deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-14305
Published: 2018-07-31
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of PolyLine annotations. By manipulating a document's elements an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6265.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-765; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-14306
Published: 2018-07-31
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of button objects. By manipulating a document's elements, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6266.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-766; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-14307
Published: 2018-07-31
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of Link objects. By manipulating a document's elements, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6267.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-767; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-14308
Published: 2018-07-31
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the valueAsString function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6326.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-768; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-14309
Published: 2018-07-31
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the SeedValue Generic Object parameter provided to the signatureSetSeedValue function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6329.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-769; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-14310
Published: 2018-07-31
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of events. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6330.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-770; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-14311
Published: 2018-07-31
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA events. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6331.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-704
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-771; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-14312
Published: 2018-07-31
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the exportAsFDF function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6332.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-772; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-14313
Published: 2018-07-31
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6362.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-704
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-773; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-14314
Published: 2018-07-31
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of annotations. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6327.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-774; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-14315
Published: 2018-07-31
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of annotations. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6328.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-775; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-14316
Published: 2018-07-31
Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of PDF documents. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6351.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125, CWE-200
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-776; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2016-8614
Published: 2018-07-31
Description: A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-358, CWE-320
References: http://www.securityfocus.com/bid/94108; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8614; https://github.com/ansible/ansible-modules-core/issues/5237
CVE: CVE-2016-8618
Published: 2018-07-31
Description: The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on systems using 32 bit `size_t` variables.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416, CWE-415
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/94098; http://www.securitytracker.com/id/1037192
CVE: CVE-2016-8622
Published: 2018-07-31
Description: The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get either just truncated or both truncated and turned negative. That could then lead to libcurl writing outside of its heap based buffer.
CVSS Score: 3.7 (LOW)
CWE: CWE-122, CWE-190, CWE-787
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/94105; http://www.securitytracker.com/id/1037192
CVE: CVE-2016-8624
Published: 2018-07-31
Description: curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '#' character, and could instead be tricked into connecting to a different host. This may have security implications if you for example use an URL parser that follows the RFC to check for allowed domains before using curl to request them.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/94103; http://www.securitytracker.com/id/1037192
CVE: CVE-2016-8617
Published: 2018-07-31
Description: The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `CURLOPT_USERNAME`.
CVSS Score: 3.3 (LOW)
CWE: CWE-787, CWE-787
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/94097; http://www.securitytracker.com/id/1037192
CVE: CVE-2016-8621
Published: 2018-07-31
Description: The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/94101; http://www.securitytracker.com/id/1037192
CVE: CVE-2016-8615
Published: 2018-08-01
Description: A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-99, CWE-254
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/94096; http://www.securitytracker.com/id/1037192
CVE: CVE-2016-8616
Published: 2018-08-01
Description: A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case insensitive comparisons of user name and password with the existing connections. This means that if an unused connection with proper credentials exists for a protocol that has connection-scoped credentials, an attacker can cause that connection to be reused if s/he knows the case-insensitive version of the correct password.
CVSS Score: 3.7 (LOW)
CWE: CWE-592, CWE-255
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/94094; http://www.securitytracker.com/id/1037192
CVE: CVE-2016-8619
Published: 2018-08-01
Description: The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416, CWE-415
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/94100; http://www.securitytracker.com/id/1037192
CVE: CVE-2016-8620
Published: 2018-08-01
Description: The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120, CWE-125, CWE-190
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/94102; http://www.securitytracker.com/id/1037192
CVE: CVE-2016-8623
Published: 2018-08-01
Description: A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other threads to trigger a use-after-free leading to information disclosure.
CVSS Score: 3.3 (LOW)
CWE: CWE-416, CWE-416
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/94106; http://www.securitytracker.com/id/1037192
CVE: CVE-2016-8625
Published: 2018-08-01
Description: curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/94107; http://www.securitytracker.com/id/1037192; https://access.redhat.com/errata/RHSA-2018:2486
CVE: CVE-2016-9573
Published: 2018-08-01
Description: An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://rhn.redhat.com/errata/RHSA-2017-0838.html; http://www.securityfocus.com/bid/97073; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9573
CVE: CVE-2018-11050
Published: 2018-08-01
Description: Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authentication over network vulnerability in the Rabbit MQ Advanced Message Queuing Protocol (AMQP) component. User credentials are sent unencrypted to the remote AMQP service. An unauthenticated attacker in the same network collision domain, could potentially sniff the password from the network and use it to access the component using the privileges of the compromised user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-319, CWE-522
References: http://seclists.org/fulldisclosure/2018/Jul/92; http://www.securityfocus.com/bid/104963; http://www.securitytracker.com/id/1041393
CVE: CVE-2018-14775
Published: 2018-08-01
Description: tss_alloc in sys/arch/i386/i386/gdt.c in OpenBSD 6.2 and 6.3 has a Local Denial of Service (system crash) due to incorrect I/O port access control on the i386 architecture.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/arch/i386/i386/gdt.c; http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/arch/i386/i386/gdt.c.diff?r1=1.37&r2=1.37.8.1&f=h; http://www.securitytracker.com/id/1041550
CVE: CVE-2018-14776
Published: 2018-08-01
Description: Click Studios Passwordstate before 8.3 Build 8397 allows XSS by authenticated users via an uploaded HTML document.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.clickstudios.com.au/about/secure-code-data.aspx; https://www.clickstudios.com.au/passwordstate-changelog.aspx; https://www.clickstudios.com.au/about/secure-code-data.aspx
CVE: CVE-2016-8634
Published: 2018-08-01
Description: A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman, if the name contains HTML then the second step of the wizard (/organizations/id/step2) will render the HTML. This occurs in the alertbox on the page. The result is a stored XSS attack if an organization/location with HTML in the name is created, then a user is linked directly to this URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/94206; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8634; https://projects.theforeman.org/issues/17195
CVE: CVE-2016-8635
Published: 2018-08-01
Description: It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private keys by confining the client DH key to small subgroup of the desired group.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-358, CWE-320
References: http://rhn.redhat.com/errata/RHSA-2016-2779.html; http://www.securityfocus.com/bid/94346; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8635
CVE: CVE-2016-8637
Published: 2018-08-01
Description: A local information disclosure issue was found in dracut before 045 when generating initramfs images with world-readable permissions when 'early cpio' is used, such as when including microcode updates. Local attacker can use this to obtain sensitive information from these files, such as encryption keys or credentials.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-732, CWE-200
References: http://seclists.org/oss-sec/2016/q4/352; http://www.securityfocus.com/bid/94128; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8637
CVE: CVE-2016-8639
Published: 2018-08-01
Description: It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. This could allow an attacker with privileges to set the organization or location name to display arbitrary HTML including scripting code within the web interface.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/94263; https://access.redhat.com/errata/RHSA-2018:0336; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8639
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-01
Description: A man in the middle vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java, ATXValidator.java that allows attackers to impersonate any service that Jenkins connects to.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: https://jenkins.io/security/advisory/2018-07-30/#SECURITY-932; https://jenkins.io/security/advisory/2018-07-30/#SECURITY-932
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-01
Description: A server-side request forgery vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java that allows attackers to have Jenkins send HTTP requests to an attacker-specified host.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: http://www.securityfocus.com/bid/104960; https://jenkins.io/security/advisory/2018-07-30/#SECURITY-994; http://www.securityfocus.com/bid/104960
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-01
Description: An exposure of sensitive information vulnerability exists in Jenkins SaltStack Plugin 3.1.6 and earlier in SaltAPIBuilder.java, SaltAPIStep.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.
CVSS Score: 7.5 (HIGH)
CWE: CWE-352
References: https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1009; https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1009
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-01
Description: An exposure of sensitive information vulnerability exists in Jenkins Accurev Plugin 0.7.16 and earlier in AccurevSCM.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1021; https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1021
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-01
Description: A cross-site scripting vulnerability exists in Jenkins Shelve Project Plugin 1.5 and earlier in ShelveProjectAction/index.jelly, ShelvedProjectsAction/index.jelly that allows attackers with Job/Configure permission to define JavaScript that would be executed in another user's browser when that other user performs some UI actions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1001; https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1001
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-01
Description: An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.3.1 and earlier in ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.java, Nexus3ChoiceListProvider.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1022; https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1022
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-01
Description: An exposure of sensitive information vulnerability exists in Jenkins meliora-testlab Plugin 1.14 and earlier in TestlabNotifier.java that allows attackers with file system access to the Jenkins master to obtain the API key stored in this plugin's configuration.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://jenkins.io/security/advisory/2018-07-30/#SECURITY-847; https://jenkins.io/security/advisory/2018-07-30/#SECURITY-847