rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-20199 
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the ONLY_LONG_SEQUENCE case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-18T01:00:00.000Z
CVE-2018-20200 
CertificatePinner.java in OkHttp 3.x through 3.12.0 allows man-in-the-middle attackers to bypass certificate pinning by changing SSLContext and the boolean values while hooking the application. NOTE: This id is disputed because some parties don't consider this is a vulnerability. Their rationale can be found in https://github.com/square/okhttp/issues/4967
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-18T18:31:52.000Z
CVE-2018-20201 
There is a stack-based buffer over-read in the jsfNameFromString function of jsflash.c in Espruino 2V00, leading to a denial of service or possibly unspecified other impact via a crafted js file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-18T09:00:00.000Z
CVE-2018-20211 
ExifTool 8.32 allows local users to gain privileges by creating a %TEMP%\par-%username%\cache-exiftool-8.32 folder with a victim's username, and then copying a Trojan horse ws32_32.dll file into this new folder, aka DLL Hijacking.  NOTE: 8.32 is an obsolete version from 2010 (9.x was released starting in 2012, and 10.x was released starting in 2015).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-02T18:00:00.000Z
CVE-2018-20212 
bin/statistics in TWiki 6.0.2 allows cross-site scripting (XSS) via the webs parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T20:30:20.000Z
CVE-2018-20213 
wbook_addworksheet in workbook.c in libexcel.a in libexcel 0.01 allows attackers to cause a denial of service (SEGV) via a long name. NOTE: this is not a Microsoft product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-18T19:00:00.000Z
CVE-2018-20216 
QEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked (and -1 is mishandled).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-20T21:00:00.000Z
CVE-2018-20217 
A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES, triple-DES, or RC4), the attacker can crash the KDC by making an S4U2Self request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T20:00:00.000Z
CVE-2018-20218 
An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. The login form passes user input directly to a shell command without any kind of escaping or validation in /usr/share/www/check.lp file. An attacker is able to perform command injection using the "password" parameter in the login form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T20:41:55.000Z
CVE-2018-20219 
An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. After successful authentication, the device sends an authentication cookie to the end user such that they can access the devices web administration panel. This token is hard-coded to a string in the source code (/usr/share/www/check.lp file). By setting this cookie in a browser, an attacker is able to maintain access to every ENC-400 device without knowing the password, which results in authentication bypass. Even if a user changes the password on the device, this token is static and unchanged.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T20:47:53.000Z
CVE-2018-20220 
An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. While the web interface requires authentication before it can be interacted with, a large portion of the HTTP endpoints are missing authentication. An attacker is able to view these pages before being authenticated, and some of these pages may disclose sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T20:51:20.000Z
CVE-2018-20221 
Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted user input from an authenticated user. The executed code will run as the IIS Application Pool that is running the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T20:54:40.000Z
CVE-2018-20222 
XXE issue in Airsonic before 10.1.2 during parse.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-04T15:48:24.000Z
CVE-2018-20225 
An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-08T17:29:12.000Z
CVE-2018-20226 
An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.toString method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T22:00:00.000Z
CVE-2018-20227 
RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-19T11:00:00.000Z
CVE-2018-20228 
Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-19T11:00:00.000Z
CVE-2018-20229 
GitLab Community and Enterprise Edition before 11.3.14, 11.4.x before 11.4.12, and 11.5.x before 11.5.5 allows Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-04T16:54:07.000Z
CVE-2018-20230 
An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-19T11:00:00.000Z
CVE-2018-20231 
Cross Site Request Forgery (CSRF) in the two-factor-authentication plugin before 1.3.13 for WordPress allows remote attackers to disable 2FA via the tfa_enable_tfa parameter due to missing nonce validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-19T11:00:00.000Z
CVE-2018-20232 
The labels widget gadget in Atlassian Jira before version 7.6.11 and from version 7.7.0 before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the rendering of retrieved content from a url location that could be manipulated by the up_projectid widget preference setting.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Jira
Published: 2019-02-13T18:00:00.000Z
CVE-2018-20233 
The Upload add-on resource in Atlassian Universal Plugin Manager before version 2.22.14 allows remote attackers who have system administrator privileges to read files, make network requests and perform a denial of service attack via an XML External Entity vulnerability in the parsing of atlassian plugin xml files in an uploaded JAR.
Problem types: description: Improper Restriction of XML External Entity Reference ('XXE')
Affected products: vendor: Atlassian
product: Universal Plugin Manager
Published: 2019-01-18T21:00:00.000Z
CVE-2018-20234 
There was an argument injection vulnerability in Atlassian Sourcetree for macOS from version 1.2 before version 3.1.1 via filenames in Mercurial repositories. A remote attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system.
Problem types: description: Argument Injection
Affected products: vendor: Atlassian
product: Sourcetree for macOS
Published: 2019-03-08T18:00:00.000Z
CVE-2018-20235 
There was an argument injection vulnerability in Atlassian Sourcetree for Windows from version 0.5a before version 3.0.15 via filenames in Mercurial repositories. A remote attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system.
Problem types: description: Argument Injection
Affected products: vendor: Atlassian
product: Sourcetree for Windows
Published: 2019-03-08T18:00:00.000Z
CVE-2018-20236 
There was an command injection vulnerability in Sourcetree for Windows from version 0.5a before version 3.0.10 via URI handling. A remote attacker could send a malicious URI to a victim using Sourcetree for Windows to exploit this issue to gain code execution on the system.
Problem types: description: Command Injection
Affected products: vendor: Atlassian
product: Sourcetree for Windows
Published: 2019-03-08T18:00:00.000Z
CVE-2018-20237 
Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted page via the word export feature.
Problem types: description: Indirect Object Reference
Affected products: vendor: Atlassian
product: Confluence Server
vendor: Atlassian
product: Confluence Data Center
Published: 2019-02-13T18:00:00.000Z
CVE-2018-20238 
Various rest resources in Atlassian Crowd before version 3.2.7 and from version 3.3.0 before version 3.3.4 allow remote attackers to authenticate using an expired user session via an insufficient session expiration vulnerability.
Problem types: description: Insufficient Session Expiration
Affected products: vendor: Atlassian
product: Crowd
Published: 2019-02-13T18:00:00.000Z
CVE-2018-20239 
Application Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0 before 5.3.6, from version 5.4.0 before 5.4.12, and from version 6.0.0 before 6.0.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the applinkStartingUrl parameter. The product is used as a plugin in various Atlassian products where the following are affected: Confluence before version 6.15.2, Crucible before version 4.7.0, Crowd before version 3.4.3, Fisheye before version 4.7.0, Jira before version 7.13.3 and 8.x before 8.1.0.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Atlassian Application Links
Published: 2019-04-30T15:28:27.775Z
CVE-2018-20240 
The administrative linker functionality in Atlassian Fisheye and Crucible before version 4.7.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the href parameter.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Fisheye and Crucible
Published: 2019-02-20T15:00:00.000Z
CVE-2018-20241 
The Edit upload resource for a review in Atlassian Fisheye and Crucible before version 4.7.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the wbuser parameter.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Fisheye and Crucible
Published: 2019-02-20T15:00:00.000Z
CVE-2018-20242 
A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking.
Problem types: description: n/a
Affected products: vendor: Apache Software Foundation
product: Apache JSPWiki
Published: 2019-02-11T21:00:00.000Z
CVE-2018-20243 
The implementation of POST with the username and password in the URL parameters exposed the credentials. More infomration is available in fineract jira issues 726 and 629.
Problem types: description: Critical
Affected products: vendor: n/a
product: Apache Fineract
Published: 2020-10-13T18:23:49.000Z
CVE-2018-20244 
In Apache Airflow before 1.10.2, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views.
Problem types: description: Stored XSS
Affected products: vendor: Apache Software Foundation
product: Apache Airflow
Published: 2019-02-27T18:00:00.000Z
CVE-2018-20245 
The LDAP auth backend (airflow.contrib.auth.backends.ldap_auth) prior to Apache Airflow 1.10.1 was misconfigured and contained improper checking of exceptions which disabled server certificate checking.
Problem types: description: Improper Certificate Validation
Affected products: vendor: Apache Software Foundation
product: Apache Airflow
Published: 2019-01-23T17:00:00.000Z
CVE-2018-20247 
In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing a recursive page tree structure using the LoadFromFile, LoadFromString or LoadFromStream functions results in a stack overflow.
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow (3.1)
Affected products: vendor: n/a
product: Foxit Quick PDF Library
Published: 2018-12-24T19:00:00.000Z
CVE-2018-20248 
In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref table pointers or invalid xref table data using the LoadFromFile, LoadFromString, LoadFromStream, DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write (3.1)
Affected products: vendor: n/a
product: Foxit Quick PDF Library
Published: 2018-12-24T19:00:00.000Z
CVE-2018-20249 
In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref entries using the DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write (3.1)
Affected products: vendor: n/a
product: Foxit Quick PDF Library
Published: 2018-12-24T19:00:00.000Z
CVE-2018-20250 
In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extraction) folder is ignored, thus treating the filename as an absolute path.
Problem types: cwe_id: CWE-36
description: CWE-36: Absolute Path Traversal
Affected products: vendor: Check Point Software Technologies Ltd.
product: WinRAR
Published: 2019-02-05T20:00:00.000Z
CVE-2018-20251 
In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field of the ACE format. The UNACE module (UNACEV2.dll) creates files and folders as written in the filename field even when WinRAR validator noticed the traversal attempt and requestd to abort the extraction process. the operation is cancelled only after the folders and files were created but prior to them being written, therefore allowing the attacker to create empty files and folders everywhere in the file system.
Problem types: cwe_id: CWE-693
description: CWE-693: Protection Mechanism Failure
Affected products: vendor: Check Point Software Technologies Ltd.
product: WinRAR
Published: 2019-02-05T20:00:00.000Z
CVE-2018-20252 
In WinRAR versions prior to and including 5.60, there is an out-of-bounds write vulnerability during parsing of crafted ACE and RAR archive formats. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Check Point Software Technologies Ltd.
product: WinRAR
Published: 2019-02-05T20:00:00.000Z
CVE-2018-20253 
In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive formats. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Check Point Software Technologies Ltd.
product: WinRAR
Published: 2019-02-13T01:00:00.000Z
CVE-2018-20298 
S3 Browser before 8.1.5 contains an XML external entity (XXE) vulnerability, allowing remote attackers to read arbitrary files and obtain NTLMv2 hash values by tricking a user into connecting to a malicious server via the S3 protocol.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-19T17:00:00.000Z
CVE-2018-20299 
An issue was discovered in several Bosch Smart Home cameras (360 degree indoor camera and Eyes outdoor camera) with firmware before 6.52.4. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface, because there is a buffer overflow in the RCP+ parser of the web server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-19T22:00:00.000Z
CVE-2018-20300 
Empire CMS 7.5 allows remote attackers to execute arbitrary PHP code via the ftemp parameter in an enews=EditMemberForm action because this code is injected into a memberform.$fid.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-20T00:00:00.000Z
CVE-2018-20301 
An issue was discovered in Steve Pallen Coherence before 0.5.2 that is similar to a Mass Assignment vulnerability. In particular, "registration" endpoints (e.g., creating, editing, updating) allow users to update any coherence_fields data. For example, users can automatically confirm their accounts by sending the confirmed_at parameter with their registration request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-20T09:00:00.000Z
CVE-2018-20302 
An XSS issue was discovered in Steve Pallen Xain before 0.6.2 via the order parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-20T00:00:00.000Z
CVE-2018-20303 
In pkg/tool/path.go in Gogs before 0.11.82.1218, a directory traversal in the file-upload functionality can allow an attacker to create a file under data/sessions on the server, a similar issue to CVE-2018-18925.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-20T00:00:00.000Z
CVE-2018-20304 
wbook_addworksheet in workbook.c in libexcel.a in libexcel 0.01 allows attackers to cause a denial of service (SEGV) via a long second argument. NOTE: this is not a Microsoft product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-20T00:00:00.000Z
CVE-2018-20305 
D-Link DIR-816 A2 1.10 B05 devices allow arbitrary remote code execution without authentication via the newpass parameter. In the /goform/form2userconfig.cgi handler function, a long password may lead to a stack-based buffer overflow and overwrite a return address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-20T00:00:00.000Z
CVE-2018-20306 
A stored cross-site scripting (XSS) vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-20T09:00:00.000Z
CVE-2018-20307 
Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote authenticated user to obtain sensitive historical activity information by leveraging incorrect permission validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-20T09:00:00.000Z
CVE-2018-20309 
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyGetAppEdition race condition that can cause a stack-based buffer overflow or an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T16:54:52.000Z
CVE-2018-20310 
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T16:56:48.000Z
CVE-2018-20311 
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCPDFAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T16:58:11.000Z
CVE-2018-20312 
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read, a different issue than CVE-2018-20310 because of a different opcode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T17:01:56.000Z
CVE-2018-20313 
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyPreviewAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T17:03:18.000Z
CVE-2018-20314 
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCheckLicence race condition that can cause a stack-based buffer overflow or an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T17:04:20.000Z
CVE-2018-20315 
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition that can cause a stack-based buffer overflow or an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T17:05:41.000Z
CVE-2018-20316 
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read, a different issue than CVE-2018-20310 because of a different opcode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T17:07:19.000Z
CVE-2018-20318 
An issue was discovered in weixin-java-tools v3.2.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T00:00:00.000Z