rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-5182 
Remote Manager in Open Enterprise Server (OES) allows unauthenticated remote attackers to read any arbitrary file, via a specially crafted URL, that allows complete directory traversal and total information disclosure. This vulnerability is present on all versions of OES for linux, it applies to OES2015 SP1 before Maintenance Update 11080, OES2015 before Maintenance Update 11079, OES11 SP3 before Maintenance Update 11078, OES11 SP2 before Maintenance Update 11077).
Problem types: description: unauthenticated directory traversal
Affected products: vendor: Micro Focus International
product: Open Enterprise Server
Published: 2017-01-23T15:00:00.000Z
CVE-2017-5183 
NetIQ Access Manager 4.2.2 and 4.3.x before 4.3.1+, when configured as an Identity Server, has XSS in the AssertionConsumerServiceURL field of a signed AuthnRequest in a samlp:AuthnRequest document.
Problem types: description: SAML2 mishandling
Affected products: vendor: n/a
product: Identity Server
Published: 2017-04-20T18:00:00.000Z
CVE-2017-5184 
A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information (account enumeration).
Problem types: description: leakage of information
Affected products: vendor: n/a
product: NetIQ Sentinel Server
Published: 2017-03-30T17:00:00.000Z
CVE-2017-5185 
A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow remote denial of service.
Problem types: description: remote denial of service
Affected products: vendor: n/a
product: NetIQ Sentinel Server
Published: 2017-03-30T17:00:00.000Z
CVE-2017-5186 
Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2 (9.0.2.2) use the deprecated MD5 hashing algorithm in a communications certificate.
Problem types: description: deprecated hashing algorithm
Affected products: vendor: n/a
product: NetIQ/Novell iManager and eDirectory
Published: 2017-04-27T14:00:00.000Z
CVE-2017-5187 
A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter (CWE-275) configuration information and inject OS commands (CWE-78) via forged requests.
Problem types: cwe_id: CWE-352
description: Cross-Site Request Forgery (CWE-352) and Remote Code Execution (CWE-78)
Affected products: vendor: Micro Focus
product: Micro Focus Enterprise Developer, Micro Focus Enterprise Server
Published: 2017-08-21T15:00:00.000Z
CVE-2017-5188 OBS worker VM escape via relative symbolic links
The bs_worker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during build, allowing leakage of private information.
Problem types: description: Missing checking for symlinks could use as a path traversal to read files outside of a specific directory.
Affected products: vendor: openSUSE
product: open build service
Credits: lang: en
value: Fabian Vogt of SUSE
Published: 2018-03-01T19:00:00.000Z
CVE-2017-5189 private SSL key embedded in JAR file in iManager
NetIQ iManager before 3.0.3 delivered a SSL private key in a Java application (JAR file) for authentication to Sentinel, allowing attackers to extract and establish their own connections to the Sentinel appliance.
Problem types: description: Exposure of secret credentials in user exposed data
cwe_id: CWE-522
description: CWE-522
Affected products: vendor: NetIQ
product: iManager
Published: 2018-03-02T20:00:00.000Z
CVE-2017-5190 
NetIQ Access Manager 4.2 before SP3 HF1 and 4.3 before SP1 HF1, when configured as a SAML 2.0 Identity Server with Virtual Attributes, has a concurrency issue causing information leakage, related to a stale profile.
Problem types: description: Information leakage
Affected products: vendor: n/a
product: NAM Identity Server and SAML2 Service Provider
Published: 2017-04-20T15:00:00.000Z
CVE-2017-5191 
An XSS vulnerability on the /NAGErrors URI in NetIQ Access Manager 4.2 and 4.3 exists because Access Gateway Error pages do not validate the HTTP Referer header.
Problem types: description: XSS
Affected products: vendor: n/a
product: NetIQ Access Manager 4.2 and NetIQ Access Manager 4.3
Published: 2017-04-24T18:00:00.000Z
CVE-2017-5192 
When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-26T14:00:00.000Z
CVE-2017-5193 
The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a message without a nick.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2017-5194 
Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service (crash) via an invalid nick message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2017-5195 
Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ANSI x8 color code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2017-5196 
Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via vectors involving strings that are not UTF8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2017-5197 
There is XSS in SilverStripe CMS before 3.4.4 and 3.5.x before 3.5.2. The attack vector is a page name. An example payload is a crafted JavaScript event handler within a malformed SVG element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-06T06:11:00.000Z
CVE-2017-5198 
SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-24T06:56:00.000Z
CVE-2017-5199 
The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-24T06:56:00.000Z
CVE-2017-5200 
Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-26T14:00:00.000Z
CVE-2017-5201 
NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allow remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors, a different vulnerability than CVE-2016-3064.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-09T19:00:00.000Z
CVE-2017-5202 
The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2017-5203 
The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2017-5204 
The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2017-5205 
The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2017-5206 
Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T16:00:00.000Z
CVE-2017-5207 
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T16:00:00.000Z
CVE-2017-5208 
Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash) or the possibility of execution of arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-22T18:00:00.000Z
CVE-2017-5209 
The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-11T16:00:00.000Z
CVE-2017-5210 
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T14:34:45.000Z
CVE-2017-5211 
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T14:30:35.000Z
CVE-2017-5212 
Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T14:26:06.000Z
CVE-2017-5213 
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T14:21:22.000Z
CVE-2017-5214 
The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows prediction of a uniqid value based on knowledge of a time value. This makes it easier to read arbitrary uploaded files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-17T14:00:00.000Z
CVE-2017-5215 
The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a rename attack that bypasses a "safe file extension" protection mechanism, leading to remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-17T14:00:00.000Z
CVE-2017-5216 
Stack-based buffer overflow vulnerability in Netop Remote Control versions 11.53, 12.21 and prior. The affected module in the Guest client is the "Import to Phonebook" option. When a specially designed malicious file containing special characters is loaded, the overflow occurs. 12.51 is the fixed version. The Support case ref is 00109744.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-09T08:48:00.000Z
CVE-2017-5217 
Installing a zero-permission Android application on certain Samsung Android devices with KK(4.4), L(5.0/5.1), and M(6.0) software can continually crash the system_server process in the Android OS. The zero-permission app will create an active install session for a separate app that it has embedded within it. The active install session of the embedded app is performed using the android.content.pm.PackageInstaller class and its nested classes in the Android API. The active install session will write the embedded APK file to the /data/app directory, but the app will not be installed since third-party applications cannot programmatically install apps. Samsung has modified AOSP in order to accelerate the parsing of APKs by introducing the com.android.server.pm.PackagePrefetcher class and its nested classes. These classes will parse the APKs present in the /data/app directory and other directories, even if the app is not actually installed. The embedded APK that was written to the /data/app directory via the active install session has a very large but valid AndroidManifest.xml file. Specifically, the AndroidManifest.xml file contains a very large string value for the name of a permission-tree that it declares. When system_server tries to parse the APK file of the embedded app from the active install session, it will crash due to an uncaught error (i.e., java.lang.OutOfMemoryError) or an uncaught exception (i.e., std::bad_alloc) because of memory constraints. The Samsung Android device will encounter a soft reboot due to a system_server crash, and this action will keep repeating since parsing the APKs in the /data/app directory as performed by the system_server process is part of the normal boot process. The Samsung ID is SVE-2016-6917.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-09T08:48:00.000Z
CVE-2017-5218 
A SQL Injection issue was discovered in SageCRM 7.x before 7.3 SP3. The AP_DocumentUI.asp web resource includes Utilityfuncs.js when the file is opened or viewed. This file crafts a SQL statement to identify the database that is to be in use with the current user's session. The database variable can be populated from the URL, and when supplied non-expected characters, can be manipulated to obtain access to the underlying database. The /CRM/CustomPages/ACCPAC/AP_DocumentUI.asp?SID=<VALID-SID>&database=1';WAITFOR DELAY '0:0:5'-- URI is a Proof of Concept.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-02T06:54:00.000Z
CVE-2017-5219 
An issue was discovered in SageCRM 7.x before 7.3 SP3. The Component Manager functionality, provided by SageCRM, permits additional components to be added to the application to enhance provided functionality. This functionality allows a zip file to be uploaded, containing a valid .ecf component file, which will be extracted to the inf directory outside of the webroot. By creating a zip file containing an empty .ecf file, to pass file-validation checks, any other file provided in zip file will be extracted onto the filesystem. In this case, a web shell with the filename '..\WWWRoot\CustomPages\aspshell.asp' was included within the zip file that, when extracted, traversed back out of the inf directory and into the SageCRM webroot. This permitted remote interaction with the underlying filesystem with the highest privilege level, SYSTEM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-02T06:54:00.000Z
CVE-2017-5223 
An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to convert relative image URLs into attachments using a script-provided base directory. If no base directory is provided, it resolves to /, meaning that relative image URLs get treated as absolute local file paths and added as attachments. To form a remote vulnerability, the msgHTML method must be called, passed an unfiltered, user-supplied HTML document, and must not set a base directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-16T06:00:00.000Z
CVE-2017-5225 
LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-12T11:00:00.000Z
CVE-2017-5226 
When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the sandbox.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-29T00:00:00.000Z
CVE-2017-5227 
QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T16:00:00.000Z
CVE-2017-5228 
All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi Dir.download() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.
Problem types: description: Directory Traversal
Affected products: vendor: Rapid7
product: Metasploit
Published: 2017-03-02T20:00:00.000Z
CVE-2017-5229 
All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter extapi Clipboard.parse_dump() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.
Problem types: description: Directory Traversal
Affected products: vendor: Rapid7
product: Metasploit
Published: 2017-03-02T20:00:00.000Z
CVE-2017-5230 
The Java keystore in all versions and editions of Rapid7 Nexpose prior to 6.4.50 is encrypted with a static password of 'r@p1d7k3y5t0r3' which is not modifiable by the user. The keystore provides storage for saved scan credentials in an otherwise secure location on disk.
Problem types: description: Hard-Coded Password
Affected products: vendor: Rapid7
product: Nexpose
Published: 2017-03-02T20:00:00.000Z
CVE-2017-5231 
All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi CommandDispatcher.cmd_download() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.
Problem types: description: Directory Traversal
Affected products: vendor: Rapid7
product: Metasploit
Published: 2017-03-02T20:00:00.000Z
CVE-2017-5232 
All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.
Problem types: description: DLL Preloading
Affected products: vendor: Rapid7
product: Nexpose
Published: 2017-03-02T20:00:00.000Z
CVE-2017-5233 
Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.
Problem types: description: DLL Preloading
Affected products: vendor: Rapid7
product: AppSpider Pro
Published: 2017-03-02T20:00:00.000Z
CVE-2017-5234 
Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.
Problem types: description: DLL Preloading
Affected products: vendor: Rapid7
product: Insight Collector
Published: 2017-03-02T20:00:00.000Z
CVE-2017-5235 
Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.
Problem types: description: DLL Preloading
Affected products: vendor: Rapid7
product: Metasploit Pro
Published: 2017-03-02T20:00:00.000Z
CVE-2017-5236 
Editions of Rapid7 AppSpider Pro installers prior to version 6.14.060 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.
Problem types: description: DLL Preloading
Affected products: vendor: Rapid7
product: AppSpider Pro
Published: 2017-05-03T16:00:00.000Z
CVE-2017-5237 
Due to a lack of authentication, an unauthenticated user who knows the Eview EV-07S GPS Tracker's phone number can revert the device to a factory default configuration with an SMS command, "RESET!"
Problem types: description: Unauthenticated remote factory reset
Affected products: vendor: Eview
product: EV-07S GPS Tracker
Published: 2017-03-27T21:00:00.000Z
CVE-2017-5238 
Due to a lack of bounds checking, several input configuration fields for the Eview EV-07S GPS Tracker will overflow data stored in one variable to another, overwriting the data of another field.
Problem types: description: Lack of input bounds checking
Affected products: vendor: Eview
product: EV-07S GPS Tracker
Published: 2017-03-27T21:00:00.000Z
CVE-2017-5239 
Due to a lack of standard encryption when transmitting sensitive information over the internet to a centralized monitoring service, the Eview EV-07S GPS Tracker discloses personally identifying information, such as GPS data and IMEI numbers, to any man-in-the-middle (MitM) listener.
Problem types: description: Sensitive information transmitted in cleartext
Affected products: vendor: Eview
product: EV-07S GPS Tracker
Published: 2017-03-27T21:00:00.000Z
CVE-2017-5240 
Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow in the FLAnalyzer.exe component. A malicious or malformed Flash source file can cause a denial of service condition when parsed by this component, causing the application to crash.
Problem types: description: Heap-based buffer overflow
Affected products: vendor: Rapid7
product: AppSpider Pro
Published: 2017-05-03T16:00:00.000Z
CVE-2017-5241 
Biscom Secure File Transfer versions 5.0.0.0 trough 5.1.1024 are vulnerable to post-authentication persistent cross-site scripting (XSS) in the "Name" and "Description" fields of a Workspace, as well as the "Description" field of a File Details pane of a file stored in a Workspace. This issue has been resolved in version 5.1.1025.
Problem types: description: Persistent Cross-Site Scripting
Affected products: vendor: Biscom
product: Secure File Transfer
Published: 2017-06-28T13:00:00.000Z
CVE-2017-5242 Rapid7 Nexpose Virtual Appliance Duplicate SSH Host Key
Nexpose and InsightVM virtual appliances downloaded between April 5th, 2017 and May 3rd, 2017 contain identical SSH host keys. Normally, a unique SSH host key should be generated the first time a virtual appliance boots.
Problem types: cwe_id: CWE-321
description: CWE-321 Use of Hard-coded Cryptographic Key
Affected products: vendor: Rapid7
product: Nexpose Virtual Appliance
vendor: Rapid7
product: InsightVM Virtual Appliance
Published: 2023-01-12T00:00:00.000Z
CVE-2017-5243 
The default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does not specify desired algorithms for key exchange and other important functions. As a result, it falls back to allowing ALL algorithms supported by the relevant version of OpenSSH and makes the installations vulnerable to a range of MITM, downgrade, and decryption attacks.
Problem types: cwe_id: CWE-327
description: CWE-327 (Use of a Broken or Risky Cryptographic Algorithm)
Affected products: vendor: Rapid7
product: Nexpose hardware appliance
Published: 2017-06-06T16:00:00.000Z