rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-6224 
Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system by appending those commands in the Common Name field in the Certificate Generation Request.
Problem types: description: Authenticated Root Command Injection.
Affected products: vendor: Brocade Communications Systems, Inc.
product: Zone Director Controller and Unleashed AP Firmware
Published: 2017-10-13T17:00:00.000Z
CVE-2017-6225 
Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could allow remote attackers to execute arbitrary code or access sensitive browser-based information.
Problem types: description: Cross-site scripting (XSS)
Affected products: vendor: Brocade Communications Systems, Inc.
product: Brocade FABRIC OS
Published: 2018-02-08T22:00:00.000Z
CVE-2017-6227 
A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could allow an attacker to cause a denial of service (CPU consumption and device hang) condition by sending crafted Router Advertisement (RA) messages to a targeted system.
Problem types: description: DOS
Affected products: vendor: Brocade Communications Systems, Inc.
product: Brocade FABRIC OS
Published: 2018-02-08T22:00:00.000Z
CVE-2017-6229 
Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems.
Problem types: description: Authenticated command injection in CLI interface of ZD/Unleashed software.
Affected products: vendor: Brocade Communications Systems, Inc.
product: Ruckus Networks Unleashed APs and Zone Director
Published: 2018-02-14T19:00:00.000Z
CVE-2017-6230 
Ruckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs firmware releases R5.x or before contain authenticated Root Command Injection in the web-GUI that could allow authenticated valid users to execute privileged commands on the respective systems.
Problem types: description: Authenticated command injection in WebUI interface of Solo and managed AP via tftp upgrade option.
Affected products: vendor: Brocade Communications Systems, Inc.
product: Ruckus Networks Solo APs and SZ managed APs
Published: 2018-02-14T19:00:00.000Z
CVE-2017-6247 
An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High due to the possibility of local arbitrary code execution in a privileged process in the kernel. Product: Android. Versions: N/A. Android ID: A-34386301. References: N-CVE-2017-6247.
Problem types: description: Elevation of privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-07-06T20:00:00.000Z
CVE-2017-6248 
An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34372667. References: N-CVE-2017-6248.
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: n/a
Published: 2017-07-06T20:00:00.000Z
CVE-2017-6249 
An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34373711. References: N-CVE-2017-6249.
Problem types: description: Elevation of privilege
Affected products: vendor: Android
product: Android
Published: 2017-07-13T16:00:00.000Z
CVE-2017-6250 
NVIDIA GeForce Experience contains a vulnerability in NVIDIA Web Helper.exe, where untrusted script execution may lead to violation of application execution policy and local code execution.
Problem types: description: Violation of application execution policy and local code execution
Affected products: vendor: Nvidia Corporation
product: GeForce Experience
Published: 2017-04-28T21:00:00.000Z
CVE-2017-6251 
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler where a missing permissions check may allow users to gain access to arbitrary physical system memory, which may lead to an escalation of privileges.
Problem types: description: Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: NVIDIA Windows GPU Display Driver
Published: 2017-07-28T19:00:00.000Z
CVE-2017-6252 
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler where a NULL pointer dereference may lead to a denial of service or potential escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: NVIDIA Windows GPU Display Driver
Published: 2017-07-28T19:00:00.000Z
CVE-2017-6253 
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the size of an input buffer is not validated which may lead to denial of service or potential escalation of privileges
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: n/a
product: n/a
Published: 2017-07-28T19:00:00.000Z
CVE-2017-6254 
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointer passed from an user to the driver is used without validation which may lead to denial of service or potential escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: NVIDIA Windows GPU Display Driver
Published: 2017-07-28T19:00:00.000Z
CVE-2017-6255 
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where an improper input parameter handling may lead to a denial of service or potential escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: NVIDIA Windows GPU Display Driver
Published: 2017-07-28T19:00:00.000Z
CVE-2017-6256 
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to denial of service or potential escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: NVIDIA Windows GPU Display Driver
Published: 2017-07-28T19:00:00.000Z
CVE-2017-6257 
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: NVIDIA GPU Display Driver
Published: 2017-07-28T19:00:00.000Z
CVE-2017-6258 
NVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in media server which may cause an out of bounds write and could lead to local code execution in a privileged process. This issue is rated as high. Product: Android. Version: N/A. Android: A-38027496. Reference: N-CVE-2017-6258.
Problem types: description: Elevation of privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2018-02-06T13:00:00.000Z
CVE-2017-6259 
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect detection and recovery from an invalid state produced by specific user actions may lead to denial of service.
Problem types: description: Denial of Service
Affected products: vendor: Nvidia Corporation
product: NVIDIA GPU Display Driver
Published: 2017-07-28T19:00:00.000Z
CVE-2017-6260 
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer helper function where an incorrect calculation of string length may lead to denial of service.
Problem types: description: Denial of Service
Affected products: vendor: Nvidia Corporation
product: NVIDIA Windows GPU Display Driver
Published: 2017-07-28T19:00:00.000Z
CVE-2017-6261 NVIDIA’s Vibrante Linux version 1.1, 2.0, and 2.2 contains a vulnerability in the user space driver in which protection mechanisms are insufficient, may lead to denial of service or information disclosure
NVIDIA Vibrante Linux version 1.1, 2.0, and 2.2 contains a vulnerability in the user space driver in which protection mechanisms are insufficient, may lead to denial of service or information disclosure.
Problem types: cwe_id: CWE-693
description: CWE-693 Protection Mechanism Failure
Affected products: vendor: NVIDIA
product: NVIDIA Vibrante Linux
Credits: lang: en
value: NVIDIA thanks Keen Security Lab of Tencent for reporting this issue.
Published: 2019-06-05T13:18:22.000Z
CVE-2017-6262 
NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to a race condition which could enable unauthorized code execution and possibly lead to elevation of privileges. This issue is rated as high. Product: Android. Version: N/A. Android ID: A-38045794. References: N-CVE-2017-6262.
Problem types: description: Elevation of privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-12-06T18:00:00.000Z
CVE-2017-6263 
NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to improper usage of the list_for_each kernel macro which could enable unauthorized code execution and possibly lead to elevation of privileges. This issue is rated as high. Product: Android. Version: N/A. Android ID: A-38046353. References: N-CVE-2017-6263.
Problem types: description: Elevation of privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-12-06T18:00:00.000Z
CVE-2017-6264 
An elevation of privilege vulnerability exists in the NVIDIA GPU driver (gm20b_clk_throt_set_cdev_state), where an out of bound memory read is used as a function pointer could lead to code execution in the kernel.This issue is rated as high because it could allow a local malicious application to execute arbitrary code within the context of a privileged process. Product: Android. Version: N/A. Android ID: A-34705430. References: N-CVE-2017-6264.
Problem types: description: Elevation of privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-11-14T17:00:00.000Z
CVE-2017-6266 
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls could allow unprivileged users to cause a denial of service.
Problem types: description: Denial of Service
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-09-22T17:00:00.000Z
CVE-2017-6267 
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect initialization of internal objects can cause an infinite loop which may lead to a denial of service.
Problem types: description: Denial of Service
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-09-22T17:00:00.000Z
CVE-2017-6268 
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to denial of service or possible escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-09-22T17:00:00.000Z
CVE-2017-6269 
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointer passed from a user to the driver is used without validation which may lead to denial of service or possible escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-09-22T17:00:00.000Z
CVE-2017-6270 
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation where untrusted user input is used as a divisor without validation during a calculation which may lead to a potential divide by zero and denial of service.
Problem types: description: Denial of Service
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-09-22T17:00:00.000Z
CVE-2017-6271 
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation where untrusted user input is used as a divisor without validation while processing block linear information which may lead to a potential divide by zero and denial of service.
Problem types: description: Denial of Service
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-09-22T17:00:00.000Z
CVE-2017-6272 
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to a denial of service or possible escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-09-22T17:00:00.000Z
CVE-2017-6273 
NVIDIA ADSP Firmware contains a vulnerability in the ADSP Loader component where there is the potential to write to a memory location that is outside the intended boundary of the buffer, which may lead to denial of service or possible escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: Jetson
Published: 2017-10-17T20:00:00.000Z
CVE-2017-6274 
An elevation of Privilege vulnerability exists in the Thermal Driver, where a missing bounds checks in the thermal throttle driver can cause an out-of-bounds write in the kernel. This issue is rated as moderate. Product: Pixel. Version: N/A. Android ID: A-34705801. References: N-CVE-2017-6274.
Problem types: description: Elevation of privilege
Affected products: vendor: Nvidia Corporation
product: Pixel
Published: 2017-11-14T16:00:00.000Z
CVE-2017-6275 
An information disclosure vulnerability exists in the Thermal Driver, where a missing bounds checking in the thermal driver could allow a read from an arbitrary kernel address. This issue is rated as moderate. Product: Pixel. Versions: N/A. Android ID: A-34702397. References: N-CVE-2017-6275.
Problem types: description: Information Disclosure
Affected products: vendor: Nvidia Corporation
product: Pixel
Published: 2017-11-14T16:00:00.000Z
CVE-2017-6276 
NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can occur due to an incorrect bounds check which could enable unauthorized code execution and possibly lead to elevation of privileges. This issue is rated as high. Product: Android. Version: N/A. Android: A-63802421. References: N-CVE-2017-6276.
Problem types: description: Elevation of privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2017-12-06T18:00:00.000Z
CVE-2017-6277 
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to denial of service or possible escalation of privileges.
Problem types: description: Denial of Service, Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2017-09-22T17:00:00.000Z
CVE-2017-6278 
NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using an index or pointer that references a memory location after the end of the buffer, which may lead to a denial of service or possible escalation of privileges.
Problem types: description: Denial of service Escalation of privileges
Affected products: vendor: Nvidia Corporation
product: NVIDIA Tegra
Published: 2018-03-26T16:00:00.000Z
CVE-2017-6279 
NVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in media server which may cause an out of bounds write and could lead to local code execution in a privileged process. This issue is rated as high. Product: Android. Version: N/A. Android: A-65023166. Reference: N-CVE-2017-6279.
Problem types: description: Elevation of privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2018-02-06T13:00:00.000Z
CVE-2017-6280 
NVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to information disclosure. This issue is rated as moderate. Android: A-63851980.
Problem types: description: Information Disclosure
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2018-03-06T16:00:00.000Z
CVE-2017-6281 
NVIDIA libnvomx contains a possible out of bounds write due to a improper input validation which could lead to local escalation of privilege. This issue is rated as high. Product: Android. Version: N/A. Android: A-66969318. Reference: N-CVE-2017-6281.
Problem types: description: Elevation of privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2018-03-12T13:00:00.000Z
CVE-2017-6282 
NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary location which may lead to an escalation of privileges. This issue is rated as high.
Problem types: description: Escalation of Pivileges
Affected products: vendor: Nvidia Corporation
product: SHIELD TV
Published: 2018-03-06T16:00:00.000Z
CVE-2017-6283 
NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure. This issue is rated as high.
Problem types: description: Information Disclosure
Affected products: vendor: Nvidia Corporation
product: SHIELD TV
Published: 2018-03-06T16:00:00.000Z
CVE-2017-6284 
NVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG) where the DRBG does not properly initialize and store or transmits sensitive data using a weakened encryption scheme that is unable to protect sensitive data which may lead to information disclosure.This issue is rated as moderate.
Problem types: description: Information Disclosure
Affected products: vendor: Nvidia Corporation
product: SHIELD TV
Published: 2018-03-06T16:00:00.000Z
CVE-2017-6285 
NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is rated as moderate. Product: Android. Version: N/A. Android: A-64893156. Reference: N-CVE-2017-6285.
Problem types: description: Information Disclosure
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2018-03-12T13:00:00.000Z
CVE-2017-6286 
NVIDIA libnvomx contains a possible out of bounds write due to a missing bounds check which could lead to local escalation of privilege. This issue is rated as high. Product: Android. Version: N/A. Android: A-64893247. Reference: N-CVE-2017-6286.
Problem types: description: Elevation of privilege
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2018-03-12T13:00:00.000Z
CVE-2017-6287 
NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is rated as moderate.Product: Android. Version: N/A. Android: A-64893264. Reference: N-CVE-2017-6287.
Problem types: description: Information Disclosure
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2018-03-12T13:00:00.000Z
CVE-2017-6288 
NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is rated as moderate. Product: Android. Version: N/A. Android: A-65482562. Reference: N-CVE-2017-6288.
Problem types: description: Information Disclosure
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2018-03-12T13:00:00.000Z
CVE-2017-6289 
In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment (TEE) contains a memory corruption (due to unusual root cause) vulnerability, which if run within the speculative execution of the TEE, may lead to local escalation of privileges. This issue is rated as critical. Android: A-72830049. Reference: N-CVE-2017-6289.
Problem types: description: Elevation of privileges
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2018-05-10T14:00:00.000Z
CVE-2017-6290 
In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overflow which could lead to local escalation of privilege with no additional execution privileges needed. User interaction not needed for exploitation. This issue is rated as high. Version: N/A. Android: A-69559414. Reference: N-CVE-2017-6290.
Problem types: description: Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2018-06-07T19:00:00.000Z
CVE-2017-6292 
In Android before the 2018-06-05 security patch level, NVIDIA TLZ TrustZone contains a possible out of bounds write due to integer overflow which could lead to local escalation of privilege in the TrustZone with no additional execution privileges needed. User interaction is not needed for exploitation. This issue is rated as high. Version: N/A. Android: A-69480285. Reference: N-CVE-2017-6292.
Problem types: description: Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2018-06-07T19:00:00.000Z
CVE-2017-6293 
In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes data past the end, or before the beginning, of the intended buffer, which may lead to escalation of Privileges. This issue is rated as high. Android: A-69377364. Reference: N-CVE-2017-6293.
Problem types: description: Elevation of privileges
Affected products: vendor: Nvidia Corporation
product: Android
Published: 2018-05-10T14:00:00.000Z
CVE-2017-6294 
In Android before the 2018-06-05 security patch level, NVIDIA Tegra X1 TZ contains a possible out of bounds write due to missing bounds check which could lead to escalation of privilege from the kernel to the TZ. User interaction is not needed for exploitation. This issue is rated as high. Version: N/A. Android: A-69316825. Reference: N-CVE-2017-6294.
Problem types: description: Escalation of Privileges
Affected products: vendor: Nvidia Corporation
product: GPU Display Driver
Published: 2018-06-07T19:00:00.000Z