rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-10694 
An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a Wi-Fi connection that is open and does not use any encryption mechanism by default. An administrator who uses the open wireless connection to set up the device can allow an attacker to sniff the traffic passing between the user's computer and the device. This can allow an attacker to steal the credentials passing over the HTTP connection as well as TELNET traffic. Also an attacker can MITM the response and infect a user's computer very easily as well.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T19:24:46.000Z
CVE-2018-10695 
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can send emails to his/her account when there are changes to the device's network. However, the same functionality allows an attacker to execute commands on the device. The POST parameters "to1,to2,to3,to4" are all susceptible to buffer overflow. By crafting a packet that contains a string of 678 characters, it is possible for an attacker to execute the attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T19:26:26.000Z
CVE-2018-10696 
An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a web interface to allow an administrator to manage the device. However, this interface is not protected against CSRF attacks, which allows an attacker to trick an administrator into executing actions without his/her knowledge, as demonstrated by the forms/iw_webSetParameters and forms/webSetMainRestart URIs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T19:28:00.000Z
CVE-2018-10697 
An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "srvName" is susceptible to this injection. By crafting a packet that contains shell metacharacters, it is possible for an attacker to execute the attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T19:29:44.000Z
CVE-2018-10698 
An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff the traffic between the device and the user. Also an attacker can easily connect to the TELNET daemon using the default credentials if they have not been changed by the user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T19:33:42.000Z
CVE-2018-10699 
An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides certfile upload functionality so that an administrator can upload a certificate file used for connecting to the wireless network. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "iw_privatePass" is susceptible to this injection. By crafting a packet that contains shell metacharacters, it is possible for an attacker to execute the attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T19:36:48.000Z
CVE-2018-10700 
An issue was discovered on Moxa AWK-3121 1.19 devices. It provides functionality so that an administrator can change the name of the device. However, the same functionality allows an attacker to execute XSS by injecting an XSS payload. The POST parameter "iw_board_deviceName" is susceptible to this injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T19:51:53.000Z
CVE-2018-10701 
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "iw_filename" is susceptible to buffer overflow. By crafting a packet that contains a string of 162 characters, it is possible for an attacker to execute the attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T19:54:07.000Z
CVE-2018-10702 
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "iw_filename" is susceptible to command injection via shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T19:55:26.000Z
CVE-2018-10703 
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "iw_serverip" is susceptible to buffer overflow. By crafting a packet that contains a string of 480 characters, it is possible for an attacker to execute the attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T19:56:34.000Z
CVE-2018-10704 
yidashi yii2cmf 2.0 has XSS via the /search q parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-12T20:23:03.000Z
CVE-2018-10705 
The Owned smart contract implementation for Aurora DAO (AURA), an Ethereum ERC20 token, allows attackers to acquire contract ownership because the setOwner function is declared as public. An attacker can then conduct a lockBalances() denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-09T03:00:00.000Z
CVE-2018-10706 
An integer overflow in the transferMulti function of a smart contract implementation for Social Chain (SCA), an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-10T17:00:00.000Z
CVE-2018-10709 
The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write CR register values. This could be leveraged in a number of ways to ultimately run code with elevated privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-30T18:00:00.000Z
CVE-2018-10710 
The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-30T18:00:00.000Z
CVE-2018-10711 
The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write Machine Specific Registers (MSRs). This could be leveraged to execute arbitrary ring-0 code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-30T18:00:00.000Z
CVE-2018-10712 
The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-30T18:00:00.000Z
CVE-2018-10713 
An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'read' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'read <node_name>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-03T16:00:00.000Z
CVE-2018-10716 
An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently terminate processes, because WM_CLOSE is not properly considered.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-03T17:00:00.000Z
CVE-2018-10717 
The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 does not consider the bounds of the pixels data structure, which allows remote attackers to cause a denial of service (WritePixels heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted GIF file, a different vulnerability than CVE-2018-10677.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-03T17:00:00.000Z
CVE-2018-10718 
Stack-based buffer overflow in Activision Infinity Ward Call of Duty Modern Warfare 2 before 2018-04-26 allows remote attackers to execute arbitrary code via crafted packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-03T18:00:00.000Z
CVE-2018-10722 
In Cylance CylancePROTECT before 1470, an unprivileged local user can obtain SYSTEM privileges because users have Modify access to the %PROGRAMFILES%\Cylance\Desktop\log folder, the CyUpdate process grants users Modify access to new files created in this folder, and a new file can be a symlink chain to a pathname of an arbitrary DLL that CyUpdate uses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-04T00:00:00.000Z
CVE-2018-10723 
Directus 6.4.9 has a hardcoded admin password for the Admin account because of an INSERT statement in api/schema.sql.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-05T22:00:00.000Z
CVE-2018-10726 
A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an "Edit page" action. NOTE: the vendor disputes the relevance of this report because an installation accessible to untrusted users is supposed to have parserSafeMode=1 in system/config/config.ini to prevent XSS
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-04T15:00:00.000Z
CVE-2018-10727 
Reflected Cross-Site Scripting (XSS) vulnerability in the fabrik_referrer hidden field in the Fabrikar Fabrik component through v3.8.1 for Joomla! allows remote attackers to inject arbitrary web script via the HTTP Referer header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-29T17:33:59.000Z
CVE-2018-10728 
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows (a different vulnerability than CVE-2018-10731).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T19:00:00.000Z
CVE-2018-10729 
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 allow reading the configuration file by an unauthenticated user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T19:00:00.000Z
CVE-2018-10730 
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T19:00:00.000Z
CVE-2018-10731 
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies (a different vulnerability than CVE-2018-10728).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T19:00:00.000Z
CVE-2018-10732 
The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information (i.e., determine if a username is valid) because of profile pictures visibility.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-28T17:00:00.000Z
CVE-2018-10733 
There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-04T16:00:00.000Z
CVE-2018-10734 
KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a Print_Password function call in certain circumstances.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-08T07:00:00.000Z
CVE-2018-10735 
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T13:00:00.000Z
CVE-2018-10736 
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T13:00:00.000Z
CVE-2018-10737 
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSearch parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T13:00:00.000Z
CVE-2018-10738 
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/menuaccess.php chbKey1 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T13:00:00.000Z
CVE-2018-10739 
An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe allows local users to bypass intended process protections, and consequently terminate process, because WM_SYSCOMMAND is not properly considered.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-04T17:00:00.000Z
CVE-2018-10740 
Axublog 1.1.0 allows remote Code Execution as demonstrated by injection of PHP code (contained in the webkeywords parameter) into the cmsconfig.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-04T18:00:00.000Z
CVE-2018-10746 
An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'get' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'get <node_name attr>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-04T18:00:00.000Z
CVE-2018-10747 
An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as an 'unset' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'unset <node_name>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-04T18:00:00.000Z
CVE-2018-10748 
An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'show' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'show <node_name>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-04T18:00:00.000Z
CVE-2018-10749 
An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'commit' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'commit <node_name>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-04T18:00:00.000Z
CVE-2018-10750 
An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'staticGet' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'staticGet <node_name attr>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-04T18:00:00.000Z
CVE-2018-10751 
A malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when processing the String Extension portion of the WbXml payload. This is due to an integer overflow in memory allocation for this string. The Samsung ID is SVE-2018-11463.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-29T20:00:00.000Z
CVE-2018-10752 
The Tagregator plugin 0.6 for WordPress has stored XSS via the title field in an Add New action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-05T02:00:00.000Z
CVE-2018-10753 
Stack-based buffer overflow in the delayed_output function in music.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-05T02:00:00.000Z
CVE-2018-10756 
Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted torrent file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-15T15:56:21.000Z
CVE-2018-10757 
CSP MySQL User Manager 2.3.1 allows SQL injection, and resultant Authentication Bypass, via a crafted username during a login attempt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-05T19:00:00.000Z
CVE-2018-10758 
The edit/ URI in Datenstrom Yellow 0.7.3 has CSRF via a delete action that can delete articles.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-05T19:00:00.000Z
CVE-2018-10759 
PHP remote file inclusion vulnerability in public/patch/patch.php in Project Pier 0.8.8 and earlier allows remote attackers to execute arbitrary commands or SQL statements via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T14:00:00.000Z
CVE-2018-10760 
Unrestricted file upload vulnerability in the Files plugin in ProjectPier 0.88 and earlier allows remote authenticated users to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the tmp directory under the document root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T14:00:00.000Z
CVE-2018-10763 
Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2) Sub heading fields in the Partial Branding configuration page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-14T21:00:00.000Z
CVE-2018-10767 
There is a stack-based buffer over-read in calling GLib in the function gxps_images_guess_content_type of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a g_input_stream_read call. A crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-06T23:00:00.000Z
CVE-2018-10768 
There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-06T23:00:00.000Z
CVE-2018-10769 
The transferProxy and approveProxy functions of a smart contract implementation for SmartMesh (SMT), an Ethereum ERC20 token, allow attackers to accomplish an unauthorized transfer of digital assets because replay attacks can occur with the same-named functions (with the same signatures) in other tokens: First (FST), GG Token (GG), M2C Mesh Network (MTC), M2C Mesh Network (mesh), and UG Token (UGT).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-10T15:00:00.000Z
CVE-2018-10770 
download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows remote attackers to download the configuration (without a login) to discover the password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-09T18:00:00.000Z
CVE-2018-10771 
Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-07T02:00:00.000Z
CVE-2018-10772 
The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-07T02:00:00.000Z
CVE-2018-10773 
NULL pointer deference in the addsn function in serialno.c in libbibcore.a in bibutils through 6.2 allows remote attackers to cause a denial of service (application crash), as demonstrated by copac2xml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-07T07:00:00.000Z
CVE-2018-10774 
Read access violation in the isiin_keyword function in isiin.c in libbibutils.a in bibutils through 6.2 allows remote attackers to cause a denial of service (application crash), as demonstrated by isi2xml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-07T07:00:00.000Z
CVE-2018-10775 
NULL pointer dereference in the _fields_add function in fields.c in libbibcore.a in bibutils through 6.2 allows remote attackers to cause a denial of service (application crash), as demonstrated by end2xml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-07T07:00:00.000Z
CVE-2018-10776 
The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (segmentation fault and application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-07T07:00:00.000Z
CVE-2018-10777 
Buffer overflow in the WriteMP3GainAPETag function in apetag.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-07T07:00:00.000Z