS03353876, M-ALPS03353861, M-ALPS03353869, M-ALPS03353867, M-ALPS03353872.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0828 
An elevation of privilege vulnerability in the Huawei bootloader. Product: Android. Versions: Android kernel. Android ID: A-34622855.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0829 
An elevation of privilege vulnerability in the Motorola bootloader. Product: Android. Versions: Android kernel. Android ID: A-62345044.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-10-03T21:00:00.000Z
CVE-2017-0830 
An elevation of privilege vulnerability in the Android framework (device policy client). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62623498.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0831 
An elevation of privilege vulnerability in the Android framework (window manager). Product: Android. Versions: 8.0. Android ID: A-37442941.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0832 
A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62887820.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0833 
A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62896384.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0834 
A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63125953.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0835 
A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63316832.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0836 
A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64893226.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0837 
An elevation of privilege vulnerability in the Android media framework (libaudiopolicymanager). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-64340921.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-12-06T14:00:00.000Z
CVE-2017-0838 
An elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-63522818.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0839 
An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64478003.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0840 
An information disclosure vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62948670.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0841 
A remote code execution vulnerability in the Android system (libutils). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37723026.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0842 
An elevation of privilege vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37502513.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0843 
An elevation of privilege vulnerability in the MediaTek ccci. Product: Android. Versions: Android kernel. Android ID: A-62670819. References: M-ALPS03361488.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0845 
A denial of service vulnerability in the Android framework (syncstorageengine). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35028827.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0846 
An information disclosure vulnerability in the Android framework (clipboardservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64934810.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-01-12T23:00:00.000Z
CVE-2017-0847 
An elevation of privilege vulnerability in the Android media framework (mediaanalytics). Product: Android. Versions: 8.0. Android ID: A-65540999.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0848 
An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64477217.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0849 
An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62688399.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0850 
An information disclosure vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-64836941.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0851 
An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-35430570.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0852 
A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0. Android ID: A-62815506.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0853 
An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63121644.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0854 
An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63873837.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0855 
In MPEG4Extractor.cpp, there are several places where functions return early without cleaning up internal buffers which could lead to memory leaks. This could lead to remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64452857.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2018-01-12T23:00:00.000Z
CVE-2017-0857 
Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65122447.
Problem types: description: Other
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0858 
Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64836894.
Problem types: description: Other
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0859 
Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36075131.
Problem types: description: Other
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0860 
An elevation of privilege vulnerability in the Android system (inputdispatcher). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-31097064.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0861 
Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0862 
An elevation of privilege vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Android ID: A-36006779.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0863 
An elevation of privilege vulnerability in the Upstream kernel video driver. Product: Android. Versions: Android kernel. Android ID: A-37950620.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0864 
An elevation of privilege vulnerability in the MediaTek ioctl (flashlight). Product: Android. Versions: Android kernel. Android ID: A-37277147. References: M-ALPS03394571.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0865 
An elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions: Android kernel. Android ID: A-65025090. References: M-ALPS02973195.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-11-16T23:00:00.000Z
CVE-2017-0866 
An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a pointer to kfree. This could lead to kernel memory corruption and possible code execution. This issue is rated as moderate. Product: Pixel. Version: N/A. Android ID: A-38415808. References: N-CVE-2017-0866.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-16T22:00:00.000Z
CVE-2017-0869 
NVIDIA driver contains an integer overflow vulnerability which could cause a use after free and possibly lead to an elevation of privilege enabling code execution as a privileged process. This issue is rated as high. Version: N/A. Android ID: A-37776156. References: N-CVE-2017-0869.
Problem types: description: Elevation of Privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-01-12T15:00:00.000Z
CVE-2017-0870 
An elevation of privilege vulnerability in the Android framework (libminikin). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-62134807.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-12-06T14:00:00.000Z
CVE-2017-0871 
An elevation of privilege vulnerability in the Android framework (framework base). Product: Android. Versions: 8.0. Android ID A-65281159.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-12-06T14:00:00.000Z
CVE-2017-0872 
A remote code execution vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65290323.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2017-12-06T14:00:00.000Z
CVE-2017-0873 
A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63316255.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2017-12-06T14:00:00.000Z
CVE-2017-0874 
A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63315932.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2017-12-06T14:00:00.000Z
CVE-2017-0876 
A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ID A-64964675.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2017-12-06T14:00:00.000Z
CVE-2017-0877 
A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ID A-66372937.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2017-12-06T14:00:00.000Z
CVE-2017-0878 
A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 8.0. Android ID A-65186291.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2017-12-06T14:00:00.000Z
CVE-2017-0879 
An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65025028.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-12-06T14:00:00.000Z
CVE-2017-0880 
A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID A-65646012.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2017-12-06T14:00:00.000Z
CVE-2017-0881 
An error in the implementation of an autosubscribe feature in the check_stream_exists route of the Zulip group chat application server before 1.4.3 allowed an authenticated user to subscribe to a private stream that should have required an invitation from an existing member to join. The issue affects all previously released versions of the Zulip server.
Problem types: cwe_id: CWE-200
description: Information Exposure (CWE-200)
Affected products: vendor: n/a
product: Zulip Server Versions 1.4.2 and below
Published: 2017-03-28T02:46:00.000Z
CVE-2017-0882 
Multiple versions of GitLab expose sensitive user credentials when assigning a user to an issue or merge request. A fix was included in versions 8.15.8, 8.16.7, and 8.17.4, which were released on March 20th 2017 at 23:59 UTC.
Problem types: cwe_id: CWE-639
description: Authorization Bypass Through User-Controlled Key (CWE-639)
Affected products: vendor: n/a
product: GitLab Community Edition and GitLab Enterprise Edition 8.7.0 through 8.15.7, 8.16.0 through 8.16.7, 8.17.0 through 8.17.3
Published: 2017-03-28T02:46:00.000Z
CVE-2017-0883 
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. This may allow an attacker to edit files in a share despite having only a 'read' permission set. Note that this only affects folders and files that the adversary has at least read-only permissions for.
Problem types: cwe_id: CWE-275
description: Permission Issues (CWE-275)
Affected products: vendor: Nextcloud
product: Nextcloud Server
Published: 2017-04-05T20:00:00.000Z
CVE-2017-0884 
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders despite lacking permissions issue. Due to a logical error in the file caching layer an authenticated adversary is able to create empty folders inside a shared folder. Note that this only affects folders and files that the adversary has at least read-only permissions for.
Problem types: cwe_id: CWE-275
description: Permission Issues (CWE-275)
Affected products: vendor: Nextcloud
product: Nextcloud Server
Published: 2017-04-05T20:00:00.000Z