rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-11071 DSA-2018-147: Dell EMC Isilon OneFS and IsilonSD Edge Remote Process Crash Vulnerability
Dell EMC Isilon OneFS versions 7.1.1.x, 7.2.1.x, 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 and Dell EMC IsilonSD Edge versions 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 contain a remote process crash vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to crash the isi_drive_d process by sending specially crafted input data to the affected system. This process will then be restarted.
Problem types: description: remote process crash vulnerability
Affected products: vendor: Dell EMC
product: Isilon OneFS
vendor: Dell EMC
product: IsilonSD Edge
Credits: lang: en
value: Dell EMC would like to thank Honggang Ren of Fortinet's FortiGuard Labs for reporting this vulnerability.
Published: 2018-09-18T21:00:00.000Z
CVE-2018-11072 
Dell Digital Delivery versions prior to 3.5.1 contain a DLL Injection Vulnerability. A local authenticated malicious user with advance knowledge of the application workflow could potentially load and execute a malicious DLL with administrator privileges.
Problem types: description: DLL Injection Vulnerability
Affected products: vendor: Dell EMC
product: Dell Digital Delivery
Published: 2018-10-02T13:00:00.000Z
CVE-2018-11073 DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities
RSA Authentication Manager versions prior to 8.3 P3 contain a stored cross-site scripting vulnerability in the Operations Console. A malicious Operations Console administrator could exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface. When other Operations Console administrators open the affected page, the injected scripts could potentially be executed in their browser.
Problem types: description: stored cross-site scripting vulnerability
Affected products: vendor: RSA
product: Authentication Manager
Published: 2018-09-28T18:00:00.000Z
CVE-2018-11074 DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities
RSA Authentication Manager versions prior to 8.3 P3 are affected by a DOM-based cross-site scripting vulnerability which exists in its embedded MadCap Flare Help files. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to the browser DOM, which code is then executed by the web browser in the context of the vulnerable web application.
Problem types: description: DOM-based cross-site scripting vulnerability
Affected products: vendor: RSA
product: Authentication Manager
Credits: lang: en
value: RSA would like to thank Mantas Juskauskas from SEC Consult Vulnerability for reporting CVE-2018-11074.
Published: 2018-09-28T18:00:00.000Z
CVE-2018-11075 DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities
RSA Authentication Manager versions prior to 8.3 P3 contain a reflected cross-site scripting vulnerability in a Security Console page. A remote, unauthenticated malicious user, with the knowledge of a target user's anti-CSRF token, could potentially exploit this vulnerability by tricking a victim Security Console user to supply malicious HTML or JavaScript code to the vulnerable web application, which code is then executed by the victim's web browser in the context of the vulnerable web application.
Problem types: description: Reflected cross-site scripting vulnerability
Affected products: vendor: RSA
product: Authentication Manager
Published: 2018-09-28T18:00:00.000Z
CVE-2018-11076 Dell EMC Avamar and Integrated Data Protection Appliance Information Exposure Vulnerability
Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0 and 7.4.1 and Dell EMC Integrated Data Protection Appliance (IDPA) 2.0 are affected by an information exposure vulnerability. Avamar Java management console's SSL/TLS private key may be leaked in the Avamar Java management client package. The private key could potentially be used by an unauthenticated attacker on the same data-link layer to initiate a MITM attack on management console users.
Problem types: description: Remote Code Execution Vulnerability
Affected products: vendor: Dell EMC
product: Avamar
vendor: Dell EMC
product: Integrated Data Protection Appliance
Published: 2018-11-26T20:00:00.000Z
CVE-2018-11077 Dell EMC Avamar and Integrated Data Protection Appliance Command Injection Vulnerability
'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 is affected by an OS command injection vulnerability. A malicious Avamar admin user may potentially be able to execute arbitrary commands under root privilege.
Problem types: description: Command Injection Vulnerability
Affected products: vendor: Dell EMC
product: Avamar
vendor: Dell EMC
product: Integrated Data Protection Appliance
Published: 2018-11-26T20:00:00.000Z
CVE-2018-11078 
Dell EMC VPlex GeoSynchrony, versions prior to 6.1, contains an Insecure File Permissions vulnerability. A remote authenticated malicious user could read from VPN configuration files on and potentially author a MITM attack on the VPN traffic.
Problem types: description: Insecure File Permissions vulnerability
Affected products: vendor: DELL EMC
product: VPlex Software: GeoSynchrony
Published: 2018-09-11T19:00:00.000Z
CVE-2018-11079 
Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains a Plaintext Password Storage vulnerability. Database credentials are stored in plaintext in a configuration file. An authenticated malicious user with access to the configuration file may obtain the exposed password to gain access to the application database.
Problem types: description: Plaintext Password Storage Vulnerability
Affected products: vendor: DELL EMC
product: ESRS Virtual Edition
Published: 2018-10-18T22:00:00.000Z
CVE-2018-11080 
Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains Improper File Permission Vulnerabilities. The application contains multiple configuration files with world-readable permissions that could allow an authenticated malicious user to utilize the file contents to potentially elevate their privileges.
Problem types: description: Improper File Permissions Vulnerability
Affected products: vendor: DELL EMC
product: ESRS Virtual Edition
Published: 2018-10-18T22:00:00.000Z
CVE-2018-11081 Pivotal Operations Manager UAA config - temp Ram Disk
Pivotal Operations Manager, versions 2.2.x prior to 2.2.1, 2.1.x prior to 2.1.11, 2.0.x prior to 2.0.16, and 1.11.x prior to 2, fails to write the Operations Manager UAA config onto the temp RAM disk, thus exposing the configs directly onto disk. A remote user that has gained access to the Operations Manager VM, can now file search and find the UAA credentials for Operations Manager on the system disk..
Problem types: description: Cleartext Storage in a File or on Disk
Affected products: vendor: Pivotal
product: pivotal-ops-manager
Published: 2018-10-05T21:00:00.000Z
CVE-2018-11082 Cloud Foundry UAA MFA does not prevent brute force of MFA code
Cloud Foundry UAA, all versions prior to 4.20.0 and Cloud Foundry UAA Release, all versions prior to 61.0, allows brute forcing of MFA codes. A remote unauthenticated malicious user in possession of a valid username and password can brute force MFA to login as the targeted user.
Problem types: description: Improper Access Control
Affected products: vendor: Cloud Foundry
product: UAA Release
vendor: Cloud Foundry
product: UAA
Published: 2018-10-05T21:00:00.000Z
CVE-2018-11083 Bosh accepts refresh tokens in place of an access token
Cloud Foundry BOSH, versions v264 prior to v264.14.0 and v265 prior to v265.7.0 and v266 prior to v266.8.0 and v267 prior to v267.2.0, allows refresh tokens to be as access tokens when using UAA for authentication. A remote attacker with an admin refresh token given by UAA can be used to access BOSH resources without obtaining an access token, even if their user no longer has access to those resources.
Problem types: description: Improper Authentication
Affected products: vendor: Cloud Foundry
product: BOSH
Published: 2018-10-05T21:00:00.000Z
CVE-2018-11084 Garden-runC prevents deletion of some app environments
Cloud Foundry Garden-runC release, versions prior to 1.16.1, prevents deletion of some app environments based on file attributes. A remote authenticated malicious user may create and delete apps with crafted file attributes to cause a denial of service for new app instances or scaling up of existing apps.
Problem types: description: Logic error
Affected products: vendor: Cloud Foundry
product: Garden-runC
Published: 2018-09-18T21:00:00.000Z
CVE-2018-11086 
Pivotal Usage Service in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior to 2.1.13 and 2.2 prior to 2.2.5, contains a bug which may allow escalation of privileges. A space developer with access to the system org may be able to access an artifact which contains the CF admin credential, allowing them to escalate to an admin role.
Problem types: description: Credential leak
Affected products: vendor: Pivotal
product: Application Service
Published: 2018-09-17T16:00:00.000Z
CVE-2018-11087 TLS validation error
Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit.
Problem types: description: TLS validation error
Affected products: vendor: Pivotal
product: Spring AMQP
Published: 2018-09-14T20:00:00.000Z
CVE-2018-11088 
Pivotal Applications Manager in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior to 2.1.13 and 2.2 prior to 2.2.5, contains a bug which may allow escalation of privileges. A space developer with access to the system org may be able to access an artifact which contains the CF admin credential, allowing them to escalate to an admin role.
Problem types: description: Credential leak
Affected products: vendor: Pivotal
product: Application Service
Published: 2018-09-17T16:00:00.000Z
CVE-2018-11090 
An XSS issue was discovered in MyBiz MyProcureNet 5.0.0. This vulnerability within "ProxyPage.aspx" allows an attacker to inject malicious client side scripting which will be executed in the browser of users if they visit the manipulated site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-14T23:00:00.000Z
CVE-2018-11091 
An issue was discovered in MyBiz MyProcureNet 5.0.0. A malicious file can be uploaded to the webserver by an attacker. It is possible for an attacker to upload a script to issue operating system commands. This vulnerability occurs because an attacker is able to adjust the "HiddenFieldControlCustomWhiteListedExtensions" parameter and add arbitrary extensions to the whitelist during the upload. For instance, if the extension .asp is added to the "HiddenFieldControlCustomWhiteListedExtensions" parameter, the server accepts "secctest.asp" as a legitimate file. Hence malicious files can be uploaded in order to execute arbitrary commands to take over the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-14T23:00:00.000Z
CVE-2018-11092 
An issue was discovered in the Admin Notes plugin 1.1 for MyBB. CSRF allows an attacker to remotely delete all admin notes via an admin/index.php?empty=table (aka Clear Table) action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-21T14:00:00.000Z
CVE-2018-11093 
Cross-site scripting (XSS) vulnerability in the Link package for CKEditor 5 before 10.0.1 allows remote attackers to inject arbitrary web script through a crafted href attribute of a link (A) element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T18:00:00.000Z
CVE-2018-11094 
An issue was discovered on Intelbras NCLOUD 300 1.0 devices. /cgi-bin/ExportSettings.sh, /goform/updateWPS, /goform/RebootSystem, and /goform/vpnBasicSettings do not require authentication. For example, when an HTTP POST request is made to /cgi-bin/ExportSettings.sh, the username, password, and other details are retrieved.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-15T19:00:00.000Z
CVE-2018-11095 
The decompileJUMP function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-15T00:00:00.000Z
CVE-2018-11096 
Horse Market Sell & Rent Portal Script 1.5.7 has a CSRF vulnerability through which an attacker can change all of the target's account information remotely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-21T14:00:00.000Z
CVE-2018-11097 
An issue was discovered in cloudwu/cstring through 2016-11-09. There is a memory leak vulnerability that could lead to a program crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-15T01:00:00.000Z
CVE-2018-11098 
An issue was discovered in Frog CMS 0.9.5. There is a file upload vulnerability via the admin/?/plugin/file_manager/upload URI, a similar issue to CVE-2014-4912.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-15T01:00:00.000Z
CVE-2018-11099 
The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted vcf file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T19:00:00.000Z
CVE-2018-11100 
The decompileSETTARGET function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-15T01:00:00.000Z
CVE-2018-11101 
Open Whisper Signal (aka Signal-Desktop) through 1.10.1 allows XSS via a resource location specified in an attribute of a SCRIPT, IFRAME, or IMG element, leading to JavaScript execution after a reply, a different vulnerability than CVE-2018-10994. The attacker needs to send HTML code directly as a message, and then reply to that message to trigger this vulnerability. The Signal-Desktop software fails to sanitize specific HTML elements that can be used to inject HTML code into remote chat windows when replying to an HTML message. Specifically the IMG and IFRAME elements can be used to include remote or local resources. For example, the use of an IFRAME element enables full code execution, allowing an attacker to download/upload files, information, etc. The SCRIPT element was also found to be injectable. On the Windows operating system, the CSP fails to prevent remote inclusion of resources via the SMB protocol. In this case, remote execution of JavaScript can be achieved by referencing the script on an SMB share within an IFRAME element, for example: <IFRAME src=\\DESKTOP-XXXXX\Temp\test.html> and then replying to it. The included JavaScript code is then executed automatically, without any interaction needed from the user. The vulnerability can be triggered in the Signal-Desktop client by sending a specially crafted message and then replying to it with any text or content in the reply (it doesn't matter).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T19:00:00.000Z
CVE-2018-11102 
An issue was discovered in Libav 12.3. A read access violation in the mov_probe function in libavformat/mov.c allows remote attackers to cause a denial of service (application crash), as demonstrated by avconv.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-15T02:00:00.000Z
CVE-2018-11105 
There is stored cross site scripting in the wp-live-chat-support plugin before 8.0.08 for WordPress via the "name" (aka wplc_name) and "email" (aka wplc_email) input fields to wp-json/wp_live_chat_support/v1/start_chat whenever a malicious attacker would initiate a new chat with an administrator. NOTE: this issue exists because of an incomplete fix for CVE-2018-9864.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-15T15:00:00.000Z
CVE-2018-11106 
NETGEAR has released fixes for a pre-authentication command injection in request_handler.php security vulnerability on the following product models: WC7500, running firmware versions prior to 6.5.3.5; WC7520, running firmware versions prior to 2.5.0.46; WC7600v1, running firmware versions prior to 6.5.3.5; WC7600v2, running firmware versions prior to 6.5.3.5; and WC9500, running firmware versions prior to 6.5.3.5.
Problem types: description: Other
Affected products: vendor: NETGEAR
product: WC7500
vendor: NETGEAR
product: WC7520
vendor: NETGEAR
product: WC7600v1
vendor: NETGEAR
product: WC7600v2
vendor: NETGEAR
product: WC9500
Published: 2020-04-01T16:31:45.000Z
CVE-2018-11116 
OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files, which allows remote authenticated users to call arbitrary methods (i.e., achieve ubus access over HTTP) that were only supposed to be accessible to a specific user, as demonstrated by the file, log, and service namespaces, potentially leading to remote Information Disclosure or Code Execution. NOTE: The developer disputes this as a vulnerability, indicating that rpcd functions appropriately
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T21:00:00.000Z
CVE-2018-11117 
Services/Feeds/classes/class.ilExternalFeedItem.php in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS via a link attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T13:00:00.000Z
CVE-2018-11118 
The RSS subsystem in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS via a URI to Services/Feeds/classes/class.ilExternalFeedItem.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T13:00:00.000Z
CVE-2018-11119 
ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 redirects a logged-in user to a third-party site via the return_to_url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T13:00:00.000Z
CVE-2018-11120 
Services/COPage/classes/class.ilPCSourceCode.php in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T13:00:00.000Z
CVE-2018-11124 
Cross-site scripting (XSS) vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted attribute name of an Attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-06T14:00:00.000Z
CVE-2018-11126 
dg-user/?controller=users&action=add in doorGets 7.0 has CSRF that results in adding an administrator account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-15T17:00:00.000Z
CVE-2018-11127 
e107 2.1.7 has CSRF resulting in arbitrary user deletion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-15T17:00:00.000Z
CVE-2018-11128 
The ObjReader::ReadObj() function in ObjReader.cpp in vincent0629 PDFParser allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly execute arbitrary code via a crafted pdf file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T19:00:00.000Z
CVE-2018-11129 
The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted vcf file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T19:00:00.000Z
CVE-2018-11130 
The header::add_FORMAT_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted vcf file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T19:00:00.000Z
CVE-2018-11132 
In order to perform actions that require higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue that runs daemonized with root privileges and only allows a set of commands to be executed. A command injection vulnerability exists within this message queue which allows low-privilege users to append arbitrary commands that will be run as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T18:00:00.000Z
CVE-2018-11133 
The 'fmt' parameter of the '/common/run_cross_report.php' script in the the Quest KACE System Management Appliance 8.0.318 is vulnerable to cross-site scripting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T18:00:00.000Z
CVE-2018-11134 
In order to perform actions that requires higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue managed that runs with root privileges and only allows a set of commands. One of the available commands allows changing any user's password (including root). A low-privilege user could abuse this feature by changing the password of the 'kace_support' account, which comes disabled by default but has full sudo privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T18:00:00.000Z
CVE-2018-11135 
The script '/adminui/error_details.php' in the Quest KACE System Management Appliance 8.0.318 allows authenticated users to conduct PHP object injection attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T18:00:00.000Z
CVE-2018-11136 
The 'orgID' parameter received by the '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection (in particular, a blind time-based type).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T18:00:00.000Z
CVE-2018-11137 
The 'checksum' parameter of the '/common/download_attachment.php' script in the Quest KACE System Management Appliance 8.0.318 can be abused to read arbitrary files with 'www' privileges via Directory Traversal. No administrator privileges are needed to execute this script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T18:00:00.000Z
CVE-2018-11138 
The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T18:00:00.000Z
CVE-2018-11139 
The '/common/ajax_email_connection_test.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by any authenticated user and can be abused to execute arbitrary commands on the system. This script is vulnerable to command injection via the unsanitized user input 'TEST_SERVER' sent to the script via the POST method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T18:00:00.000Z