rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-15682 
An issue was discovered in BTITeam XBTIT. Due to a lack of cross-site request forgery protection, it is possible to automate the action of sending private messages to users by luring an authenticated user to a web page that automatically submits a form on their behalf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T21:00:00.000Z
CVE-2018-15683 
An issue was discovered in BTITeam XBTIT. The "returnto" parameter of the login page is vulnerable to an open redirect due to a lack of validation. If a user is already logged in when accessing the page, they will be instantly redirected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T21:00:00.000Z
CVE-2018-15684 
An issue was discovered in BTITeam XBTIT. PHP error logs are stored in an open directory (/include/logs) using predictable file names, which can lead to full path disclosure and leakage of sensitive data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T21:00:00.000Z
CVE-2018-15685 
GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a WebPreferences vulnerability that can be leveraged to perform remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-23T05:00:00.000Z
CVE-2018-15686 systemd: reexec state injection: fgets() on overlong lines leads to line splitting
A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.
Problem types: description: fgets() can be confused by overly-long input strings. The first read will return a partial string and subsequent reads will begin as if it were a new line.
Affected products: vendor: systemd
product: systemd
Credits: lang: en
value: Jann Horn
Published: 2018-10-26T14:00:00.000Z
CVE-2018-15687 systemd: chown_one() can dereference symlinks
A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files. Affected releases are systemd versions up to and including 239.
Problem types: description: There is a race condition between a stat(2) call and the fchmodat(2) call.
Affected products: vendor: systemd
product: systemd
Credits: lang: en
value: Jann Horn
Published: 2018-10-26T14:00:00.000Z
CVE-2018-15688 Out-of-Bounds write in systemd-networkd dhcpv6 option handling
A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.
Problem types: description: dhcp6_option_append_ia() contained an incorrect buffer size calculation.
Affected products: vendor: systemd
product: systemd
Credits: lang: en
value: Felix Wilhelm from the Google Security Team
Published: 2018-10-26T14:00:00.000Z
CVE-2018-15691 
Insecure deserialization of a specially crafted serialized object, in CA Release Automation 6.5 and earlier, allows attackers to potentially execute arbitrary code.
Problem types: description: Deserialization of Untrusted Data
Affected products: vendor: CA Technologies
product: Release Automation
Published: 2018-08-30T14:00:00.000Z
CVE-2018-15692 
Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass and data manipulation in certain functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-16T18:00:00.000Z
CVE-2018-15693 
Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass via insecure direct object reference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-16T18:00:00.000Z
CVE-2018-15694 
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to upload files to arbitrary locations due to a path traversal vulnerability. This could lead to code execution if the "Web Server" feature is enabled.
Problem types: description: Arbitrary File Upload
Affected products: vendor: Tenable
product: ASUSTOR Data Master
Published: 2018-08-27T14:00:00.000Z
CVE-2018-15695 
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to delete any file on the file system due to a path traversal vulnerability in wallpaper.cgi.
Problem types: description: Path Traversal
Affected products: vendor: Tenable
product: ASUSTOR Data Master
Published: 2018-08-27T14:00:00.000Z
CVE-2018-15696 
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to enumerate all user accounts via user.cgi.
Problem types: description: Insufficient Protections
Affected products: vendor: Tenable
product: ASUSTOR Data Master
Published: 2018-08-27T14:00:00.000Z
CVE-2018-15697 
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on a share by providing the full path. For example, /home/admin/.ash_history.
Problem types: description: Insufficient Protections
Affected products: vendor: Tenable
product: ASUSTOR Data Master
Published: 2018-08-27T14:00:00.000Z
CVE-2018-15698 
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on the file system when providing the full path to loginimage.cgi.
Problem types: description: Insufficient Protections
Affected products: vendor: Tenable
product: ASUSTOR Data Master
Published: 2018-08-27T14:00:00.000Z
CVE-2018-15699 
ASUSTOR Data Master 3.1.5 and below makes an HTTP request for a configuration file that is vulnerable to XSS. A man in the middle can take advantage of this by inserting Javascript into the configuration files Version field.
Problem types: description: Cross Site Scripting
Affected products: vendor: Tenable
product: ASUSTOR Data Master
Published: 2018-08-27T14:00:00.000Z
CVE-2018-15700 
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Referer field.
Problem types: description: Denial of Service
Affected products: vendor: TP-Link
product: TP-Link TL-WRN841N
Published: 2018-10-01T20:00:00.000Z
CVE-2018-15701 
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Cookie field.
Problem types: description: Denial of Service
Affected products: vendor: TP-Link
product: TP-Link TL-WRN841N
Published: 2018-10-01T20:00:00.000Z
CVE-2018-15702 
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to CSRF due to insufficient validation of the referer field.
Problem types: description: Cross-Site Requrest Forgery
Affected products: vendor: TP-Link
product: TP-Link TL-WRN841N
Published: 2018-10-01T20:00:00.000Z
CVE-2018-15703 
Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site scripting vulnerabilities. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim to supply malicious HTML or JavaScript code to WebAccess, which is then reflected back to the victim and executed by the web browser.
Problem types: description: Reflected Cross Site Scripting
Affected products: vendor: Advantech
product: Advantech WebAccess
Published: 2018-10-22T19:00:00.000Z
CVE-2018-15704 
Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated attacker could potentially exploit this vulnerability by sending a crafted HTTP request to broadweb/system/opcImg.asp.
Problem types: description: Stack buffer overflow
Affected products: vendor: Advantech
product: Advantech WebAccess
Published: 2018-10-22T19:00:00.000Z
CVE-2018-15705 
WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a directory traversal vulnerability in the writeFile API. An attacker can use this vulnerability to remotely execute arbitrary code.
Problem types: description: Directory Traversal
Affected products: vendor: Advantech
product: Advantech WebAccess
Published: 2018-10-31T22:00:00.000Z
CVE-2018-15706 
WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to read any file on the filesystem due to a directory traversal vulnerability in the readFile API.
Problem types: description: Directory Traversal
Affected products: vendor: Advantech
product: Advantech WebAccess
Published: 2018-10-31T22:00:00.000Z
CVE-2018-15707 
Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the Bwmainleft.asp page. An attacker could leverage this vulnerability to disclose credentials amongst other things.
Problem types: description: Cross-site Scripting
Affected products: vendor: Advantech
product: Advantech WebAccess
Published: 2018-10-31T22:00:00.000Z
CVE-2018-15708 
Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.
Problem types: description: Command Injection
Affected products: vendor: Nagios
product: Nagios XI
Published: 2018-11-14T18:00:00.000Z
CVE-2018-15709 
Nagios XI 5.5.6 allows remote authenticated attackers to execute arbitrary commands via a crafted HTTP request.
Problem types: description: Command Injection
Affected products: vendor: Nagios
product: Nagios XI
Published: 2018-11-14T18:00:00.000Z
CVE-2018-15710 
Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.
Problem types: description: Privilege Escalation
Affected products: vendor: Nagios
product: Nagios XI
Published: 2018-11-14T18:00:00.000Z
CVE-2018-15711 
Nagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more privileged users. The attacker can then use the new API key to execute API calls at elevated privileges.
Problem types: description: Privilege Escalation
Affected products: vendor: Nagios
product: Nagios XI
Published: 2018-11-14T18:00:00.000Z
CVE-2018-15712 
Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in api_tool.php.
Problem types: description: Cross Site Scripting
Affected products: vendor: Nagios
product: Nagios XI
Published: 2018-11-14T18:00:00.000Z
CVE-2018-15713 
Nagios XI 5.5.6 allows persistent cross site scripting from remote authenticated attackers via the stored email address in admin/users.php.
Problem types: description: Cross Site Scripting
Affected products: vendor: Nagios
product: Nagios XI
Published: 2018-11-14T18:00:00.000Z
CVE-2018-15714 
Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the oname and oname2 parameters.
Problem types: description: Cross Site Scripting
Affected products: vendor: Nagios
product: Nagios XI
Published: 2018-11-14T18:00:00.000Z
CVE-2018-15715 
Zoom clients on Windows (before version 4.1.34814.1119), Mac OS (before version 4.1.34801.1116), and Linux (2.4.129780.0915 and below) are vulnerable to unauthorized message processing. A remote unauthenticated attacker can spoof UDP messages from a meeting attendee or Zoom server in order to invoke functionality in the target client. This allows the attacker to remove attendees from meetings, spoof messages from users, or hijack shared screens.
Problem types: cwe_id: CWE-290
description: CWE-290 Authentication Bypass by Spoofing
Affected products: vendor: Zoom
product: Zoom
Published: 2018-11-30T20:00:00.000Z
CVE-2018-15716 
NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted requests to upgrade_handle.php to execute OS commands as root.
Problem types: cwe_id: CWE-78
description: CWE-78 Command Injection
Affected products: vendor: NUUO
product: NUUO NVRMini2
Published: 2018-11-30T20:00:00.000Z
CVE-2018-15717 
Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes.
Problem types: cwe_id: CWE-916
description: CWE-916 Passwords stored as MD5 hashes
Affected products: vendor: Open Dental
product: Open Dental
Published: 2018-12-12T19:00:00.000Z
CVE-2018-15718 
Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt. This allows the attacker to gain access to usernames, password hashes, privilege levels, and more.
Problem types: cwe_id: CWE-200
description: CWE-200 Information Exposure
Affected products: vendor: Open Dental
product: Open Dental
Published: 2018-12-12T19:00:00.000Z
CVE-2018-15719 
Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all database information.
Problem types: cwe_id: CWE-255
description: CWE-255 Credentials management
Affected products: vendor: Open Dental
product: Open Dental
Published: 2018-12-12T19:00:00.000Z
CVE-2018-15720 
Logitech Harmony Hub before version 4.15.206 contained two hard-coded accounts in the XMPP server that gave remote users access to the local API.
Problem types: cwe_id: CWE-798
description: CWE-798 Hard-coded credentials
Affected products: vendor: Logitech
product: Logitech Harmony Hub
Published: 2018-12-20T21:00:00.000Z
CVE-2018-15721 
The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request. Remote attackers can use this vulnerability to gain access to the local API.
Problem types: cwe_id: CWE-287
description: CWE-287 Improper Authentication
Affected products: vendor: Logitech
product: Logitech Harmony Hub
Published: 2018-12-20T21:00:00.000Z
CVE-2018-15722 
The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the time update request. A remote server or man in the middle can inject OS commands with a properly formatted response.
Problem types: cwe_id: CWE-78
description: CWE-78 OS Command Injection
Affected products: vendor: Logitech
product: Logitech Harmony Hub
Published: 2018-12-20T21:00:00.000Z
CVE-2018-15723 
The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command injection via crafted HTTP request. An unauthenticated remote attacker can leverage this vulnerability to execute application defined commands (e.g. harmony.system?systeminfo).
Problem types: cwe_id: CWE-346
description: CWE-346 Origin Validation Error
Affected products: vendor: Logitech
product: Logitech Harmony Hub
Published: 2018-12-20T21:00:00.000Z
CVE-2018-15726 
The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Privilege Escalation Vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T23:00:00.000Z
CVE-2018-15727 
Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-29T15:00:00.000Z
CVE-2018-15728 
Couchbase Server exposed the '/diag/eval' endpoint which by default is available on TCP/8091 and/or TCP/18091. Authenticated users that have 'Full Admin' role assigned could send arbitrary Erlang code to the 'diag/eval' endpoint of the API and the code would subsequently be executed in the underlying operating system with privileges of the user which was used to start Couchbase. Affects Version: 4.0.0, 4.1.2, 4.5.1, 5.0.0, 4.6.5, 5.0.1, 5.1.1, 5.5.0, 5.5.1. Fix Version: 6.0.0, 5.5.2
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-24T19:00:00.000Z
CVE-2018-15729 
An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the output buffer address value from IOCtl 0x8000204B.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-21T14:15:05.000Z
CVE-2018-15730 
An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the output buffer address value from IOCtl 0x80002067.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-21T14:11:48.000Z
CVE-2018-15731 
An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the output buffer address value from IOCtl 0x8000205B.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-21T14:10:51.000Z
CVE-2018-15732 
An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x80002063.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-21T14:09:46.000Z
CVE-2018-15733 
An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a NULL Pointer Dereference vulnerability due to not validating the size of the output buffer value from IOCtl 0x80002028.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-21T14:04:44.000Z
CVE-2018-15734 
An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000206B.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-21T14:03:12.000Z
CVE-2018-15735 
An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000206F.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-21T14:01:41.000Z
CVE-2018-15736 
An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the output buffer address value from IOCtl 0x8000204F.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-21T14:00:40.000Z
CVE-2018-15737 
An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the output buffer address value from IOCtl 0x80002043.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-21T13:53:46.000Z
CVE-2018-15738 
An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000205F.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-09T12:13:40.000Z
CVE-2018-15740 
Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the "Workflow Delegation" "Requester Roles" screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-28T19:00:00.000Z
CVE-2018-15745 
Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-30T17:00:00.000Z
CVE-2018-15746 
qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishandling of the seccomp policy for threads other than the main thread.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-29T19:00:00.000Z
CVE-2018-15747 
The default configuration of glot-www through 2018-05-19 allows remote attackers to execute arbitrary code because glot-code-runner supports os.system within a "python" "files" "content" JSON file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-21T13:06:54.000Z
CVE-2018-15748 
On Dell 2335dn printers with Printer Firmware Version 2.70.05.02, Engine Firmware Version 1.10.65, and Network Firmware Version V4.02.15(2335dn MFP) 11-22-2010, the admin interface allows an authenticated attacker to retrieve the configured SMTP or LDAP password by viewing the HTML source code of the Email Settings webpage. In some cases, authentication can be achieved with the blank default password for the admin account. NOTE: the vendor indicates that this is an "End Of Support Life" product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-23T15:00:00.000Z
CVE-2018-15749 
The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T23:00:00.000Z
CVE-2018-15750 
Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-24T22:00:00.000Z
CVE-2018-15751 
SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-24T22:00:00.000Z
CVE-2018-15752 
An issue was discovered in the MensaMax (aka com.breustedt.mensamax) application 4.3 for Android. Cleartext Transmission of Sensitive Information allows man-in-the-middle attackers to eavesdrop authentication information between the application and the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-02T18:00:00.000Z
CVE-2018-15753 
An issue was discovered in the MensaMax (aka com.breustedt.mensamax) application 4.3 for Android. The use of a Hard-coded DES Cryptographic Key allows an attacker who decodes the application to decrypt transmitted data such as the login username and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-02T18:00:00.000Z
CVE-2018-15754 UAA can issue tokens across identity providers if users with matching usernames exist
Cloud Foundry UAA, versions 60 prior to 66.0, contain an authorization logic error. In environments with multiple identity providers that contain accounts across identity providers with the same username, a remote authenticated user with access to one of these accounts may be able to obtain a token for an account of the same username in the other identity provider.
Problem types: description: Improper Authentication
Affected products: vendor: Cloud Foundry
product: UAA Release
Published: 2018-12-13T22:00:00.000Z
CVE-2018-15755 CF networking internal policy server SQL injection
Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to the policy server.
Problem types: description: SQL Injection
Affected products: vendor: Cloud Foundry
product: CF Networking Release
Published: 2018-10-12T21:00:00.000Z