rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-14312 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the exportAsFDF function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6332.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14313 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6362.
Problem types: cwe_id: CWE-843
description: CWE-843-Access of Resource Using Incompatible Type ('Type Confusion')
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14314 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of annotations. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6327.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14315 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of annotations. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6328.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14316 
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of PDF documents. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6351.
Problem types: cwe_id: CWE-125
description: CWE-125-Out-of-bounds Read
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14317 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6683.
Problem types: cwe_id: CWE-843
description: CWE-843-Access of Resource Using Incompatible Type ('Type Confusion')
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-08-30T12:00:00.000Z
CVE-2018-14318 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S8 G950FXXU1AQL5. User interaction is required to exploit this vulnerability in that the target must have their cellular radios enabled. The specific flaw exists within the handling of IPCP headers. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code under the context of the baseband processor. Was ZDI-CAN-5368.
Problem types: cwe_id: CWE-121
description: CWE-121-Stack-based Buffer Overflow
Affected products: vendor: Samsung
product: Samsung Galaxy S8
Published: 2018-09-25T00:00:00.000Z
CVE-2018-14320 
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within PdfEncoding::ParseToUnicode. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-5673.
Problem types: cwe_id: CWE-119
description: CWE-119-Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: PoDoFo
product: PoDoFo PoDoFo
Published: 2018-09-17T18:00:00.000Z
CVE-2018-14324 
The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by default with a password of admin for the admin account. This allows remote attackers to obtain potentially sensitive information, perform database operations, or manipulate the demo via a JMX RMI session, aka a "jmx_rmi remote monitoring and control problem." NOTE: this is not an Oracle supported product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-16T18:00:00.000Z
CVE-2018-14325 
In MP4v2 2.0.0, there is an integer underflow (with resultant memory corruption) when parsing MP4Atom in mp4atom.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-16T00:00:00.000Z
CVE-2018-14326 
In MP4v2 2.0.0, there is an integer overflow (with resultant memory corruption) when resizing MP4Array for the ftyp atom in mp4array.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-16T00:00:00.000Z
CVE-2018-14327 
The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile broadband modems with firmware before EE40_00_02.00_45 sets weak permissions (Everyone:Full Control) for the "Web Connecton\EE40" and "Web Connecton\EE40\BackgroundService" directories, which allows local users to gain privileges, as demonstrated by inserting a Trojan horse ServiceManager.exe file into the "Web Connecton\EE40\BackgroundService" directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-26T22:00:00.000Z
CVE-2018-14328 
Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for /dashboard/addplan, /dashboard/paywithcard/charge, /dashboard/withdrawal, or /privacy&terms, as demonstrated by reading database username, database password, database_name, and IP address fields, related to CVE-2018-12908.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T20:00:00.000Z
CVE-2018-14329 
In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary files via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T02:00:00.000Z
CVE-2018-14331 
An issue was discovered in XiaoCms X1 v20140305. There is a CSRF vulnerability to change the administrator account password via admin/index.php?c=index&a=my.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T02:00:00.000Z
CVE-2018-14332 
An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL pointer dereference in the Init call in the MoodbarPipeline::NewPadCallback function in moodbar/moodbarpipeline.cpp. The vulnerability is triggered when the user opens a malformed mp3 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T15:00:00.000Z
CVE-2018-14333 
TeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process memory between "[00 88] and "[00 00 00]" delimiters, which might make it easier for attackers to obtain sensitive information by leveraging an unattended workstation on which TeamViewer has disconnected but remains running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T02:00:00.000Z
CVE-2018-14334 
manager/editor/upload.php in joyplus-cms 1.6.0 allows arbitrary file upload because detection of a prohibited file extension simply sets the $errm value, and does not otherwise alter the flow of control. Consequently, one can upload and execute a .php file, a similar issue to CVE-2018-8766.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T02:00:00.000Z
CVE-2018-14335 
An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-24T13:00:00.000Z
CVE-2018-14336 
TP-Link WR840N devices allow remote attackers to cause a denial of service (connectivity loss) via a series of packets with random MAC addresses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T20:00:00.000Z
CVE-2018-14337 
The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrb_str_resize function in string.c does not check for a negative length.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T03:00:00.000Z
CVE-2018-14338 
samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not used, possibly leading to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T12:00:00.000Z
CVE-2018-14339 
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. This was addressed in epan/proto.c by adding offset and length validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T02:00:00.000Z
CVE-2018-14340 
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid a buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T02:00:00.000Z
CVE-2018-14341 
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T02:00:00.000Z
CVE-2018-14342 
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by validating Path Attribute lengths.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T02:00:00.000Z
CVE-2018-14343 
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-ber.c by ensuring that length values do not exceed the maximum signed integer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T02:00:00.000Z
CVE-2018-14344 
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in epan/dissectors/packet-ismp.c by validating the IPX address length to avoid a buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T02:00:00.000Z
CVE-2018-14345 
An issue was discovered in SDDM through 0.17.0. If configured with ReuseSession=true, the password is not checked for users with an already existing session. Any user with access to the system D-Bus can therefore unlock any graphical session. This is related to daemon/Display.cpp and helper/backend/PamBackend.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T14:00:00.000Z
CVE-2018-14346 
GNU Libextractor before 1.7 has a stack-based buffer overflow in ec_read_file_func (unzip.c).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T15:00:00.000Z
CVE-2018-14347 
GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTOR_mpeg_extract_method (mpeg_extractor.c).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T15:00:00.000Z
CVE-2018-14348 
libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-14T16:00:00.000Z
CVE-2018-14349 
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response without a message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T17:00:00.000Z
CVE-2018-14350 
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T17:00:00.000Z
CVE-2018-14351 
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a long IMAP status mailbox literal count size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T17:00:00.000Z
CVE-2018-14352 
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T17:00:00.000Z
CVE-2018-14353 
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an integer underflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T17:00:00.000Z
CVE-2018-14354 
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T17:00:00.000Z
CVE-2018-14355 
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T17:00:00.000Z
CVE-2018-14356 
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T17:00:00.000Z
CVE-2018-14357 
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T17:00:00.000Z
CVE-2018-14358 
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long RFC822.SIZE field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T17:00:00.000Z
CVE-2018-14359 
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T17:00:00.000Z
CVE-2018-14360 
An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T17:00:00.000Z
CVE-2018-14361 
An issue was discovered in NeoMutt before 2018-07-16. nntp.c proceeds even if memory allocation fails for messages data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T17:00:00.000Z
CVE-2018-14362 
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T17:00:00.000Z
CVE-2018-14363 
An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have unsafe interaction with cache pathnames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-17T17:00:00.000Z
CVE-2018-14364 
GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and resultant remote code execution via the GitLab projects import component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-18T19:00:00.000Z
CVE-2018-14366 
download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an Open Redirect Vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T23:00:00.000Z
CVE-2018-14367 
In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T02:00:00.000Z
CVE-2018-14368 
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T02:00:00.000Z
CVE-2018-14369 
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2.c by verifying that header data was found before proceeding to header decompression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T02:00:00.000Z
CVE-2018-14370 
In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bounds checking that prevents a buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T02:00:00.000Z
CVE-2018-14371 
The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-18T12:00:00.000Z
CVE-2018-14379 
MP4Atom::factory in mp4atom.cpp in MP4v2 2.0.0 incorrectly uses the MP4ItemAtom data type in a certain case where MP4DataAtom is required, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted MP4 file, because access to the data structure has different expectations about layout as a result of this type confusion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-18T00:00:00.000Z
CVE-2018-14380 
In Graylog before 2.4.6, XSS was possible in typeahead components, related to components/common/TypeAheadInput.jsx and components/search/QueryInput.ts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-18T15:00:00.000Z
CVE-2018-14381 
Pagekit before 1.0.14 has a /user/login?redirect= open redirect vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-18T15:00:00.000Z
CVE-2018-14382 
InstantCMS 2.10.1 has /redirect?url= XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-18T15:00:00.000Z
CVE-2018-14383 
The Transition Technologies "The Scheduler" app 5.1.3 for Jira allows XXE due to a weakly configured/parameterized XML parser. It was fixed in the versions 5.2.1 and 3.3.7
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T14:14:37.000Z
CVE-2018-14384 
The Website Manager module in SEO Panel 3.13.0 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability, allowing remote authenticated attackers to inject arbitrary web script or HTML via the websites.php name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T16:32:40.000Z
CVE-2018-14387 
An issue was discovered in WonderCMS before 2.5.2. An attacker can create a new session on a web application and record the associated session identifier. The attacker then causes the victim to authenticate against the server using the same session identifier. The attacker can access the user's account through the active session. The Session Fixation attack fixes a session on the victim's browser, so the attack starts before the user logs in.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-18T19:00:00.000Z
CVE-2018-14388 
joyplus-cms 1.6.0 has XSS via the manager/admin_ajax.php can_search_device array parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-18T19:00:00.000Z
CVE-2018-14389 
joyplus-cms 1.6.0 has SQL Injection via the manager/admin_ajax.php val parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-18T19:00:00.000Z
CVE-2018-14392 
The New Threads plugin before 1.2 for MyBB has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T02:00:00.000Z