rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-18425 
The doAirdrop function of a smart contract implementation for Primeo (PEO), an Ethereum token, does not check the numerical relationship between the amount of the air drop and the token's total supply, which lets the owner of the contract issue an arbitrary amount of currency. (Increasing the total supply by using 'doAirdrop' ignores the hard cap written in the contract and devalues the token.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T15:57:30.000Z
CVE-2018-18426 
s-cms 3.0 allows remote attackers to execute arbitrary PHP code by placing this code in a crafted User-agent Disallow value in the robots.php txt parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-17T04:00:00.000Z
CVE-2018-18427 
s-cms 3.0 allows SQL Injection via the member/post.php 0_id parameter or the POST data to member/member_login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-17T04:00:00.000Z
CVE-2018-18428 
TP-Link TL-SC3130 1.6.18P12_121101 devices allow unauthenticated RTSP stream access, as demonstrated by a /jpg/image.jpg URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-19T22:00:00.000Z
CVE-2018-18430 
An issue was discovered in DESTOON B2B 7.0. admin\setting.inc.php has XSS via the first text box to the admin.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-17T04:00:00.000Z
CVE-2018-18431 
An issue was discovered in DESTOON B2B 7.0. XSS exists via certain text boxes to the admin.php?moduleid=2&action=add URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-17T04:00:00.000Z
CVE-2018-18432 
An issue was discovered in DESTOON B2B 7.0. CSRF exists via the admin.php URI in an action=add request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-17T04:00:00.000Z
CVE-2018-18433 
An issue was discovered in DESTOON B2B 7.0. admin/category.inc.php has XSS via the category[catname] parameter to the admin.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-17T04:00:00.000Z
CVE-2018-18434 
An issue was discovered in litemall 0.9.0. Arbitrary file download is possible via ../ directory traversal in linlinjava/litemall/wx/web/WxStorageController.java in the litemall-wx-api component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-17T05:00:00.000Z
CVE-2018-18435 
KioWare Server version 4.9.6 and older installs by default to "C:\kioware_com" with weak folder permissions granting any user full permission "Everyone: (F)" to the contents of the directory and it's sub-folders. In addition, the program installs a service called "KWSService" which runs as "Localsystem", this will allow any user to escalate privileges to "NT AUTHORITY\SYSTEM" by substituting the service's binary with a malicious one.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T19:11:14.000Z
CVE-2018-18436 
JTBC(PHP) 3.0 allows CSRF for creating an account via the console/account/manage.php?type=action&action=add URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-17T05:00:00.000Z
CVE-2018-18437 
In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the Error_Desc parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-23T21:00:00.000Z
CVE-2018-18438 
Qemu has integer overflows because IOReadHandler and its associated functions use a signed integer data type for a size value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-19T22:00:00.000Z
CVE-2018-18439 
DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, local exploitation can occur via a crafted kernel image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-20T19:00:00.000Z
CVE-2018-18440 
DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-20T19:00:00.000Z
CVE-2018-18441 
D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such as: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1, DCS-5222L, DCS-825L, DCS-2630L, DCS-820L, DCS-855L, DCS-2121, DCS-5222LB1, DCS-5020L, and many more. There are many affected firmware versions starting from 1.00 and above. The configuration file can be accessed remotely through: <Camera-IP>/common/info.cgi, with no authentication. The configuration file include the following fields: model, product, brand, version, build, hw_version, nipca version, device name, location, MAC address, IP address, gateway IP address, wireless status, input/output settings, speaker, and sensor settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-20T22:00:00.000Z
CVE-2018-18442 
D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service (DoS) attacks. An attacker can harm the device availability (i.e., live-online video/audio streaming) by using the hping3 tool to perform an IPv4 flood attack. Verified attacks includes SYN flooding, UDP flooding, ICMP flooding, and SYN-ACK flooding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-20T22:00:00.000Z
CVE-2018-18443 
OpenEXR 2.3.0 has a memory leak in ThreadPool in IlmBase/IlmThread/IlmThreadPool.cpp, as demonstrated by exrmultiview.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-17T19:00:00.000Z
CVE-2018-18444 
makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-17T19:00:00.000Z
CVE-2018-18445 
In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-17T19:00:00.000Z
CVE-2018-18446 
dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 1 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-12T00:00:00.000Z
CVE-2018-18447 
dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 2 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-12T00:00:00.000Z
CVE-2018-18449 
EmpireCMS 7.5 allows CSRF for adding a user account via an enews=AddUser action to e/admin/user/ListUser.php, a similar issue to CVE-2018-16339.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2018-18450 
apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as demonstrated by the POST data to the admin.php/Single/mod/mcode/1/id/3 URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-17T22:00:00.000Z
CVE-2018-18454 
CCITTFaxStream::readRow() in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-18T06:00:00.000Z
CVE-2018-18455 
The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-18T06:00:00.000Z
CVE-2018-18456 
The function Object::isName() in Object.h (called from Gfx::opSetFillColorN) in Xpdf 4.00 allows remote attackers to cause a denial of service (stack-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-18T06:00:00.000Z
CVE-2018-18457 
The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated by pdftoppm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-18T06:00:00.000Z
CVE-2018-18458 
The function DCTStream::decodeImage in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated by pdftoppm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-18T06:00:00.000Z
CVE-2018-18459 
The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated by pdftoppm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-18T06:00:00.000Z
CVE-2018-18460 
XSS exists in the wp-live-chat-support v8.0.15 plugin for WordPress via the modules/gdpr.php term parameter in a wp-admin/admin.php wplivechat-menu-gdpr-page request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-18T06:00:00.000Z
CVE-2018-18461 
The Arigato Autoresponder and Newsletter (aka bft-autoresponder) v2.5.1.7 plugin for WordPress allows remote attackers to execute arbitrary code via PHP code in attachments[] data to models/attachment.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-18T06:00:00.000Z
CVE-2018-18466 
An issue was discovered in SecurEnvoy SecurAccess 9.3.502. When put in Debug mode and used for RDP connections, the application stores the emergency credentials in cleartext in the logs (present in the DEBUG folder) that can be accessed by anyone. NOTE: The vendor disputes this as a vulnerability since the disclosure of a local account password (actually an alpha numeric passcode) is achievable only when a custom registry key is added to the windows registry. This action requires administrator access and the registry key is only provided by support staff at securenvoy to troubleshoot customer issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-18T20:09:45.000Z
CVE-2018-18467 
An issue was discovered in Daniel Gultsch Conversations 2.3.4. It is possible to spoof a custom message to an existing opened conversation by sending an intent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-23T21:00:00.000Z
CVE-2018-18471 
/api/2.0/rest/aggregator/xml in Axentra firmware, used by NETGEAR Stora, Seagate GoFlex Home, and MEDION LifeCloud, has an XXE vulnerability that can be chained with an SSRF bug to gain remote command execution as root. It can be triggered by anyone who knows the IP address of the affected device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T15:48:16.000Z
CVE-2018-18472 
Western Digital WD My Book Live and WD My Book Live Duo (all versions) have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/language_configuration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the wild in June 2021 for factory reset commands,
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T15:44:20.000Z
CVE-2018-18473 
A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firmware version 1.10 or earlier, and NBM Series devices with firmware version 1.09 or earlier allow attackers to enable an SSH daemon via the "kankichi" or "kamiyo4" password to the _secret1.htm URI. Subsequently, the default password of root for the root account allows an attacker to conduct remote code execution and as a result take over the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-19T22:19:42.000Z
CVE-2018-18475 
Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-23T21:00:00.000Z
CVE-2018-18476 
mysql-binuuid-rails 1.1.0 and earlier allows SQL Injection because it removes default string escaping for affected database columns.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-24T21:00:00.000Z
CVE-2018-18478 
Persistent Cross-Site Scripting (XSS) issues in LibreNMS before 1.44 allow remote attackers to inject arbitrary web script or HTML via the dashboard_name parameter in the /ajax_form.php resource, related to html/includes/forms/add-dashboard.inc.php, html/includes/forms/delete-dashboard.inc.php, and html/includes/forms/edit-dashboard.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-18T18:00:00.000Z
CVE-2018-18480 
A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadMCHAR function in lib/dwg/io.cpp, resulting in an application crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-18T18:00:00.000Z
CVE-2018-18481 
A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadCHAR function in lib/dwg/io.cpp, resulting in an application crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-18T18:00:00.000Z
CVE-2018-18482 
An issue was discovered in libpg_query 10-1.0.2. There is a memory leak in pg_query_raw_parse in pg_query_parse.c, which might lead to a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-18T18:00:00.000Z
CVE-2018-18483 
The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of service (malloc called with the result of an integer-overflowing calculation) or possibly have unspecified other impact via a crafted string, as demonstrated by c++filt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-18T20:00:00.000Z
CVE-2018-18484 
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there is a stack consumption problem caused by recursive stack frames: cplus_demangle_type, d_bare_function_type, d_function_type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-18T20:00:00.000Z
CVE-2018-18485 
An issue was discovered in PHPSHE 1.7. admin.php?mod=db&act=del allows remote attackers to delete arbitrary files via directory traversal sequences in the dbname parameter. This can be leveraged to reload the product by deleting install.lock.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-18T21:00:00.000Z
CVE-2018-18486 
An issue was discovered in PHPSHE 1.7. SQL injection exists via the admin.php?mod=user&act=del user_id[] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-18T21:00:00.000Z
CVE-2018-18487 
In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, the database backup filename generation uses mt_rand() unsafely, resulting in predictable database backup file locations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-18T21:00:00.000Z
CVE-2018-18488 
In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, SQL Injection exists via the ids[] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-18T21:00:00.000Z
CVE-2018-18489 
The ping feature in the Diagnostic functionality on TP-LINK WR840N v2 Firmware 3.16.9 Build 150701 Rel.51516n devices allows remote attackers to cause a denial of service (HTTP service termination) by modifying the packet size to be higher than the UI limit of 1472.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-16T18:26:08.000Z
CVE-2018-18492 
A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.
Problem types: description: Use-after-free with select element
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2019-02-28T18:00:00.000Z
CVE-2018-18493 
A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.
Problem types: description: Buffer overflow in accelerated 2D canvas with Skia
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2019-02-28T18:00:00.000Z
CVE-2018-18494 
A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.
Problem types: description: Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2019-02-28T18:00:00.000Z
CVE-2018-18495 
WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions granted to extensions. This could allow an extension to interfere with the loading and usage of these pages and use capabilities that were intended to be restricted from extensions. This vulnerability affects Firefox < 64.
Problem types: description: WebExtension content scripts can be loaded in about: pages
Affected products: vendor: Mozilla
product: Firefox
Published: 2019-02-28T18:00:00.000Z
CVE-2018-18496 
When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. *Note: This issue only affects Windows operating systems. Other operating systems are not affected.*. This vulnerability affects Firefox < 64.
Problem types: description: Embedded feed preview page can be abused for clickjacking
Affected products: vendor: Mozilla
product: Firefox
Published: 2019-02-28T18:00:00.000Z
CVE-2018-18497 
Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This vulnerability affects Firefox < 64.
Problem types: description: WebExtensions can load arbitrary URLs through pipe separators
Affected products: vendor: Mozilla
product: Firefox
Published: 2019-02-28T18:00:00.000Z
CVE-2018-18498 
A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the checked value. This leads to a possible out-of-bounds write. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.
Problem types: description: Integer overflow when calculating buffer sizes for images
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2019-02-28T18:00:00.000Z
CVE-2018-18499 
A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.
Problem types: description: Same-origin policy violation using meta refresh and performance.getEntries to steal cross-origin URLs
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Thunderbird
Published: 2019-02-28T18:00:00.000Z
CVE-2018-18500 
A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-05T21:00:00.000Z
CVE-2018-18501 
Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.
Problem types: description: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2019-02-05T21:00:00.000Z
CVE-2018-18502 
Mozilla developers and community members reported memory safety bugs present in Firefox 64. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 65.
Problem types: description: Memory safety bugs fixed in Firefox 65
Affected products: vendor: Mozilla
product: Firefox
Published: 2019-02-05T21:00:00.000Z
CVE-2018-18503 
When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatch in some situations. This vulnerability affects Firefox < 65.
Problem types: description: Memory corruption with Audio Buffer
Affected products: vendor: Mozilla
product: Firefox
Published: 2019-02-05T21:00:00.000Z
CVE-2018-18504 
A crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is still in use during graphic operations. This results is a potentially exploitable crash and the possibility of reading from the memory of the freed buffers. This vulnerability affects Firefox < 65.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-05T21:00:00.000Z