rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-10114 
An issue was discovered in GEGL through 0.3.32. The gegl_buffer_iterate_read_simple function in buffer/gegl-buffer-access.c allows remote attackers to cause a denial of service (write access violation) or possibly have unspecified other impact via a malformed PPM file, related to improper restrictions on memory allocation in the ppm_load_read_header function in operations/external/ppm-load.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-14T14:00:00.000Z
CVE-2018-10115 
Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-02T21:00:00.000Z
CVE-2018-10117 
An issue was discovered in idreamsoft iCMS V7.0.7. There is a CSRF vulnerability that can add an admin account via admincp.php?app=members&do=save&frame=iPHP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-15T11:00:00.000Z
CVE-2018-10118 
Monstra CMS 3.0.4 has Stored XSS via the Name field on the Create New Page screen under the admin/index.php?id=pages URI, related to plugins/box/pages/pages.admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-15T12:00:00.000Z
CVE-2018-10119 
sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-15T16:00:00.000Z
CVE-2018-10120 
The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service (heap-based buffer overflow with write access) or possibly have unspecified other impact via a crafted document that contains a certain Microsoft Word record.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-15T16:00:00.000Z
CVE-2018-10121 
plugins/box/pages/pages.admin.php in Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the title section of an admin/index.php?id=pages&action=edit_page&name=error404 (aka Edit 404 page) action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-15T17:00:00.000Z
CVE-2018-10122 
QingDao Nature Easy Soft Chanzhi Enterprise Portal System (aka chanzhieps) pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-16T03:00:00.000Z
CVE-2018-10123 
p910nd on Inteno IOPSYS 2.0 through 4.2.0 allows remote attackers to read, or append data to, arbitrary files via requests on TCP port 9100.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T13:00:00.000Z
CVE-2018-10124 
The kill_something_info function in kernel/signal.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service via an INT_MIN argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-16T13:00:00.000Z
CVE-2018-10125 
Contao before 4.5.7 has XSS in the system log.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T14:40:15.000Z
CVE-2018-10126 
ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-21T21:00:00.000Z
CVE-2018-10127 
An issue was discovered in XYHCMS 3.5. It has CSRF via an index.php?g=Manage&m=Rbac&a=addUser request, resulting in addition of an account with the administrator role.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-16T14:00:00.000Z
CVE-2018-10128 
An issue was discovered in XYHCMS 3.5. It has XSS via the test parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-16T14:00:00.000Z
CVE-2018-10132 
PbootCMS v0.9.8 has CSRF via an admin.php/Message/mod/id/19.html?backurl=/index.php request, resulting in PHP code injection in the recontent parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-16T14:00:00.000Z
CVE-2018-10133 
PbootCMS v0.9.8 allows PHP code injection via an IF label in index.php/About/6.html or admin.php/Site/index.html, related to the parserIfLabel function in \apps\home\controller\ParserController.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-16T14:00:00.000Z
CVE-2018-10135 
iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-16T17:00:00.000Z
CVE-2018-10136 
iScripts UberforX 2.2 has Stored XSS in the "manage_settings" section of the Admin Panel via a value field to the /cms?section=manage_settings&action=edit URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-16T17:00:00.000Z
CVE-2018-10137 
iScripts UberforX 2.2 has CSRF in the "manage_settings" section of the Admin Panel via the /cms?section=manage_settings&action=edit URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-16T17:00:00.000Z
CVE-2018-10138 
The CATALooK.netStore module through 7.2.8 for DNN (formerly DotNetNuke) allows XSS via the /ViewEditGoogleMaps.aspx PortalID or CATSkin parameter, or the /ImageViewer.aspx link or desc parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-16T19:00:00.000Z
CVE-2018-10139 
The PAN-OS response for GlobalProtect Gateway in Palo Alto Networks PAN-OS 6.1.21 and earlier, PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML. PAN-OS 8.1 is NOT affected.
Problem types: description: Cross-site scripting
Affected products: vendor: Palo Alto Networks
product: PAN-OS
Published: 2018-08-16T18:00:00.000Z
CVE-2018-10140 
The PAN-OS Management Web Interface in Palo Alto Networks PAN-OS 8.1.2 and earlier may allow an authenticated user to shut down all management sessions, resulting in all logged in users to be redirected to the login page. PAN-OS 6.1, PAN-OS 7.1 and PAN-OS 8.0 are NOT affected.
Problem types: description: Denial of Service
Affected products: vendor: Palo Alto Networks
product: PAN-OS
Published: 2018-08-16T18:00:00.000Z
CVE-2018-10141 
GlobalProtect Portal Login page in Palo Alto Networks PAN-OS before 8.1.4 allows an unauthenticated attacker to inject arbitrary JavaScript or HTML.
Problem types: description: Cross-Site Scripting (XSS)
Affected products: vendor: Palo Alto Networks
product: Palo Alto Networks
Published: 2018-10-12T22:00:00.000Z
CVE-2018-10142 
The Expedition Migration tool 1.0.106 and earlier may allow an unauthenticated attacker to enumerate files on the operating system.
Problem types: description: Information Disclosure
Affected products: vendor: Palo Alto Networks
product: Palo Alto Networks Expedition
Published: 2018-11-27T21:00:00.000Z
CVE-2018-10143 
The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/application.
Problem types: description: Remote Code Execution
Affected products: vendor: Palo Alto Networks
product: Palo Alto Networks Expedition
Published: 2018-12-12T00:00:00.000Z
CVE-2018-10164 
Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows allows authenticated attackers to inject arbitrary web script or HTML via the implementation of portalPictureUpload functionality. This is fixed in version 2.6.1_Windows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-03T18:00:00.000Z
CVE-2018-10165 
Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows allows authenticated attackers to inject arbitrary web script or HTML via the userName parameter in the local user creation functionality. This is fixed in version 2.6.1_Windows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-03T18:00:00.000Z
CVE-2018-10166 
The web management interface in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows does not have Anti-CSRF tokens in any forms. This would allow an attacker to submit authenticated requests when an authenticated user browses an attack-controlled domain. This is fixed in version 2.6.1_Windows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-03T18:00:00.000Z
CVE-2018-10167 
The web application backup file in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows is encrypted with a hard-coded cryptographic key, so anyone who knows that key and the algorithm can decrypt it. A low-privilege user could decrypt and modify the backup file in order to elevate their privileges. This is fixed in version 2.6.1_Windows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-03T18:00:00.000Z
CVE-2018-10168 
TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows do not control privileges for usage of the Web API, allowing a low-privilege user to make any request as an Administrator. This is fixed in version 2.6.1_Windows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-03T18:00:00.000Z
CVE-2018-10169 
ProtonVPN 1.3.3 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "ProtonVPN Service" service. This service establishes an NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The "Connect" method accepts a class instance argument that provides attacker control of the OpenVPN command line. An attacker can specify a dynamic library plugin that should run for every new VPN connection. This plugin will execute code in the context of the SYSTEM user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-16T21:00:00.000Z
CVE-2018-10170 
NordVPN 6.12.7.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "nordvpn-service" service. This service establishes an NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The "Connect" method accepts a class instance argument that provides attacker control of the OpenVPN command line. An attacker can specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-16T21:00:00.000Z
CVE-2018-10171 
Kromtech MacKeeper 3.20.4 suffers from a root privilege escalation vulnerability through its `com.mackeeper.AdwareAnalyzer.AdwareAnalyzerPrivilegedHelper` component. The AdwareAnalzyerPrivilegedHelper tool implements an XPC service that allows an unprivileged application to connect and execute shell scripts as the root user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-05T21:52:43.000Z
CVE-2018-10172 
7-Zip through 18.01 on Windows implements the "Large memory pages" option by calling the LsaAddAccountRights function to add the SeLockMemoryPrivilege privilege to the user's account, which makes it easier for attackers to bypass intended access restrictions by using this privilege in the context of a sandboxed process. Note: This has been disputed by 3rd parties who argue this is a valid feature of Windows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-16T22:00:00.000Z
CVE-2018-10173 
Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-20T21:00:00.000Z
CVE-2018-10174 
Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in user has a read-only role.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-20T21:00:00.000Z
CVE-2018-10175 
Digital Guardian Management Console 7.1.2.0015 has an XXE issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-20T21:00:00.000Z
CVE-2018-10176 
Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-20T21:00:00.000Z
CVE-2018-10177 
In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-16T23:00:00.000Z
CVE-2018-10178 
The FromDocToPDF extension before 13.611.13.2303 for Chrome allows remote attackers to discover visited web sites via vectors involving a mostVisitedSites command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-17T03:00:00.000Z
CVE-2018-10183 
An issue was discovered in BigTree 4.2.22. There is cross-site scripting (XSS) in /core/inc/lib/less.php/test/index.php because of a $_SERVER['REQUEST_URI'] echo, as demonstrated by the dir parameter in a file=charsets action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-17T14:00:00.000Z
CVE-2018-10184 
An issue was discovered in HAProxy before 1.8.8. The incoming H2 frame length was checked against the max_frame_size setting instead of being checked against the bufsize. The max_frame_size only applies to outgoing traffic and not to incoming, so if a large enough frame size is advertised in the SETTINGS frame, a wrapped frame will be defragmented into a temporary allocated buffer where the second fragment may overflow the heap by up to 16 kB. It is very unlikely that this can be exploited for code execution given that buffers are very short lived and their addresses not realistically predictable in production, but the likelihood of an immediate crash is absolutely certain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-09T07:00:00.000Z
CVE-2018-10185 
An issue was discovered in TuziCMS v2.0.6. There is a CSRF vulnerability that can add an admin account, as demonstrated by a history.pushState call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-17T19:00:00.000Z
CVE-2018-10186 
In radare2 2.5.0, there is a heap-based buffer over-read in the r_hex_bin2str function (libr/util/hex.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. This issue is different from CVE-2017-15368.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-17T20:00:00.000Z
CVE-2018-10187 
In radare2 2.5.0, there is a heap-based buffer over-read in the dalvik_op function (libr/anal/p/anal_dalvik.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. Note that this issue is different from CVE-2018-8809, which was patched earlier.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-17T20:00:00.000Z
CVE-2018-10188 
phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_operations.js, js/tbl_operations.js, libraries/classes/Operations.php, and sql.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-19T14:00:00.000Z
CVE-2018-10189 
An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact by their auto-incremented ID. Thus, a third party can manipulate the cookie value with +1 to systematically assume being tracked as each contact in Mautic. It is then possible to retrieve information about the contact through forms that have progressive profiling enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-17T20:00:00.000Z
CVE-2018-10190 
A vulnerability in London Trust Media Private Internet Access (PIA) VPN Client v77 for Windows could allow an unauthenticated, local attacker to run executable files with elevated privileges. The vulnerability is due to insufficient implementation of access controls. The "Changelog" and "Help" options available from the system tray context menu spawn an elevated instance of the user's default web browser. An attacker could exploit this vulnerability by selecting "Run as Administrator" from the context menu of an executable file within the file browser of the spawned default web browser. This may allow the attacker to execute privileged commands on the targeted system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-17T20:00:00.000Z
CVE-2018-10191 
In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c::mrb_vm_exec() when handling OP_GETUPVAR in the presence of deep scope nesting, resulting in a use-after-free. An attacker that can cause Ruby code to be run can use this to possibly execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-17T21:00:00.000Z
CVE-2018-10192 
IPVanish 3.0.11 for macOS suffers from a root privilege escalation vulnerability. The `com.ipvanish.osx.vpnhelper` LaunchDaemon implements an insecure XPC service that could allow an attacker to execute arbitrary code as the root user. IPVanish uses a third-party library for converting `xpc_object_t` types in to `NSObject` types for sending XPC messages. When IPVanish establishes a new connection, the following XPC message is sent to the `com.ipvanish.osx.vpnhelper` LaunchDaemon. Because the XPC service itself does not validate an incoming connection, any application installed on the operating system can send it XPC messages. In the case of the "connect" message, an attacker could manipulate the `OpenVPNPath` to point at a malicious binary on the system. The `com.ipvanish.osx.vpnhelper` would receive the VPNHelperConnect command, and then execute the malicious binary as the root user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-17T21:00:00.000Z
CVE-2018-10193 
LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an HTML document because the resource consumption of onloadwff.js grows with the number of INPUT elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-18T00:00:00.000Z
CVE-2018-10194 
The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-18T21:00:00.000Z
CVE-2018-10195 
lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-02T13:54:18.000Z
CVE-2018-10196 
NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-30T21:00:00.000Z
CVE-2018-10197 
There is a time-based blind SQL injection vulnerability in the Access Manager component before 9.18.040 and 10.x before 10.18.040 in ELO ELOenterprise 9 and 10 and ELOprofessional 9 and 10 that makes it possible to read all database content. The vulnerability exists in the ticket HTTP GET parameter. For example, one can succeed in reading the password hash of the administrator user in the "userdata" table from the "eloam" database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-11T16:00:00.000Z
CVE-2018-10198 
An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket overview screen to disclose internal article information of their customer tickets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-06T20:00:00.000Z
CVE-2018-10199 
In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in src/io.c::File#initilialize_copy(). An attacker that can cause Ruby code to be run can possibly use this to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-18T15:00:00.000Z
CVE-2018-10201 
An issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputing vSpace Pro 10 and 11. It is possible to read arbitrary files outside the root directory of the web server. This vulnerability could be exploited remotely by a crafted URL without credentials, with .../ or ...\ or ..../ or ....\ as a directory-traversal pattern to TCP port 8667.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-20T08:00:00.000Z
CVE-2018-10204 
PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "sevpnclient" service. When configured to use the OpenVPN protocol, the "sevpnclient" service executes "openvpn.exe" using the OpenVPN config file located at %PROGRAMDATA%\purevpn\config\config.ovpn. This file allows "Write" permissions to users in the "Everyone" group. An authenticated attacker may modify this file to specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-18T21:00:00.000Z
CVE-2018-10205 
hyperstart 1.0.0 in HyperHQ Hyper has memory leaks in the container_setup_modules and hyper_rescan_scsi functions in container.c, related to runV 1.0.0 for Docker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-19T08:00:00.000Z