rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-5607 
Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3 and Splunk Light before 6.5.2 assigns the $C JS property to the global Window namespace, which might allow remote attackers to obtain sensitive logged-in username and version-related information via a crafted webpage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-10T15:00:00.000Z
CVE-2017-5608 
Cross-site scripting (XSS) vulnerability in the image upload function in Piwigo before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via a crafted image filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T18:00:00.000Z
CVE-2017-5609 
SQL injection vulnerability in include/functions_entries.inc.php in Serendipity 2.0.5 allows remote authenticated users to execute arbitrary SQL commands via the cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T18:00:00.000Z
CVE-2017-5610 
wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface, which allows remote attackers to bypass intended access restrictions by reading terms.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2017-5611 
SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the presence of an affected plugin or theme that mishandles a crafted post type name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2017-5612 
Cross-site scripting (XSS) vulnerability in wp-admin/includes/class-wp-posts-list-table.php in the posts list table in WordPress before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via a crafted excerpt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2017-5613 
Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string specifiers in a template file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2017-5614 
Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the (1) success or (2) failure parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2017-5615 
cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2017-5616 
Cross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers to inject arbitrary web script or HTML via the addendum parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T15:00:00.000Z
CVE-2017-5617 
The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-16T15:00:00.000Z
CVE-2017-5618 
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-20T16:00:00.000Z
CVE-2017-5619 
An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attackers can login with the hashed password itself (e.g., from the DB) instead of the valid password string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-13T06:14:00.000Z
CVE-2017-5620 
An XSS issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attachments are opened in a new tab instead of getting downloaded. This creates an attack vector of executing code in the domain of the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-13T06:14:00.000Z
CVE-2017-5621 
An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. XSS can be triggered via malicious HTML in a chat message or the content of a ticket article, when using either the REST API or the WebSocket API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-13T06:14:00.000Z
CVE-2017-5622 
With OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T device, the platform starts with adbd enabled. Therefore, a malicious charger or a physical attacker can open up, without authorization, an ADB session with the device, in order to further exploit other vulnerabilities and/or exfiltrate sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-26T20:00:00.000Z
CVE-2017-5623 
An issue was discovered in OxygenOS before 4.1.0 on OnePlus 3 and 3T devices. The attacker can change the bootmode of the device by issuing the 'fastboot oem boot_mode {rf/wlan/ftm/normal} command' in contradiction to the threat model of Android where the bootloader MUST NOT allow any security-sensitive operation to be run unless the bootloader is unlocked.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-19T20:00:00.000Z
CVE-2017-5624 
An issue was discovered in OxygenOS before 4.0.3 for OnePlus 3 and 3T. The attacker can persistently make the (locked) bootloader start the platform with dm-verity disabled, by issuing the 'fastboot oem disable_dm_verity' command. Having dm-verity disabled, the kernel will not verify the system partition (and any other dm-verity protected partition), which may allow for persistent code execution and privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-12T04:57:00.000Z
CVE-2017-5625 
In OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause a locked bootloader to partially dump the ciphertext content of an arbitrary partition (except 'keystore') by issuing the 'fastboot oem dump <partition>' fastboot command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-25T16:00:00.000Z
CVE-2017-5626 
OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that allow the attacker to lock/unlock the bootloader, disregarding the 'OEM Unlocking' checkbox, without user confirmation and without a factory reset. This allows for persistent code execution with high privileges (kernel/root) with complete access to user data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-12T04:57:00.000Z
CVE-2017-5627 
An issue was discovered in Artifex Software, Inc. MuJS before 4006739a28367c708dea19aeb19b8a1a9326ce08. The jsR_setproperty function in jsrun.c lacks a check for a negative array length. This leads to an integer overflow in the js_pushstring function in jsrun.c when parsing a specially crafted JS file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2017-5628 
An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow when parsing a specially crafted JS file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2017-5630 
PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-01T23:00:00.000Z
CVE-2017-5631 
An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter (i.e., "usr") that is transmitted in the login.php query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-01T14:00:00.000Z
CVE-2017-5632 
An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374_979. When executing an "nmap -O" command that specifies an IP address of an affected device, one can crash the device's WAN connection, causing disconnection from the Internet, a Denial of Service (DoS). The attack is only possible from within the local area network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T04:24:00.000Z
CVE-2017-5633 
Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow remote attackers to (1) change the admin password, (2) reboot the device, or (3) possibly have unspecified other impact via crafted requests to CGI programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-06T06:11:00.000Z
CVE-2017-5634 
The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to manipulate the print dialog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T16:00:00.000Z
CVE-2017-5635 
In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, if an anonymous user request is replicated to another node, the originating node identity is used rather than the "anonymous" user.
Problem types: description: Unauthorized Access
Affected products: vendor: Apache Software Foundation
product: Apache NiFi
Published: 2017-10-19T20:00:00.000Z
CVE-2017-5636 
In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to an injection attack where a carefully crafted username could impersonate another user and gain their permissions on a replicated request to another node.
Problem types: description: Escalation of Privilege
Affected products: vendor: Apache Software Foundation
product: Apache NiFi
Published: 2017-10-19T20:00:00.000Z
CVE-2017-5637 
Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests. Apache ZooKeeper thru version 3.4.9 and 3.5.2 suffer from this issue, fixed in 3.4.10, 3.5.3, and later.
Problem types: description: DOS
Affected products: vendor: Apache Software Foundation
product: Apache ZooKeeper
Published: 2017-10-10T01:00:00.000Z
CVE-2017-5638 
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string.
Problem types: description: n/a
Affected products: vendor: Apache Software Foundation
product: Apache Struts
Published: 2017-03-11T02:11:00.000Z
CVE-2017-5640 
It was noticed that a malicious process impersonating an Impala daemon in Apache Impala (incubating) 2.7.0 to 2.8.0 could cause Impala daemons to skip authentication checks when Kerberos is enabled (but TLS is not). If the malicious server responds with 'COMPLETE' before the SASL handshake has completed, the client will consider the handshake as completed even though no exchange of credentials has happened.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Impala
Published: 2017-07-10T20:00:00.000Z
CVE-2017-5641 
Previous versions of Apache Flex BlazeDS (4.7.2 and earlier) did not restrict which types were allowed for AMF(X) object deserialization by default. During the deserialization process code is executed that for several known types has undesired side-effects. Other, unknown types may also exhibit such behaviors. One vector in the Java standard library exists that allows an attacker to trigger possibly further exploitable Java deserialization of untrusted data. Other known vectors in third party libraries can be used to trigger remote code execution.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Flex Blaze DS
Published: 2017-12-28T15:00:00.000Z
CVE-2017-5642 
During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with proper ACLs.
Problem types: description: unprotected file permissions
Affected products: vendor: Apache Software Foundation
product: Apache Ambari
Published: 2017-04-03T16:00:00.000Z
CVE-2017-5643 
Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.
Problem types: description: SSRF
Affected products: vendor: Apache Software Foundation
product: Apache Camel
Published: 2017-03-16T15:00:00.000Z
CVE-2017-5644 
Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an XML Entity Expansion (XEE) attack.
Problem types: description: XXE
Affected products: vendor: Apache Software Foundation
product: Apache POI
Published: 2017-03-24T14:00:00.000Z
CVE-2017-5645 
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
Problem types: description: Remote Code Execution.
Affected products: vendor: Apache Software Foundation
product: Apache Log4j
Published: 2017-04-17T21:00:00.000Z
CVE-2017-5646 
For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this activity is audit logged and can be easily associated with the authenticated user, this is still a serious security issue. All users are recommended to upgrade to the Apache Knox 0.12.0 release.
Problem types: description: Escalated Privileges and Data Access
Affected products: vendor: Apache Software Foundation
product: Apache Knox
Published: 2017-05-26T21:00:00.000Z
CVE-2017-5647 
A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined request being lost when send file processing of the previous request completed. This could result in responses appearing to be sent for the wrong request. For example, a user agent that sent requests A, B and C could see the correct response for request A, the response for request C for request B and no response for request C.
Problem types: description: unspecified
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2017-04-17T16:00:00.000Z
CVE-2017-5648 
While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use the appropriate facade object. When running an untrusted application under a SecurityManager, it was therefore possible for that untrusted application to retain a reference to the request or response object and thereby access and/or modify information associated with another web application.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2017-04-17T16:00:00.000Z
CVE-2017-5649 
Apache Geode before 1.1.1, when a cluster has enabled security by setting the security-manager property, allows remote authenticated users with CLUSTER:READ but not DATA:READ permission to access the data browser page in Pulse and consequently execute an OQL query that exposes data stored in the cluster.
Problem types: description: improper access control
Affected products: vendor: Apache Software Foundation
product: Apache Geode
Published: 2017-04-04T18:00:00.000Z
CVE-2017-5650 
In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection that were currently waiting for a WINDOW_UPDATE before allowing the application to write more data. These waiting streams each consumed a thread. A malicious client could therefore construct a series of HTTP/2 requests that would consume all available processing threads.
Problem types: description: Denial of Service
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2017-04-17T16:00:00.000Z
CVE-2017-5651 
In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could result in the same Processor being used for multiple requests which in turn could lead to unexpected errors and/or response mix-up.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2017-04-17T16:00:00.000Z
CVE-2017-5652 
During a routine security analysis, it was found that one of the ports in Apache Impala (incubating) 2.7.0 to 2.8.0 sent data in plaintext even when the cluster was configured to use TLS. The port in question was used by the StatestoreSubscriber class which did not use the appropriate secure Thrift transport when TLS was turned on. It was therefore possible for an adversary, with access to the network, to eavesdrop on the packets going to and coming from that port and view the data in plaintext.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Impala
Published: 2017-07-10T20:00:00.000Z
CVE-2017-5653 
JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers.
Problem types: description: XML Security streaming clients do not validate that the service response was secured.
Affected products: vendor: Apache Software Foundation
product: Apache CXF
Published: 2017-04-18T16:00:00.000Z
CVE-2017-5654 
In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes.
Problem types: description: XML injection
Affected products: vendor: Apache Software Foundation
product: Apache Ambari
Published: 2017-05-12T21:00:00.000Z
CVE-2017-5655 
In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host.
Problem types: description: exposure of sensitive data
Affected products: vendor: Apache Software Foundation
product: Apache Ambari
Published: 2017-05-15T14:00:00.000Z
CVE-2017-5656 
Apache CXF's STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with delegation tokens, which means that an attacker could craft a token which would return an identifer corresponding to a cached token for another user.
Problem types: description: Apache CXF's STSClient uses a flawed way of caching tokens that are associated with delegation tokens.
Affected products: vendor: Apache Software Foundation
product: Apache CXF
Published: 2017-04-18T16:00:00.000Z
CVE-2017-5657 
Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery (CSRF) attacks. A malicious site opened in the same browser as the archiva site, may send an HTML response that performs arbitrary actions on archiva services, with the same rights as the active archiva session (e.g. administrator rights).
Problem types: description: Apache Archiva CSRF vulnerabilities for various REST endpoints
Affected products: vendor: Apache Software Foundation
product: Apache Archiva
Published: 2017-05-22T18:00:00.000Z
CVE-2017-5658 
The statistics generator in Apache Pony Mail 0.7 to 0.9 was found to be returning timestamp data without proper authorization checks. This could lead to derived information disclosure on private lists about the timing of specific email subjects or text bodies, though without disclosing the content itself. As this was primarily used as a caching feature for faster loading times, the caching was disabled by default to prevent this. Users using 0.9 should upgrade to 0.10 to address this issue.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Pony Mail
Published: 2018-10-04T14:00:00.000Z
CVE-2017-5659 
Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding.
Problem types: description: DoS attack
Affected products: vendor: Apache Software Foundation
product: Apache Traffic Server
Published: 2017-04-17T18:00:00.000Z
CVE-2017-5660 
There is a vulnerability in Apache Traffic Server (ATS) 6.2.0 and prior and 7.0.0 and prior with the Host header and line folding. This can have issues when interacting with upstream proxies and the wrong host being used.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Traffic Server
Published: 2018-02-27T20:00:00.000Z
CVE-2017-5661 
In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application is running. If the user is root a full compromise of the server - including confidential or sensitive files - would be possible. XXE can also be used to attack the availability of the server via denial of service as the references within a xml document can trivially trigger an amplification attack.
Problem types: description: XXE
Affected products: vendor: Apache Software Foundation
product: Apache FOP
Published: 2017-04-18T14:00:00.000Z
CVE-2017-5662 
In Apache Batik before 1.9, files lying on the filesystem of the server which uses batik can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application is running. If the user is root a full compromise of the server - including confidential or sensitive files - would be possible. XXE can also be used to attack the availability of the server via denial of service as the references within a xml document can trivially trigger an amplification attack.
Problem types: description: XXE
Affected products: vendor: Apache Software Foundation
product: Apache Batik
Published: 2017-04-18T14:00:00.000Z