rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-16771 
Hoosk v1.7.0 allows PHP code execution via a SiteUrl that is provided during installation and mishandled in config.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-10T04:00:00.000Z
CVE-2018-16772 
Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-10T04:00:00.000Z
CVE-2018-16773 
EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-10T04:00:00.000Z
CVE-2018-16774 
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-10T04:00:00.000Z
CVE-2018-16775 
An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the site name in the "Categories" menu.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-10T04:00:00.000Z
CVE-2018-16776 
wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-10T04:00:00.000Z
CVE-2018-16778 
Cross-site scripting (XSS) vulnerability in Jenzabar v8.2.1 through 9.2.0 allows remote attackers to inject arbitrary web script or HTML via the query parameter (aka the Search Field).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T22:00:00.000Z
CVE-2018-16779 
BlogCMS through 2016-10-25 has XSS via a comment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-10T04:00:00.000Z
CVE-2018-16780 
Complete Responsive CMS Blog through 2018-05-20 has XSS via a comment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-10T04:00:00.000Z
CVE-2018-16781 
ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE signal) via a progressive JPEG file that lacks an AC Huffman table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-10T04:00:00.000Z
CVE-2018-16782 
libimageworsener.a in ImageWorsener 1.3.2 has a buffer overflow in the bmpr_read_rle_internal function in imagew-bmp.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-10T04:00:00.000Z
CVE-2018-16784 
DedeCMS 5.7 SP2 allows XML injection, and resultant remote code execution, via a "<file type='file' name='../" substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T15:00:00.000Z
CVE-2018-16785 
XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized by attackers to create script file to obtain webshell
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-19T15:00:00.000Z
CVE-2018-16786 
DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus/feedback_ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T15:00:00.000Z
CVE-2018-16789 
libhttp/url.c in shellinabox through 2.20 has an implementation flaw in the HTTP request parsing logic. By sending a crafted multipart/form-data HTTP request, an attacker could exploit this to force shellinaboxd into an infinite loop, exhausting available CPU resources and taking the service down.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T18:36:51.000Z
CVE-2018-16790 
_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-10T05:00:00.000Z
CVE-2018-16791 
In SolarWinds SFTP/SCP Server through 2018-09-10, the configuration file is world readable and writable, and stores user passwords in an insecure manner, allowing an attacker to determine passwords for potentially privileged accounts. This also grants the attacker an ability to backdoor the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-05T22:00:00.000Z
CVE-2018-16792 
SolarWinds SFTP/SCP server through 2018-09-10 is vulnerable to XXE via a world readable and writable configuration file that allows an attacker to exfiltrate data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-05T22:00:00.000Z
CVE-2018-16793 
Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA (Outlook Web Access) login page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T16:00:00.000Z
CVE-2018-16794 
Microsoft ADFS 4.0 Windows Server 2016 and previous (Active Directory Federation Services) has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-18T21:00:00.000Z
CVE-2018-16795 
OpenEMR 5.0.1.3 allows Cross-Site Request Forgery (CSRF) via library/ajax and interface/super, as demonstrated by use of interface/super/manage_site_files.php to upload a .php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T02:32:43.000Z
CVE-2018-16796 
HiScout GRC Suite before 3.1.5 allows Unrestricted Upload of Files with Dangerous Types.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-13T16:00:00.000Z
CVE-2018-16797 
A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file with large BytesPerSec and SamplesPerSec values, and a small Data_Chunk_Size value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-10T12:00:00.000Z
CVE-2018-16802 
An issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege" checking when running out of stack during exception handling could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction. This is due to an incomplete fix for CVE-2018-16509.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-10T16:00:00.000Z
CVE-2018-16803 
In CIMTechniques CIMScan 6.x through 6.2, the SOAP WSDL parser allows attackers to execute SQL code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-10T18:00:00.000Z
CVE-2018-16804 
An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2018-16805 
In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to inject arbitrary Web scripts or HTML via a crafted site name provided by an administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-10T23:00:00.000Z
CVE-2018-16806 
A Pektron Passive Keyless Entry and Start (PKES) system, as used on the Tesla Model S and possibly other vehicles, relies on the DST40 cipher, which makes it easier for attackers to obtain access via an approach involving a 5.4 TB precomputation, followed by wake-frame reception and two challenge/response operations, to clone a key fob within a few seconds.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-10T23:00:00.000Z
CVE-2018-16807 
In Bro through 2.5.5, there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-11T02:00:00.000Z
CVE-2018-16808 
An issue was discovered in Dolibarr through 7.0.0. There is Stored XSS in expensereport/card.php in the expense reports plugin via the comments parameter, or a public or private note.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2018-16809 
An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and value_unit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2018-16819 
admin/index.php in Monstra CMS 3.0.4 allows arbitrary file deletion via id=filesmanager&path=uploads/.......//./.......//./&delete_file= requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-18T21:00:00.000Z
CVE-2018-16820 
admin/index.php in Monstra CMS 3.0.4 allows arbitrary directory listing via id=filesmanager&path=uploads/.......//./.......//./ requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-18T21:00:00.000Z
CVE-2018-16821 
SeaCMS 6.64 allows arbitrary directory listing via upload/admin/admin_template.php?path=../templets/../../ requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T17:00:00.000Z
CVE-2018-16822 
SeaCMS 6.64 allows SQL Injection via the upload/admin/admin_video.php order parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T17:00:00.000Z
CVE-2018-16831 
Smarty before 3.1.33-dev-4 allows attackers to bypass the trusted_dir protection mechanism via a file:./../ substring in an include statement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-11T13:00:00.000Z
CVE-2018-16832 
CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite the request.host value with the content of the X-Forwarded-Host HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-11T13:00:00.000Z
CVE-2018-16833 
Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T17:00:00.000Z
CVE-2018-16836 
Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated attackers to read and execute arbitrary files outside of the service root path, as demonstrated by a /theme/default/img/%2e%2e/..//etc/passwd URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-11T16:00:00.000Z
CVE-2018-16837 
Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just to the process list.
Problem types: cwe_id: CWE-214
description: CWE-214
Affected products: vendor: [UNKNOWN]
product: Ansible
Published: 2018-10-23T15:00:00.000Z
CVE-2018-16838 
A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: [UNKNOWN]
product: sssd
Published: 2019-03-25T17:41:18.000Z
CVE-2018-16839 
Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service.
Problem types: cwe_id: CWE-190
description: CWE-190
cwe_id: CWE-122
description: CWE-122
Affected products: vendor: The Curl Project
product: curl:
Published: 2018-10-31T18:00:00.000Z
CVE-2018-16840 
A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy handle. When closing and cleaning up an 'easy' handle in the `Curl_close()` function, the library code first frees a struct (without nulling the pointer) and might then subsequently erroneously write to a struct field within that already freed struct.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: The Curl Project
product: curl
Published: 2018-10-31T18:00:00.000Z
CVE-2018-16841 
Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba's KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: [UNKNOWN]
product: samba
Published: 2018-11-28T14:00:00.000Z
CVE-2018-16842 
Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: The Curl Project
product: curl:
Published: 2018-10-31T19:00:00.000Z
CVE-2018-16843 
nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: [UNKNOWN]
product: nginx
Published: 2018-11-07T14:00:00.000Z
CVE-2018-16844 
nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: [UNKNOWN]
product: nginx
Published: 2018-11-07T14:00:00.000Z
CVE-2018-16845 
nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted mp4 file. The issue only affects nginx if it is built with the ngx_http_mp4_module (the module is not built by default) and the .mp4. directive is used in the configuration file. Further, the attack is only possible if an attacker is able to trigger processing of a specially crafted mp4 file with the ngx_http_mp4_module.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: [UNKNOWN]
product: nginx
Published: 2018-11-07T14:00:00.000Z
CVE-2018-16846 
It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.
Problem types: cwe_id: CWE-770
description: CWE-770
Affected products: vendor: [UNKNOWN]
product: ceph
Published: 2019-01-15T18:00:00.000Z
CVE-2018-16847 
An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cmb_ops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU process.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: [UNKNOWN]
product: QEMU:
Published: 2018-11-02T22:00:00.000Z
CVE-2018-16848 
A Denial of Service (DoS) condition is possible in OpenStack Mistral in versions up to and including 7.0.3. Submitting a specially crafted workflow definition YAML file containing nested anchors can lead to resource exhaustion culminating in a denial of service.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: openstack-mistral
Published: 2020-06-15T14:18:22.000Z
CVE-2018-16849 
A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: [UNKNOWN]
product: openstack-mistral
Published: 2018-11-02T21:00:00.000Z
CVE-2018-16850 
postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.
Problem types: cwe_id: CWE-89
description: CWE-89
Affected products: vendor: The PostgreSQL Project
product: postgresql
Published: 2018-11-13T15:00:00.000Z
CVE-2018-16851 
Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the processing of an LDAP search before Samba's AD DC returns the LDAP entries to the client, the entries are cached in a single memory object with a maximum size of 256MB. When this size is reached, the Samba process providing the LDAP service will follow the NULL pointer, terminating the process. There is no further vulnerability associated with this issue, merely a denial of service.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: [UNKNOWN]
product: samba
Published: 2018-11-28T14:00:00.000Z
CVE-2018-16852 
Samba from version 4.9.0 and before version 4.9.3 is vulnerable to a NULL pointer de-reference. During the processing of an DNS zone in the DNS management DCE/RPC server, the internal DNS server or the Samba DLZ plugin for BIND9, if the DSPROPERTY_ZONE_MASTER_SERVERS property or DSPROPERTY_ZONE_SCAVENGING_SERVERS property is set, the server will follow a NULL pointer and terminate. There is no further vulnerability associated with this issue, merely a denial of service.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: [UNKNOWN]
product: samba
Published: 2018-11-28T14:00:00.000Z
CVE-2018-16853 
Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore the Samba Team will not issue security patches for this configuration. Additionally, Samba 4.7.12, 4.8.7 and 4.9.3 have been issued as security releases to prevent building of the AD DC with MIT Kerberos unless --with-experimental-mit-ad-dc is specified to the configure command.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: [UNKNOWN]
product: samba
Published: 2018-11-28T14:00:00.000Z
CVE-2018-16854 
A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4.5, 3.3 to 3.3.8, 3.1 to 3.1.14 and earlier. The login form is not protected by a token to prevent login cross-site request forgery. Fixed versions include 3.6, 3.5.3, 3.4.6, 3.3.9 and 3.1.15.
Problem types: cwe_id: CWE-352
description: CWE-352
Affected products: vendor: [UNKNOWN]
product: moodle
Published: 2018-11-26T17:00:00.000Z
CVE-2018-16855 
An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: [UNKNOWN]
product: pdns-recursor
Published: 2018-12-03T14:00:00.000Z
CVE-2018-16856 
In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0.20181009115732 creates log files that are readable by all users. Sensitive information such as private keys can appear in these log files allowing for information exposure.
Problem types: cwe_id: CWE-532
description: CWE-532
Affected products: vendor: [UNKNOWN]
product: openstack-octavia
Published: 2019-03-26T17:45:29.000Z
CVE-2018-16857 
Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords (to restrict brute forcing of passwords) in a window of more than 3 minutes may not watch for bad passwords at all. The primary risk from this issue is with regards to domains that have been upgraded from Samba 4.8 and earlier. In these cases the manual testing done to confirm an organisation's password policies apply as expected may not have been re-done after the upgrade.
Problem types: cwe_id: CWE-358
description: CWE-358
Affected products: vendor: [UNKNOWN]
product: samba
Published: 2018-11-28T14:00:00.000Z
CVE-2018-16858 
It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location.
Problem types: cwe_id: CWE-356
description: CWE-356
Affected products: vendor: [UNKNOWN]
product: libreoffice
Published: 2019-03-25T17:43:08.000Z
CVE-2018-16859 
Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext password. Ansible Engine 2.8 and older are believed to be vulnerable.
Problem types: cwe_id: CWE-532
description: CWE-532
Affected products: vendor: Red Hat
product: ansible
Published: 2018-11-29T17:00:00.000Z
CVE-2018-16860 
A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name (principal) in the request with any desired user name (principal) that exists in the KDC effectively obtaining a ticket for that principal.
Problem types: cwe_id: CWE-358
description: CWE-358
Affected products: vendor: SAMBA
product: samba
Published: 2019-07-31T14:38:36.000Z
CVE-2018-16861 
A cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker with privilege to create entries using the Hosts, Monitor, Infrastructure, or Administer Menus is able to execute a XSS attacks against other users, possibly leading to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Foreman before 1.18.3, 1.19.1, and 1.20.0 are vulnerable.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: The Foreman Project
product: foreman
Published: 2018-12-07T19:00:00.000Z