rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-11291 
In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDM630, SDM632, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, cryptographic issues due to the random number generator was not a strong one in NAN.
Problem types: description: Cryptographic Issues in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Published: 2018-09-20T13:00:00.000Z
CVE-2018-11292 
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820A, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016, lack of input validation in WLANWMI command handlers can lead to integer & heap overflows.
Problem types: description: Buffer Overflow in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Published: 2018-09-20T13:00:00.000Z
CVE-2018-11293 
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, in wma_ndp_confirm_event_handler and wma_ndp_indication_event_handler, ndp_cfg len and num_ndp_app_info is from fw. If they are not checked, it may cause buffer over-read once the value is too large.
Problem types: description: Buffer Over-read in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-09-18T18:00:00.000Z
CVE-2018-11294 
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, WLAN handler indication from the firmware gets the information for 4 access categories. While processing this information only the first 3 AC information is copied due to the improper conditional logic used to compare with the max number of categories.
Problem types: description: Always-Incorrect Control Flow Implementation in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-09-18T18:00:00.000Z
CVE-2018-11295 
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, WMA handler carries a fixed event data from the firmware to the host . If the length and anqp length from this event data exceeds the max length, an OOB write would happen.
Problem types: description: Integer Overflow to Buffer Overflow in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-09-18T18:00:00.000Z
CVE-2018-11296 
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing a message from firmware in WLAN handler, a buffer overwrite can occur.
Problem types: description: Buffer Copy without Checking Size of Input in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-09-18T18:00:00.000Z
CVE-2018-11297 
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a buffer over-read can occur In the WMA NDP event handler functions due to lack of validation of input value event_info which is received from FW.
Problem types: description: Buffer Over-read in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-09-18T18:00:00.000Z
CVE-2018-11298 
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing SET_PASSPOINT_LIST vendor command HDD does not make sure that the realm string that gets passed by upper-layer is NULL terminated. This may lead to buffer overflow as strlen is used to get realm string length to construct the PASSPOINT WMA command.
Problem types: description: Possible Buffer Overflow in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-09-18T18:00:00.000Z
CVE-2018-11299 
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when WLAN FW has not filled the vdev id correctly in stats events then WLAN host driver tries to access interface array without proper bound check which can lead to invalid memory access and as a side effect kernel panic or page fault.
Problem types: description: Improper Validation of Array Index in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-09-18T18:00:00.000Z
CVE-2018-11300 
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, callback executed from the other thread has freed memory which is also used in wlan function and may result in to a "Use after free" scenario.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-18T18:00:00.000Z
CVE-2018-11301 
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on buffer length while processing debug log event from firmware can lead to an integer overflow.
Problem types: description: Integer Underflow in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-09-18T18:00:00.000Z
CVE-2018-11302 
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check of input received from userspace before copying into buffer can lead to potential array overflow in WLAN.
Problem types: description: Buffer Copy Without Checking Size of Input in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-09-18T18:00:00.000Z
CVE-2018-11304 
Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overflow in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.
Problem types: description: Buffer Copy Without Checking Size of Input in Audio
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-07-06T19:00:00.000Z
CVE-2018-11305 
When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20.
Problem types: description: Use After Free in GPS
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Published: 2018-10-26T13:00:00.000Z
CVE-2018-11307 
An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11.2, and 2.9.6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-09T15:37:25.000Z
CVE-2018-11309 
Blind SQL injection in coupon_code in the MemberMouse plugin 2.2.8 and prior for WordPress allows an unauthenticated attacker to dump the WordPress MySQL database via an applyCoupon action in an admin-ajax.php request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-28T16:00:00.000Z
CVE-2018-11311 
A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO 7 allows remote attackers to access the FTP server on port 2121, and upload files or list directories, by entering these credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-20T22:00:00.000Z
CVE-2018-11314 
The External Control API in Roku and Roku TV products allow unauthorized access via a DNS Rebind attack. This can result in remote device control and privileged device and network information to be exfiltrated by an attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-03T00:00:00.000Z
CVE-2018-11315 
The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonstrated by a tstat t_heat request that accesses a device purchased in the Spring of 2018, and sets a home's target temperature to 95 degrees Fahrenheit. This vulnerability might be described as an addendum to CVE-2013-4860.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-20T13:00:00.000Z
CVE-2018-11316 
The UPnP HTTP server on Sonos wireless speaker products allow unauthorized access via a DNS rebinding attack. This can result in remote device control and privileged device and network information to be exfiltrated by an attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-03T16:00:00.000Z
CVE-2018-11317 
Subrion CMS before 4.1.4 has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T15:37:18.000Z
CVE-2018-11319 
Syntastic (aka vim-syntastic) through 3.9.0 does not properly handle searches for configuration files (it searches the current directory up to potentially the root). This improper handling might be exploited for arbitrary code execution via a malicious gcc plugin, if an attacker has write access to a directory that is a parent of the base directory of the project being checked. NOTE: exploitation is more difficult after 3.8.0 because filename prediction may be needed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-20T20:00:00.000Z
CVE-2018-11320 
In Octopus Deploy 2018.4.4 through 2018.5.1, Octopus variables that are sourced from the target do not have sensitive values obfuscated in the deployment logs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-21T14:00:00.000Z
CVE-2018-11321 
An issue was discovered in com_fields in Joomla! Core before 3.8.8. Inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T15:00:00.000Z
CVE-2018-11322 
An issue was discovered in Joomla! Core before 3.8.8. Depending on the server configuration, PHAR files might be handled as executable PHP scripts by the webserver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T15:00:00.000Z
CVE-2018-11323 
An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to modify the access levels of user groups with higher permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T15:00:00.000Z
CVE-2018-11324 
An issue was discovered in Joomla! Core before 3.8.8. A long running background process, such as remote checks for core or extension updates, could create a race condition where a session that was expected to be destroyed would be recreated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T15:00:00.000Z
CVE-2018-11325 
An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill password fields after either a form validation error or navigating to a previous install step, and display the plaintext password for the administrator account at the confirmation screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T15:00:00.000Z
CVE-2018-11326 
An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the default filtering settings could potentially allow users of the default Administrator user group to perform a XSS attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T15:00:00.000Z
CVE-2018-11327 
An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to see the names of tags that were either unpublished or published with restricted view permission.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T15:00:00.000Z
CVE-2018-11328 
An issue was discovered in Joomla! Core before 3.8.8. Under specific circumstances (a redirect issued with a URI containing a username and password when the Location: header cannot be used), a lack of escaping the user-info component of the URI could result in an XSS vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T15:00:00.000Z
CVE-2018-11329 
The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone. After that, all the digital assets (including Ether balance and tokens) might be manipulated by the attackers, as exploited in the wild in May 2018.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T05:00:00.000Z
CVE-2018-11330 
An issue was discovered in Pluck before 4.7.6. There is authenticated stored XSS because the character set for filenames is not properly restricted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-21T21:00:00.000Z
CVE-2018-11331 
An issue was discovered in Pluck before 4.7.6. Remote PHP code execution is possible because the set of disallowed filetypes for uploads in missing some applicable ones such as .phtml and .htaccess.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-21T21:00:00.000Z
CVE-2018-11332 
Stored cross-site scripting (XSS) vulnerability in the "Site Name" field found in the "site" tab under configurations in ClipperCMS 1.3.3 allows remote attackers to inject arbitrary web script or HTML via a crafted site name to the manager/processors/save_settings.processor.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T16:00:00.000Z
CVE-2018-11334 
Windscribe 1.81 creates a named pipe with a NULL DACL that allows Everyone users to gain privileges or cause a denial of service via \\.\pipe\WindscribeService.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-23T12:00:00.000Z
CVE-2018-11335 
GVToken Genesis Vision (GVT) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-04T00:00:00.000Z
CVE-2018-11338 
Intuit Lacerte 2017 for Windows in a client/server environment transfers the entire customer list in cleartext over SMB, which allows attackers to (1) obtain sensitive information by sniffing the network or (2) conduct man-in-the-middle (MITM) attacks via unspecified vectors. The customer list contains each customer's full name, social security number (SSN), address, job title, phone number, Email address, spouse's phone/Email address, and other sensitive information. After the client software authenticates to the server database, the server sends the customer list. There is no need for further exploitation as all sensitive data is exposed. This vulnerability was validated on Intuit Lacerte 2017, however older versions of Lacerte may be vulnerable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-31T14:00:00.000Z
CVE-2018-11339 
An XSS issue was discovered in Frappe ERPNext v11.x.x-develop b1036e5 via a comment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T01:00:00.000Z
CVE-2018-11340 
An unrestricted file upload vulnerability in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to upload supplied data to a specified filename. This can be used to place attacker controlled code on the file system that is then executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T01:00:00.000Z
CVE-2018-11341 
Directory traversal in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to navigate the file system via the filename parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T01:00:00.000Z
CVE-2018-11342 
A path traversal vulnerability in fileExplorer.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specify a path to a file on the system to create folders via the dest_folder parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T01:00:00.000Z
CVE-2018-11343 
A persistent cross site scripting vulnerability in playlistmanger.cgi in the ASUSTOR SoundsGood application allows attackers to store cross site scripting payloads via the 'playlist' POST parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T01:00:00.000Z
CVE-2018-11344 
A path traversal vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specify a file on the system to download via the file1 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T01:00:00.000Z
CVE-2018-11345 
An unrestricted file upload vulnerability in upload.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to upload supplied data via the POST parameter filename. This can be used to place attacker controlled code on the file system that can then be executed. Further, the filename parameter is vulnerable to path traversal and allows the attacker to place the file anywhere on the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T01:00:00.000Z
CVE-2018-11346 
An insecure direct object reference vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows the ability to reference the "download_sys_settings" action and then specify files arbitrarily throughout the system via the act parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T01:00:00.000Z
CVE-2018-11347 
The YunoHost 2.7.2 through 2.7.14 web application is affected by one HTTP Response Header Injection. This flaw allows an attacker to inject, into the response from the server, one or several HTTP Header. It requires an interaction with the user to send him the malicious link. It could be used to perform other attacks such as user redirection to a malicious website, HTTP response splitting, or HTTP cache poisoning.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-04T17:00:00.000Z
CVE-2018-11348 
Two XSS vulnerabilities are located in the profile edition page of the user panel of the YunoHost 2.7.2 through 2.7.14 web application. By injecting a JavaScript payload, these flaws could be used to manipulate a user's session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-04T17:00:00.000Z
CVE-2018-11349 
The administration panel of Jirafeau before 3.4.1 is vulnerable to three CSRF attacks on search functionalities: search_by_name, search_by_hash, and search_link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-07T17:00:00.000Z
CVE-2018-11350 
An issue was discovered in Jirafeau before 3.4.1. The file "search by name" form is affected by one Cross-Site Scripting vulnerability via the name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-07T17:00:00.000Z
CVE-2018-11351 
script.php in Jirafeau before 3.4.1 is affected by two stored Cross-Site Scripting (XSS) vulnerabilities. These are stored within the shared files description file and allow the execution of a JavaScript payload each time an administrator searches or lists uploaded files. These two injections could be triggered without authentication, and target the administrator. The attack vectors are the Content-Type field and the filename parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-07T17:00:00.000Z
CVE-2018-11352 
The Wallabag application 2.2.3 to 2.3.2 is affected by one cross-site scripting (XSS) vulnerability that is stored within the configuration page. This vulnerability enables the execution of a JavaScript payload each time an administrator visits the configuration page. The vulnerability can be exploited with authentication and used to target administrators and steal their sessions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T16:00:00.000Z
CVE-2018-11354 
In Wireshark 2.6.0, the IEEE 1905.1a dissector could crash. This was addressed in epan/dissectors/packet-ieee1905.c by making a certain correction to string handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T21:00:00.000Z
CVE-2018-11355 
In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet status chunks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T21:00:00.000Z
CVE-2018-11356 
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T21:00:00.000Z
CVE-2018-11357 
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addressed in epan/tvbuff.c by rejecting negative lengths.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T21:00:00.000Z
CVE-2018-11358 
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T21:00:00.000Z
CVE-2018-11359 
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T21:00:00.000Z
CVE-2018-11360 
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was addressed in epan/dissectors/packet-gsm_a_dtap.c by fixing an off-by-one error that caused a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T21:00:00.000Z
CVE-2018-11361 
In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE processing in Dot11DecryptTDLSDeriveKey.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T21:00:00.000Z