rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-12873 
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-bounds read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2018-10-12T18:00:00.000Z
CVE-2018-12874 
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-bounds read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2018-10-12T18:00:00.000Z
CVE-2018-12875 
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-bounds read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2018-10-12T18:00:00.000Z
CVE-2018-12876 
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Type Confusion
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2018-10-12T18:00:00.000Z
CVE-2018-12877 
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2018-10-12T18:00:00.000Z
CVE-2018-12878 
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-bounds read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2018-10-12T18:00:00.000Z
CVE-2018-12879 
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-bounds read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2018-10-12T18:00:00.000Z
CVE-2018-12880 
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-bounds read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2018-10-12T18:00:00.000Z
CVE-2018-12881 
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an integer overflow vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Integer Overflow
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2018-10-12T18:00:00.000Z
CVE-2018-12882 
exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a stream that it is not responsible for closing. The vulnerable code is reachable through the PHP exif_read_data function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T03:00:00.000Z
CVE-2018-12884 
In Octopus Deploy 3.0 onwards (before 2018.6.7), an authenticated user with incorrect permissions may be able to create Accounts under the Infrastructure menu.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T11:00:00.000Z
CVE-2018-12885 
The randMod() function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current block information and a private variable, (which can be read with a getStorageAt call). Therefore, attackers can get powerful champs/items and get rewards.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-07T15:00:00.000Z
CVE-2018-12886 
stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-22T18:42:10.000Z
CVE-2018-12889 
An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnl_populate_cache for an array lacking '\0' termination when reading a binary CCNx or NDN file. This can result in Heap Corruption. This was addressed by fixing the memory management in mkAddToRelayCacheRequest in ccn-lite-ctrl.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T13:00:00.000Z
CVE-2018-12891 
An issue was discovered in Xen through 4.10.x. Certain PV MMU operations may take a long time to process. For that reason Xen explicitly checks for the need to preempt the current vCPU at certain points. A few rarely taken code paths did bypass such checks. By suitably enforcing the conditions through its own page table contents, a malicious guest may cause such bypasses to be used for an unbounded number of iterations. A malicious or buggy PV guest may cause a Denial of Service (DoS) affecting the entire host. Specifically, it may prevent use of a physical CPU for an indeterminate period of time. All Xen versions from 3.4 onwards are vulnerable. Xen versions 3.3 and earlier are vulnerable to an even wider class of attacks, due to them lacking preemption checks altogether in the affected code paths. Only x86 systems are affected. ARM systems are not affected. Only multi-vCPU x86 PV guests can leverage the vulnerability. x86 HVM or PVH guests as well as x86 single-vCPU PV ones cannot leverage the vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-02T17:00:00.000Z
CVE-2018-12892 
An issue was discovered in Xen 4.7 through 4.10.x. libxl fails to pass the readonly flag to qemu when setting up a SCSI disk, due to what was probably an erroneous merge conflict resolution. Malicious guest administrators or (in some situations) users may be able to write to supposedly read-only disk images. Only emulated SCSI disks (specified as "sd" in the libxl disk configuration, or an equivalent) are affected. IDE disks ("hd") are not affected (because attempts to make them readonly are rejected). Additionally, CDROM devices (that is, devices specified to be presented to the guest as CDROMs, regardless of the nature of the backing storage on the host) are not affected; they are always read only. Only systems using qemu-xen (rather than qemu-xen-traditional) as the device model version are vulnerable. Only systems using libxl or libxl-based toolstacks are vulnerable. (This includes xl, and libvirt with the libxl driver.) The vulnerability is present in Xen versions 4.7 and later. (In earlier versions, provided that the patch for XSA-142 has been applied, attempts to create read only disks are rejected.) If the host and guest together usually support PVHVM, the issue is exploitable only if the malicious guest administrator has control of the guest kernel or guest kernel command line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-02T17:00:00.000Z
CVE-2018-12893 
An issue was discovered in Xen through 4.10.x. One of the fixes in XSA-260 added some safety checks to help prevent Xen livelocking with debug exceptions. Unfortunately, due to an oversight, at least one of these safety checks can be triggered by a guest. A malicious PV guest can crash Xen, leading to a Denial of Service. All Xen systems which have applied the XSA-260 fix are vulnerable. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only x86 PV guests can exploit the vulnerability. x86 HVM and PVH guests cannot exploit the vulnerability. An attacker needs to be able to control hardware debugging facilities to exploit the vulnerability, but such permissions are typically available to unprivileged users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-02T17:00:00.000Z
CVE-2018-12895 
WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb parameter, which is passed to the PHP unlink function and can delete the wp-config.php file. This is related to missing filename validation in the wp-includes/post.php wp_delete_attachment function. The attacker must have capabilities for files and posts that are normally available only to the Author, Editor, and Administrator roles. The attack methodology is to delete wp-config.php and then launch a new installation process to increase the attacker's privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T20:00:00.000Z
CVE-2018-12896 
An issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time/posix-timers.c in the POSIX timer code is caused by the way the overrun accounting works. Depending on interval and expiry time values, the overrun can be larger than INT_MAX, but the accounting is int based. This basically makes the accounting values, which are visible to user space via timer_getoverrun(2) and siginfo::si_overrun, random. For example, a local user can cause a denial of service (signed integer overflow) via crafted mmap, futex, timer_create, and timer_settime system calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-02T17:00:00.000Z
CVE-2018-12897 
SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-07T22:00:00.000Z
CVE-2018-12900 
Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T22:00:00.000Z
CVE-2018-12901 
A vulnerability in the conferencing component of Mitel ST 14.2, versions GA29 (19.49.9400.0) and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the signin.php page. A successful exploit could allow an attacker to execute arbitrary scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-23T21:00:00.000Z
CVE-2018-12902 
In Easy Magazine through 2012-10-26, there is XSS in the search bar of the web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T22:00:00.000Z
CVE-2018-12903 
In CyberArk Endpoint Privilege Manager (formerly Viewfinity) 10.2.1.603, there is persistent XSS via an account name on the create token screen, the VfManager.asmx SelectAccounts->DisplayName screen, a user's groups in ConfigurationPage, the Dialog Title field, and App Group Name in the Application Group Wizard.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T22:00:00.000Z
CVE-2018-12904 
In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could cause L1 KVM guests to VMEXIT, potentially allowing privilege escalations and denial of service attacks due to lack of checking of CPL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-27T11:00:00.000Z
CVE-2018-12905 
joyplus-cms 1.6.0 has XSS in admin_player.php, related to manager/index.php "system manage" and "add" actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-27T13:00:00.000Z
CVE-2018-12907 
In Rclone 1.42, use of "rclone sync" to migrate data between two Google Cloud Storage buckets might allow attackers to trigger the transmission of any URL's content to Google, because there is no validation of a URL field received from the Google Cloud Storage API server, aka a "RESTLESS" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-27T13:00:00.000Z
CVE-2018-12908 
Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for the /dashboard/deposit URI, as demonstrated by discovering database credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-27T16:00:00.000Z
CVE-2018-12909 
Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has access to) via an index.php?op=fileviewer&file= URI. NOTE: the vendor indicates that the product is not intended for a "publicly accessible environment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-27T16:00:00.000Z
CVE-2018-12910 
The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-05T18:00:00.000Z
CVE-2018-12911 
WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the get_simple_globs functions in ThirdParty/xdgmime/src/xdgmimecache.c and ThirdParty/xdgmime/src/xdgmimeglob.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T13:00:00.000Z
CVE-2018-12912 
An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL Injection vulnerability via an admin/index.php/database/operate?dbaction=emptytable&tablename= URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-27T18:00:00.000Z
CVE-2018-12913 
In Miniz 2.0.7, tinfl_decompress in miniz_tinfl.c has an infinite loop because sym2 and counter can both remain equal to zero.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-27T18:00:00.000Z
CVE-2018-12914 
A remote code execution issue was discovered in PublicCMS V4.0.20180210. An attacker can upload a ZIP archive that contains a .jsp file with a directory traversal pathname. After an unzip operation, the attacker can execute arbitrary code by visiting a .jsp URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-27T18:00:00.000Z
CVE-2018-12915 
In libpbc.a in PBC through 2017-03-02, there is a buffer over-read in calc_hash in map.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-27T18:00:00.000Z
CVE-2018-12916 
In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in _pbcP_message_default in proto.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-27T18:00:00.000Z
CVE-2018-12917 
In libpbc.a in PBC through 2017-03-02, there is a heap-based buffer over-read in _pbcM_ip_new in map.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-27T18:00:00.000Z
CVE-2018-12918 
In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in _pbcB_register_fields in bootstrap.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-27T18:00:00.000Z
CVE-2018-12919 
In CraftedWeb through 2013-09-24, aasp_includes/pages/notice.php allows XSS via the e parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-27T18:00:00.000Z
CVE-2018-12920 
Brickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a direct request for the basic.html#ipsettings or basic.html#datadelivery URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-28T11:00:00.000Z
CVE-2018-12921 
Electro Industries GaugeTech Nexus devices allow remote attackers to obtain potentially sensitive information via a direct request for the meter_information.htm, diag_system.htm, or diag_dnp_lan_wan.htm URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-28T11:00:00.000Z
CVE-2018-12922 
Emerson Liebert IntelliSlot Web Card devices allow remote attackers to reconfigure access control via the config/configUser.htm or config/configTelnet.htm URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-28T11:00:00.000Z
CVE-2018-12923 
BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request for the #!/system URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-28T11:00:00.000Z
CVE-2018-12924 
Sollae Serial-Ethernet-Module and Remote-I/O-Device-Server devices have a default password of sollae for the TELNET service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-28T11:00:00.000Z
CVE-2018-12925 
Baseon Lantronix MSS devices do not require a password for TELNET access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-28T11:00:00.000Z
CVE-2018-12926 
Pharos Controls devices allow remote attackers to obtain potentially sensitive information via a direct request for the default/index.lsp or default/log.lsp URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-28T11:00:00.000Z
CVE-2018-12927 
Northern Electric & Power (NEP) inverter devices allow remote attackers to obtain potentially sensitive information via a direct request for the nep/status/index/1 URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-28T11:00:00.000Z
CVE-2018-12928 
In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-28T14:00:00.000Z
CVE-2018-12929 
ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-after-free read and possibly cause a denial of service (kernel oops or panic) via a crafted ntfs filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-28T14:00:00.000Z
CVE-2018-12930 
ntfs_end_buffer_async_read in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-28T14:00:00.000Z
CVE-2018-12931 
ntfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-28T14:00:00.000Z
CVE-2018-12932 
PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by triggering a large pAlphaBlend->cbBitsSrc value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-28T14:00:00.000Z
CVE-2018-12933 
PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact because the attacker controls the pCreatePen->ihPen array index.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-28T14:00:00.000Z
CVE-2018-12934 
remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM). This can occur during execution of cxxfilt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-28T14:00:00.000Z
CVE-2018-12939 
A directory traversal flaw in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows an authenticated attacker to write to (or potentially delete) arbitrary files via a .. (dot dot) in the "op/op.UploadChunks.php" "qquuid" parameter.  NOTE: this can be leveraged to execute arbitrary code by using CVE-2018-12940.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-31T14:00:00.000Z
CVE-2018-12940 
Unrestricted file upload vulnerability in "op/op.UploadChunks.php" in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension specified by the "qqfile" parameter. This allows an authenticated attacker to upload a malicious file containing PHP code to execute operating system commands to the web root of the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-31T14:00:00.000Z
CVE-2018-12941 
This vulnerability allows remote attackers to execute arbitrary code in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 by adding a system command at the end of the "cacheDir" path and following usage of the "Clear Cache" functionality. This allows an authenticated attacker, with permission to the Settings functionality, to inject arbitrary system commands within the application by manipulating the "Cache directory" path. An attacker can use it to perform malicious tasks such as to extract, change, or delete sensitive information or run system commands on the underlying operating system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-31T14:00:00.000Z
CVE-2018-12942 
SQL injection vulnerability in the "Users management" functionality in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows authenticated attackers to manipulate an SQL query within the application by sending additional SQL commands to the application server. An attacker can use this vulnerability to perform malicious tasks such as to extract, change, or delete sensitive information within the database supporting the application, and potentially run system commands on the underlying operating system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-31T14:00:00.000Z
CVE-2018-12943 
Cross-Site Scripting (XSS) vulnerability in every page that includes the "action" URL parameter in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-31T14:00:00.000Z