rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-10499 
This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy Apps Fixed in version 6.4.0.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of URLs. The issue lies in the lack of proper validation of user-supplied data, which can allow arbitrary JavaScript to execute. An attacker can leverage this vulnerability to install applications under the context of the current user. Was ZDI-CAN-5330.
Problem types: cwe_id: CWE-20
description: CWE-20-Improper Input Validation
Affected products: vendor: Samsung
product: Samsung Galaxy Apps
Published: 2018-09-24T23:00:00.000Z
CVE-2018-10500 
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Galaxy Apps Fixed in version 6.4.0.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of push messages. The issue lies in the ability to start an activity with controlled arguments. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the application. Was ZDI-CAN-5331.
Problem types: cwe_id: CWE-284
description: CWE-284-Improper Access Control
Affected products: vendor: Samsung
product: Samsung Galaxy Apps
Published: 2018-09-24T23:00:00.000Z
CVE-2018-10501 
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Notes Fixed in version 2.0.02.31. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of ZIP files. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the application. Was ZDI-CAN-5358.
Problem types: cwe_id: CWE-22
description: CWE-22-Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Samsung
product: Samsung Notes
Published: 2018-09-24T23:00:00.000Z
CVE-2018-10502 
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Galaxy Apps Fixed in version 4.2.18.2. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of a staging mode. The issue lies in the ability to change the configuration based on the presence of a file in an user-controlled location. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the application. Was ZDI-CAN-5359.
Problem types: cwe_id: CWE-269
description: CWE-269-Improper Privilege Management
Affected products: vendor: Samsung
product: Samsung Galaxy Apps
Published: 2018-09-24T23:00:00.000Z
CVE-2018-10503 
An issue was discovered in index.php in baijiacms V4 v4_1_4_20170105. CSRF allows adding an administrator account via op=edituser, changing the administrator password via op=changepwd, or deleting an account via op=deleteuser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-27T16:00:00.000Z
CVE-2018-10504 
The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-27T16:00:00.000Z
CVE-2018-10505 
A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within the processing of IOCTL 0x220008 in the TMWFP driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Problem types: description: Pool Corruption Privilege Escalation
Affected products: vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2018-06-08T14:00:00.000Z
CVE-2018-10506 
A out-of-bounds read information disclosure vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to disclose sensitive information on vulnerable installations due to a flaw within the processing of IOCTL 0x220004 by the TMWFP driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Problem types: description: Out-of-Bounds Read Information Disclosure
Affected products: vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2018-06-08T14:00:00.000Z
CVE-2018-10507 
A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Change Prevention inoperable on vulnerable installations. An attacker must already have administrator privileges in order to exploit this vulnerability.
Problem types: description: Insecure Permissions
Affected products: vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2018-06-12T17:00:00.000Z
CVE-2018-10508 
A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to use a specially crafted URL to elevate account permissions on vulnerable installations. An attacker must already have at least guest privileges in order to exploit this vulnerability.
Problem types: description: Insecure Permissions
Affected products: vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2018-06-12T17:00:00.000Z
CVE-2018-10509 
A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to exploit it via a Browser Refresh attack on vulnerable installations. An attacker must be using a AD logon user account in order to exploit this vulnerability.
Problem types: description: Incorrect Access Control
Affected products: vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2018-06-12T17:00:00.000Z
CVE-2018-10510 
A Directory Traversal Remote Code Execution vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to execute arbitrary code on vulnerable installations.
Problem types: description: Directory Traversal
Affected products: vendor: Trend Micro
product: Trend Micro Control Manager
Published: 2018-08-15T19:00:00.000Z
CVE-2018-10511 
A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to conduct a server-side request forgery (SSRF) attack on vulnerable installations.
Problem types: description: SSRF
Affected products: vendor: Trend Micro
product: Trend Micro Control Manager
Published: 2018-08-15T19:00:00.000Z
CVE-2018-10512 
A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to manipulate a reverse proxy .dll on vulnerable installations, which may lead to a denial of server (DoS).
Problem types: description: Insecure Permissions
Affected products: vendor: Trend Micro
product: Trend Micro Control Manager
Published: 2018-08-15T19:00:00.000Z
CVE-2018-10513 
A Deserialization of Untrusted Data Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability.
Problem types: description: Privilege Escalation
Affected products: vendor: Trend Micro
product: Trend Micro Security (Consumer)
Published: 2018-08-30T19:00:00.000Z
CVE-2018-10514 
A Missing Impersonation Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability.
Problem types: description: Privilege Escalation
Affected products: vendor: Trend Micro
product: Trend Micro Security (Consumer)
Published: 2018-08-30T19:00:00.000Z
CVE-2018-10515 
In CMS Made Simple (CMSMS) through 2.2.7, the "file unpack" operation in the admin dashboard contains a remote code execution vulnerability exploitable by an admin user because a .php file can be present in the extracted ZIP archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-27T18:00:00.000Z
CVE-2018-10516 
In CMS Made Simple (CMSMS) through 2.2.7, the "file rename" operation in the admin dashboard contains a sensitive information disclosure vulnerability, exploitable by an admin user, that can cause DoS by moving config.php to the upload/ directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-27T18:00:00.000Z
CVE-2018-10517 
In CMS Made Simple (CMSMS) through 2.2.7, the "module import" operation in the admin dashboard contains a remote code execution vulnerability, exploitable by an admin user, because an XML Package can contain base64-encoded PHP code in a data element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-27T18:00:00.000Z
CVE-2018-10518 
In CMS Made Simple (CMSMS) through 2.2.7, the "file delete" operation in the admin dashboard contains an arbitrary file deletion vulnerability that can cause DoS, exploitable by an admin user, because the attacker can remove all lib/ files in all directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-27T18:00:00.000Z
CVE-2018-10519 
CMS Made Simple (CMSMS) 2.2.7 contains a privilege escalation vulnerability from ordinary user to admin user by arranging for the eff_uid value within $_COOKIE[$this->_loginkey] to equal 1, because files in the tmp/ directory are accessible through HTTP requests. NOTE: this vulnerability exists because of an incorrect fix for CVE-2018-10084.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-27T18:00:00.000Z
CVE-2018-10520 
In CMS Made Simple (CMSMS) through 2.2.7, the "module remove" operation in the admin dashboard contains an arbitrary file deletion vulnerability that can cause DoS, exploitable by an admin user, because the attacker can remove all lib/ files in all directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-27T18:00:00.000Z
CVE-2018-10521 
In CMS Made Simple (CMSMS) through 2.2.7, the "file move" operation in the admin dashboard contains an arbitrary file movement vulnerability that can cause DoS, exploitable by an admin user, because config.php can be moved into an incorrect directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-27T18:00:00.000Z
CVE-2018-10522 
In CMS Made Simple (CMSMS) through 2.2.7, the "file view" operation in the admin dashboard contains a sensitive information disclosure vulnerability, exploitable by ordinary users, because the product exposes unrestricted access to the PHP file_get_contents function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-27T18:00:00.000Z
CVE-2018-10523 
CMS Made Simple (CMSMS) through 2.2.7 contains a physical path leakage Vulnerability via /modules/DesignManager/action.ajax_get_templates.php, /modules/DesignManager/action.ajax_get_stylesheets.php, /modules/FileManager/dunzip.php, or /modules/FileManager/untgz.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-27T18:00:00.000Z
CVE-2018-10527 
EasyCMS 1.3 is prone to Stored XSS when posting an article; four fields are affected: title, keyword, abstract, and content, as demonstrated by the /admin/index/index.html#listarticle URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-28T16:00:00.000Z
CVE-2018-10528 
An issue was discovered in LibRaw 0.18.9. There is a stack-based buffer overflow in the utf2char function in libraw_cxx.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-29T03:00:00.000Z
CVE-2018-10529 
An issue was discovered in LibRaw 0.18.9. There is an out-of-bounds read affecting the X3F property table list implementation in libraw_x3f.cpp and libraw_cxx.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-29T03:00:00.000Z
CVE-2018-10531 
An issue was discovered in the America's Army Proving Grounds platform for the Unreal Engine. With a false packet sent via UDP, the application server responds with several bytes, giving the possibility of DoS amplification, even being able to be used in DDoS attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T15:32:21.000Z
CVE-2018-10532 
An issue was discovered on EE 4GEE HH70VB-2BE8GB3 HH70_E1_02.00_19 devices. Hardcoded root SSH credentials were discovered to be stored within the "core_app" binary utilised by the EE router for networking services. An attacker with knowledge of the default password (oelinux123) could login to the router via SSH as the root user, which could allow for the loss of confidentiality, integrity, and availability of the system. This would also allow for the bypass of the "AP Isolation" mode that is supported by the router, as well as the settings for multiple Wireless networks, which a user may use for guest clients.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-30T18:00:00.000Z
CVE-2018-10534 
The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, processes a negative Data Directory size with an unbounded loop that increases the value of (external_IMAGE_DEBUG_DIRECTORY) *edd so that the address exceeds its own memory region, resulting in an out-of-bounds memory write, as demonstrated by objcopy copying private info with _bfd_pex64_bfd_copy_private_bfd_data_common in pex64igen.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-29T15:00:00.000Z
CVE-2018-10535 
The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the output_section pointer in the case of a symtab entry with a "SECTION" type that has a "0" value, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file, as demonstrated by objcopy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-29T15:00:00.000Z
CVE-2018-10536 
An issue was discovered in WavPack 5.1.0 and earlier. The WAV parser component contains a vulnerability that allows writing to memory because ParseRiffHeaderConfig in riff.c does not reject multiple format chunks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-29T15:00:00.000Z
CVE-2018-10537 
An issue was discovered in WavPack 5.1.0 and earlier. The W64 parser component contains a vulnerability that allows writing to memory because ParseWave64HeaderConfig in wave64.c does not reject multiple format chunks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-29T15:00:00.000Z
CVE-2018-10538 
An issue was discovered in WavPack 5.1.0 and earlier for WAV input. Out-of-bounds writes can occur because ParseRiffHeaderConfig in riff.c does not validate the sizes of unknown chunks before attempting memory allocation, related to a lack of integer-overflow protection within a bytes_to_copy calculation and subsequent malloc call, leading to insufficient memory allocation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-29T15:00:00.000Z
CVE-2018-10539 
An issue was discovered in WavPack 5.1.0 and earlier for DSDiff input. Out-of-bounds writes can occur because ParseDsdiffHeaderConfig in dsdiff.c does not validate the sizes of unknown chunks before attempting memory allocation, related to a lack of integer-overflow protection within a bytes_to_copy calculation and subsequent malloc call, leading to insufficient memory allocation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-29T15:00:00.000Z
CVE-2018-10540 
An issue was discovered in WavPack 5.1.0 and earlier for W64 input. Out-of-bounds writes can occur because ParseWave64HeaderConfig in wave64.c does not validate the sizes of unknown chunks before attempting memory allocation, related to a lack of integer-overflow protection within a bytes_to_copy calculation and subsequent malloc call, leading to insufficient memory allocation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-29T15:00:00.000Z
CVE-2018-10544 
Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-02T07:00:00.000Z
CVE-2018-10545 
An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4. Dumpable FPM child processes allow bypassing opcache access controls because fpm_unix.c makes a PR_SET_DUMPABLE prctl call, allowing one user (in a multiuser environment) to obtain sensitive information from the process memory of a second user's PHP applications by running gcore on the PID of the PHP-FPM worker process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-29T21:00:00.000Z
CVE-2018-10546 
An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-29T21:00:00.000Z
CVE-2018-10547 
An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-5712.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-29T21:00:00.000Z
CVE-2018-10548 
An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP servers to cause a denial of service (NULL pointer dereference and application crash) because of mishandling of the ldap_get_dn return value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-29T21:00:00.000Z
CVE-2018-10549 
An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. exif_read_data in ext/exif/exif.c has an out-of-bounds read for crafted JPEG data because exif_iif_add_value mishandles the case of a MakerNote that lacks a final '\0' character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-29T21:00:00.000Z
CVE-2018-10550 
In Octopus Deploy before 2018.4.7, target and tenant tag variable scopes were not checked against the list of tenants the user has access to.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-30T04:00:00.000Z
CVE-2018-10553 
An issue was discovered in Nagios XI 5.4.13. A registered user is able to use directory traversal to read local files, as demonstrated by URIs beginning with index.php?xiwindow=./ and config/?xiwindow=../ substrings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-30T03:00:00.000Z
CVE-2018-10554 
An issue was discovered in Nagios XI 5.4.13. There is XSS exploitable via CSRF in (1) the Schedule New Report screen via the hour, minute, or ampm parameter, related to components/scheduledreporting; (2) includes/components/xicore/downtime.php, related to the update_pages function; (3) the ajaxhelper.php opts or background parameter; (4) the i[] array parameter to ajax_handler.php; or (5) the deploynotification.php title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-30T03:00:00.000Z
CVE-2018-10561 
An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-04T03:00:00.000Z
CVE-2018-10562 
An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Form URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it's quite simple to execute commands and retrieve their output.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-04T03:00:00.000Z
CVE-2018-10563 
An XSS in Flexense SyncBreeze affects all versions (tested from SyncBreeze Enterprise from v10.1 to v10.7).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-02T21:00:00.000Z
CVE-2018-10564 
XSS exists in Flexense DiskPulse Enterprise from v10.4 to v10.7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-02T21:00:00.000Z
CVE-2018-10565 
XSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-02T21:00:00.000Z
CVE-2018-10566 
XSS exists in Flexense DupScout Enterprise from v10.0.18 to v10.7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-02T21:00:00.000Z
CVE-2018-10567 
XSS exists in Flexense VX Search Enterprise from v10.1.12 to v10.7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-02T21:00:00.000Z
CVE-2018-10568 
XSS exists in Flexense DiskSorter Enterprise from v9.5.12 to v10.7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-02T21:00:00.000Z
CVE-2018-10569 
An issue was discovered in Edimax EW-7438RPn Mini v2 before version 1.26. There is XSS in an SSID field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-13T17:00:00.000Z
CVE-2018-10570 
Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-30T16:00:00.000Z