rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-1000133 
Pitchfork version 1.4.6 RC1 contains an Improper Privilege Management vulnerability in Trident Pitchfork components that can result in A standard unprivileged user could gain system administrator permissions within the web portal.. This attack appear to be exploitable via The user must be able to login, and could edit their profile and set the "System Administrator" permission to "yes" on themselves.. This vulnerability appears to have been fixed in 1.4.6 RC2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T14:04:00.000Z
CVE-2018-1000134 
UnboundID LDAP SDK version from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6, where the issue was reported and fixed contains an Incorrect Access Control vulnerability in process function in SimpleBindRequest class doesn't check for empty password when running in synchronous mode. commit with applied fix https://github.com/pingidentity/ldapsdk/commit/8471904a02438c03965d21367890276bc25fa5a6#diff-f6cb23b459be1ec17df1da33760087fd that can result in Ability to impersonate any valid user. This attack appear to be exploitable via Providing valid username and empty password against servers that do not do additional validation as per https://tools.ietf.org/html/rfc4513#section-5.1.1. This vulnerability appears to have been fixed in after commit 8471904a02438c03965d21367890276bc25fa5a6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T14:04:00.000Z
CVE-2018-1000135 
GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local network's DNS servers, while on VPN. This vulnerability appears to have been fixed in Some Ubuntu 16.04 packages were fixed, but later updates removed the fix. cf. https://bugs.launchpad.net/ubuntu/+bug/1754671 an upstream fix does not appear to be available at this time.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-20T13:00:00.000Z
CVE-2018-1000136 
Electron version 1.7 up to 1.7.12; 1.8 up to 1.8.3 and 2.0.0 up to 2.0.0-beta.3 contains an improper handling of values vulnerability in Webviews that can result in remote code execution. This attack appear to be exploitable via an app which allows execution of 3rd party code AND disallows node integration AND has not specified if webview is enabled/disabled. This vulnerability appears to have been fixed in 1.7.13, 1.8.4, 2.0.0-beta.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-23T19:00:00.000Z
CVE-2018-1000137 
I, Librarian version 4.8 and earlier contains a Cross site Request Forgery (CSRF) vulnerability in users.php that can result in the password of the admin being forced to be changed without the administrator's knowledge.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-23T21:00:00.000Z
CVE-2018-1000138 
I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-23T21:00:00.000Z
CVE-2018-1000139 
I, Librarian version 4.8 and earlier contains a Cross Site Scripting (XSS) vulnerability in "id" parameter in stable.php that can result in an attacker using the XSS to send a malicious script to an unsuspecting user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-23T21:00:00.000Z
CVE-2018-1000140 
rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution. This attack appear to be exploitable a remote attacker that can connect to rsyslog and trigger a stack buffer overflow by sending a specially crafted x509 certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-23T00:00:00.000Z
CVE-2018-1000141 
I, Librarian version 4.9 and earlier contains an Incorrect Access Control vulnerability in ajaxdiscussion.php that can result in any users gaining unauthorized access (read, write and delete) to project discussions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-23T21:00:00.000Z
CVE-2018-1000142 
An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system access to obtain GitHub credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-05T13:00:00.000Z
CVE-2018-1000143 
An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system access to obtain GitHub credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-05T13:00:00.000Z
CVE-2018-1000144 
A cross site scripting vulnerability exists in Jenkins Cucumber Living Documentation Plugin 1.0.12 and older in CukedoctorBaseAction#doDynamic that disables the Content-Security-Policy protection for archived artifacts and workspace files, allowing attackers able to control the content of these files to attack Jenkins users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-05T13:00:00.000Z
CVE-2018-1000145 
An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with local file system access to obtain encrypted Perforce passwords and decrypt them.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-05T13:00:00.000Z
CVE-2018-1000146 
An arbitrary code execution vulnerability exists in Liquibase Runner Plugin version 1.3.0 and older that allows an attacker with permission to configure jobs to load and execute arbitrary code on the Jenkins master JVM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-05T13:00:00.000Z
CVE-2018-1000147 
An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with insufficient permission to obtain Perforce passwords configured in jobs to obtain them
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-05T13:00:00.000Z
CVE-2018-1000148 
An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-05T13:00:00.000Z
CVE-2018-1000149 
A man in the middle vulnerability exists in Jenkins Ansible Plugin 0.8 and older in AbstractAnsibleInvocation.java, AnsibleAdHocCommandBuilder.java, AnsibleAdHocCommandInvocationTest.java, AnsibleContext.java, AnsibleJobDslExtension.java, AnsiblePlaybookBuilder.java, AnsiblePlaybookStep.java that disables host key verification by default.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-05T13:00:00.000Z
CVE-2018-1000150 
An exposure of sensitive information vulnerability exists in Jenkins Reverse Proxy Auth Plugin 1.5 and older in ReverseProxySecurityRealm#authContext that allows attackers with local file system access to obtain a list of authorities for logged in users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-05T13:00:00.000Z
CVE-2018-1000151 
A man in the middle vulnerability exists in Jenkins vSphere Plugin 2.16 and older in VSphere.java that disables SSL/TLS certificate validation by default.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-05T13:00:00.000Z
CVE-2018-1000152 
An improper authorization vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorParameter.java, ConvertToTemplate.java, ConvertToVm.java, Delete.java, DeleteSnapshot.java, Deploy.java, ExposeGuestInfo.java, FolderVSphereCloudProperty.java, PowerOff.java, PowerOn.java, Reconfigure.java, Rename.java, RenameSnapshot.java, RevertToSnapshot.java, SuspendVm.java, TakeSnapshot.java, VSphereBuildStepContainer.java, vSphereCloudProvisionedSlave.java, vSphereCloudSlave.java, vSphereCloudSlaveTemplate.java, VSphereConnectionConfig.java, vSphereStep.java that allows attackers to perform form validation related actions, including sending numerous requests to the configured vSphere server, potentially resulting in denial of service, or send credentials stored in Jenkins with known ID to an attacker-specified server ("test connection").
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-05T13:00:00.000Z
CVE-2018-1000153 
A cross-site request forgery vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorParameter.java, ConvertToTemplate.java, ConvertToVm.java, Delete.java, DeleteSnapshot.java, Deploy.java, ExposeGuestInfo.java, FolderVSphereCloudProperty.java, PowerOff.java, PowerOn.java, Reconfigure.java, Rename.java, RenameSnapshot.java, RevertToSnapshot.java, SuspendVm.java, TakeSnapshot.java, VSphereBuildStepContainer.java, vSphereCloudProvisionedSlave.java, vSphereCloudSlave.java, vSphereCloudSlaveTemplate.java, VSphereConnectionConfig.java, vSphereStep.java that allows attackers to perform form validation related actions, including sending numerous requests to the configured vSphere server, potentially resulting in denial of service, or send credentials stored in Jenkins with known ID to an attacker-specified server ("test connection").
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-05T13:00:00.000Z
CVE-2018-1000154 
Zammad GmbH Zammad version 2.3.0 and earlier contains a Improper Neutralization of Script-Related HTML Tags in a Web Page (CWE-80) vulnerability in the subject of emails which are not html quoted in certain cases. This can result in the embedding and execution of java script code on users browser. This attack appear to be exploitable via the victim openning a ticket. This vulnerability appears to have been fixed in 2.3.1, 2.2.2 and 2.1.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-05T13:00:00.000Z
CVE-2018-1000155 
OpenFlow version 1.0 onwards contains a Denial of Service and Improper authorization vulnerability in OpenFlow handshake: The DPID (DataPath IDentifier) in the features_reply message are inherently trusted by the controller. that can result in Denial of Service, Unauthorized Access, Network Instability. This attack appear to be exploitable via Network connectivity: the attacker must first establish a transport connection with the OpenFlow controller and then initiate the OpenFlow handshake.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T13:00:00.000Z
CVE-2018-1000156 
GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-06T13:00:00.000Z
CVE-2018-1000158 
cmsmadesimple version 2.2.7 contains a Incorrect Access Control vulnerability in the function of send_recovery_email in the line "$url = $config['admin_url'] . '/login.php?recoverme=' . $code;" that can result in Administrator Password Reset Poisoning, specifically a reset URL pointing at an attacker controlled server can be created by using a host header attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-18T19:00:00.000Z
CVE-2018-1000159 
tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS implementation, tlslite/utils/constanttime.py: ct_check_cbc_mac_and_pad(); line "end_pos = data_len - 1 - mac.digest_size" that can result in an attacker manipulating the TLS ciphertext which will not be detected by receiving tlslite-ng. This attack appears to be exploitable via man in the middle on a network connection. This vulnerability appears to have been fixed after commit 3674815d1b0f7484454995e2737a352e0a6a93d8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-18T19:00:00.000Z
CVE-2018-1000160 
RisingStack protect version 1.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in isXss() function in lib/rules/xss.js that can result in dangerous XSS strings being validated as safe. This attack appears to be exploitable via A number of XSS strings(26) detailed in the GitHub issue #16.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-18T19:00:00.000Z
CVE-2018-1000161 
nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against a malicious web site. This vulnerability appears to have been fixed in 7.7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-18T19:00:00.000Z
CVE-2018-1000162 
Parsedown version prior to 1.7.0 contains a Cross Site Scripting (XSS) vulnerability in `setMarkupEscaped` for escaping HTML that can result in JavaScript code execution. This attack appears to be exploitable via specially crafted markdown that allows it to side step HTML escaping by breaking AST boundaries. This vulnerability appears to have been fixed in 1.7.0 and later.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-18T19:00:00.000Z
CVE-2018-1000163 
Floodlight version 1.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in the web console that can result in javascript injections into the web page. This attack appears to be exploitable via the victim browsing the web console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-18T19:00:00.000Z
CVE-2018-1000164 
gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in "process_headers" function in "gunicorn/http/wsgi.py" that can result in an attacker causing the server to return arbitrary HTTP headers. This vulnerability appears to have been fixed in 19.5.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-18T19:00:00.000Z
CVE-2018-1000165 
LightSAML version prior to 1.3.5 contains a Incorrect Access Control vulnerability in signature validation in readers in src/LightSaml/Model/XmlDSig/ that can result in impersonation of any user from Identity Provider. This vulnerability appears to have been fixed in 1.3.5 and later.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-18T19:00:00.000Z
CVE-2018-1000167 
OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the following files: config.py:136, config.py:142, sources.py:99 and sources.py:131. The "list-sources"-command is affected by this bug. that can result in Remote Code Execution(even as root if suricata-update is called by root). This attack appears to be exploitable via a specially crafted yaml-file at https://www.openinfosecfoundation.org/rules/index.yaml. This vulnerability appears to have been fixed in 1.0.0b1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-18T19:00:00.000Z
CVE-2018-1000168 
nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service. This attack appears to be exploitable via network client. This vulnerability appears to have been fixed in >= 1.31.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-08T15:00:00.000Z
CVE-2018-1000169 
An exposure of sensitive information vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in CLICommand.java and ViewOptionHandler.java that allows unauthorized attackers to confirm the existence of agents or views with an attacker-specified name by sending a CLI command to Jenkins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-13T21:00:00.000Z
CVE-2018-1000170 
A cross-site scripting vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in confirmationList.jelly and stopButton.jelly that allows attackers with Job/Configure and/or Job/Create permission to create an item name containing JavaScript that would be executed in another user's browser when that other user performs some UI actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-13T21:00:00.000Z
CVE-2018-1000172 
Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Title Text. This attack appears to be exploitable via a victim viewing the image in the administrator page. This vulnerability appears to have been fixed in 2.2.45.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-30T22:00:00.000Z
CVE-2018-1000173 
A session fixaction vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows unauthorized attackers to impersonate another user if they can control the pre-authentication session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-08T15:00:00.000Z
CVE-2018-1000174 
An open redirect vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows attackers to redirect users to an arbitrary URL after successful login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-08T15:00:00.000Z
CVE-2018-1000175 
A path traversal vulnerability exists in Jenkins HTML Publisher Plugin 1.15 and older in HtmlPublisherTarget.java that allows attackers able to configure the HTML Publisher build step to override arbitrary files on the Jenkins master.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-08T15:00:00.000Z
CVE-2018-1000176 
An exposure of sensitive information vulnerability exists in Jenkins Email Extension Plugin 2.61 and older in src/main/resources/hudson/plugins/emailext/ExtendedEmailPublisher/global.groovy and ExtendedEmailPublisherDescriptor.java that allows attackers with control of a Jenkins administrator's web browser (e.g. malicious extension) to retrieve the configured SMTP password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-08T15:00:00.000Z
CVE-2018-1000177 
A cross-site scripting vulnerability exists in Jenkins S3 Plugin 0.10.12 and older in src/main/resources/hudson/plugins/s3/S3ArtifactsProjectAction/jobMain.jelly that allows attackers able to control file names of uploaded files to define file names containing JavaScript that would be executed in another user's browser when that user performs some UI actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-08T15:00:00.000Z
CVE-2018-1000178 
A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(const QByteArray &msg) datastreampeer.cpp line 62 that allows an attacker to execute code remotely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-08T15:00:00.000Z
CVE-2018-1000179 
A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const Login &msg) coreauthhandler.cpp line 235 that allows an attacker to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-08T15:00:00.000Z
CVE-2018-1000180 
Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T13:00:00.000Z
CVE-2018-1000181 
Kitura 2.3.0 and earlier have an unintended read access to unauthorised files and folders that can be exploited by a crafted URL resulting in information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T13:00:00.000Z
CVE-2018-1000182 
A server-side request forgery vulnerability exists in Jenkins Git Plugin 3.9.0 and older in AssemblaWeb.java, GitBlitRepositoryBrowser.java, Gitiles.java, TFS2013GitRepositoryBrowser.java, ViewGitWeb.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T20:00:00.000Z
CVE-2018-1000183 
A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubServerConfig.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T20:00:00.000Z
CVE-2018-1000184 
A server-side request forgery vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubPluginConfig.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T20:00:00.000Z
CVE-2018-1000185 
A server-side request forgery vulnerability exists in Jenkins GitHub Branch Source Plugin 2.3.4 and older in Endpoint.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T20:00:00.000Z
CVE-2018-1000186 
A exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin 1.41.0 and older in GhprbGitHubAuth.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T20:00:00.000Z
CVE-2018-1000187 
A exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.7.0 and older in ContainerExecDecorator.java that results in sensitive variables such as passwords being written to logs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T20:00:00.000Z