rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-12539 
In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.
Problem types: cwe_id: CWE-419
description: CWE-419: Unprotected Primary Channel
Affected products: vendor: The Eclipse Foundation
product: Eclipse OpenJ9
Published: 2018-08-14T19:00:00.000Z
CVE-2018-12540 
In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This allows replay attacks with previously issued tokens which are not expired yet.
Problem types: cwe_id: CWE-352
description: CWE-352: Cross-Site Request Forgery (CSRF)
Affected products: vendor: The Eclipse Foundation
product: Eclipse Vert.x
Published: 2018-07-12T14:00:00.000Z
CVE-2018-12541 
In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There should be a reasonnable limit (8192 bytes) above which the WebSocket gets an HTTP response with the 413 status code and the connection gets closed.
Problem types: cwe_id: CWE-789
description: CWE-789: Uncontrolled Memory Allocation
Affected products: vendor: The Eclipse Foundation
product: Eclipse Vert.x
Published: 2018-10-10T20:00:00.000Z
CVE-2018-12542 
In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\' (forward slashes) sequences that can resolve to a location that is outside of that directory when running on Windows Operating Systems.
Problem types: description: n/a
Affected products: vendor: The Eclipse Foundation
product: Eclipse Vert.x
Credits: lang: en
value: Vishwanath Viraktamath
Published: 2018-10-10T20:00:00.000Z
CVE-2018-12543 
In Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that has a topic starting with $, but that is not $SYS, e.g. $test/test, then an assert is triggered that should otherwise not be reachable and Mosquitto will exit.
Problem types: cwe_id: CWE-617
description: CWE-617: Reachable Assertion
Affected products: vendor: The Eclipse Foundation
product: Eclipse Mosquitto
Published: 2018-11-15T15:00:00.000Z
CVE-2018-12544 
In version from 3.5.Beta1 to 3.5.3 of Eclipse Vert.x, the OpenAPI XML type validator creates XML parsers without taking appropriate defense against XML attacks. This mechanism is exclusively when the developer uses the Eclipse Vert.x OpenAPI XML type validator to validate a provided schema.
Problem types: cwe_id: CWE-611
description: CWE-611: Improper Restriction of XML External Entity Reference ('XXE')
Affected products: vendor: The Eclipse Foundation
product: Eclipse Vert.x
Published: 2018-10-10T20:00:00.000Z
CVE-2018-12545 
In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client sends either large SETTINGs frames container containing many settings, or many small SETTINGs frames. The vulnerability is due to the additional CPU and memory allocations required to handle changed settings.
Problem types: cwe_id: CWE-400
description: CWE-400: Uncontrolled Resource Consumption
Affected products: vendor: The Eclipse Foundation
product: Eclipse Jetty
Published: 2019-03-27T19:21:37.000Z
CVE-2018-12546 
In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to a topic, then has its access to that topic revoked, the retained message will still be published to clients that subscribe to that topic in the future. In some applications this may result in clients being able cause effects that would otherwise not be allowed.
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: The Eclipse Foundation
product: Eclipse Mosquitto
Published: 2019-03-27T17:26:20.000Z
CVE-2018-12547 
In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter. This affects existing APIs that called the functions to exceed the allocated buffer. This functions were not directly callable by non-native user code.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: The Eclipse Foundation
product: Eclipse OpenJ9
Published: 2019-02-11T15:00:00.000Z
CVE-2018-12548 
In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives which accept pointer values that are dereferenced in the native code.
Problem types: cwe_id: CWE-822
description: CWE-822: Untrusted Pointer Dereference
Affected products: vendor: The Eclipse Foundation
product: Eclipse OpenJ9
Published: 2019-01-31T20:00:00.000Z
CVE-2018-12549 
In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it.
Problem types: cwe_id: CWE-111
description: CWE-111: Direct Use of Unsafe JNI
Affected products: vendor: The Eclipse Foundation
product: Eclipse OpenJ9
Published: 2019-02-11T15:00:00.000Z
CVE-2018-12550 
When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and that ACL file is empty, or contains only comments or blank lines, then Mosquitto will treat this as though no ACL file has been defined and use a default allow policy. The new behaviour is to have an empty ACL file mean that all access is denied, which is not a useful configuration but is not unexpected.
Problem types: cwe_id: CWE-440
description: CWE-440: Expected Behavior Violation
Affected products: vendor: The Eclipse Foundation
product: Eclipse Mosquitto
Published: 2019-03-27T17:26:20.000Z
CVE-2018-12551 
When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for authentication, any malformed data in the password file will be treated as valid. This typically means that the malformed data becomes a username and no password. If this occurs, clients can circumvent authentication and get access to the broker by using the malformed username. In particular, a blank line will be treated as a valid empty username. Other security measures are unaffected. Users who have only used the mosquitto_passwd utility to create and modify their password files are unaffected by this vulnerability.
Problem types: cwe_id: CWE-703
description: CWE-703: Improper Check or Handling of Exceptional Conditions
Affected products: vendor: The Eclipse Foundation
product: Eclipse Mosquitto
Published: 2019-03-27T17:26:20.000Z
CVE-2018-12556 
The signature verification routine in install.sh in yarnpkg/website through 2018-06-05 only verifies that the yarn release is signed by any (arbitrary) key in the local keyring of the user, and does not pin the signature to the yarn release key, which allows remote attackers to sign tampered yarn release packages with their own key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-16T16:12:53.000Z
CVE-2018-12557 
An issue was discovered in Zuul 3.x before 3.1.0. If nodes become offline during the build, the no_log attribute of a task is ignored. If the unreachable error occurred in a task used with a loop variable (e.g., with_items), the contents of the loop items would be printed in the console. This could lead to accidentally leaking credentials or secrets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T05:00:00.000Z
CVE-2018-12558 
The parse() method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters ("\f").
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-20T14:00:00.000Z
CVE-2018-12559 
An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The mount target path check in mounter.cpp `mpOk()` is insufficient. A regular user can consequently mount a CIFS filesystem anywhere (e.g., outside of the /home directory tree) by passing directory traversal sequences such as a home/../usr substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T05:00:00.000Z
CVE-2018-12560 
An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. Arbitrary unmounts can be performed by regular users via directory traversal sequences such as a home/../sys/kernel substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T05:00:00.000Z
CVE-2018-12561 
An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. A regular user can inject additional mount options such as file_mode= by manipulating (for example) the domain parameter of the samba URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T05:00:00.000Z
CVE-2018-12562 
An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The wrapper script 'mount.cifs.wrapper' uses the shell to forward the arguments to the actual mount.cifs binary. The shell evaluates wildcards (such as in an injected string:/home/../tmp/* string).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T05:00:00.000Z
CVE-2018-12563 
An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for file: URLs, a user can force lava-server-gunicorn to download any file from the filesystem if it's readable by lavaserver and valid yaml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T05:00:00.000Z
CVE-2018-12564 
An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for URLs in the submit page, a user can forge an HTTP request that will force lava-server-gunicorn to return any file on the server that is readable by lavaserver and valid yaml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T05:00:00.000Z
CVE-2018-12565 
An issue was discovered in Linaro LAVA before 2018.5.post1. Because of use of yaml.load() instead of yaml.safe_load() when parsing user data, remote code execution can occur.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T05:00:00.000Z
CVE-2018-12571 
uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the orig_url parameter, possibly causing a traffic amplification and/or SSRF outcome.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-05T20:00:00.000Z
CVE-2018-12572 
Avast Free Antivirus prior to 19.1.2360 stores user credentials in memory upon login, which allows local users to obtain sensitive information by dumping AvastUI.exe application memory and parsing the data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T18:20:44.000Z
CVE-2018-12574 
CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-02T16:00:00.000Z
CVE-2018-12575 
On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of authentication via an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-02T16:00:00.000Z
CVE-2018-12576 
TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-02T16:00:00.000Z
CVE-2018-12577 
The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-02T16:00:00.000Z
CVE-2018-12578 
There is a heap-based buffer overflow in bmp_compress1_row in appliers.cpp in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T15:00:00.000Z
CVE-2018-12579 
An issue was discovered in OXID eShop Enterprise Edition before 5.3.8, 6.0.x before 6.0.3, and 6.1.x before 6.1.0; Professional Edition before 4.10.8, 5.x and 6.0.x before 6.0.3, and 6.1.x before 6.1.0; and Community Edition before 4.10.8, 5.x and 6.0.x before 6.0.3, and 6.1.x before 6.1.0. An attacker could gain access to the admin panel or a customer account when using the password reset function. To do so, it is required to own a domain name similar to the one the victim uses for their e-mail accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T22:00:00.000Z
CVE-2018-12580 
library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session['user_agent'] in the "Login Sessions" feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T16:00:00.000Z
CVE-2018-12581 
An issue was discovered in js/designer/move.js in phpMyAdmin before 4.8.2. A Cross-Site Scripting vulnerability has been found where an attacker can use a crafted database name to trigger an XSS attack when that database is referenced from the Designer feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-21T20:00:00.000Z
CVE-2018-12582 
An issue was discovered in AKCMS 6.1. CSRF can add an admin account via a /index.php?file=account&action=manageaccounts&job=newaccount URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T18:00:00.000Z
CVE-2018-12583 
An issue was discovered in AKCMS 6.1. CSRF can delete an article via an admincp deleteitem action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T18:00:00.000Z
CVE-2018-12584 
The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service (buffer overflow) or possibly execute arbitrary code when TLS communication is enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-16T20:00:00.000Z
CVE-2018-12585 
An XXE vulnerability in the OPC UA Java and .NET Legacy Stack can allow remote attackers to trigger a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-14T21:00:00.000Z
CVE-2018-12587 
A cross-site scripting (XSS) vulnerability was found in valeuraddons German Spelling Dictionary v1.3 (an Opera Browser add-on). Instead of providing text for a spelling check, remote attackers may inject arbitrary web script or HTML via the ajax query parameter in the URL Address Bar.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-13T17:00:00.000Z
CVE-2018-12588 
Cross-site scripting (XSS) vulnerability in templates/frontend/pages/searchResults.tpl in Public Knowledge Project (PKP) Open Monograph Press (OMP) v1.2.0 through 3.1.1-2 before 3.1.1-3 allows remote attackers to inject arbitrary web script or HTML via the catalog.noTitlesSearch parameter (aka the Search field).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T21:00:00.000Z
CVE-2018-12589 
Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-28T14:00:00.000Z
CVE-2018-12590 
Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an externally controlled format-string vulnerability due to lack of protection on the admin CLI, leading to code execution and privilege escalation greater than administrators themselves are allowed. An attacker with access to an admin account could escape the restricted CLI and execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-20T12:00:00.000Z
CVE-2018-12591 
Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an improperly neutralized element in an OS command due to lack of protection on the admin CLI, leading to code execution and privilege escalation greater than administrators themselves are allowed. An attacker with access to an admin account could escape the restricted CLI and execute arbitrary shell instructions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-20T12:00:00.000Z
CVE-2018-12592 
Polycom RealPresence Web Suite before 2.2.0 does not block a user's video for a few seconds upon joining a meeting (when the user has explicitly chosen to turn off the video using a specific option). During those seconds, a meeting invitee may unknowingly be on camera with other participants able to view.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-20T12:00:00.000Z
CVE-2018-12594 
Reliable Controls MACH-ProWebCom 7.80 devices allow remote attackers to obtain sensitive information via a direct request for the data/fileinfo.xml or job/job.json file, as demonstrated the Master Password field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-20T13:00:00.000Z
CVE-2018-12596 
Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden (normally available exclusively for local admins).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-10T21:00:00.000Z
CVE-2018-12599 
In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-20T18:00:00.000Z
CVE-2018-12600 
In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-20T18:00:00.000Z
CVE-2018-12601 
There is a heap-based buffer overflow in ReadImage in input-tga.ci in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-20T18:00:00.000Z
CVE-2018-12602 
A CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T15:00:00.000Z
CVE-2018-12603 
Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authentication of unspecified users for requests that add administrator users via the s parameter, a related issue to CVE-2018-12114.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T20:00:00.000Z
CVE-2018-12604 
GreenCMS 2.3.0603 allows remote attackers to obtain sensitive information via a direct request for Data/Log/year_month_day.log.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-20T19:00:00.000Z
CVE-2018-12605 
An issue was discovered in GitLab Community Edition and Enterprise Edition 10.7.x before 10.7.6. The usage of 'url_for' contained a XSS issue due to it allowing arbitrary protocols as a parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T18:00:00.000Z
CVE-2018-12606 
An issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x before 10.8.5, and 11.x before 11.0.1. The wiki contains a persistent XSS issue due to a lack of output encoding affecting a specific markdown feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T18:00:00.000Z
CVE-2018-12607 
An issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x before 10.8.5, and 11.x before 11.0.1. The charts feature contained a persistent XSS issue due to a lack of output encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T18:00:00.000Z
CVE-2018-12608 
An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificate and all system roots on non-Windows systems. This allowed a client with any domain validated certificate signed by a system-trusted root CA (as opposed to one signed by the configured CA root certificate) to authenticate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-10T17:00:00.000Z
CVE-2018-12609 
OX App Suite 7.8.4 and earlier allows Server-Side Request Forgery.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T23:00:00.000Z
CVE-2018-12610 
OX App Suite 7.8.4 and earlier allows Information Exposure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T23:00:00.000Z
CVE-2018-12611 
OX App Suite 7.8.4 and earlier allows Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T23:00:00.000Z
CVE-2018-12613 
An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an improper test for whitelisted pages. An attacker must be authenticated, except in the "$cfg['AllowArbitraryServer'] = true" case (where an attacker can specify any host he/she is already in control of, and execute arbitrary code on phpMyAdmin) and the "$cfg['ServerDefault'] = 0" case (which bypasses the login requirement and runs the vulnerable code without any authentication).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-21T20:00:00.000Z
CVE-2018-12615 
An issue was discovered in switchGroup() in agent/ExecHelper/ExecHelperMain.cpp in Phusion Passenger before 5.3.2. The set of groups (gidset) is not set correctly, leaving it up to randomness (i.e., uninitialized memory) which supplementary groups are actually being set while lowering privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-21T15:00:00.000Z
CVE-2018-12617 
qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overflow causing a g_malloc0() call to trigger a segmentation fault when trying to allocate a large memory chunk. The vulnerability can be exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-21T18:00:00.000Z