rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-18026 
IMFCameraProtect.sys in IObit Malware Fighter 6.2 (and possibly lower versions) is vulnerable to a stack-based buffer overflow. The attacker can use DeviceIoControl to pass a user specified size which can be used to overwrite return addresses. This can lead to a denial of service or code execution attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-19T22:00:00.000Z
CVE-2018-18029 
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T15:00:00.000Z
CVE-2018-18035 
A vulnerability in flashcanvas.swf in OpenEMR before 5.0.1 Patch 6 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-02T21:44:13.000Z
CVE-2018-18056 
An issue was discovered in the Texas Instruments (TI) TM4C, MSP432E and MSP432P microcontroller series. The eXecute-Only-Memory (XOM) implementation prevents code read-outs on protected memory by generating bus faults. However, single-stepping and using breakpoints is allowed in XOM-protected flash memory. As a consequence, it is possible to execute single instructions with arbitrary system states (e.g., registers, status flags, and SRAM content) and observe the state changes produced by the unknown instruction. An attacker could exploit this vulnerability by executing protected and unknown instructions with specific system states and observing the state changes. Based on the gathered information, it is possible to reverse-engineer the executed instructions. The processor acts as a kind of "instruction oracle."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T16:22:18.000Z
CVE-2018-18058 
An issue was discovered in Bitdefender Engines before 7.76662. A vulnerability has been discovered in the iso.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a division-by-zero circumstance. Paired with other vulnerabilities, this can result in denial-of-service. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-24T16:56:11.000Z
CVE-2018-18059 
An issue was discovered in Bitdefender Engines before 7.76675. A vulnerability has been discovered in the rar.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. Paired with other vulnerabilities, this can result in denial-of-service. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-24T16:54:14.000Z
CVE-2018-18060 
An issue was discovered in Bitdefender Engines before 7.76808. A vulnerability has been discovered in the dalvik.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. Paired with other vulnerabilities, this can result in denial-of-service. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-24T16:51:45.000Z
CVE-2018-18061 
An issue was discovered in dialog.php in tecrail Responsive FileManager 9.8.1. Attackers can access the file manager interface that provides them with the ability to upload and delete files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-10T21:00:00.000Z
CVE-2018-18062 
An issue was discovered in dialog.php in tecrail Responsive FileManager 9.8.1. A reflected XSS vulnerability allows remote attackers to inject arbitrary web script or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-10T21:00:00.000Z
CVE-2018-18064 
cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-08T18:00:00.000Z
CVE-2018-18065 
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-08T18:00:00.000Z
CVE-2018-18066 
snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-08T18:00:00.000Z
CVE-2018-18068 
The ARM-based hardware debugging feature on Raspberry Pi 3 module B+ and possibly other devices allows non-secure EL1 code to read/write any EL3 (the highest privilege level in ARMv8) memory/register via inter-processor debugging. With a debug host processor A running in non-secure EL1 and a debug target processor B running in any privilege level, the debugging feature allows A to halt B and promote B to any privilege level. As a debug host, A has full control of B even if B owns a higher privilege level than A. Accordingly, A can read/write any EL3 memory/register via B. Also, with this memory access, A can execute arbitrary code in EL3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-04T19:13:46.000Z
CVE-2018-18069 
process_forms in the WPML (aka sitepress-multilingual-cms) plugin through 3.6.3 for WordPress has XSS via any locale_file_name_ parameter (such as locale_file_name_en) in an authenticated theme-localization.php request to wp-admin/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-08T22:00:00.000Z
CVE-2018-18070 
An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. Defining or receiving a specific navigation route might cause the system to freeze and reboot after a few transmissions. When the system next starts, it tries to re-calculate the route, which will cause a boot loop. (Under certain circumstances, it is possible to quickly overwrite the malicious route to regain the stability of the system.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T09:00:00.000Z
CVE-2018-18071 
An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS. The encrypted Connected Vehicle API data exchange between the app and a server might be intercepted. The app can be used to operate the Remote Parking Pilot, unlock the vehicle, or obtain sensitive information such as latitude, longitude, and direction of travel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T09:00:00.000Z
CVE-2018-18073 
Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T16:00:00.000Z
CVE-2018-18074 
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T15:00:00.000Z
CVE-2018-18075 
WikidForum 2.20 has SQL Injection via the rpc.php parent_post_id or num_records parameter, or the index.php?action=search select_sort parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T16:00:00.000Z
CVE-2018-18082 
XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T18:00:00.000Z
CVE-2018-18083 
An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T18:00:00.000Z
CVE-2018-18084 
An issue was discovered in DuomiCMS 3.0. SQL injection exists in the ajax.php file, as demonstrated by the uid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T18:00:00.000Z
CVE-2018-18086 
EmpireCMS v7.5 has an arbitrary file upload vulnerability in the LoadInMod function in e/class/moddofun.php, exploitable by logged-in users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T20:00:00.000Z
CVE-2018-18087 
The Bixie Portfolio plugin 1.2.0 for Pagekit has XSS: a logged-in user who has the "Manage portfolio" privilege can inject arbitrary web script or HTML via the Image URL field in the portfolio editor. The vulnerability is triggered by visiting /portfolio/${project_title}.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T20:00:00.000Z
CVE-2018-18088 
OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T20:00:00.000Z
CVE-2018-18089 
Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.
Problem types: description: Information Disclosure
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-18090 
Out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-18091 
Use after free in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an unprivileged user to potentially enable a denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-18093 
Improper file permissions in the installer for Intel VTune Amplifier 2018 Update 3 and before may allow unprivileged user to potentially gain privileged access via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel VTune Amplifier
Published: 2018-12-13T23:00:00.000Z
CVE-2018-18094 
Improper directory permissions in installer for Intel(R) Media SDK before 2018 R2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) Media SDK Advisory
Published: 2019-04-17T17:01:42.000Z
CVE-2018-18095 
Improper authentication in firmware for Intel(R) SSD DC S4500 Series and Intel(R) SSD DC S4600 Series before SCV10150 may allow an unprivileged user to potentially enable escalation of privilege via physical access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) SSD DC S4500/S4600 Series
Published: 2019-07-11T20:31:42.000Z
CVE-2018-18096 
Improper memory handling in Intel QuickAssist Technology for Linux (all versions) may allow an authenticated user to potentially enable a denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: Intel Corporation
product: Intel QuickAssist Technology for Linux
Published: 2018-12-13T23:00:00.000Z
CVE-2018-18097 
Improper directory permissions in Intel Solid State Drive Toolbox before 3.5.7 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel Solid State Drive Toolbox
Published: 2018-12-13T23:00:00.000Z
CVE-2018-18098 
Improper file verification in install routine for Intel(R) SGX SDK and Platform Software for Windows before 2.2.100 may allow an escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) SGX SDK and Platform Software for Windows
Published: 2019-01-10T20:00:00.000Z
CVE-2018-18190 
An issue was discovered in GoPro gpmf-parser before 1.2.1. There is a divide-by-zero error in GPMF_ScaledData in GPMF_parser.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T20:00:00.000Z
CVE-2018-18191 
Cross-site request forgery (CSRF) vulnerability in /admin.php?c=member&m=edit&uid=1 in dayrui FineCms 5.4 allows remote attackers to change the administrator's password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T20:00:00.000Z
CVE-2018-18192 
An issue was discovered in libgig 4.1.0. There is a NULL pointer dereference in the function DLS::File::GetFirstSample() in DLS.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T20:00:00.000Z
CVE-2018-18193 
An issue was discovered in libgig 4.1.0. There is operator new[] failure (due to a big pWavePoolTable heap request) in DLS::File::File in DLS.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T20:00:00.000Z
CVE-2018-18194 
An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in DLS::Region::GetSample() in DLS.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T20:00:00.000Z
CVE-2018-18195 
An issue was discovered in libgig 4.1.0. There is an FPE (divide-by-zero error) in DLS::Sample::Sample in DLS.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T20:00:00.000Z
CVE-2018-18196 
An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in RIFF::List::GetListTypeString in RIFF.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T20:00:00.000Z
CVE-2018-18197 
An issue was discovered in libgig 4.1.0. There is an operator new[] failure (due to a big pSampleLoops heap request) in DLS::Sampler::Sampler in DLS.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T20:00:00.000Z
CVE-2018-18198 
The $opener_input_field variable in addons/mediapool/pages/index.php in REDAXO 5.6.3 is not effectively filtered and is output directly to the page. The attacker can insert XSS payloads via an index.php?page=mediapool/media&opener_input_field=[XSS] request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T22:00:00.000Z
CVE-2018-18199 
Mediamanager in REDAXO before 5.6.4 has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T22:00:00.000Z
CVE-2018-18200 
There is a SQL injection in Benutzerverwaltung in REDAXO before 5.6.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T22:00:00.000Z
CVE-2018-18201 
qibosoft V7.0 allows CSRF via admin/index.php?lfj=member&action=addmember to add a user account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T23:00:00.000Z
CVE-2018-18202 
The QLogic 4Gb Fibre Channel 5.5.2.6.0 and 4/8Gb SAN 7.10.1.20.0 modules for IBM BladeCenter have an undocumented support account with a support password, an undocumented diags account with a diags password, and an undocumented prom account with a prom password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-10T01:00:00.000Z
CVE-2018-18203 
A vulnerability in the update mechanism of Subaru StarLink Harman head units 2017, 2018, and 2019 may give an attacker (with physical access to the vehicle's USB ports) the ability to rewrite the firmware of the head unit. This occurs because the device accepts modified QNX6 filesystem images (as long as the attacker obtains access to certain Harman decryption/encryption code) as a consequence of a bug where unsigned images pass a validity check. An attacker could potentially install persistent malicious head unit firmware and execute arbitrary code as the root user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-28T23:00:00.000Z
CVE-2018-18205 
Topvision CC8800 CMTS C-E devices allow remote attackers to obtain sensitive information via a direct request for /WebContent/startup.tar.gz with userName=admin in a cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-15T20:00:00.000Z
CVE-2018-18206 
In the client in Bytom before 1.0.6, checkTopicRegister in p2p/discover/net.go does not prevent negative idx values, leading to a crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-10T09:00:00.000Z
CVE-2018-18207 
Virtualmin 6.03 allows Frame Injection via the settings-editor_read.cgi file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-10T15:00:00.000Z
CVE-2018-18208 
Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webmin_search.cgi URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-10T15:00:00.000Z
CVE-2018-18209 
XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_type parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-10T16:00:00.000Z
CVE-2018-18210 
XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-10T16:00:00.000Z
CVE-2018-18211 
PbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-10T16:00:00.000Z
CVE-2018-18215 
In youke365 v1.1.5, admin/user.html has a CSRF vulnerability that can add an user account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-11T15:00:00.000Z
CVE-2018-18223 
Open Design Alliance Drawings SDK 2019Update1 has a vulnerability during the reading of malformed files, allowing attackers to obtain sensitive information from process memory or cause a crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-19T22:00:00.000Z
CVE-2018-18224 
A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information from process memory or cause a crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-19T22:00:00.000Z
CVE-2018-18225 
In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-12T05:00:00.000Z
CVE-2018-18226 
In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-12T05:00:00.000Z
CVE-2018-18227 
In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-12T05:00:00.000Z
CVE-2018-18240 
Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use XStream's available protection mechanisms to restrict unmarshalling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-11T07:00:00.000Z
CVE-2018-18242 
youke365 v1.1.5 has SQL injection via admin/login.html, as demonstrated by username=admin&pass=123456&code=9823&act=login&submit=%E7%99%BB+%E9%99%86.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-11T14:00:00.000Z
CVE-2018-18244 
Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP Referer Header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T20:00:00.000Z
CVE-2018-18245 
Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified check_load plugin to NRPE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-18246 
Icinga Web 2 before 2.6.2 has CSRF via /icingaweb2/config/moduledisable?name=monitoring to disable the monitoring module, or via /icingaweb2/config/moduleenable?name=setup to enable the setup module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-18247 
Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-18248 
Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/timeline query string, or the /icingaweb2/setup query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z