rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-15756 DoS Attack via Range Requests
Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annotated controller returns an org.springframework.core.io.Resource. A malicious user (or attacker) can add a range header with a high number of ranges, or with wide ranges that overlap, or both, for a denial of service attack. This vulnerability affects applications that depend on either spring-webmvc or spring-webflux. Such applications must also have a registration for serving static resources (e.g. JS, CSS, images, and others), or have an annotated controller that returns an org.springframework.core.io.Resource. Spring Boot applications that depend on spring-boot-starter-web or spring-boot-starter-webflux are ready to serve static resources out of the box and are therefore vulnerable.
Problem types: description: Numeric Range Comparison Without Minimum Check
Affected products: vendor: Pivotal
product: Spring framework
Published: 2018-10-18T22:00:00.000Z
CVE-2018-15758 Privilege Escalation in spring-security-oauth2
Spring Security OAuth, versions 2.3 prior to 2.3.4, and 2.2 prior to 2.2.3, and 2.1 prior to 2.1.3, and 2.0 prior to 2.0.16, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can craft a request to the approval endpoint that can modify the previously saved authorization request and lead to a privilege escalation on the subsequent approval. This scenario can happen if the application is configured to use a custom approval endpoint that declares AuthorizationRequest as a controller method argument. This vulnerability exposes applications that meet all of the following requirements: Act in the role of an Authorization Server (e.g. @EnableAuthorizationServer) and use a custom Approval Endpoint that declares AuthorizationRequest as a controller method argument. This vulnerability does not expose applications that: Act in the role of an Authorization Server and use the default Approval Endpoint, act in the role of a Resource Server only (e.g. @EnableResourceServer), act in the role of a Client only (e.g. @EnableOAuthClient).
Problem types: description: Improper Privilege Management
Affected products: vendor: Pivotal
product: Spring Security OAuth
Published: 2018-10-18T22:00:00.000Z
CVE-2018-15759 On Demand Services SDK Timing Attack Vulnerability
Pivotal Cloud Foundry On Demand Services SDK, versions prior to 0.24 contain an insecure method of verifying credentials. A remote unauthenticated malicious user may make many requests to the service broker with different credentials, allowing them to infer valid credentials and gain access to perform broker operations.
Problem types: description: Information Exposure Through Timing Discrepancy
Affected products: vendor: Pivotal
product: On Demand Services SDK
Published: 2018-11-19T14:00:00.000Z
CVE-2018-15761 UAA Privilege Escalation
Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privilege escalation. A remote authenticated user may modify the url and content of a consent page to gain a token with arbitrary scopes that escalates their privileges.
Problem types: description: Improper Access Control
Affected products: vendor: Cloud Foundry
product: UAA
vendor: Cloud Foundry
product: UAA Release
Published: 2018-11-19T14:00:00.000Z
CVE-2018-15762 Pivotal Operations Manager gives all users heightened privileges
Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for privilege escalation. A remote malicious user who has been authenticated may create a new client with administrator privileges for Opsman.
Problem types: description: Improper Authorization
Affected products: vendor: Pivotal Cloud Foundry
product: Pivotal Operations Manager
Published: 2018-11-02T22:00:00.000Z
CVE-2018-15763 PKS leaks IaaS Credentials to Application Logs
Pivotal Container Service, versions prior to 1.2.0, contains an information disclosure vulnerability which exposes IaaS credentials to application logs. A malicious user with access to application logs may be able to obtain IaaS credentials and perform actions using these credentials.
Problem types: description: Information Exposure Through Application Logs
Affected products: vendor: Pivotal
product: Pivotal Container Service
Published: 2018-10-05T21:00:00.000Z
CVE-2018-15764 
Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to improper configurations of triggered JMX services. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code in the server's JVM.
Problem types: description: Remote code execution vulnerability
Affected products: vendor: DELL EMC
product: ESRS Policy Manager
Published: 2018-09-28T18:00:00.000Z
CVE-2018-15765 
Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains an Information Exposure vulnerability. The log file contents store sensitive data including executed commands to generate authentication tokens which may prove useful to an attacker for crafting malicious authentication tokens for querying the application and subsequent attacks.
Problem types: description: Information Exposure Vulnerability
Affected products: vendor: DELL EMC
product: ESRS Virtual Edition
Published: 2018-10-18T22:00:00.000Z
CVE-2018-15766 Dell Encryption and Dell Endpoint Security Suite Enterprise Security Policy Overwrite Vulnerability
On install, Dell Encryption versions prior 10.0.1 and Dell Endpoint Security Suite Enterprise versions prior 2.0.1 will overwrite and manually set the "Minimum Password Length" group policy object to a value of 1 on that device. This allows for users to bypass any existing policy for password length and potentially create insecure password on their device. This value is defined during the installation of the "Encryption Management Agent" or "EMAgent" application. There are no other known values modified.
Problem types: description: Password Policy Vulnerability
Affected products: vendor: Dell
product: Encryption
vendor: Dell
product: Endpoint Security Suite Enterprise
Published: 2018-10-11T19:00:00.000Z
CVE-2018-15767 Improper Authorization Vulnerability
The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability caused by a misconfiguration in the /etc/sudoers file.
Problem types: description: Improper Authorization Vulnerability.
Affected products: vendor: Dell
product: OpenManage Network Manager
Published: 2018-11-30T17:00:00.000Z
CVE-2018-15768 Insecure MySQL Configuration Vulnerability
Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configuration setting for the embedded MySQL database.
Problem types: description: Insecure MySQL Configuration Vulnerability
Affected products: vendor: Dell
product: OpenManage Network Manager
Published: 2018-11-30T17:00:00.000Z
CVE-2018-15769 
RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service (DoS) on TLS clients during the handshake when a very large prime value is sent to the TLS client, and an Ephemeral or Anonymous Diffie-Hellman cipher suite (DHE or ADH) is used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-16T21:00:00.000Z
CVE-2018-15771 Dell EMC RecoverPoint Information Disclosure Vulnerability
Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI.
Problem types: description: information disclosure vulnerability
Affected products: vendor: Dell EMC
product: Dell EMC RecoverPoint
vendor: Dell EMC
product: Dell EMC RecoverPoint Virtual Machine (VM)
Published: 2018-11-13T14:00:00.000Z
CVE-2018-15772 Dell EMC RecoverPoint Uncontrolled Resource Consumption Vulnerability
Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an uncontrolled resource consumption vulnerability. A malicious boxmgmt user may potentially be able to consume large amount of CPU bandwidth to make the system slow or to determine the existence of any system file via Boxmgmt CLI.
Problem types: description: uncontrolled resource consumption vulnerability
Affected products: vendor: Dell EMC
product: Dell EMC RecoverPoint
vendor: Dell EMC
product: Dell EMC RecoverPoint Virtual Machine (VM)
Published: 2018-11-13T14:00:00.000Z
CVE-2018-15773 Dell Encryption Enterprise \ Dell Data Protection Encryption Information Disclosure Vulnerability
Dell Encryption (formerly Dell Data Protection | Encryption) v10.1.0 and earlier contain an information disclosure vulnerability. A malicious user with physical access to the machine could potentially exploit this vulnerability to access the unencrypted RegBack folder that contains back-ups of sensitive system files.
Problem types: description: information disclosure vulnerability
Affected products: vendor: Dell
product: Dell Encryption (formerly Dell Data Protection | Encryption)
Credits: lang: en
value: Dell would like to thank Jan van der Put and Harm Blankers of REQON Security for reporting this vulnerability.
Published: 2018-12-05T18:00:00.000Z
CVE-2018-15774 iDRAC7/iDRAC8/iDRAC9 - Privilege Escalation Vulnerability
Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22, and 3.23.23.23 contain a privilege escalation vulnerability. An authenticated malicious iDRAC user with operator privileges could potentially exploit a permissions check flaw in the Redfish interface to gain administrator access.
Problem types: description: Privilege escalation vulnerability.
Affected products: vendor: Dell EMC
product: iDRAC
Published: 2018-12-13T22:00:00.000Z
CVE-2018-15776 iDRAC7, iDRAC8 - Improper Error Handling
Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 contain an improper error handling vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability to get access to the u-boot shell.
Problem types: description: Improper Error Handling Vulnerability.
Affected products: vendor: Dell EMC
product: iDRAC
Published: 2018-12-13T22:00:00.000Z
CVE-2018-15778 DSA-2019-019: Dell Networking OS10 OS Command Injection Vulnerability
Dell OS10 versions prior to 10.4.2.1 contain a vulnerability caused by lack of proper input validation on the command-line interface (CLI).
Problem types: description: This vulnerability could potentially allow an attacker to execute unexpected, dangerous commands directly on the operating system.
Affected products: vendor: Dell
product: Dell Networking OS10
Published: 2019-02-04T22:00:00.000Z
CVE-2018-15780 DSA-2018-224: RSA Archer GRC Platform Improper Access Control Vulnerability
RSA Archer versions prior to 6.5.0.1 contain an improper access control vulnerability. A remote malicious user could potentially exploit this vulnerability to bypass authorization checks and gain read access to restricted user information.
Problem types: description: improper access control vulnerability
Affected products: vendor: Dell
product: RSA Archer
Credits: lang: en
value: RSA would like to thank Sam Sayen for reporting this vulnerability.
Published: 2019-01-03T21:00:00.000Z
CVE-2018-15781 DSA-2019-022: Dell Wyse Password Encoder Hard-coded Cryptographic Key Vulnerability
The Dell Wyse Password Encoder in ThinLinux2 versions prior to 2.1.0.01 contain a Hard-coded Cryptographic Key vulnerability. An unauthenticated remote attacker could reverse engineer the cryptographic system used in the Dell Wyse Password Encoder to discover the hard coded private key and decrypt locally stored cipher text.
Problem types: description: Hard-coded Cryptographic Key vulnerability
Affected products: vendor: Dell
product: Wyse Password Encoder
Credits: lang: en
value: Dell would like to thank Andrew Tierney at Pen Test Partners for reporting this vulnerability.
Published: 2019-02-13T16:00:00.000Z
CVE-2018-15782 DSA-2018-226: RSA® Authentication Manager Relative Path Traversal Vulnerability
The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup deployment of the initial RSA Authentication Manager system, could allow the attacker unauthorized access to that system.
Problem types: description: relative path traversal vulnerability
Affected products: vendor: Dell
product: RSA Authentication Manager
Published: 2019-01-16T20:00:00.000Z
CVE-2018-15784 DSA-2019-001: Dell Networking OS10 Improper Certificate Validation Vulnerability
Dell Networking OS10 versions prior to 10.4.3.0 contain a vulnerability in the Phone Home feature which does not properly validate the server's certificate authority during TLS handshake. Use of an invalid or malicious certificate could potentially allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack.
Problem types: description: Improper Certificate Validation
Affected products: vendor: Dell
product: Dell Networking OS10
Published: 2019-01-18T22:00:00.000Z
CVE-2018-15795 CredHub Service Broker uses guessable client secret
Pivotal CredHub Service Broker, versions prior to 1.1.0, uses a guessable form of random number generation in creating service broker's UAA client. A remote malicious user may guess the client secret and obtain or modify credentials for users of the CredHub Service.
Problem types: description: Predictability problems
Affected products: vendor: Pivotal Cloud Foundry
product: CredHub Service Broker
Published: 2018-11-13T14:00:00.000Z
CVE-2018-15796 Signing Key Extraction in Bits Service Release
Cloud Foundry Bits Service Release, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs. A remote malicious user may obtain a signed URL and extract the signing key, allowing them complete read and write access to the the Bits Service storage.
Problem types: description: Weak Cryptography
Affected products: vendor: Cloud Foundry
product: bits-service-release
Published: 2018-11-09T22:00:00.000Z
CVE-2018-15797 NFS Volume release errand leaks cf admin credentials in logs
Cloud Foundry NFS volume release, 1.2.x prior to 1.2.5, 1.5.x prior to 1.5.4, 1.7.x prior to 1.7.3, logs the cf admin username and password when running the nfsbrokerpush BOSH deploy errand. A remote authenticated user with access to BOSH can obtain the admin credentials for the Cloud Foundry Platform through the logs of the NFS volume deploy errand.
Problem types: description: Information Exposure Through Debug Information
Affected products: vendor: Cloud Foundry
product: NFS Volume Release
Published: 2018-12-05T18:00:00.000Z
CVE-2018-15798 Pivotal Concourse allows malicious redirect urls on login
Pivotal Concourse Release, versions 4.x prior to 4.2.2, login flow allows redirects to untrusted websites. A remote unauthenticated attacker could convince a user to click on a link using the oAuth redirect link with an untrusted website and gain access to that user's access token in Concourse.
Problem types: description: Open Redirect
Affected products: vendor: Pivotal
product: Concourse
Published: 2018-12-19T22:00:00.000Z
CVE-2018-15800 Timing attack allows extraction of signing key in Bits Service
Cloud Foundry Bits Service, versions prior to 2.18.0, includes an information disclosure vulnerability. A remote malicious user may execute a timing attack to brute-force the signing key, allowing them complete read and write access to the the Bits Service storage.
Problem types: description: Brute Force
Affected products: vendor: Cloud Foundry
product: Bits Service Release
Published: 2018-12-10T19:00:00.000Z
CVE-2018-15801 Authorization Bypass During JWT Issuer Validation with spring-security
Spring Security versions 5.1.x prior to 5.1.2 contain an authorization bypass vulnerability during JWT issuer validation. In order to be impacted, the same private key for an honest issuer and a malicious user must be used when signing JWTs. In that case, a malicious user could fashion signed JWTs with the malicious issuer URL that may be granted for the honest issuer.
Problem types: description: Business Logic Errors
Affected products: vendor: Spring by Pivotal
product: Spring Security
Published: 2018-12-19T22:00:00.000Z
CVE-2018-15804 
An issue was discovered in the MapR File System in MapR Converged Data Platform and MapR-XD 6.x and earlier. Under certain conditions, it is possible for MapR ticket credentials to become compromised, allowing a user to escalate their privileges to act as (aka impersonate) any other user, including cluster administrators, aka bug# 31935. This affects all users who have enabled security on the MapR platform and is fixed in mapr-patch-5.2.1.42646.GA-20180731093831, mapr-patch-5.2.2.44680.GA-20180802011430, mapr-patch-6.0.0.20171109191718.GA-20180802011420, and mapr-patch-6.0.1.20180404222005.GA-20180806214919.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-23T18:00:00.000Z
CVE-2018-15805 
Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE) vulnerability, allowing an attacker to read arbitrary files or cause a denial of service (resource consumption).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-10T18:00:00.000Z
CVE-2018-15807 
POSIM EVO 15.13 for Windows includes an "Emergency Override" administrative account that may be accessed through POSIM's "override" feature. This Override prompt expects a code that is computed locally using a deterministic algorithm. This code may be generated by an attacker and used to bypass any POSIM EVO login prompt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-23T20:00:00.000Z
CVE-2018-15808 
POSIM EVO 15.13 for Windows includes hardcoded database credentials for the "root" database user. "root" access to POSIM EVO's database may result in a breach of confidentiality, integrity, or availability or allow for attackers to remotely execute code on associated POSIM EVO clients.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-23T20:00:00.000Z
CVE-2018-15809 
AccuPOS 2017.8 is installed with the insecure "Authenticated Users: Modify" permission for files within the installation path. This may allow local attackers to compromise the integrity of critical resource and executable files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-23T20:00:00.000Z
CVE-2018-15810 
Visiology Flipbox Software Suite before 2.7.0 allows directory traversal via %5c%2e%2e%2f because it does not sanitize filename parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-27T15:00:00.000Z
CVE-2018-15811 
DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T16:23:27.000Z
CVE-2018-15812 
DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T16:35:30.000Z
CVE-2018-15813 
FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000000e1237 via a crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T19:02:25.000Z
CVE-2018-15814 
FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000001cb509 via a crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T19:02:34.000Z
CVE-2018-15815 
FastStone Image Viewer 6.5 has an Exception Handler Chain Corrupted issue starting at image00400000+0x00000000003ef68a via a crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T19:03:13.000Z
CVE-2018-15816 
FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d7d via a crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T19:03:24.000Z
CVE-2018-15817 
FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d63 via a crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T19:03:35.000Z
CVE-2018-15818 
An issue was discovered in Repute ARForms 3.5.1 and prior. An attacker is able to delete any file on the server with web server privileges by sending a malicious request to admin-ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T21:30:40.000Z
CVE-2018-15819 
EasyIO EasyIO-30P devices before 2.0.5.27 have Incorrect Access Control, related to webuser.js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T18:07:39.000Z
CVE-2018-15820 
EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T18:09:09.000Z
CVE-2018-15822 
The flv_write_packet function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an empty audio packet, leading to an assertion failure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-23T22:00:00.000Z
CVE-2018-15832 
upc.exe in Ubisoft Uplay Desktop Client versions 63.0.5699.0 allows remote attackers to execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of URI handlers. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-20T20:00:00.000Z
CVE-2018-15833 
In Vanilla before 2.6.1, the polling functionality allows Insecure Direct Object Reference (IDOR) via the Poll ID, leading to the ability of a single user to select multiple Poll Options (e.g., vote for multiple items).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-26T17:00:00.000Z
CVE-2018-15834 
In radare2 before 2.9.0, a heap overflow vulnerability exists in the read_module_referenced_functions function in libr/anal/flirt.c via a crafted flirt signature file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-12T16:00:00.000Z
CVE-2018-15835 
Android 1.0 through 9.0 has Insecure Permissions. The Android bug ID is 77286983.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-30T18:00:00.000Z