rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-14077 
HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $_SERVER['HTTP_USER_AGENT'] parameter to example_form.ajax.php or example_form.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-18T01:00:00.000Z
CVE-2017-14078 
SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
Problem types: description: SQL Injection
Affected products: vendor: Trend Micro
product: Mobile Security (Enterprise)
Published: 2017-09-22T16:00:00.000Z
CVE-2017-14079 
Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
Problem types: description: File Uploads
Affected products: vendor: Trend Micro
product: Mobile Security (Enterprise)
Published: 2017-09-22T16:00:00.000Z
CVE-2017-14080 
Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows attackers to access a specific part of the console using a blank password.
Problem types: description: Authentication Bypass
Affected products: vendor: Trend Micro
product: Mobile Security (Enterprise)
Published: 2017-09-22T16:00:00.000Z
CVE-2017-14081 
Proxy command injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T16:00:00.000Z
CVE-2017-14082 
An uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security (Enterprise) versions 9.7 and below could allow an unauthenticated remote attacker to disclosure sensitive information on a vulnerable system.
Problem types: description: OTHER - Information Disclosure
Affected products: vendor: Trend Micro
product: Trend Micro Mobile Security (Enterprise)
Published: 2018-01-19T19:00:00.000Z
CVE-2017-14083 
A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeScan encryption file.
Problem types: description: Unauthorized Access Control
Affected products: vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2017-10-05T13:00:00.000Z
CVE-2017-14084 
A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable installations.
Problem types: description: Man-in-the-Middle (MitM) RCE
Affected products: vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2017-10-05T13:00:00.000Z
CVE-2017-14085 
Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to query the network's NT domain or the PHP version and modules.
Problem types: description: Information Disclosure
Affected products: vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2017-10-05T13:00:00.000Z
CVE-2017-14086 
Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potential INI corruption, which may cause the server disk space to be consumed with dump files from continuous HTTP requests.
Problem types: description: Pre-authorization Start Remote Process
Affected products: vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2017-10-05T13:00:00.000Z
CVE-2017-14087 
A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Host header, allowing the attacker to render arbitrary links that point to a malicious website with poisoned Host header webpages.
Problem types: description: Host Header Injection
Affected products: vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2017-10-05T13:00:00.000Z
CVE-2017-14088 
Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary code and escalate privileges to resources normally reserved for the kernel on vulnerable installations by exploiting tmwfp.sys. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability.
Problem types: description: Memory Corruption Privilege Escalation
Affected products: vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2017-10-05T13:00:00.000Z
CVE-2017-14089 
An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption issues.
Problem types: description: Unauthorized Memory Corruption
Affected products: vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2017-10-05T13:00:00.000Z
CVE-2017-14090 
A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update servers are not encrypted.
Problem types: description: OTHER - Insecure Communication
Affected products: vendor: Trend Micro
product: Trend Micro ScanMail for Exchange
Published: 2017-12-15T14:00:00.000Z
CVE-2017-14091 
A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which certain specific installations that utilize a uncommon feature - Other Update Sources - could be exploited to overwrite sensitive files in the ScanMail for Exchange directory.
Problem types: description: Insecure Permissions
Affected products: vendor: Trend Micro
product: Trend Micro ScanMail for Exchange
Published: 2017-12-15T14:00:00.000Z
CVE-2017-14092 
The absence of Anti-CSRF tokens in Trend Micro ScanMail for Exchange 12.0 web interface forms could allow an attacker to submit authenticated requests when an authenticated user browses an attacker-controlled domain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-15T14:00:00.000Z
CVE-2017-14093 
The Log Query and Quarantine Query pages in Trend Micro ScanMail for Exchange 12.0 are vulnerable to cross site scripting (XSS) attacks.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Trend Micro
product: Trend Micro ScanMail for Exchange
Published: 2017-12-15T14:00:00.000Z
CVE-2017-14094 
A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system.
Problem types: cwe_id: CWE-78
description: OTHER - Improper Neutralization of Special Elements used in an OS Command (CWE-78)
Affected products: vendor: Trend Micro
product: Trend Micro Smart Protection Server (Standalone)
Published: 2018-01-19T19:00:00.000Z
CVE-2017-14095 
A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command execution via a local file inclusion on a vulnerable system.
Problem types: cwe_id: CWE-98
description: OTHER - Improper Control of Filename for Include/Require Statement in PHP Program (CWE-98)
Affected products: vendor: Trend Micro
product: Trend Micro Smart Protection Server (Standalone)
Published: 2018-01-19T19:00:00.000Z
CVE-2017-14096 
A stored cross site scripting (XSS) vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Trend Micro
product: Trend Micro Smart Protection Server (Standalone)
Published: 2018-01-19T19:00:00.000Z
CVE-2017-14097 
An improper access control vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access a vulnerable system.
Problem types: description: Incorrect Access Control
Affected products: vendor: Trend Micro
product: Trend Micro Smart Protection Server (Standalone)
Published: 2018-01-19T19:00:00.000Z
CVE-2017-14098 
In the pjsip channel driver (res_pjsip) in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a carefully crafted tel URI in a From, To, or Contact header could cause Asterisk to crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-02T16:00:00.000Z
CVE-2017-14099 
In res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5, unauthorized data disclosure (media takeover in the RTP stack) is possible with careful timing by an attacker. The "strictrtp" option in rtp.conf enables a feature of the RTP stack that learns the source address of media for a session and drops any packets that do not originate from the expected address. This option is enabled by default in Asterisk 11 and above. The "nat" and "rtp_symmetric" options (for chan_sip and chan_pjsip, respectively) enable symmetric RTP support in the RTP stack. This uses the source address of incoming media as the target address of any sent media. This option is not enabled by default, but is commonly enabled to handle devices behind NAT. A change was made to the strict RTP support in the RTP stack to better tolerate late media when a reinvite occurs. When combined with the symmetric RTP support, this introduced an avenue where media could be hijacked. Instead of only learning a new address when expected, the new code allowed a new source address to be learned at all times. If a flood of RTP traffic was received, the strict RTP support would allow the new address to provide media, and (with symmetric RTP enabled) outgoing traffic would be sent to this new address, allowing the media to be hijacked. Provided the attacker continued to send traffic, they would continue to receive traffic as well.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-02T16:00:00.000Z
CVE-2017-14100 
In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5, unauthorized command execution is possible. The app_minivm module has an "externnotify" program configuration option that is executed by the MinivmNotify dialplan application. The application uses the caller-id name and number as part of a built string passed to the OS shell for interpretation and execution. Since the caller-id name and number can come from an untrusted source, a crafted caller-id name or number allows an arbitrary shell command injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-02T16:00:00.000Z
CVE-2017-14101 
A security researcher found an XML External Entity (XXE) vulnerability on the Conserus Image Repository archive solution version 2.1.1.105 by McKesson Medical Imaging Company, which is now a Change Healthcare company. An unauthenticated user supplying a modified HTTP SOAP request to the vulnerable service allows for arbitrary file read access to the local file system as well as the transmittal of the application service's account hashed credentials to a remote attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-15T18:00:00.000Z
CVE-2017-14102 
MIMEDefang 2.80 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat /pathname`" command, as demonstrated by the init-script.in and mimedefang-init.in scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-01T05:00:00.000Z
CVE-2017-14103 
The ReadJNGImage and ReadOneJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 do not properly manage image pointers after certain error conditions, which allows remote attackers to conduct use-after-free attacks via a crafted file, related to a ReadMNGImage out-of-order CloseBlob call. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-11403.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-01T13:00:00.000Z
CVE-2017-14105 
HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker - even restricted as a tenant - can add a jsp at HiveManager/tomcat/webapps/hm/domains/$yourtenant/maps (it will be exposed at the web interface).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-01T17:00:00.000Z
CVE-2017-14106 
The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service (__tcp_select_window divide-by-zero error and system crash) by triggering a disconnect within a certain tcp_recvmsg code path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-01T16:00:00.000Z
CVE-2017-14107 
The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-01T17:00:00.000Z
CVE-2017-14108 
libgedit.a in GNOME gedit through 3.22.1 allows remote attackers to cause a denial of service (CPU consumption) via a file that begins with many '\0' characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-05T06:00:00.000Z
CVE-2017-14111 
The workstation logging function in Philips IntelliSpace Cardiovascular (ISCV) 2.3.0 and earlier and Xcelera R4.1L1 and earlier records domain authentication credentials, which if accessed allows an attacker to use credentials to access the application, or other user entitlements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-17T20:00:00.000Z
CVE-2017-14114 
RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining the IP address and port number of the legitimate recipient of RTP traffic, which allows remote attackers to obtain sensitive information or cause a denial of service (communication outage) via crafted RTP packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-02T16:00:00.000Z
CVE-2017-14115 
The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures ssh-permanent-enable WAN SSH logins to the remotessh account with the 5SaP9I26 password, which allows remote attackers to access a "Terminal shell v1.0" service, and subsequently obtain unrestricted root privileges, by establishing an SSH session and then entering certain shell metacharacters and BusyBox commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-03T19:00:00.000Z
CVE-2017-14116 
The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not used, configures WAN access to a caserver https service with the tech account and an empty password, which allows remote attackers to obtain root privileges by establishing a session on port 49955 and then installing new software, such as BusyBox with "nc -l" support.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-03T19:00:00.000Z
CVE-2017-14117 
The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port 49152, which allows remote attackers to establish arbitrary TCP connections to intranet hosts by sending \x2a\xce\x01 followed by other predictable values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-03T19:00:00.000Z
CVE-2017-14118 
In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in the host_list parameter to module/tool_all/select_tool.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-03T20:00:00.000Z
CVE-2017-14119 
In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\snmpwalk.php does not properly restrict popen calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in a parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-03T20:00:00.000Z
CVE-2017-14120 
unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a directory traversal vulnerability for RAR v2 archives: pathnames of the form ../[filename] are unpacked into the upper directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-03T20:00:00.000Z
CVE-2017-14121 
The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a NULL pointer dereference flaw triggered by a crafted RAR archive. NOTE: this may be the same as one of the several test cases in the CVE-2017-11189 references.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-03T20:00:00.000Z
CVE-2017-14122 
unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib.c, related to ExtrFile and stricomp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-03T20:00:00.000Z
CVE-2017-14123 
Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. Any user can upload files with any extensions. By uploading a PHP file to the server, an attacker can cause it to execute in the server context, as demonstrated by /itplus/FileStorage/302/shell.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-04T20:00:00.000Z
CVE-2017-14124 
In eLux RP 5.x before 5.5.1000 LTSR and 5.6.x before 5.6.2 CR when classic desktop mode is used, it is possible to start applications other than defined, even if the user does not have permissions to change application definitions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-13T16:00:00.000Z
CVE-2017-14125 
SQL injection vulnerability in the Responsive Image Gallery plugin before 1.2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the "id" parameter in an add_edit_theme task in the wpdevart_gallery_themes page to wp-admin/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-25T17:00:00.000Z
CVE-2017-14126 
The Participants Database plugin before 1.7.5.10 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-04T20:00:00.000Z
CVE-2017-14127 
Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OI_Fw_v7 devices allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the pingAddr parameter to mnt_ping.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-04T20:00:00.000Z
CVE-2017-14128 
The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (read_1_byte heap-based buffer over-read and application crash) via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-04T20:00:00.000Z
CVE-2017-14129 
The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (parse_comp_unit heap-based buffer over-read and application crash) via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-04T20:00:00.000Z
CVE-2017-14130 
The _bfd_elf_parse_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (_bfd_elf_attr_strdup heap-based buffer over-read and application crash) via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-04T20:00:00.000Z
CVE-2017-14132 
JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jas_image_ishomosamp function in libjasper/base/jas_image.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-04T20:00:00.000Z
CVE-2017-14134 
A Reflected XSS Vulnerability affects the forgotten password page of Maplesoft Maple T.A. 2016.0.6 (Customer Hosted) via the emailAddress parameter to passwordreset/PasswordReset.do, aka Open Bug Bounty ID OBB-286688.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-16T19:00:00.000Z
CVE-2017-14135 
enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py in the webadmin plugin for opendreambox 2.0.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-04T23:00:00.000Z
CVE-2017-14136 
OpenCV (Open Source Computer Vision Library) 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12597.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-04T23:00:00.000Z
CVE-2017-14137 
ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-04T23:00:00.000Z
CVE-2017-14138 
ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-04T23:00:00.000Z
CVE-2017-14139 
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-04T23:00:00.000Z
CVE-2017-14140 
The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective uid of the target process, enabling a local attacker to learn the memory layout of a setuid executable despite ASLR.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-05T06:00:00.000Z