rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-7135 
A potential security vulnerability has been identified in the disk drive firmware installers named Supplemental Update / Online ROM Flash Component on HPE servers running Linux. The vulnerable software is included in the HPE Service Pack for ProLiant (SPP) releases 2018.06.0, 2018.09.0, and 2018.11.0. The vulnerable software is the Supplemental Update / Online ROM Flash Component for Linux (x64) software. The installer in this software component could be locally exploited to execute arbitrary code. Drive Models can be found in the Vulnerability Resolution field of the security bulletin. The 2019_03 SPP and Supplemental update / Online ROM Flash Component for Linux (x64) after 2019.03.0 has fixed this issue.
Problem types: description: local execution of arbitrary code with privilege elevation
Affected products: vendor: HPE
product: HPE Service Pack for ProLiant
vendor: HPE
product: HPE Server Solid State Drives
vendor: HPE
product: HPE Server SAS Hard Drives
vendor: HPE
product: HPE Server SATA Hard Drives
vendor: HPE
product: HPE SATA Read Intensive Solid State Drives
vendor: HPE
product: HPE NVMe Mixed Use Solid State Drives
vendor: HPE
product: HPE Business Critical Hard Drives
vendor: HPE
product: HPE Server Enterprise Hard Drives
Published: 2020-04-27T14:16:32.000Z
CVE-2020-7136 
A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access. Hewlett Packard Enterprise has provided a software update to resolve this vulnerability in HPE Smart Update Manager (SUM) prior to 8.5.6. Please visit the HPE Support Center at https://support.hpe.com/hpesc/public/home to download the latest version of HPE Smart Update Manager (SUM). Download the latest version of HPE Smart Update Manager (SUM) or download the latest Service Pack For ProLiant (SPP).
Problem types: description: remote denial of service (dos); remote unauthorized access
Affected products: vendor: Hewlett Packard Enterprise
product: Smart Update Manager (SUM)
Published: 2020-04-30T19:17:53.000Z
CVE-2020-7137 
A validation issue in HPE Superdome Flex's RMC component may allow local elevation of privilege. Apply HPE Superdome Flex Server version 3.25.46 or later to resolve this issue.
Problem types: description: local elevation of privilege
Affected products: vendor: n/a
product: HPE Superdome Flex Server
Published: 2020-05-19T22:04:12.000Z
CVE-2020-7138 
Potential remote code execution security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3.9.3.0 4.5.6.0 5.0.9.0 5.1.4.100
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All Flash Arrays; Nimble Storage Secondary Flash Arrays
Published: 2020-05-19T22:11:33.000Z
CVE-2020-7139 
Potential remote access security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to access and modify sensitive information on the system. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3.9.3.0 4.5.6.0 5.0.9.0 5.1.4.100
Problem types: description: remote unauthorized access to sensitive information
Affected products: vendor: n/a
product: HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All Flash Arrays; Nimble Storage Secondary Flash Arrays
Published: 2020-05-19T22:07:42.000Z
CVE-2020-7140 
A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be exploited remotely to cause a remote cross-site scripting (XSS). HPE has provided the following information to resolve this vulnerability in HPE IceWall SSO DFW and Dgfw: https://www.hpe.com/jp/icewall_patchaccess
Problem types: description: remote cross-site scripting (xss)
Affected products: vendor: n/a
product: IceWall SSO Dfw; IceWall SSO Dgfw
Published: 2020-07-08T13:39:13.000Z
CVE-2020-7141 
A adddevicetoview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: adddevicetoview expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:36:39.000Z
CVE-2020-7142 
A eventinfo_content expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: eventinfo_content expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:36:49.000Z
CVE-2020-7143 
A faultdevparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: faultdevparasset expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:36:56.000Z
CVE-2020-7144 
A comparefilesresult expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: comparefilesresult expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:37:10.000Z
CVE-2020-7145 
A chooseperfview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: chooseperfview expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:37:16.000Z
CVE-2020-7146 
A devgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: devgroupselect expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:37:32.000Z
CVE-2020-7147 
A deployselectbootrom expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: deployselectbootrom expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:37:42.000Z
CVE-2020-7148 
A deployselectsoftware expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: deployselectsoftware expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:37:48.000Z
CVE-2020-7149 
A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: ictexpertcsvdownload expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:37:54.000Z
CVE-2020-7150 
A faultstatchoosefaulttype expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: faultstatchoosefaulttype expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:38:01.000Z
CVE-2020-7151 
A faulttrapgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: faulttrapgroupselect expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:38:07.000Z
CVE-2020-7152 
A faultparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: faultparasset expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:38:15.000Z
CVE-2020-7153 
A iccselectdevtype expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: iccselectdevtype expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:38:21.000Z
CVE-2020-7154 
A ifviewselectpage expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: ifviewselectpage expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:38:27.000Z
CVE-2020-7155 
A select expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: select expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:38:35.000Z
CVE-2020-7156 
A faultinfo_content expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: faultinfo_content expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:38:40.000Z
CVE-2020-7157 
A selviewnavcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: selviewnavcontent expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:38:46.000Z
CVE-2020-7158 
A perfselecttask expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: perfselecttask expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:38:53.000Z
CVE-2020-7159 
A customtemplateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: customtemplateselect expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:39:02.000Z
CVE-2020-7160 
A iccselectdeviceseries expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: iccselectdeviceseries expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:39:08.000Z
CVE-2020-7161 
A reporttaskselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: reporttaskselect expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:39:15.000Z
CVE-2020-7162 
A operatorgroupselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: operatorgroupselectcontent expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:39:21.000Z
CVE-2020-7163 
A navigationto expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: navigationto expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:39:28.000Z
CVE-2020-7164 
A operationselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: operationselect expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:42:37.000Z
CVE-2020-7165 
A iccselectcommand expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: iccselectcommand expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:42:45.000Z
CVE-2020-7166 
A operatorgrouptreeselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: operatorgrouptreeselectcontent expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:42:51.000Z
CVE-2020-7167 
A quicktemplateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: quicktemplateselect expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:42:57.000Z
CVE-2020-7168 
A selectusergroup expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: selectusergroup expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:43:03.000Z
CVE-2020-7169 
A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: ictexpertcsvdownload expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:43:11.000Z
CVE-2020-7170 
A select expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: select expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:43:27.000Z
CVE-2020-7171 
A guidatadetail expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: guidatadetail expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:43:35.000Z
CVE-2020-7172 
A templateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: templateselect expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:43:41.000Z
CVE-2020-7173 
A actionselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: actionselectcontent expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:43:48.000Z
CVE-2020-7174 
A soapconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: soapconfigcontent expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:43:55.000Z
CVE-2020-7175 
A iccselectdymicparam expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: iccselectdymicparam expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:44:15.000Z
CVE-2020-7176 
A viewtaskresultdetailfact expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: viewtaskresultdetailfact expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:44:23.000Z
CVE-2020-7177 
A wmiconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: wmiconfigcontent expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:44:28.000Z
CVE-2020-7178 
A mediaforaction expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: mediaforaction expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:44:35.000Z
CVE-2020-7179 
A thirdpartyperfselecttask expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: thirdpartyperfselecttask expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:44:51.000Z
CVE-2020-7180 
A ictexpertdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: ictexpertdownload expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:44:58.000Z
CVE-2020-7181 
A smsrulesdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: smsrulesdownload expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:45:05.000Z
CVE-2020-7182 
A sshconfig expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: sshconfig expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:45:12.000Z
CVE-2020-7183 
A forwardredirect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: forwardredirect expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:45:24.000Z
CVE-2020-7184 
A viewbatchtaskresultdetailfact expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: viewbatchtaskresultdetailfact expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:45:31.000Z
CVE-2020-7185 
A tvxlanlegend expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: tvxlanlegend expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:45:38.000Z
CVE-2020-7186 
A powershellconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: powershellconfigcontent expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:45:54.000Z
CVE-2020-7187 
A reportpage index expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: reportpage index expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:46:04.000Z
CVE-2020-7188 
A userselectpagingcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: userselectpagingcontent expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:46:11.000Z