rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-8681 
The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T21:00:00.000Z
CVE-2016-8682 
The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SCT header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T19:00:00.000Z
CVE-2016-8683 
The ReadPCXImage function in coders/pcx.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T19:00:00.000Z
CVE-2016-8684 
The MagickMalloc function in magick/memory.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T19:00:00.000Z
CVE-2016-8685 
The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service (invalid memory access and crash) via a crafted BMP image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-8686 
The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-8687 
Stack-based buffer overflow in the safe_fprintf function in tar/util.c in libarchive 3.2.1 allows remote attackers to cause a denial of service via a crafted non-printable multibyte character in a filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T19:00:00.000Z
CVE-2016-8688 
The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service (crash) via a crafted file, which triggers an invalid read in the (1) detect_form or (2) bid_entry function in libarchive/archive_read_support_format_mtree.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T19:00:00.000Z
CVE-2016-8689 
The read_Header function in archive_read_support_format_7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service (out-of-bounds read) via multiple EmptyStream attributes in a header in a 7zip archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T19:00:00.000Z
CVE-2016-8690 
The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T19:00:00.000Z
CVE-2016-8691 
The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP image to the imginfo command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T19:00:00.000Z
CVE-2016-8692 
The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz value in a BMP image to the imginfo command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T19:00:00.000Z
CVE-2016-8693 
Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T19:00:00.000Z
CVE-2016-8694 
The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted BMP image, a different vulnerability than CVE-2016-8695 and CVE-2016-8696.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-8695 
The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted BMP image, a different vulnerability than CVE-2016-8694 and CVE-2016-8696.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-8696 
The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted BMP image, a different vulnerability than CVE-2016-8694 and CVE-2016-8695.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-8697 
The bm_new function in bitmap.h in potrace before 1.13 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted BMP image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-8698 
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, CVE-2016-8702, and CVE-2016-8703.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-8699 
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8700, CVE-2016-8701, CVE-2016-8702, and CVE-2016-8703.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-8700 
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8701, CVE-2016-8702, and CVE-2016-8703.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-8701 
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8700, CVE-2016-8702, and CVE-2016-8703.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-8702 
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, and CVE-2016-8703.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-8703 
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, and CVE-2016-8702.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-8704 
An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
Problem types: description: integer overflow
Affected products: vendor: Memcached
product: Memcached
Published: 2017-01-06T21:00:00.000Z
CVE-2016-8705 
Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
Problem types: description: multiple integer overflows
Affected products: vendor: Memcached
product: Memcached
Published: 2017-01-06T21:00:00.000Z
CVE-2016-8706 
An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
Problem types: description: integer overflow
Affected products: vendor: Memcached
product: Memcached
Published: 2017-01-06T21:00:00.000Z
CVE-2016-8707 
An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution. The vulnerability can be triggered through any user controlled TIFF that is handled by this functionality.
Problem types: description: out-of-bounds write
Affected products: vendor: n/a
product: ImageMagick 7.0.3-1
Published: 2016-12-23T22:00:00.000Z
CVE-2016-8709 
A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability.
Problem types: description: remote code error
Affected products: vendor: Nitro
product: Nitro Pro
Published: 2017-02-10T17:00:00.000Z
CVE-2016-8710 
An exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in Libbpg library. A crafted BPG image decoded by libbpg can cause an integer underflow vulnerability causing an out of bounds heap write leading to remote code execution. This vulnerability can be triggered via attempting to decode a crafted BPG image using Libbpg.
Problem types: description: integer underflow
Affected products: vendor: Libbpg
product: Libbpg
Published: 2017-01-26T21:00:00.000Z
CVE-2016-8711 
A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential code execution. An attacker can send the victim a specific PDF file to trigger this vulnerability.
Problem types: description: remote code error
Affected products: vendor: Nitro
product: Nitro Pro
Published: 2017-02-10T17:00:00.000Z
CVE-2016-8712 
An exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless AP running firmware 1.1. The device uses one nonce for all session authentication requests and only changes the nonce if the web application has been idle for 300 seconds.
Problem types: description: Nonce reuse
Affected products: vendor: Moxa
product: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client
Published: 2017-04-13T19:00:00.000Z
CVE-2016-8713 
A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.9.9. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability.
Problem types: description: remote code error
Affected products: vendor: Nitro
product: Nitro Pro
Published: 2017-02-10T17:00:00.000Z
CVE-2016-8714 
An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language version 3.3.0. A specially crafted R script can cause a buffer overflow resulting in a memory corruption. An attacker can send a malicious R script to trigger this vulnerability.
Problem types: description: buffer overflow
Affected products: vendor: The R Project
product: R
Published: 2017-03-10T10:29:00.000Z
CVE-2016-8715 
An exploitable heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. A specially crafted PDF file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide a malicious PDF file to trigger this vulnerability.
Problem types: description: PDF Code Execution
Affected products: vendor: Iceni
product: Argus
Published: 2017-02-28T15:00:00.000Z
CVE-2016-8716 
An exploitable Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. The Change Password functionality of the Web Application transmits the password in cleartext. An attacker capable of intercepting this traffic is able to obtain valid credentials.
Problem types: description: Cleartext Transmission vulnerabilty
Affected products: vendor: Moxa
product: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client
Published: 2017-04-12T19:00:00.000Z
CVE-2016-8717 
An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. The device operating system contains an undocumented, privileged (root) account with hard-coded credentials, giving attackers full control of affected devices.
Problem types: description: credentials vulnerability
Affected products: vendor: Talos
product: Moxa
Published: 2018-04-02T17:00:00.000Z
CVE-2016-8718 
An exploitable Cross-Site Request Forgery vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted form can trick a client into making an unintentional request to the web server which will be treated as an authentic request.
Problem types: description: XSS
Affected products: vendor: Moxa
product: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client
Published: 2017-04-12T19:00:00.000Z
CVE-2016-8719 
An exploitable reflected Cross-Site Scripting vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. Specially crafted input, in multiple parameters, can cause a malicious scripts to be executed by a victim.
Problem types: description: XSS
Affected products: vendor: Moxa
product: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client
Published: 2017-04-12T19:00:00.000Z
CVE-2016-8720 
An exploitable HTTP Header Injection vulnerability exists in the Web Application functionality of the Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted HTTP request can inject a payload in the bkpath parameter which will be copied in to Location header of the HTTP response.
Problem types: description: HTTP Header Injection vulnerabilty
Affected products: vendor: Moxa
product: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client
Published: 2017-04-13T19:00:00.000Z
CVE-2016-8721 
An exploitable OS Command Injection vulnerability exists in the web application 'ping' functionality of Moxa AWK-3131A Wireless Access Points running firmware 1.1. Specially crafted web form input can cause an OS Command Injection resulting in complete compromise of the vulnerable device. An attacker can exploit this vulnerability remotely.
Problem types: description: remote code execution
Affected products: vendor: Moxa
product: Moxa AWK-3131A WAP
Published: 2017-04-20T18:00:00.000Z
CVE-2016-8722 
An exploitable Information Disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client. Retrieving a specific URL without authentication can reveal sensitive information to an attacker.
Problem types: description: Web Application Authentication
Affected products: vendor: Moxa
product: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client
Published: 2017-04-13T19:00:00.000Z
CVE-2016-8723 
An exploitable null pointer dereference exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. Any HTTP GET request not preceded by an '/' will cause a segmentation fault in the web server. An attacker can send any of a multitude of potentially unexpected HTTP get requests to trigger this vulnerability.
Problem types: description: Denial of Service
Affected products: vendor: Moxa
product: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client
Published: 2017-04-13T19:00:00.000Z
CVE-2016-8724 
An exploitable information disclosure vulnerability exists in the serviceAgent functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted TCP query will allow an attacker to retrieve potentially sensitive information.
Problem types: description: Information Disclosure
Affected products: vendor: Moxa
product: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client
Published: 2017-04-13T19:00:00.000Z
CVE-2016-8725 
An exploitable information disclosure vulnerability exists in the Web Application functionality of the Moxa AWK-3131A wireless access point running firmware 1.1. Retrieving a specific URL without authentication can reveal sensitive information to an attacker.
Problem types: description: Information Disclosure
Affected products: vendor: Moxa
product: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client
Published: 2017-04-13T19:00:00.000Z
CVE-2016-8726 
An exploitable null pointer dereference vulnerability exists in the Web Application /forms/web_runScript iw_filename functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. An HTTP POST request with a blank line in the header will cause a segmentation fault in the web server.
Problem types: description: Header Manipulation
Affected products: vendor: Moxa
product: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client
Published: 2017-04-13T19:00:00.000Z
CVE-2016-8727 
An exploitable information disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point. Retrieving a series of URLs without authentication can reveal sensitive configuration and system information to an attacker.
Problem types: description: URL authentication
Affected products: vendor: Moxa
product: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client
Published: 2017-04-13T19:00:00.000Z
CVE-2016-8728 
An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer. A specially crafted PDF file can cause a out of bounds write resulting in heap metadata and sensitive process memory corruption leading to potential code execution. Victim needs to open the specially crafted file in a vulnerable reader in order to trigger this vulnerability.
Problem types: description: Out of bounds Write
Affected products: vendor: Artifex Software Inc.
product: MuPDF
Published: 2018-04-24T19:00:00.000Z
CVE-2016-8729 
An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. A specially crafted PDF can cause a negative number to be passed to a memset resulting in memory corruption and potential code execution. An attacker can specially craft a PDF and send to the victim to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Artifex Software Inc.
product: MuPDF
Published: 2018-04-24T19:00:00.000Z
CVE-2016-8730 
An of bound write / memory corruption vulnerability exists in the GIF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted GIF file can cause a vulnerability resulting in potential memory corruption resulting in code execution. An attacker can send the victim a specific GIF file to trigger this vulnerability.
Problem types: description: Out of bounds Write
Affected products: vendor: Corel
product: Corel PHOTO-PAINT
Published: 2018-04-24T19:00:00.000Z
CVE-2016-8731 
Hard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12. Knowledge of these credentials would allow remote access to any cameras found on the internet that do not have port 50021 blocked by an intermediate device.
Problem types: description: password vulnerability
Affected products: vendor: Foscan
product: Foscam C1 Webcam
Published: 2017-06-21T19:00:00.000Z
CVE-2016-8732 
Multiple security flaws exists in InvProtectDrv.sys which is a part of Invincea Dell Protected Workspace 5.1.1-22303. Weak restrictions on the driver communication channel and additional insufficient checks allow any application to turn off some of the protection mechanisms provided by the Invincea product.
Problem types: description: weak permissions
Affected products: vendor: Invincea
product: Dell Protected Workspace
Published: 2018-04-24T19:00:00.000Z
CVE-2016-8733 
An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when dealing with native file systems. An attacker can craft an input that can cause a kernel panic and potentially be leveraged into a full privilege escalation vulnerability. This vulnerability is distinct from CVE-2016-9031.
Problem types: description: integer overflow
Affected products: vendor: Joyent
product: SmartOS
Published: 2016-12-14T17:00:00.000Z
CVE-2016-8734 
Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.
Problem types: description: Denial of Service
Affected products: vendor: Apache Software Foundation
product: Apache Subversion
Published: 2017-10-16T13:00:00.000Z
CVE-2016-8735 
Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.
Problem types: description: Remote code execution
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2017-04-06T21:00:00.000Z
CVE-2016-8736 
Apache OpenMeetings before 3.1.2 is vulnerable to Remote Code Execution via RMI deserialization attack.
Problem types: description: n/a
Affected products: vendor: Apache Software Foundation
product: Apache OpenMeetings
Published: 2017-10-12T18:00:00.000Z
CVE-2016-8737 
In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site request forgery (CSRF), which could permit a malicious web site to produce a link which, if clicked whilst a user is logged in to Brooklyn, would cause the server to execute the attacker's commands as the user. There is known to be a proof-of-concept exploit using this vulnerability.
Problem types: description: Cross-site request forgery (CSRF)
Affected products: vendor: Apache Software Foundation
product: Apache Brooklyn
Published: 2017-09-13T16:00:00.000Z