rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-15004 
The Coolpad Canvas device with a build fingerprint of Coolpad/cp3636a/cp3636a:7.0/NRD90M/093031423:user/release-keys contains a platform app with a package name of com.qualcomm.qti.modemtestmode (versionCode=24, versionName=7.0) that contains an exported service app component named com.qualcomm.qti.modemtestmode.MbnTestService that allows any app on the device to set certain system properties as the com.android.phone user. When an app sets the persist.service.logr.enable system property to a value of 1, an app with a package name of com.yulong.logredirect (versionCode=20160622, versionName=5.25_20160622_01) will start writing the system-wide logcat log, kernel log, and a tcpdump network traffic capture to external storage. Furthermore, on the Coolpad Canvas device, the com.android.phone app writes the destination phone number and body of the text message for outgoing text messages. A notification when logging can be avoided if the log is enabled after device startup and disabled prior to device shutdown by setting the system properties using the exported interface of the com.qualcomm.qti.modemtestmode app. Any app with the READ_EXTERNAL_STORAGE permission can access the log files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T21:00:00.000Z
CVE-2018-15005 
The ZTE ZMAX Champ Android device with a build fingerprint of ZTE/Z917VL/fortune:6.0.1/MMB29M/20170327.120922:user/release-keys contains a pre-installed platform app with a package name of com.zte.zdm.sdm (versionCode=31, versionName=V5.0.3) that contains an exported broadcast receiver app component named com.zte.zdm.VdmcBroadcastReceiver that allows any app co-located on the device to programmatically initiate a factory reset. In addition, the app initiating the factory reset does not require any permissions. A factory reset will remove all user data and apps from the device. This will result in the loss of any data that have not been backed up or synced externally. The capability to perform a factory reset is not directly available to third-party apps (those that the user installs themselves with the exception of enabled Mobile Device Management (MDM) apps), although this capability can be obtained by leveraging an unprotected app component of a pre-installed platform app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T21:00:00.000Z
CVE-2018-15006 
The ZTE ZMAX Champ Android device with a build fingerprint of ZTE/Z917VL/fortune:6.0.1/MMB29M/20170327.120922:user/release-keys contains a pre-installed platform app with a package name of com.android.zte.hiddenmenu (versionCode=23, versionName=6.0.1) that contains an exported broadcast receiver app component named com.android.zte.hiddenmenu.CommandReceiver that is accessible to any app co-located on the device. This app component, when it receives a broadcast intent with a certain action string, will write a non-standard (i.e., not defined in Android Open Source Project (AOSP) code) command to the /cache/recovery/command file to be executed in recovery mode. Once the device boots into recovery mode, it will crash, boot into recovery mode, and crash again. This crash loop will keep repeating, which makes the device unusable. There is no way to boot into an alternate mode once the crash loop starts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T21:00:00.000Z
CVE-2018-15007 
The Sky Elite 6.0L+ Android device with a build fingerprint of SKY/x6069_trx_l601_sky/x6069_trx_l601_sky:6.0/MRA58K/1482897127:user/release-keys contains a pre-installed platform app with a package name of com.fw.upgrade.sysoper (versionCode=238, versionName=2.3.8) that contains an exported broadcast receiver app component named com.adups.fota.sysoper.WriteCommandReceiver that allows any app co-located on the device to supply arbitrary commands to be executed as the system user. The com.fw.upgrade.sysoper app cannot be disabled by the user and the attack can be performed by a zero-permission app. Executing commands as system user can allow a third-party app to video record the user's screen, factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the Graphical User Interface (GUI), change the default Input Method Editor (IME) (e.g., keyboard) with one contained within the attacking app that contains keylogging functionality, obtain the user's text messages, and more.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T21:00:00.000Z
CVE-2018-15120 
libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted text with invalid Unicode sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-24T19:00:00.000Z
CVE-2018-15121 
An issue was discovered in Auth0 auth0-aspnet and auth0-aspnet-owin. Affected packages do not use or validate the state parameter of the OAuth 2.0 and OpenID Connect protocols. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-29T03:00:00.000Z
CVE-2018-15122 
An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and JustDecompile through 2018.2.605.0 makes it possible to execute code by decompiling a compiled .NET object (such as DLL or EXE) with an embedded resource file by clicking on the resource.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-16T20:00:00.000Z
CVE-2018-15123 
Insecure configuration storage in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows remote attacker perform new attack vectors and take under control device and smart home.
Problem types: description: Insecure configuration storage
Affected products: vendor: Kaspersky Lab
product: Zipato Zipabox Smart Home Controller
Published: 2018-08-13T21:00:00.000Z
CVE-2018-15124 
Weak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows unauthenticated attacker extract clear text passwords and get root access on the device.
Problem types: description: Weak hashing algorithm
Affected products: vendor: Kaspersky Lab
product: Zipato Zipabox Smart Home Controller
Published: 2018-08-13T21:00:00.000Z
CVE-2018-15125 
Sensitive Information Disclosure in Zipato Zipabox Smart Home Controller allows remote attacker get sensitive information that expands attack surface.
Problem types: description: Sensitive Information Disclosure
Affected products: vendor: Kaspersky Lab
product: Zipato Zipabox Smart Home Controller
Published: 2018-08-13T21:00:00.000Z
CVE-2018-15126 
LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server code of file transfer extension that can result remote code execution
Problem types: description: Heap Use-After-Free
Affected products: vendor: n/a
product: LibVNC
Published: 2018-12-19T16:00:00.000Z
CVE-2018-15127 
LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code execution
Problem types: description: Heap Out-of-Bound write
Affected products: vendor: n/a
product: LibVNC
Published: 2018-12-19T16:00:00.000Z
CVE-2018-15128 
An issue was discovered in Polycom Group Series 6.1.6.1 and earlier, HDX 3.1.12 and earlier, and Pano 1.1.1 and earlier. A remote code execution vulnerability exists in the content sharing functionality because of a Buffer Overflow via crafted packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T13:18:22.000Z
CVE-2018-15129 
ThinkSAAS through 2018-07-25 has XSS via the index.php?app=article&ac=comment&ts=do content parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-07T07:00:00.000Z
CVE-2018-15130 
ThinkSAAS through 2018-07-25 has XSS via the index.php?app=group&ac=create&ts=do groupdesc parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-07T14:00:00.000Z
CVE-2018-15131 
An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-30T15:22:03.000Z
CVE-2018-15132 
An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. The linkinfo function on Windows doesn't implement the open_basedir check. This could be abused to find files on paths outside of the allowed directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-07T15:00:00.000Z
CVE-2018-15133 
In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. This involves the decrypt method in Illuminate/Encryption/Encrypter.php and PendingBroadcast in gadgetchains/Laravel/RCE/3/chain.php in phpggc. The attacker must know the application key, which normally would never occur, but could happen if the attacker previously had privileged access or successfully accomplished a previous attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-09T19:00:00.000Z
CVE-2018-15136 
TitanHQ SpamTitan before 7.01 has Improper input validation. This allows internal attackers to bypass the anti-spam filter to send malicious emails to an entire organization by modifying the URL requests sent to the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T23:00:00.000Z
CVE-2018-15137 
CeLa Link CLR-M20 devices allow unauthorized users to upload any file (e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml), which causes remote code execution as well. Because of the WebDAV feature, it is possible to upload arbitrary files by utilizing the PUT method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-08T00:00:00.000Z
CVE-2018-15138 
Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-15T17:00:00.000Z
CVE-2018-15139 
Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary PHP code by uploading a file with a PHP extension via the images upload form and accessing it in the images directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-13T18:00:00.000Z
CVE-2018-15140 
Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to read arbitrary files via the "docid" parameter when the mode is set to get.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-13T18:00:00.000Z
CVE-2018-15141 
Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to delete arbitrary files via the "docid" parameter when the mode is set to delete.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-13T18:00:00.000Z
CVE-2018-15142 
Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to execute arbitrary PHP code by writing a file with a PHP extension via the "docid" and "content" parameters and accessing it in the traversed directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-13T18:00:00.000Z
CVE-2018-15143 
Multiple SQL injection vulnerabilities in portal/find_appt_popup_user.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the (1) catid or (2) providerid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-13T18:00:00.000Z
CVE-2018-15144 
SQL injection vulnerability in interface/de_identification_forms/find_drug_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the search_term parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-13T18:00:00.000Z
CVE-2018-15145 
Multiple SQL injection vulnerabilities in portal/add_edit_event_user.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the (1) eid, (2) userid, or (3) pid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-13T18:00:00.000Z
CVE-2018-15146 
SQL injection vulnerability in interface/de_identification_forms/find_immunization_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'search_term' parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-15T17:00:00.000Z
CVE-2018-15147 
SQL injection vulnerability in interface/forms_admin/forms_admin.php from library/registry.inc in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'id' parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-15T17:00:00.000Z
CVE-2018-15148 
SQL injection vulnerability in interface/patient_file/encounter/search_code.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'text' parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-15T17:00:00.000Z
CVE-2018-15149 
SQL injection vulnerability in interface/forms/eye_mag/php/Anything_simple.php from library/forms.inc in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'encounter' parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-15T17:00:00.000Z
CVE-2018-15150 
SQL injection vulnerability in interface/de_identification_forms/de_identification_screen2.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'temporary_files_dir' variable in interface/super/edit_globals.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-15T17:00:00.000Z
CVE-2018-15151 
SQL injection vulnerability in interface/de_identification_forms/find_code_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'search_term' parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-15T17:00:00.000Z
CVE-2018-15152 
Authentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker to access (1) portal/add_edit_event_user.php, (2) portal/find_appt_popup_user.php, (3) portal/get_allergies.php, (4) portal/get_amendments.php, (5) portal/get_lab_results.php, (6) portal/get_medications.php, (7) portal/get_patient_documents.php, (8) portal/get_problems.php, (9) portal/get_profile.php, (10) portal/portal_payment.php, (11) portal/messaging/messages.php, (12) portal/messaging/secure_chat.php, (13) portal/report/pat_ledger.php, (14) portal/report/portal_custom_report.php, or (15) portal/report/portal_patient_report.php without authenticating as a patient.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-15T17:00:00.000Z
CVE-2018-15153 
OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/main/daemon_frame.php after modifying the "hylafax_server" global variable in interface/super/edit_globals.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-15T17:00:00.000Z
CVE-2018-15154 
OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/billing/sl_eob_search.php after modifying the "print_command" global variable in interface/super/edit_globals.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-15T17:00:00.000Z
CVE-2018-15155 
OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/fax/fax_dispatch.php after modifying the "hylafax_enscript" global variable in interface/super/edit_globals.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-15T17:00:00.000Z
CVE-2018-15156 
OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/fax/faxq.php after modifying the "hylafax_server" global variable in interface/super/edit_globals.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-15T17:00:00.000Z
CVE-2018-15157 
The libfsclfs_block_read function in libfsclfs_block.c in libfsclfs before 2018-07-25 allows remote attackers to cause a heap-based buffer over-read via a crafted clfs file. NOTE: the vendor has disputed this as described in the GitHub issue comments
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-01T03:00:00.000Z
CVE-2018-15158 
The libesedb_page_read_values function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-01T03:00:00.000Z
CVE-2018-15159 
The libesedb_page_read_tags function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-01T03:00:00.000Z
CVE-2018-15160 
The libesedb_catalog_definition_read function in libesedb_catalog_definition.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-01T03:00:00.000Z
CVE-2018-15161 
The libesedb_key_append_data function in libesedb_key.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-01T03:00:00.000Z
CVE-2018-15168 
A SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before build 13820 via the resids parameter in a /editDisplaynames.do?method=editDisplaynames GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-08T00:00:00.000Z
CVE-2018-15169 
A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager 13 before build 13820 allows remote attackers to inject arbitrary web script or HTML via the /deleteMO.do method parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-08T00:00:00.000Z
CVE-2018-15172 
TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-15T17:00:00.000Z
CVE-2018-15173 
Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted TCP-based service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-08T00:00:00.000Z
CVE-2018-15174 
XnView 2.45 allows remote attackers to cause a denial of service (Read Access Violation at the Instruction Pointer and application crash) or possibly have unspecified other impact via a crafted ICO file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-08T00:00:00.000Z
CVE-2018-15175 
XnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at Qt5Core!QVariant::~QVariant+0x0000000000000014 and application crash) or possibly have unspecified other impact via a crafted RLE file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-08T00:00:00.000Z
CVE-2018-15176 
XnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at MSVCR120!memcpy+0x0000000000000074 and application crash) or possibly have unspecified other impact via a crafted RLE file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-08T00:00:00.000Z
CVE-2018-15177 
In Gxlcms 2.0, a news/index.php?s=Admin-Admin-Insert CSRF attack can add an administrator account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-08T00:00:00.000Z
CVE-2018-15178 
Open redirect vulnerability in Gogs before 0.12 allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via an initial /\ substring in the user/login redirect_to parameter, related to the function isValidRedirect in routes/user/auth.go.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-08T00:00:00.000Z
CVE-2018-15180 
qTest Portal in QASymphony qTest Manager 9.0.0 has an Open Redirect via the /portal/loginform redirect parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-02T16:29:58.000Z
CVE-2018-15181 
JioFi 4G Hotspot M2S devices allow attackers to cause a denial of service (secure configuration outage) via an XSS payload in the SSID name and Security Key fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-09T19:00:00.000Z
CVE-2018-15182 
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-09T19:00:00.000Z
CVE-2018-15183 
PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-09T19:00:00.000Z
CVE-2018-15184 
PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-09T19:00:00.000Z