rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-7602 Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.
Problem types: description: Remote code Execution
Affected products: vendor: Drupal
product: core
default_status: unaffected
Credits: lang: en
value: David Rothstein
lang: en
value: Alex Pott
lang: en
value: Heine Deelstra
lang: en
value: Jasper Mattsson
lang: en
value: David Rothstein
lang: en
value: xjm
lang: en
value: Samuel Mortenson
lang: en
value: Alex Pott
lang: en
value: Lee Rowlands
lang: en
value: Heine Deelstra
lang: en
value: Pere Orga
lang: en
value: Peter Wolanin
lang: en
value: Tim Plunkett
lang: en
value: Michael Hess
lang: en
value: Nate Lampton
lang: en
value: Jasper Mattsson
lang: en
value: Neil Drumm
lang: en
value: Cash Williams
lang: en
value: Daniel Wehner
Published: 2018-07-19T17:00:00.000Z
CVE-2018-7603 Search Autocomplete
In Drupal's 3rd party module search auto complete prior to versions 7.x-4.8 there is a Cross Site Scripting vulnerability. This Search Autocomplete module enables you to autocomplete textfield using data from your website (nodes, comments, etc.). The module doesn't sufficiently filter user-entered text among the autocompletion items leading to a Cross Site Scripting (XSS) vulnerability. This vulnerability can be exploited by any user allowed to create one of the autocompletion item, for instance, nodes, users, comments.
Problem types: description: A vulnerability in search auto complete a 3rd party Druapl contributed module. Search Autocomplete allows an attacker to execute javascript code to causing xss.  Affected releases are Drupal 3rd party module - Search Autocomplete: versions prior to 7.x-4.8.
Affected products: vendor: Drupal
product: 3rd party module - Search Autocomplete
Credits: lang: en
value: Reported By: Simon Kapadia Fixed By: Dominique CLAUSE
Published: 2019-01-15T22:00:00.000Z
CVE-2018-7631 
Buffer Overflow in httpd in EpiCentro E_7.3.2+ allows attackers to execute code remotely via a specially crafted GET request without a leading "/" and without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T22:00:00.000Z
CVE-2018-7632 
Buffer Overflow in httpd in EpiCentro E_7.3.2+ allows attackers to cause a denial of service attack remotely via a specially crafted GET request with a leading "/" in the URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T22:00:00.000Z
CVE-2018-7633 
Code injection in the /ui/login form Language parameter in Epicentro E_7.3.2+ allows attackers to execute JavaScript code by making a user issue a manipulated POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T22:00:00.000Z
CVE-2018-7634 
An issue was discovered in Enalean Tuleap 9.17. Lack of CSRF attack mitigation while changing an e-mail address makes it possible to abuse the functionality by attackers. By making a CSRF attack, an attacker could make a victim change his registered e-mail address on the application, leading to account takeover.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-01T22:00:00.000Z
CVE-2018-7635 
Whale Browser before 1.0.41.8 displays no URL information but only a title of a web page on the browser's address bar when visiting a blank page, which allows an attacker to display a malicious web page with a fake domain name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-03T15:00:00.000Z
CVE-2018-7636 
The URL filtering "continue page" hosted by PAN-OS 8.0.10 and earlier may allow an attacker to inject arbitrary JavaScript or HTML via specially crafted URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-03T21:00:00.000Z
CVE-2018-7637 
An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "16 colors" case, aka case 4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-02T14:00:00.000Z
CVE-2018-7638 
An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "256 colors" case, aka case 8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-02T14:00:00.000Z
CVE-2018-7639 
An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "16 bits colors" case, aka case 16.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-02T14:00:00.000Z
CVE-2018-7640 
An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a Monochrome case, aka case 1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-02T14:00:00.000Z
CVE-2018-7641 
An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "32 bits colors" case, aka case 32.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-02T14:00:00.000Z
CVE-2018-7642 
The swap_std_reloc_in function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (aout_32_swap_std_reloc_out NULL pointer dereference and application crash) via a crafted ELF file, as demonstrated by objcopy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-02T15:00:00.000Z
CVE-2018-7643 
The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, as demonstrated by objdump.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-02T15:00:00.000Z
CVE-2018-7644 
The XmlSecLibs library as used in the saml2 library in SimpleSAMLphp before 1.15.3 incorrectly verifies signatures on SAML assertions, allowing a remote attacker to construct a crafted SAML assertion on behalf of an Identity Provider that would pass as cryptographically valid, thereby allowing them to impersonate a user from that Identity Provider, aka a key confusion issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T14:00:00.000Z
CVE-2018-7648 
An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer, when providing a prefix with 50 or more characters on the command line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-02T16:00:00.000Z
CVE-2018-7649 
Monitorix before 3.10.1 allows XSS via CGI variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-02T17:00:00.000Z
CVE-2018-7650 
PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the "Add New" function for a Management User. Within the "Add New" section, the application does not sanitize user supplied input to the name parameter, and renders injected JavaScript code to the user's browser. This is different from CVE-2018-6878.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T15:00:00.000Z
CVE-2018-7651 
index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-04T01:00:00.000Z
CVE-2018-7652 
lib/Zonemaster/GUI/Dancer/Export.pm in Zonemaster Web GUI before 1.0.11 has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-04T01:00:00.000Z
CVE-2018-7653 
In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-04T19:00:00.000Z
CVE-2018-7654 
On 3CX 15.5.6354.2 devices, the parameter "file" in the request "/api/RecordingList/download?file=" allows full access to files on the server via path traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-04T01:00:00.000Z
CVE-2018-7658 
NTSServerSvc.exe in the server in Softros Network Time System 2.3.4 allows remote attackers to cause a denial of service (daemon crash) by sending exactly 11 bytes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-26T21:00:00.000Z
CVE-2018-7659 
In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Stored Cross-Site Scripting Vulnerability could potentially be exploited by malicious users to compromise the affected system via a filename of an uploaded image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-11T06:00:00.000Z
CVE-2018-7660 
In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Reflected Cross-Site Scripting Vulnerability could potentially be exploited by malicious users to compromise the affected system via the servlet/Download _docbase or _username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-11T06:00:00.000Z
CVE-2018-7661 
Papenmeier WiFi Baby Monitor Free & Lite before 2.02.2 allows remote attackers to obtain audio data via certain requests to TCP ports 8258 and 8257.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-04T22:00:00.000Z
CVE-2018-7662 
Couch through 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-04T23:00:00.000Z
CVE-2018-7663 
An issue was discovered in resources/views/layouts/app.blade.php in Voten.co before 2017-08-25. An unescaped template literal in the bio field of a user profile (resources/views/layouts/app.blade.php) allows for server-side template injection of arbitrary JavaScript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T07:00:00.000Z
CVE-2018-7664 
An issue was discovered in ClipBucket before 4.0.0 Release 4902. Any OS commands can be injected via shell metacharacters in the file_name parameter to /api/file_uploader.php or /actions/file_downloader.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T07:00:00.000Z
CVE-2018-7665 
An issue was discovered in ClipBucket before 4.0.0 Release 4902. A malicious file can be uploaded via the name parameter to actions/beats_uploader.php or actions/photo_uploader.php, or the coverPhoto parameter to edit_account.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T07:00:00.000Z
CVE-2018-7666 
An issue was discovered in ClipBucket before 4.0.0 Release 4902. SQL injection vulnerabilities exist in the actions/vote_channel.php channelId parameter, the ajax/commonAjax.php email parameter, and the ajax/commonAjax.php username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T07:00:00.000Z
CVE-2018-7667 
Adminer through 4.3.1 has SSRF via the server parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T07:00:00.000Z
CVE-2018-7668 
TestLink through 1.9.16 allows remote attackers to read arbitrary attachments via a modified ID field to /lib/attachments/attachmentdownload.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T07:00:00.000Z
CVE-2018-7669 
An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The 'Log Viewer' application is vulnerable to a directory traversal attack, allowing an attacker to access arbitrary files from the host Operating System using a sitecore/shell/default.aspx?xmlcontrol=LogViewerDetails&file= URI. Validation is performed to ensure that the text passed to the 'file' parameter correlates to the correct log file directory. This filter can be bypassed by including a valid log filename and then appending a traditional 'dot dot' style attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-27T16:00:00.000Z
CVE-2018-7673 NetIQ Identity Manager DoS Attack
The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack.
Problem types: description: The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attacks.
Affected products: vendor: NetIQ
product: Identity Manager
Published: 2018-03-26T19:00:00.000Z
CVE-2018-7674 IDM URL Redirection attack
The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection.
Problem types: description: The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection.
Affected products: vendor: NetIQ
product: Identity Manager
Published: 2018-03-28T14:00:00.000Z
CVE-2018-7675 Potential Information Disclosure in Sentinel
In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks within Sentinel the user does not log out but does go idle for a period of time. This in turn causes the interface to timeout so that it requires the user to re-authenticate. If another user is passing by and decides to login, their credentials are accepted. While The user does not inherit any of the other users privileges, they are able to view the previous screen. In this case it is possible that the user can see another users events or configuration information for whatever view is currently showing.
Problem types: description: Potential information leakage
Affected products: vendor: NetIQ Corporation
product: Sentinel
Published: 2018-03-07T22:00:00.000Z
CVE-2018-7676 IDM Information Leakage
The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information.
Problem types: description: The NetIQ Identity Manager , in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information.
Affected products: vendor: NetIQ
product: Identity Manager
Published: 2018-03-28T14:00:00.000Z
CVE-2018-7677 CSRF in NetIQ Access Manager (NAM) Identity Server component
A CSRF exposure exists in NetIQ Access Manager (NAM) 4.4 Identity Server component.
Problem types: description: CSRF
Affected products: vendor: NetIQ
product: NetIQ Access Manager (NAM) Admin Console
Published: 2018-03-14T15:00:00.000Z
CVE-2018-7678 XSS vulnerability in NetIQ Access Manager (NAM) Admin Console component
A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager (NAM) 4.3 and 4.4.
Problem types: description: XSS
Affected products: vendor: NetIQ
product: NetIQ Access Manager (NAM) Admin Console
Published: 2018-03-14T15:00:00.000Z
CVE-2018-7679 
Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of user avatar images, could lead to remote code execution.
Problem types: description: Client-side remote code execution
Affected products: vendor: Micro Focus
product: Solutions Business Manager 11.4
Published: 2018-06-21T19:00:00.000Z
CVE-2018-7680 
Micro Focus Solutions Business Manager versions prior to 11.4 can reflect back HTTP header values.
Problem types: description: Reflected cross-site scripting
Affected products: vendor: Micro Focus
product: Solutions Business Manager 11.4
Published: 2018-06-21T19:00:00.000Z
CVE-2018-7681 
Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system.
Problem types: description: Reflected cross-site scripting
Affected products: vendor: Micro Focus
product: Solutions Business Manager 11.4
Published: 2018-06-21T19:00:00.000Z
CVE-2018-7682 
Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains.
Problem types: description: Cross-site Request Forgery
Affected products: vendor: Micro Focus
product: Solutions Business Manager 11.4
Published: 2018-06-22T22:00:00.000Z
CVE-2018-7683 
Micro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive information in server log files.
Problem types: description: Information Disclosure
Affected products: vendor: Micro Focus
product: Solutions Business Manager 11.4
Published: 2018-06-21T19:00:00.000Z
CVE-2018-7685 libzypp does not reevaluate malicious rpms once downloaded
The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the cache, where a later call would not display the corrupted RPM warning and allow installation, a problem caused by malicious warnings only displayed during download.
Problem types: cwe_id: CWE-358
description: CWE-358
Affected products: vendor: SUSE
product: libzypp
Published: 2018-08-31T15:00:00.000Z
CVE-2018-7686 
Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage.
Problem types: description: Information Leakage.
Affected products: vendor: Micro Focus
product: eDirectory (ZDI)
Published: 2018-08-09T21:00:00.000Z
CVE-2018-7687 Client for OES Elevation of Privilege via Buffer Overflow
The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys.
Problem types: description: Elevation of privilege via buffer overflow.
Affected products: vendor: Micro Focus
product: Client for Open Enterprise Server
Published: 2018-05-21T20:00:00.000Z
CVE-2018-7688 Open Build Service accepts arbitrary reviews
A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated users to modify sources in projects where they do not have write permissions.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: openSUSE
product: Open Build Service
Credits: lang: en
value: Marcus Hüwe
Published: 2018-06-07T13:00:00.000Z
CVE-2018-7689 Open Build Service arbitrary package modification
Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to modify packages where they do not have write permissions.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: openSUSE
product: Open Build Service
Credits: lang: en
value: Marcus Hüwe
Published: 2018-06-07T13:00:00.000Z
CVE-2018-7690 MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access
A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access
Problem types: description: Remote Unauthorized Access
Affected products: vendor: Micro Focus
product: Fortify Software Security Center (SSC)
Credits: lang: en
value: Micro Focus would like to extend a special thanks to Alex Hernandez, aka alt3kx, for responsibly disclosing this vulnerability.
Published: 2018-12-13T14:00:00.000Z
CVE-2018-7691 MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access
A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access
Problem types: description: Remote Unauthorized Access
Affected products: vendor: Micro Focus
product: Fortify Software Security Center (SSC)
Credits: lang: en
value: Micro Focus would like to extend a special thanks to Alex Hernandez, aka alt3kx, for responsibly disclosing this vulnerability.
Published: 2018-12-13T14:00:00.000Z
CVE-2018-7692 
Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1.
Problem types: description: Redirection vulnerability.
Affected products: vendor: Micro Focus
product: NetIQ eDirectory Versions prior to 9.1.1 HF1
Published: 2018-08-09T21:00:00.000Z
CVE-2018-7698 
An issue was discovered in D-Link mydlink+ 3.8.5 build 259 for DCS-933L 1.05.04 and DCS-934L 1.05.04 devices. The mydlink+ app sends the username and password for connected D-Link cameras (such as DCS-933L and DCS-934L) unencrypted from the app to the camera, allowing attackers to obtain these credentials and gain control of the camera including the ability to view the camera's stream and make changes without the user's knowledge.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T19:00:00.000Z
CVE-2018-7700 
DedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter in a tag_test_action.php request can specify a runphp field in conjunction with PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T18:00:00.000Z
CVE-2018-7701 
Multiple cross-site request forgery (CSRF) vulnerabilities in SecurEnvoy SecurMail before 9.2.501 allow remote attackers to hijack the authentication of arbitrary users for requests that (1) delete e-mail messages via a delete action in a request to secmail/getmessage.exe or (2) spoof arbitrary users and reply to their messages via a request to secserver/securectrl.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-14T20:00:00.000Z
CVE-2018-7702 
SecurEnvoy SecurMail before 9.2.501 allows remote attackers to spoof transmission of arbitrary e-mail messages, resend e-mail messages to arbitrary recipients, or modify arbitrary message bodies and attachments by leveraging missing authentication and authorization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-14T20:00:00.000Z
CVE-2018-7703 
Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitrary web script or HTML via the mailboxid parameter to secmail/getmessage.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-14T20:00:00.000Z
CVE-2018-7704 
SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via the option1 parameter in a reply action to secmail/getmessage.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-14T20:00:00.000Z
CVE-2018-7705 
Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mail messages to arbitrary recipients via a .. (dot dot) in the filename parameter to secupload2/upload.aspx.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-14T20:00:00.000Z