rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-19407 
The vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) via crafted system calls that reach a situation where ioapic is uninitialized.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-21T00:00:00.000Z
CVE-2018-19409 
An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if another device is used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-21T16:00:00.000Z
CVE-2018-19410 
PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a Local File Inclusion attack, by including /api/addusers and executing it. By providing the 'id' and 'users' parameters, an unauthenticated attacker can create a user with read-write privileges (including administrator).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-21T16:00:00.000Z
CVE-2018-19411 
PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account (including administrator) via an HTTP request because /api/addusers doesn't check, or doesn't properly check, user rights.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-21T16:00:00.000Z
CVE-2018-19413 
A vulnerability in the API of SonarSource SonarQube before 7.4 could allow an authenticated user to discover sensitive information such as valid user-account logins in the web application. The vulnerability occurs because of improperly configured access controls that cause the API to return the externalIdentity field to non-administrator users. The attacker could use this information in subsequent attacks against the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-14T15:00:00.000Z
CVE-2018-19414 
Multiple cross-site scripting (XSS) vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) keyword parameter to groups.php; (2) username parameter to login.php; or (3) date parameter to search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T19:00:00.000Z
CVE-2018-19415 
Multiple SQL injection vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to join_group.php or (2) comment_id parameter to story.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T19:00:00.000Z
CVE-2018-19416 
An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memmove call, as demonstrated by sadf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-21T19:00:00.000Z
CVE-2018-19417 
An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parse_publish_vhdr() that parses MQTT PUBLISH messages with a variable length header uses memcpy to input data into a fixed size buffer. The allocated buffer can fit only MQTT_MAX_TOPIC_LENGTH (default 64) bytes, and a length check is missing. This could lead to Remote Code Execution via a stack-smashing attack (overwriting the function return address). Contiki-NG does not separate the MQTT server from other servers and the OS modules, so access to all memory regions is possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-21T19:00:00.000Z
CVE-2018-19418 
Foxit PDF ActiveX before 5.5.1 allows remote code execution via command injection because of the lack of a security permission control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T16:49:35.000Z
CVE-2018-19420 
In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but there are several alternative cases in which HTML can be executed, such as a file with no extension or an unrecognized extension (e.g., the test or test.asdf filename), because of admin/upload-uploadify.php, and validate_safe_file in admin/inc/security_functions.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-21T21:00:00.000Z
CVE-2018-19421 
In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file, because of admin/upload-uploadify.php, and validate_safe_file in admin/inc/security_functions.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-21T21:00:00.000Z
CVE-2018-19422 
/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-21T00:00:00.000Z
CVE-2018-19423 
Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-21T21:00:00.000Z
CVE-2018-19424 
ClipperCMS 1.3.3 allows remote authenticated administrators to upload .htaccess files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-21T21:00:00.000Z
CVE-2018-19432 
An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function sf_write_int in sndfile.c, which will lead to a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-22T05:00:00.000Z
CVE-2018-19433 
ShowDoc 2.4.1 has XSS via the lang parameter because install/database.php mishandles the $cur_lang value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-22T05:00:00.000Z
CVE-2018-19434 
An issue was discovered on the "Bank Account Matching - Receipts" screen of the General Ledger component in webERP 4.15. BankMatching.php has Blind SQL injection via the AmtClear_ parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-22T05:00:00.000Z
CVE-2018-19435 
An issue was discovered in the Sales component in webERP 4.15. SalesInquiry.php has SQL Injection via the SortBy parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-22T05:00:00.000Z
CVE-2018-19436 
An issue was discovered in the Manufacturing component in webERP 4.15. CollectiveWorkOrderCost.php has Blind SQL Injection via the SearchParts parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-22T05:00:00.000Z
CVE-2018-19437 
UCMS 1.4.7 allows remote authenticated users to change the administrator password because $_COOKIE['admin_'.cookiehash] is used for arbitrary cookie values that are set and not empty.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-22T05:00:00.000Z
CVE-2018-19439 
XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 (but was fixed in later versions including 5.4). helpwindow.jsp has reflected XSS via all parameters, as demonstrated by the sgdadmin/faces/com_sun_web_ui/help/helpwindow.jsp windowTitle parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-13T19:00:00.000Z
CVE-2018-19440 
ARM Trusted Firmware-A allows information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T23:00:00.000Z
CVE-2018-19441 
An issue was discovered in Neato Botvac Connected 2.2.0. The GenerateRobotPassword function of the NeatoCrypto library generates insufficiently random numbers for robot secret_key values used for local and cloud authentication/authorization. If an attacker knows the serial number and is able to estimate the time of first provisioning of a robot, he is able to brute force the generated secret_key of the robot. This is because the entropy of the secret_key exclusively relies on these two values, due to not seeding the random generator and using several constant inputs for secret_key computation. Serial numbers are printed on the packaging and equal the MAC address of the robot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T18:33:37.000Z
CVE-2018-19442 
A Buffer Overflow in Network::AuthenticationClient::VerifySignature in /bin/astro in Neato Botvac Connected 2.2.0 allows a remote attacker to execute arbitrary code with root privileges via a crafted POST request to a vendors/neato/robots/[robot_serial]/messages Neato cloud URI on the nucleo.neatocloud.com web site (port 4443).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-25T16:59:15.000Z
CVE-2018-19443 
The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc.py. This connection attempt fails, but it contains in the header the current session of the user. This session could then be stolen by a man-in-the-middle.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-22T19:00:00.000Z
CVE-2018-19444 
A use after free in the TextBox field Validate action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19452, this has a different free location and requires different JavaScript code for exploitation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T19:46:46.000Z
CVE-2018-19445 
A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API app.launchURL is used. An attacker can leverage this to gain remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T19:42:35.000Z
CVE-2018-19446 
A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is used. An attacker can leverage this to gain remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T19:39:07.000Z
CVE-2018-19447 
A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing the URI string. An attacker can leverage this to gain remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T19:37:09.000Z
CVE-2018-19448 
In Foxit Reader SDK (ActiveX) Professional 5.4.0.1031, an uninitialized object in IReader_ContentProvider::GetDocEventHandler occurs when embedding the control into Office documents. By opening a specially crafted document, an attacker can trigger an out of bounds write condition, possibly leveraging this to gain remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T19:33:25.000Z
CVE-2018-19449 
A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used. An attacker can leverage this to gain remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T19:30:36.000Z
CVE-2018-19450 
A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing a launch action. An attacker can leverage this to gain remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T19:18:26.000Z
CVE-2018-19451 
A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when using the Open File action on a Field. An attacker can leverage this to gain remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T16:51:51.000Z
CVE-2018-19452 
A use after free in the TextBox field Mouse Enter action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19444, this has a different free location and requires different JavaScript code for exploitation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T16:49:44.000Z
CVE-2018-19453 
Kentico CMS before 11.0.45 allows unrestricted upload of a file with a dangerous type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-10T20:49:51.000Z
CVE-2018-19456 
The WP Backup+ (aka WPbackupplus) plugin through 2018-11-22 for WordPress allows remote attackers to obtain sensitive information from server folders and files, as demonstrated by download.sql.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-07T18:23:49.000Z
CVE-2018-19457 
Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-22T20:00:00.000Z
CVE-2018-19458 
In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulnerability than CVE-2018-19246.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-22T20:00:00.000Z
CVE-2018-19459 
Adult Filter 1.0 has a Buffer Overflow via a crafted Black Domain List file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-22T20:00:00.000Z
CVE-2018-19461 
admin\db\DoSql.php in EmpireCMS through 7.5 allows XSS via crafted SQL syntax to admin/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T16:46:45.000Z
CVE-2018-19462 
admin\db\DoSql.php in EmpireCMS through 7.5 allows remote attackers to execute arbitrary PHP code via SQL injection that uses a .php filename in a SELECT INTO OUTFILE statement to admin/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T16:44:09.000Z
CVE-2018-19463 
zb_system/function/lib/upload.php in Z-BlogPHP through 1.5.1 allows remote attackers to execute arbitrary PHP code by using the image/jpeg content type in an upload to the zb_system/admin/index.php?act=UploadMng URI. NOTE: The vendor's position is "We have no dynamic including. No one can run PHP by uploading an image in current version." It also requires authentication
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-22T21:00:00.000Z
CVE-2018-19464 
Discuz! X3.4 allows XSS via admin.php because admincp/admincp_setting.php and template\default\common\footer.htm mishandles statcode field from third-party stats code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-22T21:00:00.000Z
CVE-2018-19465 
Maccms through 8.0 allows XSS via the site_keywords field to index.php?m=system-config because of tpl/module/system.php and tpl/html/system_config.html, related to template/paody/html/vod_index.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T16:40:51.000Z
CVE-2018-19466 
A vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP credentials, corresponding to a master password, in cleartext and allows their retrieval via API calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-27T16:57:42.000Z
CVE-2018-19468 
HuCart 5.7.4 has SQL injection in get_ip() in system/class/helper_class.php via the X-Forwarded-For HTTP header to the user/index.php?load=login&act=act_login URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-23T05:00:00.000Z
CVE-2018-19469 
ArticleCMS through 2017-02-19 has XSS via the /update_personal_infomation realname or email parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-23T05:00:00.000Z
CVE-2018-19475 
psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because available stack space is not checked when the device remains the same.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-23T05:00:00.000Z
CVE-2018-19476 
psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a setcolorspace type confusion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-23T05:00:00.000Z
CVE-2018-19477 
psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-23T05:00:00.000Z
CVE-2018-19478 
In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-02T18:00:00.000Z
CVE-2018-19486 
Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' were at the end of $PATH) in certain cases involving the run_command() API and run-command.c, because there was a dangerous change from execvp to execv during 2017.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-23T08:00:00.000Z
CVE-2018-19487 
The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_employer_ajax_profile() function through the admin-ajax.php file, which allows remote unauthenticated attackers to enumerate information about users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T21:36:47.000Z
CVE-2018-19488 
The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_reset_pass() function through the admin-ajax.php file, which allows remote unauthenticated attackers to reset the password of a user's account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T21:37:51.000Z
CVE-2018-19489 
v9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash) because of a race condition during file renaming.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-13T19:00:00.000Z
CVE-2018-19490 
An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-based buffer overflow with an arbitrary amount of data in df_generate_ascii_array_entry. To exploit this vulnerability, an attacker must pass an overlong string as the right bound of the range argument that is passed to the plot function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-23T17:00:00.000Z
CVE-2018-19491 
An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the PS_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when the Gnuplot postscript terminal is used as a backend.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-23T17:00:00.000Z
CVE-2018-19492 
An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the cairotrm_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when the Gnuplot pngcairo terminal is used as a backend.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-23T17:00:00.000Z
CVE-2018-19493 
An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is a persistent XSS vulnerability in the environment pages due to a lack of input validation and output encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T14:44:47.000Z
CVE-2018-19494 
An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an incorrect access vulnerability that allows an unauthorized user to view private group names.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T14:46:44.000Z
CVE-2018-19495 
An issue was discovered in GitLab Community and Enterprise Edition before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an SSRF vulnerability in the Prometheus integration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T14:48:50.000Z
CVE-2018-19496 
An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an incorrect access control vulnerability that permits a user with insufficient privileges to promote a project milestone to a group milestone.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T14:50:43.000Z
CVE-2018-19497 
In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to cause a denial of service (SEGV on unknown address with READ memory access in a tsk_getu16 call in hfs_dir_open_meta_cb in tsk/fs/hfs_dent.c).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T23:00:00.000Z
CVE-2018-19498 
The Simplenia Pages plugin 2.6.0 for Atlassian Bitbucket Server has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T21:41:11.000Z
CVE-2018-19499 
Vanilla before 2.5.5 and 2.6.x before 2.6.2 allows Remote Code Execution because authenticated administrators have a reachable call to unserialize in the Gdn_Format class.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-23T19:00:00.000Z
CVE-2018-19502 
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a heap-based buffer overflow in the function excluded_channels() in libfaad/syntax.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-23T19:00:00.000Z
CVE-2018-19503 
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a stack-based buffer overflow in the function calculate_gain() in libfaad/sbr_hfadj.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-23T19:00:00.000Z
CVE-2018-19504 
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There is a NULL pointer dereference in ifilter_bank() in libfaad/filtbank.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-23T19:00:00.000Z