rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-7236 
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could enable SSH service due to lack of authentication for /login/bin/set_param could enable SSH service.
Problem types: description: Authentication Bypass
Affected products: vendor: Schneider Electric SE
product: Pelco Sarix Professional
Published: 2018-03-09T23:00:00.000Z
CVE-2018-7237 
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow a remote attacker to delete arbitrary system file due to lack of validation of the /login/bin/set_param to the file name with the value of 'system.delete.sd_file'
Problem types: description: Arbitrary File Delete
Affected products: vendor: Schneider Electric SE
product: Pelco Sarix Professional
Published: 2018-03-09T23:00:00.000Z
CVE-2018-7238 
A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to execute arbitrary code.
Problem types: description: Buffer Overflow
Affected products: vendor: Schneider Electric SE
product: Pelco Sarix Professional
Published: 2018-03-09T23:00:00.000Z
CVE-2018-7239 
A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could allow an attacker to execute arbitrary code.
Problem types: description: DLL Hijacking
Affected products: vendor: Schneider Electric SE
product: SoMove
Published: 2018-03-09T23:00:00.000Z
CVE-2018-7240 
A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious firmware.
Problem types: description: Arbritrary Code Execution
Affected products: vendor: Schneider Electric SE
product: Modicon Quantum
Published: 2018-04-18T20:00:00.000Z
CVE-2018-7241 
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.
Problem types: description: Hard-coded accounts
Affected products: vendor: Schneider Electric SE
product: Modicon Premium, Modicon Quantum, Modicon M340, BMXNOR0200
Published: 2018-04-18T20:00:00.000Z
CVE-2018-7242 
Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks.
Problem types: description: Vulnerable Hash Algorithms
Affected products: vendor: Schneider Electric SE
product: Modicon Premium, Modicon Quantum, Modicon M340, BMXNOR0200
Published: 2018-04-18T20:00:00.000Z
CVE-2018-7243 
An authorization bypass vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server (Port 80/443/TCP) of the affected devices could allow a remote attacker to get a full access to device, bypassing the authorization system.
Problem types: description: Authorization Bypass
Affected products: vendor: Schneider Electric SE
product: 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS
Published: 2018-04-18T20:00:00.000Z
CVE-2018-7244 
An information disclosure vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server (Port 80/443/TCP) of the affected devices could allow a remote attacker to obtain sensitive device information if network access was obtained.
Problem types: description: Information Exposure
Affected products: vendor: Schneider Electric SE
product: 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS
Published: 2018-04-18T20:00:00.000Z
CVE-2018-7245 
An improper authorization vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server (Port 80/443/TCP) of the affected devices could allow a remote attacker to change UPS control and shutdown parameters or other critical settings without authorization.
Problem types: description: Improper Authorization
Affected products: vendor: Schneider Electric SE
product: 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS
Published: 2018-04-18T20:00:00.000Z
CVE-2018-7246 
A cleartext transmission of sensitive information vulnerability exists in Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. he integrated web server (Port 80/443/TCP) of the affected devices could allow remote attackers to discover an administrative account. If default on device, it is not using a SSL in settings and if multiple request of the page "Access Control" (IP-address device/ups/pas_cont.htm) account data will be sent in cleartext
Problem types: description: Cleartext Transmission of Sensitive Information
Affected products: vendor: Schneider Electric SE
product: 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS
Published: 2018-04-18T20:00:00.000Z
CVE-2018-7247 
An issue was discovered in pixHtmlViewer in prog/htmlviewer.c in Leptonica before 1.75.3. Unsanitized input (rootname) can overflow a buffer, leading potentially to arbitrary code execution or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-19T18:00:00.000Z
CVE-2018-7248 
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3 Build 9317. Unauthenticated users are able to validate domain user accounts by sending a request containing the username to an API endpoint. The endpoint will return the user's logon domain if the accounts exists, or 'null' if it does not.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-11T14:00:00.000Z
CVE-2018-7249 
An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. Two carefully timed calls to IOCTL 0xCA002813 can cause a race condition that leads to a use-after-free. When exploited, an unprivileged attacker can run arbitrary code in the kernel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-26T20:00:00.000Z
CVE-2018-7250 
An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. An uninitialized kernel pool allocation in IOCTL 0xCA002813 allows a local unprivileged attacker to leak 16 bits of uninitialized kernel PagedPool data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-26T20:00:00.000Z
CVE-2018-7251 
An issue was discovered in config/error.php in Anchor 0.12.3. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error (such as "Too many connections") has occurred.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-19T22:00:00.000Z
CVE-2018-7253 
The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (heap-based buffer over-read) or possibly overwrite the heap via a maliciously crafted DSDIFF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-19T23:00:00.000Z
CVE-2018-7254 
The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (global buffer over-read), or possibly trigger a buffer overflow or incorrect memory allocation, via a maliciously crafted CAF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-19T23:00:00.000Z
CVE-2018-7259 
The FSX / P3Dv4 installer 2.0.1.231 for Flight Sim Labs A320-X sends a user's Google account credentials to http://installLog.flightsimlabs.com/LogHandler3.ashx if a pirated serial number has been entered, which allows remote attackers to obtain sensitive information, e.g., by sniffing the network for cleartext HTTP traffic. This behavior was removed in 2.0.1.232.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-20T00:00:00.000Z
CVE-2018-7260 
Cross-site scripting (XSS) vulnerability in db_central_columns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T15:00:00.000Z
CVE-2018-7261 
There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. They affect Personal Preferences (Name and Username) and Configuration (Site Title, Dev Site Domain, Page Parts, and Page Fields).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T16:00:00.000Z
CVE-2018-7262 
In Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env function in radosgw doesn't handle malformed HTTP headers properly, allowing for denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-19T21:00:00.000Z
CVE-2018-7263 
The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-20T21:00:00.000Z
CVE-2018-7264 
The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out of bounds write and sign errors, allowing a remote attacker to execute arbitrary code on vulnerable applications using the ActivePDF Toolkit to process untrusted images.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-28T17:00:00.000Z
CVE-2018-7265 
Shimmie 2 2.6.0 allows an attacker to upload a crafted SVG file that enables stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-20T22:00:00.000Z
CVE-2018-7268 
MagniComp SysInfo before 10-H81, as shipped with BMC BladeLogic Automation and other products, contains an information exposure vulnerability in which a local unprivileged user is able to read any root (uid 0) owned file on the system, regardless of the file permissions. Confidential information such as password hashes (/etc/shadow) or other secrets (such as log files or private keys) can be leaked to the attacker. The vulnerability has a confidentiality impact, but has no direct impact on system integrity or availability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-21T15:00:00.000Z
CVE-2018-7269 
The findByCondition function in framework/db/ActiveRecord.php in Yii 2.x before 2.0.15 allows remote attackers to conduct SQL injection attacks via a findOne() or findAll() call, unless a developer recognizes an undocumented need to sanitize array input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-21T18:00:00.000Z
CVE-2018-7271 
An issue was discovered in MetInfo 6.0.0. In install/install.php in the installation process, the config/config_db.php configuration file filtering is not rigorous: one can insert malicious code in the installation process to execute arbitrary commands or obtain a web shell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T00:00:00.000Z
CVE-2018-7272 
The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID value in a log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T00:00:00.000Z
CVE-2018-7273 
In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function show_floppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel code and data and bypass kernel security protections such as KASLR.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T00:00:00.000Z
CVE-2018-7274 
Yab Quarx through 2.4.3 is prone to multiple persistent cross-site scripting vulnerabilities: Blog (Title), FAQ (Question), Pages (Title), Widgets (Name), and Menus (Name).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T00:00:00.000Z
CVE-2018-7276 
An issue was discovered on Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) devices. Remote attackers can obtain potentially sensitive information via a /DbXmlInfo.xml request, as demonstrated by the Latitude/Longitude of the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T01:00:00.000Z
CVE-2018-7277 
An issue was discovered on RLE Wi-MGR/FDS-Wi 6.2 devices. Persistent XSS exists in the web server. Remote attackers can inject malicious JavaScript code using the device's BACnet implementation. This is similar to a Cross Protocol Injection with SNMP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T01:00:00.000Z
CVE-2018-7278 
An issue was discovered on RLE Protocol Converter FDS-PC / FDS-PC-DP 2.1 devices. Persistent XSS exists in the web server. Remote attackers can inject malicious JavaScript code using the device's BACnet implementation. This is similar to a Cross Protocol Injection with SNMP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T01:00:00.000Z
CVE-2018-7279 
A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-14T13:00:00.000Z
CVE-2018-7280 
The Ninja Forms plugin before 3.2.14 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T16:00:00.000Z
CVE-2018-7281 
CactusVPN 5.3.6 for macOS contains a root privilege escalation vulnerability through a setuid root binary called runme. The binary takes a single command line argument and passes this argument to a system() call, thus allowing low privileged users to execute commands as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T22:00:00.000Z
CVE-2018-7282 
The username parameter of the TITool PrintMonitor solution during the login request is vulnerable to and/or time-based blind SQLi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-06T16:56:09.000Z
CVE-2018-7284 
A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. When processing a SUBSCRIBE request, the res_pjsip_pubsub module stores the accepted formats present in the Accept headers of the request. This code did not limit the number of headers it processed, despite having a fixed limit of 32. If more than 32 Accept headers were present, the code would write outside of its memory and cause a crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-22T00:00:00.000Z
CVE-2018-7285 
A NULL pointer access issue was discovered in Asterisk 15.x through 15.2.1. The RTP support in Asterisk maintains its own registry of dynamic codecs and desired payload numbers. While an SDP negotiation may result in a codec using a different payload number, these desired ones are still stored internally. When an RTP packet was received, this registry would be consulted if the payload number was not found in the negotiated SDP. This registry was incorrectly consulted for all packets, even those which are dynamic. If the payload number resulted in a codec of a different type than the RTP stream (for example, the payload number resulted in a video codec but the stream carried audio), a crash could occur if no stream of that type had been negotiated. This was due to the code incorrectly assuming that a stream of that type would always exist.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-22T00:00:00.000Z
CVE-2018-7286 
An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. res_pjsip allows remote authenticated users to crash Asterisk (segmentation fault) by sending a number of SIP INVITE messages on a TCP or TLS connection and then suddenly closing the connection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-22T00:00:00.000Z
CVE-2018-7287 
An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1. If the HTTP server is enabled (default is disabled), WebSocket payloads of size 0 are mishandled (with a busy loop).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-22T00:00:00.000Z
CVE-2018-7289 
An issue was discovered in armadito-windows-driver/src/communication.c in Armadito 0.12.7.2. Malware with filenames containing pure UTF-16 characters can bypass detection. The user-mode service will fail to open the file for scanning after the conversion is done from Unicode to ANSI. This happens because characters that cannot be converted from Unicode are replaced with '?' characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T18:00:00.000Z
CVE-2018-7290 
Cross Site Scripting (XSS) exists in Tiki before 12.13, 15.6, 17.2, and 18.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-09T20:00:00.000Z
CVE-2018-7295 
ffxivlauncher.exe in Square Enix Final Fantasy XIV 4.21 and 4.25 on Windows is affected by Improper Enforcement of Message Integrity During Transmission in a Communication Channel, allowing a man-in-the-middle attacker to steal user credentials because a session retrieves global.js via http before proceeding to use https. This is fixed in Patch 4.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-23T12:00:00.000Z
CVE-2018-7296 
Directory Traversal / Arbitrary File Read in User.getLanguage method in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to read the first line of an arbitrary file on the CCU2's filesystem. This vulnerability can be exploited by unauthenticated attackers with access to the web interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-22T19:00:00.000Z
CVE-2018-7297 
Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execute system commands on the device. This vulnerability can be exploited by unauthenticated attackers with access to the web interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-22T19:00:00.000Z
CVE-2018-7298 
In /usr/local/etc/config/addons/mh/loopupd.sh on eQ-3 AG HomeMatic CCU2 2.29.22 devices, software update packages are downloaded via the HTTP protocol, which does not provide any cryptographic protection of the downloaded contents. An attacker with a privileged network position (which could be obtained via DNS spoofing of www.meine-homematic.de or other approaches) can exploit this issue in order to provide arbitrary malicious firmware updates to the CCU2. This can result in a full system compromise.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-22T19:00:00.000Z
CVE-2018-7299 
Remote Code Execution in the addon installation process in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows authenticated attackers to create or overwrite arbitrary files or install malicious software on the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-22T19:00:00.000Z
CVE-2018-7300 
Directory Traversal / Arbitrary File Write / Remote Code Execution in the User.setLanguage method in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to write arbitrary files to the device's filesystem. This vulnerability can be exploited by unauthenticated attackers with access to the web interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-22T19:00:00.000Z
CVE-2018-7301 
eQ-3 AG HomeMatic CCU2 2.29.22 devices have an open XML-RPC port without authentication. This can be exploited by sending arbitrary XML-RPC requests to control the attached BidCos devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-22T19:00:00.000Z
CVE-2018-7302 
Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T20:00:00.000Z
CVE-2018-7303 
The Calendar component in Tiki 17.1 allows HTML injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T20:00:00.000Z
CVE-2018-7304 
Tiki 17.1 does not validate user input for special characters; consequently, a CSV Injection attack can open a CMD.EXE or Calculator window on the victim machine to perform malicious activity, as demonstrated by an "=cmd|' /C calc'!A0" payload during User Creation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T20:00:00.000Z
CVE-2018-7305 
MyBB 1.8.14 is not checking for a valid CSRF token, leading to arbitrary deletion of user accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T20:00:00.000Z
CVE-2018-7307 
The Auth0 Auth0.js library before 9.3 has CSRF because it mishandles the case where the authorization response lacks the state parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T15:00:00.000Z
CVE-2018-7308 
A CSRF issue was found in var/www/html/files.php in DanWin hosting through 2018-02-11 that allows arbitrary remote users to add/delete/modify any files in any hosting account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T21:00:00.000Z
CVE-2018-7311 
PrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability. The software installs a privileged helper tool that runs as the root user. This privileged helper tool is installed as a LaunchDaemon and implements an XPC service. The XPC service is responsible for handling new VPN connection operations via the main PrivateVPN application. The privileged helper tool creates new VPN connections by executing the openvpn binary located in the /Applications/PrivateVPN.app/Contents/Resources directory. The openvpn binary can be overwritten by the default user, which allows an attacker that has already installed malicious software as the default user to replace the binary. When a new VPN connection is established, the privileged helper tool will launch this malicious binary, thus allowing an attacker to execute code as the root user. NOTE: the vendor has reportedly indicated that this behavior is "an acceptable part of their software.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T22:00:00.000Z