rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-10778 
Read access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact, a different vulnerability than CVE-2017-9872 and CVE-2017-14409.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-07T07:00:00.000Z
CVE-2018-10779 
TIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-07T07:00:00.000Z
CVE-2018-10780 
Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-07T07:00:00.000Z
CVE-2018-10790 
The AP4_CttsAtom class in Core/Ap4CttsAtom.cpp in Bento4 1.5.1.0 allows remote attackers to cause a denial of service (application crash), related to a memory allocation failure, as demonstrated by mp2aac.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-25T13:54:26.000Z
CVE-2018-10795 
Liferay 6.2.x and before has an FCKeditor configuration that allows an attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment via a browser/liferay/browser.html?Type= or html/js/editor/fckeditor/editor/filemanager/browser/liferay/browser.html URI. NOTE: the vendor disputes this issue because file upload is an expected feature, subject to Role Based Access Control checks where only authenticated users with proper permissions can upload files
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-07T13:00:00.000Z
CVE-2018-10796 
In 2345 Security Guard 3.7, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222014.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-07T14:00:00.000Z
CVE-2018-10798 
A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux). The vulnerability is caused by mishandling of JavaScript code that triggers the reload of a page continuously with an interval of 1 second.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-07T14:00:00.000Z
CVE-2018-10799 
A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux). This vulnerability is caused by the mishandling of a long URL formed by window.location+='?\u202a\uFEFF\u202b'; concatenation in a SCRIPT element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-07T14:00:00.000Z
CVE-2018-10801 
TIFFClientOpen in tif_unix.c in LibTIFF 3.8.2 has memory leaks, as demonstrated by bmp2tiff.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-08T06:00:00.000Z
CVE-2018-10803 
Cross-site scripting (XSS) vulnerability in the add credentials functionality in Zoho ManageEngine NetFlow Analyzer v12.3 before 12.3.125 (build 123125) allows remote attackers to inject arbitrary web script or HTML via a crafted description value. This can be exploited through CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-10T14:00:00.000Z
CVE-2018-10804 
ImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-08T07:00:00.000Z
CVE-2018-10805 
ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-08T07:00:00.000Z
CVE-2018-10806 
An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the file[current_name] parameter to the admin/?/plugin/file_manager/rename URI. This can be used in conjunction with CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-08T07:00:00.000Z
CVE-2018-10809 
In 2345 Security Guard 3.7, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222040. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-8873.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-08T07:00:00.000Z
CVE-2018-10810 
chat/mobile/index.php in LiveZilla Live Chat 7.0.9.5 and prior is affected by Cross-Site Scripting via the Accept-Language HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T13:00:00.000Z
CVE-2018-10811 
strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T21:00:00.000Z
CVE-2018-10812 
The Bitpie application through 3.2.4 for Android and iOS uses cleartext storage for digital currency initial keys, which allows local users to steal currency by leveraging root access to read /com.biepie/shared_prefs/com.bitpie_preferences.xml (on Android) or a plist file in the app data folder (on iOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-08T19:00:00.000Z
CVE-2018-10813 
In Dedos-web 1.0, the cookie and session secrets used in the Express.js application have hardcoded values that are visible in the source code published on GitHub. An attacker can edit the contents of the session cookie and re-sign it using the hardcoded secret. Due to the use of Passport.js, this could lead to privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T15:00:00.000Z
CVE-2018-10814 
Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-14T21:00:00.000Z
CVE-2018-10815 
An issue was discovered in Cloudera Manager before 5.13.4, 5.14.x before 5.14.4, and 5.15.x before 5.15.1. A read-only user can access sensitive cluster information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-24T16:58:56.000Z
CVE-2018-10817 
Severalnines ClusterControl before 1.6.0-4699 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-09T03:00:00.000Z
CVE-2018-10821 
Cross-site scripting (XSS) vulnerability in backend/pages/modify.php in BlackCatCMS 1.3 allows remote authenticated users with the Admin role to inject arbitrary web script or HTML via the search panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-14T16:00:00.000Z
CVE-2018-10822 
Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices allows remote attackers to read arbitrary files via a /.. or // after "GET /uir" in an HTTP request.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-6190.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-17T14:00:00.000Z
CVE-2018-10823 
An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. An authenticated attacker may execute arbitrary code by injecting the shell command into the chkisg.htm page Sip parameter. This allows for full control over the device internals.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-17T14:00:00.000Z
CVE-2018-10824 
An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. The administrative password is stored in plaintext in the /tmp/csman/0 file. An attacker having a directory traversal (or LFI) can easily get full router access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-17T14:00:00.000Z
CVE-2018-10825 
Mimo Baby 2 devices do not use authentication or encryption for the Bluetooth Low Energy (BLE) communication from a Turtle to a Lilypad, which allows attackers to inject fake information about the position and temperature of a baby via a replay or spoofing attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-15T04:00:00.000Z
CVE-2018-10827 
LiteCart before 2.1.2 allows remote attackers to cause a denial of service (memory consumption) via URIs that do not exist, because public_html/logs/not_found.log grows without bound, and is loaded into memory for each request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-09T04:00:00.000Z
CVE-2018-10828 
An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and write to the "ApMsgFwd File Mapping Object" section. ApMsgFwd.exe uses the data written to this section as arguments to functions. This causes a denial of service condition when invalid pointers are written to the mapped section. This driver has been used with Dell, ThinkPad, and VAIO devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-09T18:00:00.000Z
CVE-2018-10830 
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x002220e0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-09T07:00:00.000Z
CVE-2018-10831 
Z-NOMP before 2018-04-05 has an incorrect Equihash solution verifier that allows attackers to spoof mining shares, as demonstrated by providing a solution with {x1=1,x2=1,x3=1,...,x512=1} to bypass this verifier for any blockheader. This originally affected (for example) the Bitcoin Gold and Zcash cryptocurrencies, and continued to be exploited in the wild in May 2018 against smaller cryptocurrencies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-09T05:00:00.000Z
CVE-2018-10832 
ModbusPal 1.6b is vulnerable to an XML External Entity (XXE) attack. Projects are saved as .xmpp files and automations can be exported as .xmpa files, both XML-based, which are vulnerable to XXE injection. Sending a crafted .xmpp or .xmpa file to a user, when opened/imported in ModbusPal, will return the contents of any local files to a remote attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-11T21:00:00.000Z
CVE-2018-10839 
Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: The QEMU Project
product: Qemu-kvm
Published: 2018-10-16T14:00:00.000Z
CVE-2018-10840 
Linux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c:ext4_xattr_set_entry() function. An attacker could exploit this by operating on a mounted crafted ext4 image.
Problem types: cwe_id: CWE-122
description: CWE-122
Affected products: vendor: kernel
product: heap-based buffer overflow in fs/ext4/xattr.c
Published: 2018-07-16T20:00:00.000Z
CVE-2018-10841 
glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool, start, stop, and delete volumes.
Problem types: cwe_id: CWE-288
description: CWE-288
Affected products: vendor: Red Hat
product: glusterfs
Published: 2018-06-20T18:00:00.000Z
CVE-2018-10843 
source-to-image component of Openshift Container Platform before versions atomic-openshift 3.7.53, atomic-openshift 3.9.31 is vulnerable to a privilege escalation which allows the assemble script to run as the root user in a non-privileged container. An attacker can use this flaw to open network connections, and possibly other actions, on the host which are normally only available to a root user.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: [UNKNOWN]
product: source-to-image
Published: 2018-07-02T17:00:00.000Z
CVE-2018-10844 
It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets.
Problem types: cwe_id: CWE-385
description: CWE-385
Affected products: vendor: [UNKNOWN]
product: gnutls
Published: 2018-08-22T13:00:00.000Z
CVE-2018-10845 
It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets.
Problem types: cwe_id: CWE-385
description: CWE-385
Affected products: vendor: [UNKNOWN]
product: gnutls
Published: 2018-08-22T13:00:00.000Z
CVE-2018-10846 
A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker could use a combination of "Just in Time" Prime+probe attack in combination with Lucky-13 attack to recover plain text using crafted packets.
Problem types: cwe_id: CWE-385
description: CWE-385
Affected products: vendor: [UNKNOWN]
product: gnutls
Published: 2018-08-22T13:00:00.000Z
CVE-2018-10847 
prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtual host associated with a user session remained the same across stream restarts. A user may authenticate to XMPP host A and migrate their authenticated session to XMPP host B of the same Prosody instance.
Problem types: cwe_id: CWE-592
description: CWE-592
Affected products: vendor: [UNKNOWN]
product: prosody
Published: 2018-07-30T16:00:00.000Z
CVE-2018-10850 
389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting in a crash if the server is under load. An anonymous attacker could use this flaw to trigger a denial of service.
Problem types: cwe_id: CWE-362
description: CWE-362
Affected products: vendor: [UNKNOWN]
product: 389-ds-base
Published: 2018-06-13T20:00:00.000Z
CVE-2018-10851 
PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: The PowerDNS Project
product: pdns
vendor: The PowerDNS Project
product: pdns-recursor
Published: 2018-11-29T18:00:00.000Z
CVE-2018-10852 
The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user. This affects versions of SSSD before 1.16.3.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: [UNKNOWN]
product: sssd
Published: 2018-06-26T14:00:00.000Z
CVE-2018-10853 
A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) level while emulating unprivileged instructions. An unprivileged guest user/process could use this flaw to potentially escalate privileges inside guest.
Problem types: cwe_id: CWE-250
description: CWE-250
Affected products: vendor: Linux
product: kernel
Published: 2018-09-11T14:00:00.000Z
CVE-2018-10854 
cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A flaw was found in CloudForms's v2v infrastructure mapping delete feature. A stored cross-site scripting due to improper sanitization of user input in Name field.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Red Hat
product: cloudforms
Published: 2019-11-22T11:51:08.000Z
CVE-2018-10855 
Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks. When the no_log flag has been used to protect sensitive data passed to a task from being logged, and that task does not run successfully, Ansible will expose sensitive data in log files and on the terminal of the user running Ansible.
Problem types: cwe_id: CWE-532
description: CWE-532
Affected products: vendor: [UNKNOWN]
product: ansible
Published: 2018-07-02T18:00:00.000Z
CVE-2018-10856 
It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container.
Problem types: cwe_id: CWE-250
description: CWE-250
Affected products: vendor: [UNKNOWN]
product: podman
Published: 2018-07-02T18:00:00.000Z
CVE-2018-10857 
git-annex is vulnerable to a private data exposure and exfiltration attack. It could expose the content of files located outside the git-annex repository, or content from a private web server on localhost or the LAN.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: [UNKNOWN]
product: git-annex
Published: 2018-07-16T20:00:00.000Z
CVE-2018-10858 
A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: The Samba Team
product: samba
Published: 2018-08-22T17:00:00.000Z
CVE-2018-10859 
git-annex is vulnerable to an Information Exposure when decrypting files. A malicious server for a special remote could trick git-annex into decrypting a file that was encrypted to the user's gpg key. This attack could be used to expose encrypted data that was never stored in git-annex
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: [UNKNOWN]
product: git-annex
Published: 2018-07-16T18:00:00.000Z
CVE-2018-10860 
perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or overwrite arbitrary files in the context of the perl interpreter.
Problem types: cwe_id: CWE-22
description: CWE-22
Affected products: vendor: [UNKNOWN]
product: perl-archive-zip
Published: 2018-06-29T19:00:00.000Z
CVE-2018-10861 
A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.
Problem types: cwe_id: CWE-285
description: CWE-285
Affected products: vendor: Red Hat, Inc.
product: ceph
Published: 2018-07-10T14:00:00.000Z
CVE-2018-10862 
WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-27T14:00:00.000Z
CVE-2018-10863 
It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /var/www/rhcert/store/transfer directory, through the /rhcert-transfer URL. An unauthorized attacker may use this flaw to gather sensible information.
Problem types: cwe_id: CWE-552
description: CWE-552
Affected products: vendor: n/a
product: redhat-certification
Published: 2021-05-26T18:03:06.000Z
CVE-2018-10864 
An uncontrolled resource consumption flaw has been discovered in redhat-certification in the way documents are loaded. A remote attacker may provide an existing but invalid XML file which would be opened and never closed, possibly producing a Denial of Service.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: [UNKNOWN]
product: redhat-certification:
Published: 2018-08-13T17:00:00.000Z
CVE-2018-10865 
It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenticated user to call a "restart" RPC method on any host accessible by the system, even if not belonging to him.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: n/a
product: redhat-certification
Published: 2021-05-26T18:03:11.000Z
CVE-2018-10866 
It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenticated user to remove a "system" file, that is an xml file with host related information, not belonging to him.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: n/a
product: redhat-certification
Published: 2021-05-26T18:03:16.000Z
CVE-2018-10867 
Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove any file accessible by the apached user.
Problem types: cwe_id: CWE-552
description: CWE-552
Affected products: vendor: n/a
product: redhat-certification
Published: 2021-05-26T18:03:20.000Z
CVE-2018-10868 
redhat-certification 7 does not properly restrict the number of recursive definitions of entities in XML documents, allowing an unauthenticated user to run a "Billion Laugh Attack" by replying to XMLRPC methods when getting the status of an host.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: n/a
product: redhat-certification
Published: 2021-05-26T18:03:25.000Z
CVE-2018-10869 
redhat-certification does not properly restrict files that can be download through the /download page. A remote attacker may download any file accessible by the user running httpd.
Problem types: cwe_id: CWE-552
description: CWE-552
Affected products: vendor: [UNKNOWN]
product: redhat-certification
Published: 2018-07-19T22:00:00.000Z
CVE-2018-10870 
redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A remote attacker could use this flaw to overwrite any file, potentially gaining remote code execution.
Problem types: cwe_id: CWE-22
description: CWE-22
Affected products: vendor: redhat-certification
product: rhcertstore.py
Published: 2018-07-19T22:00:00.000Z
CVE-2018-10871 
389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information. By default, when the Replica and/or retroChangeLog plugins are enabled, 389-ds-base stores passwords in plaintext format in their respective changelog files. An attacker with sufficiently high privileges, such as root or Directory Manager, can query these files in order to retrieve plaintext passwords.
Problem types: cwe_id: CWE-312
description: CWE-312
Affected products: vendor: [UNKNOWN]
product: 389-ds-base
Published: 2018-07-18T13:00:00.000Z