Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-3691 State: PUBLISHED Published: 2018-06-05T21:00:00Z Last Updated: 2024-09-16T20:01:38.691Z Vendors: Intel Corporation Products: Integrated Performance Primitives Cryptography Library Problem Types: Information Disclosure Description: Some implementations in Intel Integrated Performance Primitives Cryptography Library before version 2018 U3.1 do not properly ensure constant execution time. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00106.html
CVE ID: CVE-2018-3692 State: REJECTED Published: N/A Last Updated: 2023-03-03T00:00:00 Description: No description available.
CVE ID: CVE-2018-3693 State: PUBLISHED Published: 2018-07-10T21:00:00 Last Updated: 2024-08-05T04:50:30.557Z Vendors: Intel Corporation Products: Most Modern Operating Systems Problem Types: Information Disclosure Description: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2390 - https://access.redhat.com/errata/RHSA-2018:2395 - https://access.redhat.com/errata/RHSA-2018:2384 - https://access.redhat.com/e
/access.redhat.com/errata/RHSA-2018:2395 - https://access.redhat.com/errata/RHSA-2018:2384 - https://access.redhat.com/errata/RHSA-2019:1946 - https://access.redhat.com/errata/RHSA-2020:0174 - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 - https://security.netapp.com/advisory/ntap-20180823-0001/ - https://www.oracle.com/security-alerts/cpuoct2020.html - https://cdrdv2.intel.com/v1/dl/getContent/685359
CVE ID: CVE-2018-3694 State: REJECTED Published: N/A Last Updated: 2023-03-03T00:00:00 Description: No description available.
CVE ID: CVE-2018-3695 State: REJECTED Published: N/A Last Updated: 2023-03-03T00:00:00 Description: No description available.
CVE ID: CVE-2018-3696 State: PUBLISHED Published: 2018-11-14T14:00:00 Last Updated: 2024-08-05T04:50:30.510Z Vendors: Intel Corporation Products: Intel RAID Web Console v3 for Windows Problem Types: Information Disclosure Description: Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106028 - https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00196.html
CVE ID: CVE-2018-3697 State: PUBLISHED Published: 2018-11-14T14:00:00 Last Updated: 2024-08-05T04:50:30.495Z Vendors: Intel Corporation Products: Intel Media Server Studio Problem Types: Escalation of Privilege Description: Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00197.html - http://www.securityfocus.com/bid/106025
CVE ID: CVE-2018-3698 State: PUBLISHED Published: 2018-11-14T14:00:00 Last Updated: 2024-08-05T04:50:30.449Z Vendors: Intel Corporation Products: Intel Ready Mode Technology Problem Types: Escalation of Privilege Description: Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged access via local access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105995 - https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00198.html
CVE ID: CVE-2018-3699 State: PUBLISHED Published: 2018-11-14T14:00:00 Last Updated: 2024-08-05T04:50:30.227Z Vendors: Intel Corporation Products: Intel RAID Web Console v3 Problem Types: Escalation of Privilege Description: Cross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated user to elevate privilege via remote access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00199.html - http://www.securityfocus.com/bid/105992
CVE ID: CVE-2018-3700 State: PUBLISHED Published: 2019-02-18T17:00:00Z Last Updated: 2024-09-16T22:35:13.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code injection vulnerability in the installer for Intel(R) USB 3.0 eXtensible Host Controller Driver for Microsoft Windows 7 before version 5.0.4.43v2 may allow a user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107073 - https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00200.html
CVE ID: CVE-2018-3701 State: PUBLISHED Published: 2019-05-17T15:41:38 Last Updated: 2024-08-05T04:50:30.443Z Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi Software Advisory Problem Types: Escalation of Privilege Description: Improper directory permissions in the installer for Intel(R) PROSet/Wireless WiFi Software version 20.100 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00204.html - https://support.f5.com/csp/article/K00245734 - http://www.securityfocus.com/bid/108387 - https://suppo
L-SA-00204.html - https://support.f5.com/csp/article/K00245734 - http://www.securityfocus.com/bid/108387 - https://support.lenovo.com/us/en/product_security/LEN-27701
CVE ID: CVE-2018-3702 State: PUBLISHED Published: 2019-06-13T15:36:24 Last Updated: 2024-08-05T04:50:30.437Z Vendors: n/a Products: ITE Tech Consumer Infrared Driver for Windows 10 Advisory Problem Types: Escalation of Privilege Description: Improper permissions in the installer for the ITE Tech* Consumer Infrared Driver for Windows 10 versions before 5.4.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00206.html - http://www.securityfocus.com/bid/108782
CVE ID: CVE-2018-3703 State: PUBLISHED Published: 2019-01-10T20:00:00Z Last Updated: 2024-09-16T16:28:06.609Z Vendors: Intel Corporation Products: Intel(R) SSD Data Center Tool for Windows Problem Types: Escalation of Privilege Description: Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00207.html
CVE ID: CVE-2018-3704 State: PUBLISHED Published: 2018-12-13T23:00:00 Last Updated: 2024-08-05T04:50:30.541Z Vendors: Intel Corporation Products: Intel Parallel Studio Problem Types: Escalation of Privilege Description: Improper directory permissions in the installer for the Intel Parallel Studio before 2019 Gold may allow authenticated users to potentially enable an escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00208.html
CVE ID: CVE-2018-3705 State: PUBLISHED Published: 2018-12-13T23:00:00 Last Updated: 2024-08-05T04:50:30.483Z Vendors: Intel Corporation Products: Intel System Defense Utility Problem Types: Escalation of Privilege Description: Improper directory permissions in the installer for the Intel(R) System Defense Utility (all versions) may allow authenticated users to potentially enable a denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00209.html
CVE ID: CVE-2018-3706 State: REJECTED Published: N/A Last Updated: 2023-03-03T00:00:00 Description: No description available.
CVE ID: CVE-2018-3707 State: REJECTED Published: N/A Last Updated: 2023-03-03T00:00:00 Description: No description available.
CVE ID: CVE-2018-3708 State: REJECTED Published: N/A Last Updated: 2023-03-03T00:00:00 Description: No description available.
CVE ID: CVE-2018-3709 State: REJECTED Published: N/A Last Updated: 2023-03-03T00:00:00 Description: No description available.
CVE ID: CVE-2018-3710 State: PUBLISHED Published: 2018-03-21T20:00:00 Last Updated: 2024-08-05T04:50:30.417Z Vendors: GitLab Products: GitLab Community and Enterprise Editions Problem Types: CWE-377 Description: Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-com/infrastructure/issues/3510 - https://www.debian.org/security/2018/dsa-4145 - https://hackerone.com/reports/302959 - https://gitlab.com/gitlab-org/gitlab-ce/issues/41757 - https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4
02959 - https://gitlab.com/gitlab-org/gitlab-ce/issues/41757 - https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/
CVE ID: CVE-2018-3711 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T18:24:04.599Z Vendors: HackerOne Products: fastify node module Problem Types: CWE-770 Description: Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" and a very large payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fastify/fastify/pull/627 - https://hackerone.com/reports/303632
CVE ID: CVE-2018-3712 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T00:05:56.311Z Vendors: HackerOne Products: serve node module Problem Types: CWE-22 Description: serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and allowing them in paths, which allows a malicious user to view the contents of any directory with known path. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zeit/serve/pull/316 - https://hackerone.com/reports/307666
CVE ID: CVE-2018-3713 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T03:53:09.024Z Vendors: HackerOne Products: angular-http-server node module Problem Types: CWE-22 Description: angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a malicious user to read content of any file with known path. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/309120
CVE ID: CVE-2018-3714 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T00:51:50.998Z Vendors: HackerOne Products: node-srv node module Problem Types: CWE-22 Description: node-srv node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malicious user to read content of any file with known path. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/309124
CVE ID: CVE-2018-3715 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T04:08:49.420Z Vendors: HackerOne Products: glance node module Problem Types: CWE-22 Description: glance node module before 3.0.4 suffers from a Path Traversal vulnerability due to lack of validation of path passed to it, which allows a malicious user to read content of any file with known path. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/310106 - https://github.com/jarofghosts/glance/commit/8cfd88e44ebd3f07e3a2eaf376a3e758b6c4ca19
CVE ID: CVE-2018-3716 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T02:53:14.084Z Vendors: HackerOne Products: simplehttpserver node module Problem Types: CWE-79 Description: simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/309648
CVE ID: CVE-2018-3717 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T16:52:59.797Z Vendors: HackerOne Products: connect node module Problem Types: CWE-79 Description: connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/senchalabs/connect/commit/6d5dd30075d2bc4ee97afdbbe3d9d98d8d52d74b - https://hackerone.com/reports/309641 - https://hackerone.com/reports/309394
CVE ID: CVE-2018-3718 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T20:36:21.693Z Vendors: HackerOne Products: serve node module Problem Types: CWE-177 Description: serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/308721
CVE ID: CVE-2018-3719 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T04:19:14.237Z Vendors: HackerOne Products: mixin-deep node module Problem Types: CWE-471 Description: mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jonschlinkert/mixin-deep/commit/578b0bc5e74e14de9ef4975f504dc698796bdf9c - https://hackerone.com/reports/311236
CVE ID: CVE-2018-3720 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T22:56:52.100Z Vendors: HackerOne Products: assign-deep node module Problem Types: CWE-471 Description: assign-deep node module before 0.4.7 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/310707 - https://github.com/jonschlinkert/assign-deep/commit/19953a8c089b0328c470acaaaf6accdfcb34da11
CVE ID: CVE-2018-3721 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T22:34:54.590Z Vendors: HackerOne Products: lodash node module Problem Types: CWE-471 Description: lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaultsDeep, merge, and mergeWith functions, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/310443 - https://github.com/lodash/lodash/commit/d8e069cc3410082e44eb18fcf8e7f3
erences: - https://hackerone.com/reports/310443 - https://github.com/lodash/lodash/commit/d8e069cc3410082e44eb18fcf8e7f3d08ebe1d4a - https://security.netapp.com/advisory/ntap-20190919-0004/
CVE ID: CVE-2018-3722 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T04:14:35.263Z Vendors: HackerOne Products: merge-deep node module Problem Types: CWE-471 Description: merge-deep node module before 3.0.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jonschlinkert/merge-deep/commit/2c33634da7129a5aefcc262d2fec2e72224404e5 - https://hackerone.com/reports/310708
CVE ID: CVE-2018-3723 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T21:08:12.039Z Vendors: HackerOne Products: defaults-deep node module Problem Types: CWE-471 Description: defaults-deep node module before 0.2.4 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jonschlinkert/defaults-deep/commit/c873f341327ad885ff4d0f23b3d3bca31b0343e5 - https://hackerone.com/reports/310514
CVE ID: CVE-2018-3724 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T19:15:34.641Z Vendors: HackerOne Products: general-file-server node module Problem Types: CWE-22 Description: general-file-server node module suffers from a Path Traversal vulnerability due to lack of validation of currpath, which allows a malicious user to read content of any file with known path. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/310943
CVE ID: CVE-2018-3725 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T21:57:42.628Z Vendors: HackerOne Products: hekto node module Problem Types: CWE-22 Description: hekto node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read content of any file with known path. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/311218
CVE ID: CVE-2018-3726 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T00:05:37.055Z Vendors: HackerOne Products: crud-file-server node module Problem Types: CWE-79 Description: crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/311101 - https://github.com/omphalos/crud-file-server/commit/4155bfe068bf211b49a0b3ffd06e78cbaf1b40fa
CVE ID: CVE-2018-3727 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T17:08:20.341Z Vendors: HackerOne Products: 626 node module Problem Types: CWE-22 Description: 626 node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read content of any file with known path. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/311216
CVE ID: CVE-2018-3728 State: PUBLISHED Published: 2018-03-30T19:00:00 Last Updated: 2024-08-05T04:50:30.655Z Vendors: hapi Products: hoek node module Problem Types: CWE-471 Description: hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via 'merge' and 'applyToDefaults' functions, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hapijs/hoek/commit/32ed5c9413321fbc37da5ca81a7cbab693786dee - https://hackerone.com
er: References: - https://github.com/hapijs/hoek/commit/32ed5c9413321fbc37da5ca81a7cbab693786dee - https://hackerone.com/reports/310439 - http://www.securityfocus.com/bid/103108 - https://access.redhat.com/errata/RHSA-2018:1264 - https://access.redhat.com/errata/RHSA-2018:1263 - https://snyk.io/vuln/npm:hoek:20180212 - https://nodesecurity.io/advisories/566
CVE ID: CVE-2018-3729 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T18:45:17.550Z Vendors: HackerOne Products: localhost-now node module Problem Types: CWE-22 Description: localhost-now node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read content of any file with known path. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/312889
CVE ID: CVE-2018-3730 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T00:56:12.788Z Vendors: HackerOne Products: mcstatic node module Problem Types: CWE-22 Description: mcstatic node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read content of any file with known path. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/312907
CVE ID: CVE-2018-3731 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T17:23:52.400Z Vendors: HackerOne Products: public node module Problem Types: CWE-22 Description: public node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read content of any file with known path. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/312918
CVE ID: CVE-2018-3732 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T23:11:35.184Z Vendors: HackerOne Products: resolve-path node module Problem Types: CWE-22 Description: resolve-path node module before 1.4.0 suffers from a Path Traversal vulnerability due to lack of validation of paths with certain special characters, which allows a malicious user to read content of any file with known path. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pillarjs/resolve-path/commit/fe5b8052cafd35fcdafe9210e100e9050b37d2a0 - https://hackerone.com/reports/315760
CVE ID: CVE-2018-3733 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-17T01:06:57.354Z Vendors: HackerOne Products: crud-file-server node module Problem Types: CWE-22 Description: crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url, which allows a malicious user to read content of any file with known path. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/310690 - https://github.com/omphalos/crud-file-server/commit/4fc3b404f718abb789f4ce4272c39c7a138c7a82
CVE ID: CVE-2018-3734 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-17T02:26:33.956Z Vendors: HackerOne Products: stattic node module Problem Types: CWE-22 Description: stattic node module suffers from a Path Traversal vulnerability due to lack of validation of path, which allows a malicious user to read content of any file with known path. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/319003
CVE ID: CVE-2018-3735 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T19:14:25.981Z Vendors: HackerOne Products: bracket-template node module Problem Types: CWE-79 Description: bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/317125
CVE ID: CVE-2018-3736 State: REJECTED Published: 2018-06-07T02:00:00 Last Updated: 2018-10-10T20:57:01 Description: No description available.