rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-11362 
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing '\0' character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T21:00:00.000Z
CVE-2018-11363 
jpeg_size in pdfgen.c in PDFGen before 2018-04-09 has a heap-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T04:00:00.000Z
CVE-2018-11364 
sav_parse_machine_integer_info_record in spss/readstat_sav_read.c in libreadstat.a in ReadStat 0.1.1 has a memory leak related to an iconv_open call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T04:00:00.000Z
CVE-2018-11365 
sas/readstat_sas7bcat_read.c in libreadstat.a in ReadStat 0.1.1 has an infinite loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T04:00:00.000Z
CVE-2018-11366 
init.php in the Loginizer plugin 1.3.8 through 1.3.9 for WordPress has Unauthenticated Stored Cross-Site Scripting (XSS) because logging is mishandled. This is fixed in 1.4.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T13:00:00.000Z
CVE-2018-11367 
An issue was discovered in CppCMS before 1.2.1. There is a denial of service in the JSON parser module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T13:00:00.000Z
CVE-2018-11369 
An issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important information from the database via the \apps\home\controller\ParserController.php scode parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T15:00:00.000Z
CVE-2018-11371 
SkyCaiji 1.2 allows CSRF to add an Administrator user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T16:00:00.000Z
CVE-2018-11372 
iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T17:00:00.000Z
CVE-2018-11373 
iScripts eSwap v2.4 has SQL injection via the "salelistdetailed.php" User Panel ToId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T17:00:00.000Z
CVE-2018-11375 
The _inst__lds() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T19:00:00.000Z
CVE-2018-11376 
The r_read_le32() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T19:00:00.000Z
CVE-2018-11377 
The avr_op_analyze() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T19:00:00.000Z
CVE-2018-11378 
The wasm_dis() function in libr/asm/arch/wasm/wasm.c in or possibly have unspecified other impact via a crafted WASM file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T19:00:00.000Z
CVE-2018-11379 
The get_debug_info() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted PE file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T19:00:00.000Z
CVE-2018-11380 
The parse_import_ptr() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted Mach-O file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T19:00:00.000Z
CVE-2018-11381 
The string_scan_range() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T19:00:00.000Z
CVE-2018-11382 
The _inst__sts() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T19:00:00.000Z
CVE-2018-11383 
The r_strbuf_fini() function in radare2 2.5.0 allows remote attackers to cause a denial of service (invalid free and application crash) via a crafted ELF file because of an uninitialized variable in the CPSE handler in libr/anal/p/anal_avr.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T19:00:00.000Z
CVE-2018-11384 
The sh_op() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T19:00:00.000Z
CVE-2018-11385 
An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. A session fixation vulnerability within the "Guard" login feature may allow an attacker to impersonate a victim towards the web application if the session id value was previously known to the attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-13T16:00:00.000Z
CVE-2018-11386 
An issue was discovered in the HttpFoundation component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. The PDOSessionHandler class allows storing sessions on a PDO connection. Under some configurations and with a well-crafted payload, it was possible to do a denial of service on a Symfony application without too much resources.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-13T16:00:00.000Z
CVE-2018-11392 
An arbitrary file upload vulnerability in /classes/profile.class.php in Jigowatt "PHP Login & User Management" before 4.1.1, as distributed in the Envato Market, allows any remote authenticated user to upload .php files to the web server via a profile avatar field. This results in arbitrary code execution by requesting the .php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-29T20:00:00.000Z
CVE-2018-11396 
ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that triggers access to a NULL URL, as demonstrated by a crafted window.open call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-23T13:00:00.000Z
CVE-2018-11399 
SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T05:00:00.000Z
CVE-2018-11400 
In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if a physically proximate attacker removes the battery and external power.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T05:00:00.000Z
CVE-2018-11401 
In SimpliSafe Original, RF Interference (e.g., an extremely strong 433.92 MHz signal) by a physically proximate attacker does not cause a notification.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T05:00:00.000Z
CVE-2018-11402 
SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T05:00:00.000Z
CVE-2018-11403 
DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T07:00:00.000Z
CVE-2018-11404 
DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T07:00:00.000Z
CVE-2018-11405 
Kliqqi 2.0.2 has CSRF in admin/admin_users.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T07:00:00.000Z
CVE-2018-11406 
An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. By default, a user's session is invalidated when the user is logged out. This behavior can be disabled through the invalidate_session option. In this case, CSRF tokens were not erased during logout which allowed for CSRF token fixation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-13T16:00:00.000Z
CVE-2018-11407 
An issue was discovered in the Ldap component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, and 4.0.x before 4.0.7. It allows remote attackers to bypass authentication by logging in with a "null" password and valid username, which triggers an unauthenticated bind.  NOTE: this issue exists because of an incomplete fix for CVE-2016-2403.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-13T16:00:00.000Z
CVE-2018-11408 
The security handlers in the Security component in Symfony in 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11 have an Open redirect vulnerability when security.http_utils is inlined by a container.  NOTE: this issue exists because of an incomplete fix for CVE-2017-16652.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-13T16:00:00.000Z
CVE-2018-11409 
Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T12:00:00.000Z
CVE-2018-11410 
An issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in compileTranslationTable.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T07:00:00.000Z
CVE-2018-11411 
The transferFrom function of a smart contract implementation for DimonCoin (FUD), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer all victims' balances into their account) because certain computations involving _value are incorrect.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T12:00:00.000Z
CVE-2018-11412 
In the Linux kernel 4.13 through 4.16.11, ext4_read_inline_data() in fs/ext4/inline.c performs a memcpy with an untrusted length value in certain circumstances involving a crafted filesystem that stores the system.data extended attribute value in a dedicated inode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T18:00:00.000Z
CVE-2018-11413 
An issue was discovered in BearAdmin 0.5. Remote attackers can download arbitrary files via /admin/databack/download.html?name= directory traversal sequences, as demonstrated by name=../application/database.php to read the MySQL credentials in the configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T18:00:00.000Z
CVE-2018-11414 
An issue was discovered in BearAdmin 0.5. There is admin/admin_log/index.html?user_id= SQL injection because admin\controller\AdminLog.php constructs a MySQL query improperly.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T18:00:00.000Z
CVE-2018-11415 
SAP Internet Transaction Server (ITS) 6200.X.X has Reflected Cross Site Scripting (XSS) via certain wgate URIs. NOTE: the vendor has reportedly indicated that there will not be any further releases of this product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T19:00:00.000Z
CVE-2018-11416 
jpegoptim.c in jpegoptim 1.4.5 (fixed in 1.4.6) has an invalid use of realloc() and free(), which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T20:00:00.000Z
CVE-2018-11418 
An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_utf8 function via a RegExp("[\\u0020") payload, related to re_parse_char_class in parser/regexp/re-parser.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T20:00:00.000Z
CVE-2018-11419 
An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_hex function via a RegExp("[\\u0") payload, related to re_parse_char_class in parser/regexp/re-parser.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T20:00:00.000Z
CVE-2018-11420 
There is Memory corruption in the web interface of Moxa OnCell G3100-HSPA Series version 1.5 Build 17042015 and prio,r a different vulnerability than CVE-2018-11423.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T15:25:58.000Z
CVE-2018-11421 
Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary monitoring protocol that does not provide confidentiality, integrity, and authenticity security controls. All information is sent in plain text, and can be intercepted and modified. The protocol is vulnerable to remote unauthenticated disclosure of sensitive information, including the administrator's password. Under certain conditions, it's also possible to retrieve additional information, such as content of HTTP requests to the device, or the previously used password, due to memory leakages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T15:24:45.000Z
CVE-2018-11422 
Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary configuration protocol that does not provide confidentiality, integrity, and authenticity security controls. All information is sent in plain text, and can be intercepted and modified. Any commands (including device reboot, configuration download or upload, or firmware upgrade) are accepted and executed by the device without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T15:23:32.000Z
CVE-2018-11423 
There is Memory corruption in the web interface Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior, different vulnerability than CVE-2018-11420.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T15:22:03.000Z
CVE-2018-11424 
There is Memory corruption in the web interface of Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11425.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T15:11:27.000Z
CVE-2018-11425 
Memory corruption issue was discovered in Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11424.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T15:09:48.000Z
CVE-2018-11426 
A weak Cookie parameter is used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker can brute force parameters required to bypass authentication and access the web interface to use all its functions except for password change.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T14:50:10.000Z
CVE-2018-11427 
CSRF tokens are not used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior, which makes it possible to perform CSRF attacks on the device administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T14:46:54.000Z
CVE-2018-11429 
ATLANT (ATL) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-04T00:00:00.000Z
CVE-2018-11430 
An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to save notes and display them in a list in the modCP. The XSS is located in the mod notes textarea.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-28T16:00:00.000Z
CVE-2018-11432 
The mobi_parse_mobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted mobi file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-30T13:00:00.000Z
CVE-2018-11433 
The mobi_get_kf8boundary_seqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted mobi file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-30T13:00:00.000Z
CVE-2018-11434 
The buffer_fill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted mobi file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-30T13:00:00.000Z
CVE-2018-11435 
The mobi_decompress_huffman_internal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure (read access violation) via a crafted mobi file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-30T13:00:00.000Z
CVE-2018-11436 
The buffer_addraw function in buffer.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted mobi file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-30T13:00:00.000Z
CVE-2018-11437 
The mobi_reconstruct_parts function in parse_rawml.c in Libmobi 0.3 allows remote attackers to cause information disclosure (read access violation) via a crafted mobi file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-30T13:00:00.000Z
CVE-2018-11438 
The mobi_decompress_lz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution (heap-based buffer overflow) via a crafted mobi file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-30T13:00:00.000Z
CVE-2018-11439 
The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-30T13:00:00.000Z
CVE-2018-11440 
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-25T11:00:00.000Z
CVE-2018-11442 
A CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a quotation-new3-new2.php?add=true&id= URI, as demonstrated by adding a new quotation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-25T12:00:00.000Z
CVE-2018-11443 
The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-25T12:00:00.000Z
CVE-2018-11444 
A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-25T12:00:00.000Z
CVE-2018-11445 
A CSRF issue was discovered on the User Add/System Settings Page (system-settings-user-new2.php) in EasyService Billing 1.0. A User can be added with the Admin role.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-25T12:00:00.000Z
CVE-2018-11446 
The buy function of a smart contract implementation for Gold Reward (GRX), an Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the buyer because of overflow of the multiplication of its argument amount and a manipulable variable buyPrice, aka the "tradeTrap" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T11:00:00.000Z
CVE-2018-11447 
A vulnerability has been identified in SCALANCE M875 (All versions). The web interface on port 443/tcp could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by an legitimate user, who must be authenticated to the web interface as administrative user. A successful attack could allow an attacker to interact with the web interface as an administrative user. This could allow the attacker to read or modify the device configuration, or to exploit other vulnerabilities that require authentication as administrative user. At the time of advisory publication no public exploitation of this security vulnerability was known.
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Siemens AG
product: SCALANCE M875
Published: 2018-06-26T18:00:00.000Z
CVE-2018-11448 
A vulnerability has been identified in SCALANCE M875 (All versions). The web interface on port 443/tcp could allow a stored Cross-Site Scripting (XSS) attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires that the attacker has access to the web interface of an affected device. The attacker must be authenticated as administrative user on the web interface. Afterwards, a legitimate user must access the web interface. A successful attack could allow an attacker to execute malicious code in the browser of a legitimate user. At the time of advisory publication no public exploitation of this security vulnerability was known.
Problem types: cwe_id: CWE-352
description: CWE-352: Cross-Site Request Forgery (CSRF)
Affected products: vendor: Siemens AG
product: SCALANCE M875
Published: 2018-06-26T18:00:00.000Z