rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-18249 
Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving environment variables as the channel to send information to the attacker, such as a name=${PATH}_${APACHE_RUN_DIR}_${APACHE_RUN_USER} parameter to /icingaweb2/navigation/add or /icingaweb2/dashboard/new-dashlet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-18250 
Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the Name of a Navigation item.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-18251 
Deltek Vision 7.x before 7.6 permits the execution of any attacker supplied SQL statement through a custom RPC over HTTP protocol. The Vision system relies on the client binary to enforce security rules and integrity of SQL statements and other content being sent to the server. Client HTTP calls can be manipulated by one of several means to execute arbitrary SQL statements (similar to SQLi) or possibly have unspecified other impact via this custom protocol. To perform these attacks an authenticated session is first required. In some cases client calls are obfuscated by encryption, which can be bypassed due to hard-coded keys and an insecure key rotation protocol. Impacts may include remote code execution in some deployments; however, the vendor states that this cannot occur when the installation documentation is heeded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T20:13:06.000Z
CVE-2018-18252 
An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe provides "NT AUTHORITY\SYSTEM" access to unprivileged users via the --system option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-15T15:00:00.000Z
CVE-2018-18253 
An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by adding an unprivileged user to the local Administrators group for a very short time to execute a single command. However, the user is left in that group if the command crashes, and there is also a race condition in all cases.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-15T15:00:00.000Z
CVE-2018-18254 
An issue was discovered in CapMon Access Manager 5.4.1.1005. An unprivileged user can read the cal_whitelist table in the Custom App Launcher (CAL) database, and potentially gain privileges by placing a Trojan horse program at an app pathname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-15T15:00:00.000Z
CVE-2018-18255 
An issue was discovered in CapMon Access Manager 5.4.1.1005. The client applications of AccessManagerCoreService.exe communicate with this server through named pipes. A user can initiate communication with the server by creating a named pipe and sending commands to achieve elevated privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-15T15:00:00.000Z
CVE-2018-18256 
An issue was discovered in CapMon Access Manager 5.4.1.1005. A regular user can obtain local administrator privileges if they run any whitelisted application through the Custom App Launcher.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-15T15:00:00.000Z
CVE-2018-18257 
An issue was discovered in BageCMS 3.1.3. An attacker can delete any files and folders on the web server via an index.php?r=admini/template/batch&command=deleteFile&fileName= or index.php?r=admini/template/batch&command=deleteFolder&folderName=../ directory traversal URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-11T20:00:00.000Z
CVE-2018-18258 
An issue was discovered in BageCMS 3.1.3. The attacker can execute arbitrary PHP code on the web server and can read any file on the web server via an index.php?r=admini/template/updateTpl&filename= URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-11T20:00:00.000Z
CVE-2018-18259 
Stored XSS has been discovered in version 1.0.12 of the LUYA CMS software via /admin/api-cms-nav/create-page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T19:00:00.000Z
CVE-2018-18260 
In the 2.4 version of Camaleon CMS, Stored XSS has been discovered. The profile image in the User settings section can be run in the update / upload area via /admin/media/upload?actions=false. NOTE: the vendor reports that they are "unable to reproduce the reported issue on any version."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T00:00:00.000Z
CVE-2018-18261 
In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-14T17:12:13.000Z
CVE-2018-18262 
Zoho ManageEngine OpManager 12.3 before build 123214 has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-17T14:00:00.000Z
CVE-2018-18264 
Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T01:00:00.000Z
CVE-2018-18270 
XSS exists in CMS Made Simple version 2.2.7 via the m1_news_url parameter in an admin/moduleinterface.php "Content-->News-->Add Article" action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-12T19:00:00.000Z
CVE-2018-18271 
XSS exists in CMS Made Simple version 2.2.7 via the m1_extra parameter in an admin/moduleinterface.php "Content-->News-->Add Article" action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-12T19:00:00.000Z
CVE-2018-18274 
A issue was found in pdfalto 0.2. There is a heap-based buffer overflow in the TextPage::addAttributsNode function in XmlAltoOutputDev.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-12T21:00:00.000Z
CVE-2018-18276 
XSS exists in the ProFiles 1.5 component for Joomla! via the name or path parameter when creating a new folder in the administrative panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-26T19:43:31.000Z
CVE-2018-18281 
Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from the pagetables of a task that is in the middle of mremap(), a stale TLB entry can remain for a short time that permits access to a physical page after it has been released back to the page allocator and reused. This is fixed in the following kernel versions: 4.9.135, 4.14.78, 4.18.16, 4.19.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-30T18:00:00.000Z
CVE-2018-18282 
Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /_error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-12T22:00:00.000Z
CVE-2018-18284 
Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-19T22:00:00.000Z
CVE-2018-18285 
SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the login interface. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-25T19:12:13.000Z
CVE-2018-18286 
SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the changepwd interface. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-25T18:57:33.000Z
CVE-2018-18287 
On ASUS RT-AC58U 3.0.0.4.380_6516 devices, remote attackers can discover hostnames and IP addresses by reading dhcpLeaseInfo data in the HTML source code of the Main_Login.asp page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-14T21:00:00.000Z
CVE-2018-18288 
CrushFTP through 8.3.0 is vulnerable to credentials theft via URL redirection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T00:00:00.000Z
CVE-2018-18289 
The MESILAT Zabbix plugin before 1.1.15 for Atlassian Confluence allows attackers to read arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-14T21:00:00.000Z
CVE-2018-18290 
An issue was discovered in nc-cms through 2017-03-10. index.php?action=edit_html&name=home_content allows XSS via the HTML Source Editor. NOTE: the vendor disputes this because the form requires administrator privileges, and entering JavaScript is supported functionality
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-14T21:00:00.000Z
CVE-2018-18291 
A cross site scripting (XSS) vulnerability on ASUS RT-AC58U 3.0.0.4.380_6516 devices allows remote attackers to inject arbitrary web script or HTML via Advanced_ASUSDDNS_Content.asp, Advanced_WSecurity_Content.asp, Advanced_Wireless_Content.asp, Logout.asp, Main_Login.asp, MobileQIS_Login.asp, QIS_wizard.htma, YandexDNS.asp, ajax_status.xml, apply.cgi, clients.asp, disk.asp, disk_utility.asp, or internet.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-14T21:00:00.000Z
CVE-2018-18296 
MetInfo 6.1.2 has XSS via the /admin/index.php bigclass parameter in an n=column&a=doadd action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T02:00:00.000Z
CVE-2018-18307 
A Stored XSS vulnerability has been discovered in version 4.1.0 of AlchemyCMS via the /admin/pictures image field. NOTE: the vendor's position is that this is not a valid report: "The researcher used an authorized cookie to perform the request to a password-protected route. Without that session cookie, the request would have been rejected as unauthorized."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-16T00:00:00.000Z
CVE-2018-18308 
In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ (aka the image upload area).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-16T22:00:00.000Z
CVE-2018-18309 
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory address dereference was discovered in read_reloc in reloc.c. The vulnerability causes a segmentation fault and application crash, which leads to denial of service, as demonstrated by objdump, because of missing _bfd_clear_contents bounds checking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T02:00:00.000Z
CVE-2018-18310 
An invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers to cause a denial of service (application crash) with a crafted ELF file, as demonstrated by consider_notes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T02:00:00.000Z
CVE-2018-18311 
Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-07T21:00:00.000Z
CVE-2018-18312 
Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-05T22:00:00.000Z
CVE-2018-18313 
Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-07T21:00:00.000Z
CVE-2018-18314 
Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-07T21:00:00.000Z
CVE-2018-18315 
com/mossle/cdn/CdnController.java in lemon 1.9.0 allows attackers to upload arbitrary files because the copyMultipartFileToFile method in CdnUtils only checks for a ../ substring, and does not validate the file type and spaceName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T04:00:00.000Z
CVE-2018-18316 
emlog v6.0.0 has CSRF via the admin/user.php?action=new URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T04:00:00.000Z
CVE-2018-18317 
DESHANG DSCMS 1.1 has CSRF via the public/index.php/admin/admin/add.html URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T04:00:00.000Z
CVE-2018-18318 
The /dev/block/mmcblk0rpmb driver kernel module on Qiku 360 Phone N6 Pro 1801-A01 devices allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted 0xc0d8b300 ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T05:00:00.000Z
CVE-2018-18319 
An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because api.php has an eval call, as demonstrated by the /6/api.php?function=command&class=remote&Cc='ls' URI. NOTE: the vendor indicates that Merlin.PHP is designed only for use on a trusted intranet network, and intentionally allows remote code execution
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T06:00:00.000Z
CVE-2018-18320 
An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because exec.php has a popen call. NOTE: the vendor indicates that Merlin.PHP is designed only for use on a trusted intranet network, and intentionally allows remote code execution
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T06:00:00.000Z
CVE-2018-18322 
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/index.php service_start, service_restart, service_fullstatus, or service_stop parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T07:00:00.000Z
CVE-2018-18323 
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=file_editor&file=/../ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T07:00:00.000Z
CVE-2018-18324 
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fm_current_dir parameter, or the admin/index.php module, service_start, service_fullstatus, service_restart, service_stop, or file (within the file_editor) parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T07:00:00.000Z
CVE-2018-18325 
DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T16:37:17.000Z
CVE-2018-18326 
DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T16:39:12.000Z
CVE-2018-18327 
A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. The issue results from the lack of proper validation function on 0x6eDC offset user-supplied buffer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Problem types: description: Privilege Escalation
Affected products: vendor: Trend Micro
product: Trend Micro Antivirus for Mac (Consumer)
Published: 2018-10-23T14:00:00.000Z
CVE-2018-18328 
A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. The issue results from the lack of proper validation function on 0x6F6A offset user-supplied buffer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Problem types: description: Privilege Escalation
Affected products: vendor: Trend Micro
product: Trend Micro Antivirus for Mac (Consumer)
Published: 2018-10-23T14:00:00.000Z
CVE-2018-18329 
A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. The issue results from the lack of proper validation function on 0x6F4E offset user-supplied buffer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Problem types: description: Privilege Escalation
Affected products: vendor: Trend Micro
product: Trend Micro Antivirus for Mac (Consumer)
Published: 2018-10-23T14:00:00.000Z
CVE-2018-18330 
An Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android (Consumer) versions 3.0.1324 and below could allow an attacker to potentially trick a victim into visiting a malicious URL using address bar spoofing on the Private Browser of the app on vulnerable installations.
Problem types: description: Address Bar Spoofing
Affected products: vendor: Trend Micro
product: Trend Micro Dr. Safety for Android (Consumer)
Published: 2018-12-21T15:00:00.000Z
CVE-2018-18331 
A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alter the files, which could lead to other exploits on vulnerable installations.
Problem types: description: Weak File Permissions
Affected products: vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2018-12-21T15:00:00.000Z
CVE-2018-18332 
A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other files and folders on vulnerable installations.
Problem types: description: Weak File Permissions
Affected products: vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2018-12-21T15:00:00.000Z
CVE-2018-18333 
A DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below could allow an attacker to manipulate a specific DLL and escalate privileges on vulnerable installations.
Problem types: description: DLL Hijacking
Affected products: vendor: Trend Micro
product: Trend Micro Security (Consumer)
Published: 2019-02-05T22:00:00.000Z
CVE-2018-18334 
A vulnerability in the Private Browser of Trend Micro Dr. Safety for Android (Consumer) versions below 3.0.1478 could allow an remote attacker to bypass the Same Origin Policy (SOP) and obtain sensitive information via crafted JavaScript code on vulnerable installations.
Problem types: description: SOP Bypass
Affected products: vendor: Trend Micro
product: Trend Micro Dr. Safety for Android (Consumer)
Published: 2019-02-05T22:00:00.000Z
CVE-2018-18335 
Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Heap buffer overflow
Affected products: vendor: Google
product: Chrome
Published: 2018-12-11T15:00:00.000Z
CVE-2018-18336 
Incorrect object lifecycle in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2018-12-11T15:00:00.000Z
CVE-2018-18337 
Incorrect handling of stylesheets leading to a use after free in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2018-12-11T15:00:00.000Z
CVE-2018-18338 
Incorrect, thread-unsafe use of SkImage in Canvas in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Heap buffer overflow
Affected products: vendor: Google
product: Chrome
Published: 2018-12-11T15:00:00.000Z
CVE-2018-18339 
Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2018-12-11T15:00:00.000Z
CVE-2018-18340 
Incorrect object lifecycle in MediaRecorder in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2018-12-11T15:00:00.000Z
CVE-2018-18341 
An integer overflow leading to a heap buffer overflow in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Heap buffer overflow
Affected products: vendor: Google
product: Chrome
Published: 2018-12-11T15:00:00.000Z
CVE-2018-18342 
Execution of user supplied Javascript during object deserialization can update object length leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Problem types: description: Out of bounds write
Affected products: vendor: Google
product: Chrome
Published: 2018-12-11T15:00:00.000Z
CVE-2018-18343 
Incorrect handing of paths leading to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2018-12-11T15:00:00.000Z