rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-5387 
Wizkunde SAMLBase may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.
Problem types: cwe_id: CWE-287
description: CWE-287 Improper Authentication
Affected products: vendor: Wizkunde
product: SAMLBase
Published: 2018-07-24T15:00:00.000Z
CVE-2018-5388 
In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.
Problem types: cwe_id: CWE-124
description: CWE-124
Affected products: vendor: strongSwan
product: strongSwan
Credits: lang: en
value: Thanks to Kevin Backhouse for reporting this vulnerability.
Published: 2018-05-31T00:00:00.000Z
CVE-2018-5389 CVE-2018-5389
The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline dictionary or brute force attacks. For the main mode, however, only an online attack against PSK authentication was thought to be feasible. This vulnerability could allow an attacker to recover a weak Pre-Shared Key or enable the impersonation of a victim host or network.
Problem types: description: CWE-521 Weak Password Requirements
description: CWE-323 Reusing a Nonce, Key Pair in Encryption
Affected products: vendor: strongSwan
product: Strongswan
Published: 2018-09-06T21:00:00.000Z
CVE-2018-5390 Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: Linux
product: Linux Kernel
Published: 2018-08-06T20:00:00.000Z
CVE-2018-5391 The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: Linux
product: Kernel
Credits: lang: en
value: Thanks to Juha-Matti Tilli (Aalto University, Department of Communications and Networking / Nokia Bell Labs) for reporting this vulnerability.
Published: 2018-09-06T21:00:00.000Z
CVE-2018-5392 mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR
mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR. ASLR is an exploit mitigation technique used by modern Windows platforms. For ASLR to function, Windows executables must contain a relocations table. Despite containing the "Dynamic base" PE header, which indicates ASLR compatibility, Windows executables produced by mingw-w64 have the relocations table stripped from them by default. This means that executables produced by mingw-w64 are vulnerable to return-oriented programming (ROP) attacks. Windows executables generated by mingw-w64 claim to be ASLR compatible, but are not. Vulnerabilities in such executables are more easily exploitable as a result.
Problem types: cwe_id: CWE-824
description: CWE-824
Affected products: vendor: mingw
product: mingw-w64
Published: 2018-08-14T16:00:00.000Z
CVE-2018-5393 TP-Link EAP Controller versions 2.5.3 and earlier lack RMI authentication
The TP-LINK EAP Controller is TP-LINK's software for remotely controlling wireless access point devices. It utilizes a Java remote method invocation (RMI) service for remote control. The RMI interface does not require any authentication before use, so it lacks user authentication for RMI service commands in EAP controller versions 2.5.3 and earlier. Remote attackers can implement deserialization attacks through the RMI protocol. Successful attacks may allow a remote attacker to remotely control the target server and execute Java functions or bytecode.
Problem types: cwe_id: CWE-306
description: CWE-306: Missing Authentication for Critical Function
Affected products: vendor: TP-LINK
product: EAP Controller
Published: 2018-09-28T17:00:00.000Z
CVE-2018-5399 The Auto-Maskin DCU 210E firmware contains an undocumented Dropbear SSH server, v2015.55, configured to listen on Port 22 while the DCU is running and is configured with a hard-coded credentials
The Auto-Maskin DCU 210E firmware contains an undocumented Dropbear SSH server, v2015.55, configured to listen on Port 22 while the DCU is running. The Dropbear server is configured with a hard-coded user name and password combination of root / amroot. The server is configured to use password only authentication not cryptographic keys, however the firmware image contains an RSA host-key for the server. An attacker can exploit this vulnerability to gain root access to the Angstrom Linux operating system and modify any binaries or configuration files in the firmware. Affected releases are Auto-Maskin DCU-210E RP-210E: Versions prior to 3.7 on ARMv7.
Problem types: cwe_id: CWE-798
description: CWE-798: Use of Hard-coded Credentials
Affected products: vendor: Auto-Maskin
product: DCU-210E
vendor: Auto-Maskin
product: RP-210E
Credits: lang: en
value: Reporters: Brian Satira, Brian Olson, Organization: Project Gunsway
Published: 2018-10-08T15:00:00.000Z
CVE-2018-5400 The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App utilize an undocumented custom protocol to set up Modbus communications with other devices without validating those devices, resulting in an origin validation error
The Auto-Maskin products utilize an undocumented custom protocol to set up Modbus communications with other devices without validating those devices. The originating device sends a message in plaintext, 48:65:6c:6c:6f:20:57:6f:72:6c:64, "Hello World" over UDP ports 44444-44446 to the broadcast address for the LAN. Without verification devices respond to any of these broadcast messages on the LAN with a plaintext reply over UDP containing the device model and firmware version. Following this exchange the devices allow Modbus transmissions between the two devices on the standard Modbus port 502 TCP. Impact: An attacker can exploit this vulnerability to send arbitrary messages to any DCU or RP device through spoofing or replay attacks as long as they have access to the network. Affected releases are Auto-Maskin DCU-210E RP-210E: Versions prior to 3.7 on ARMv7.
Problem types: cwe_id: CWE-346
description: CWE-346: Origin Validation Error
Affected products: vendor: Auto-Maskin
product: DCU-210E
vendor: Auto-Maskin
product: RP-210E
vendor: Auto-Maskin
product: Marine Pro Observer Android App
Credits: lang: en
value: Reporters: Brian Satira, Brian Olson, Organization: Project Gunsway
Published: 2018-10-08T15:00:00.000Z
CVE-2018-5401 The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App transmit sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors
The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App transmit sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. The devices transmit process control information via unencrypted Modbus communications. Impact: An attacker can exploit this vulnerability to observe information about configurations, settings, what sensors are present and in use, and other information to aid in crafting spoofed messages. Requires access to the network. Affected releases are Auto-Maskin DCU-210E, RP-210E, and Marine Pro Observer Android App. Versions prior to 3.7 on ARMv7.
Problem types: cwe_id: CWE-319
description: CWE-319: Cleartext Transmission of Sensitive Information
Affected products: vendor: Auto-Maskin
product: DCU-210E
vendor: Auto-Maskin
product: RP-210E
vendor: Auto-Maskin
product: Marine Pro Observer Android App
Credits: lang: en
value: Reporters: Brian Satira, Brian Olson, Organization: Project Gunsway
Published: 2018-10-08T15:00:00.000Z
CVE-2018-5402 The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the administrator PIN
The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the administrator PIN Impact: An attacker once authenticated can change configurations, upload new configuration files, and upload executable code via file upload for firmware updates. Requires access to the network. Affected releases are Auto-Maskin DCU-210E, RP-210E, and the Marine Pro Observer Android App. Versions prior to 3.7 on ARMv7.
Problem types: cwe_id: CWE-319
description: CWE-319: Cleartext Transmission of Sensitive Information
Affected products: vendor: Auto-Maskin
product: DCU-210E
vendor: Auto-Maskin
product: RP-210E
Credits: lang: en
value: Reporters: Brian Satira, Brian Olson, Organization: Project Gunsway
Published: 2018-10-08T15:00:00.000Z
CVE-2018-5403 
Imperva SecureSphere gateway (GW) running v13, for both pre-First Time Login or post-First Time Login (FTL), if the attacker knows the basic authentication passwords, the GW may be vulnerable to RCE through specially crafted requests, from the web access management interface.
Problem types: cwe_id: CWE-77
description: CWE-77
Affected products: vendor: Imperva
product: SecureSphere
Published: 2019-01-10T22:00:00.000Z
CVE-2018-5404 The Quest Kace K1000 Appliance is vulnerable to multiple Blind SQL Injections.
The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows an authenticated, remote attacker with least privileges ('User Console Only' role) to potentially exploit multiple Blind SQL Injection vulnerabilities to retrieve sensitive information from the database or copy the entire database. An authenticated remote attacker could leverage Blind SQL injections to obtain sensitive data.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Quest Kace
product: K1000 Appliance
Credits: lang: en
value: Thanks to Kapil Khot for reporting this vulnerability.
Published: 2019-06-03T18:23:52.000Z
CVE-2018-5405 The Quest Kace K1000 Appliance is vulnerable to JavaScript injection.
The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows an authenticated least privileged user with 'User Console Only' rights to potentially inject arbitrary JavaScript code on the tickets page. Script execution could allow a malicious user of the system to steal session cookies of other users including Administrator and take over their session. This can further be exploited to launch other attacks. The software also does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other user. An authenticated user with 'user console only' rights may inject arbitrary JavaScript, which could result in an attacker taking over a session of others, including an Administrator.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Quest Kace
product: K1000 Appliance
Credits: lang: en
value: Thanks to Kapil Khot for reporting this vulnerability.
Published: 2019-06-03T18:23:49.000Z
CVE-2018-5406 The Quest Kace K1000 Appliance misconfigures the Cross-Origin Resource Sharing (CORS) mechanism.
The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows a remote attacker to exploit the misconfigured Cross-Origin Resource Sharing (CORS) mechanism. An unauthenticated, remote attacker could exploit this vulnerability to perform sensitive actions such as adding a new administrator account or changing the appliance’s settings. A malicious internal user could also gain administrator privileges of this appliance and use it to visit a malicious link that exploits this vulnerability. This could cause the application to perform sensitive actions such as adding a new administrator account or changing the appliance’s settings. An unauthenticated, remote attacker could add an administrator-level account or change the appliance's settings.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: Quest Kace
product: K1000 Appliance
Credits: lang: en
value: Thanks to Kapil Khot for reporting this vulnerability.
Published: 2019-06-03T18:23:46.000Z
CVE-2018-5407 
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: N/A
product: Processors supporting Simultaneous Multi-Threading
Published: 2018-11-15T21:00:00.000Z
CVE-2018-5408 PrinterLogic Print Management Software fails to validate the management portal SSL certificates
The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not validate, or incorrectly validates, the PrinterLogic management portal's SSL certificate. When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host.
Problem types: cwe_id: CWE-295
description: CWE-295 Improper Certificate Validation
Affected products: vendor: PrinterLogic
product: Management Software
Published: 2019-05-08T14:48:20.000Z
CVE-2018-5409 PrinterLogic Print Management Software updates and executes the code without origin and code verification
The PrinterLogic Print Management software, versions up to and including 18.3.1.96, updates and executes the code without sufficiently verifying the origin and integrity of the code. An attacker can execute malicious code by compromising the host server, performing DNS spoofing, or modifying the code in transit.
Problem types: cwe_id: CWE-494
description: CWE-494 Download of Code Without Integrity Check
Affected products: vendor: PrinterLogic
product: Management Software
Published: 2019-05-08T14:48:20.000Z
CVE-2018-5410 Dokan file system driver contains a stack-based buffer overflow
Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys driver. An attacker can create a device handle to the system driver and send arbitrary input that will trigger the vulnerability. This vulnerability was introduced in the 1.0.0.5000 version update.
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Dokan
product: Open Source File System
Credits: lang: en
value: Thanks to Parvez Anwar for reporting this vulnerability.
Published: 2019-01-07T14:00:00.000Z
CVE-2018-5411 Pixar's Tractor software, versions 2.2 and earlier, contains a stored cross-site scripting vulnerability
Pixar's Tractor software, versions 2.2 and earlier, contain a stored cross-site scripting vulnerability in the field that allows a user to add a note to an existing node. The stored information is displayed when a user requests information about the node. An attacker could insert Javascript into this note field that is then saved and displayed to the end user. An attacker might include Javascript that could execute on an authenticated user's system that could lead to website redirects, session cookie hijacking, social engineering, etc. As this is stored with the information about the node, all other authenticated users with access to this data are also vulnerable.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Pixar
product: Tractor
Published: 2018-12-13T22:00:00.000Z
CVE-2018-5412 
Imperva SecureSphere running v12.0.0.50 is vulnerable to local arbitrary code execution, escaping sealed-mode.
Problem types: cwe_id: CWE-77
description: CWE-77
Affected products: vendor: Imperva
product: SecureSphere
Published: 2019-01-10T22:00:00.000Z
CVE-2018-5413 
Imperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login keys to the admin user, resulting in privilege escalation.
Problem types: cwe_id: CWE-250
description: CWE-250
Affected products: vendor: Imperva
product: SecureSphere
Published: 2019-01-10T22:00:00.000Z
CVE-2018-5428 TIBCO Data Virtualization Command Injection Vulnerability
The version control adapters component of TIBCO Data Virtualization (formerly known as Cisco Information Server) contains vulnerabilities that may allow for arbitrary command execution. Affected releases are TIBCO Data Virtualization: 7.0.5; 7.0.6.
Problem types: description: The impact of the vulnerability includes the theoretical possibility of disclosing contents of files on the host machine that are accessible to the operating system account used to run the affected component.
Affected products: vendor: TIBCO Software Inc.
product: TIBCO Data Virtualization
Published: 2018-06-20T18:00:00.000Z
CVE-2018-5429 TIBCO JasperReports Library Code Sandboxing Problem
A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS, TIBCO Jaspersoft Studio, TIBCO Jaspersoft Studio Community Edition, and TIBCO Jaspersoft Studio for ActiveMatrix BPM may allow analytic reports that contain scripting to perform arbitrary code execution. Affected releases include TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.2.4; 6.3.0; 6.3.2;6.3.3; 6.4.0; 6.4.2, TIBCO JasperReports Server Community Edition: versions up to and including 6.4.2, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.2, TIBCO JasperReports Library: versions up to and including 6.2.4; 6.3.0; 6.3.2; 6.3.3; 6.4.0; 6.4.1; 6.4.2, TIBCO JasperReports Library Community Edition: versions up to and including 6.4.3, TIBCO JasperReports Library for ActiveMatrix BPM: versions up to and including 6.4.2, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 6.4.2, TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 6.4.2, TIBCO Jaspersoft Studio: versions up to and including 6.2.4; 6.3.0; 6.3.2; 6.3.3; 6.4.0; 6.4.2, TIBCO Jaspersoft Studio Community Edition: versions up to and including 6.4.3, TIBCO Jaspersoft Studio for ActiveMatrix BPM: versions up to and including 6.4.2.
Problem types: description: The impact of this vulnerability includes the possibility of arbitrary code execution with the privileges of the operation system process that contains the affected component.
Affected products: vendor: TIBCO Software Inc.
product: TIBCO JasperReports Server
vendor: TIBCO Software Inc.
product: TIBCO JasperReports Server Community Edition
vendor: TIBCO Software Inc.
product: TIBCO JasperReports Server for ActiveMatrix BPM
vendor: TIBCO Software Inc.
product: TIBCO JasperReports Library
vendor: TIBCO Software Inc.
product: TIBCO JasperReports Library Community Edition
vendor: TIBCO Software Inc.
product: TIBCO JasperReports Library for ActiveMatrix BPM
vendor: TIBCO Software Inc.
product: TIBCO Jaspersoft for AWS with Multi-Tenancy
vendor: TIBCO Software Inc.
product: TIBCO Jaspersoft Reporting and Analytics for AWS
vendor: TIBCO Software Inc.
product: TIBCO Jaspersoft Studio
vendor: TIBCO Software Inc.
product: TIBCO Jaspersoft Studio Community Edition
vendor: TIBCO Software Inc.
product: TIBCO Jaspersoft Studio for ActiveMatrix BPM
Published: 2018-04-17T18:00:00.000Z
CVE-2018-5430 TIBCO JasperReports Server Information Disclosure Vulnerability
The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contain a vulnerability which may allow any authenticated user read-only access to the contents of the web application, including key configuration files. Affected releases include TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.2.4; 6.3.0; 6.3.2; 6.3.3;6.4.0; 6.4.2, TIBCO JasperReports Server Community Edition: versions up to and including 6.4.2, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.2, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 6.4.2, TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 6.4.2.
Problem types: description: The impact includes the possible read-only access by authenticated users to web application configuration files that contain the credentials used by the server. Those credentials could then be used to affect external systems accessed by the JasperReports Server.
Affected products: vendor: TIBCO Software Inc.
product: TIBCO JasperReports Server
vendor: TIBCO Software Inc.
product: TIBCO JasperReports Server Community Edition
vendor: TIBCO Software Inc.
product: TIBCO JasperReports Server for ActiveMatrix BPM
vendor: TIBCO Software Inc.
product: TIBCO Jaspersoft for AWS with Multi-Tenancy
vendor: TIBCO Software Inc.
product: TIBCO Jaspersoft Reporting and Analytics for AWS
Credits: lang: en
value: TIBCO would like to extend its appreciation to Hector Monsegur at Rhino Security Labs for discovery of this vulnerability.
Published: 2018-04-17T18:00:00.000Z
CVE-2018-5431 TIBCO JasperReports Server Cross Site Scripting Vulnerability
The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability which may allow, in the context of a non-default permissions configuration, persisted cross-site scripting (XSS) attacks. Affected releases include TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.2.4; 6.3.0; 6.3.2; 6.3.3; 6.4.0; 6.4.2, TIBCO JasperReports Server Community Edition: versions up to and including 6.4.2, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.2, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 6.4.2, TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 6.4.2.
Problem types: description: The impact includes the theoretical possibility of a user performing operations using another user's access, including administrative functions being performed by a non-administrative user.
Affected products: vendor: TIBCO Software Inc.
product: TIBCO JasperReports Server
vendor: TIBCO Software Inc.
product: TIBCO JasperReports Server Community Edition
vendor: TIBCO Software Inc.
product: TIBCO JasperReports Server for ActiveMatrix BPM
vendor: TIBCO Software Inc.
product: TIBCO Jaspersoft for AWS with Multi-Tenancy
vendor: TIBCO Software Inc.
product: TIBCO Jaspersoft Reporting and Analytics for AWS
Published: 2018-04-17T18:00:00.000Z