rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-11564 
Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature. A user with elevated privileges could upload a photo to the system in an SVG format. This file will be uploaded to the system and it will not be stripped or filtered. The user can create a link on the website pointing to "/storage/poc.svg" that will point to http://localhost/pagekit/storage/poc.svg. When a user comes along to click that link, it will trigger a XSS attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11565 
Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to mentioning the usernames that are already taken by people registered in the system rather than masking that information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-30T21:00:00.000Z
CVE-2018-11567 
Prior to 2018-04-27, the reprompt feature in Amazon Echo devices could be misused by a custom Alexa skill. The reprompt feature is designed so that if Alexa does not receive an input within 8 seconds, the device can speak a reprompt, then wait an additional 8 seconds for input; if the user still does not respond, the microphone is then turned off. The vulnerability involves empty output-speech reprompts, custom wildcard ("gibberish") input slots, and logging of detected speech. If a maliciously designed skill is installed, an attacker could obtain transcripts of speech not intended for Alexa to process, but simply spoken within the device's hearing range. NOTE: The vendor states "Customer trust is important to us and we take security and privacy seriously. We have put mitigations in place for detecting this type of skill behavior and reject or suppress those skills when we do. Customers do not need to take any action for these mitigations to work.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-30T22:00:00.000Z
CVE-2018-11568 
Reflected XSS is possible in the GamePlan theme through 1.5.13.2 for WordPress because of insufficient input sanitization, as demonstrated by the s parameter. In some (but not all) cases, the '<' and '>' characters have &lt; and &gt; representations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-30T22:00:00.000Z
CVE-2018-11569 
Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T15:32:18.000Z
CVE-2018-11571 
ClipperCMS 1.3.3 allows Session Fixation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T00:00:00.000Z
CVE-2018-11572 
ClipperCMS 1.3.3 has XSS in the "Module name" field in a "Modules -> Manage modules -> edit" action to the manager/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T00:00:00.000Z
CVE-2018-11574 
Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authentication bypass. This implementation is distributed as a patch for PPPD 0.91, and includes the affected eap.c and eap-tls.c files. Configurations that use the `refuse-app` option are unaffected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-14T20:00:00.000Z
CVE-2018-11575 
ngiflib.c in MiniUPnP ngiflib 0.4 has a stack-based buffer overflow in DecodeGifImg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T00:00:00.000Z
CVE-2018-11576 
ngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T00:00:00.000Z
CVE-2018-11577 
Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T00:00:00.000Z
CVE-2018-11578 
GifIndexToTrueColor in ngiflib.c in MiniUPnP ngiflib 0.4 has a Segmentation fault.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T00:00:00.000Z
CVE-2018-11579 
class-woo-banner-management.php in the MULTIDOTS WooCommerce Category Banner Management plugin 1.1.0 for WordPress has an Unauthenticated Settings Change Vulnerability, related to certain wp_ajax_nopriv_ usage. Anyone can change the plugin's setting by simply sending a request with a wbm_save_shop_page_banner_data action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T01:00:00.000Z
CVE-2018-11580 
An issue was discovered in mass-pages-posts-creator.php in the MULTIDOTS Mass Pages/Posts Creator plugin 1.2.2 for WordPress. Any logged in user can launch Mass Pages/Posts creation with custom content. There is no nonce or user capability check, so anyone can launch a DoS attack against a site and create hundreds of thousands of posts with custom content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T01:00:00.000Z
CVE-2018-11581 
Cross-site scripting (XSS) vulnerability on Brother HL series printers allows remote attackers to inject arbitrary web script or HTML via the url parameter to etc/loginerror.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T17:00:00.000Z
CVE-2018-11583 
SeaCMS 6.61 has stored XSS in admin_collect.php via the siteurl parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T03:00:00.000Z
CVE-2018-11586 
XML external entity (XXE) vulnerability in api/rest/status in SearchBlox 8.6.7 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T21:00:00.000Z
CVE-2018-11587 
There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T18:00:00.000Z
CVE-2018-11588 
Centreon 3.4.6 including Centreon Web 2.8.23 is vulnerable to an authenticated user injecting a payload into the username or command description, resulting in stored XSS. This is related to www/include/core/menu/menu.php and www/include/configuration/configObject/command/formArguments.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T18:00:00.000Z
CVE-2018-11589 
Multiple SQL injection vulnerabilities in Centreon 3.4.6 including Centreon Web 2.8.23 allow attacks via the searchU parameter in viewLogs.php, the id parameter in GetXmlHost.php, the chartId parameter in ExportCSVServiceData.php, the searchCurve parameter in listComponentTemplates.php, or the host_id parameter in makeXML_ListMetrics.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T18:00:00.000Z
CVE-2018-11590 
Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via an integer overflow during syntax parsing. This was addressed by fixing stack size detection on Linux in jsutils.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T16:00:00.000Z
CVE-2018-11591 
Espruino before 1.98 allows attackers to cause a denial of service (application crash) with a user crafted input file via a NULL pointer dereference during syntax parsing. This was addressed by adding validation for a debug trace print statement in jsvar.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T16:00:00.000Z
CVE-2018-11592 
Espruino before 1.98 allows attackers to cause a denial of service (application crash) with a user crafted input file via an Out-of-bounds Read during syntax parsing in which certain height validation is missing in libs/graphics/jswrap_graphics.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T16:00:00.000Z
CVE-2018-11593 
Espruino before 1.99 allows attackers to cause a denial of service (application crash) and potential Information Disclosure with a user crafted input file via a Buffer Overflow during syntax parsing because strncpy is misused in jslex.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T16:00:00.000Z
CVE-2018-11594 
Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsing of "VOID" tokens in jsparse.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T16:00:00.000Z
CVE-2018-11595 
Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Escalation of Privileges with a user crafted input file via a Buffer Overflow during syntax parsing, because strncat is misused.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T16:00:00.000Z
CVE-2018-11596 
Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsing because a check for '\0' is made for the wrong array element in jsvar.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T16:00:00.000Z
CVE-2018-11597 
Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsing because of a missing check for stack exhaustion with many '{' characters in jsparse.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T16:00:00.000Z
CVE-2018-11598 
Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Information Disclosure with user crafted input files via a Buffer Overflow or Out-of-bounds Read during syntax parsing of certain for loops in jsparse.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T16:00:00.000Z
CVE-2018-11614 
This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Samsung Members Fixed in version 2.4.25. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Intents. The issue lies in the ability to send an Intent that would not otherwise be reachable. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the application. Was ZDI-CAN-5361.
Problem types: cwe_id: CWE-269
description: CWE-269-Improper Privilege Management
Affected products: vendor: Samsung
product: Samsung Members
Published: 2018-09-24T23:00:00.000Z
CVE-2018-11615 
This vulnerability allows remote attackers to deny service on vulnerable installations of npm mosca 2.8.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of topics. A crafted regular expression can cause the broker to crash. An attacker can leverage this vulnerability to deny access to the target system. Was ZDI-CAN-6306.
Problem types: cwe_id: CWE-20
description: CWE-20-Improper Input Validation
Affected products: vendor: npm
product: npm mosca
Published: 2018-08-30T12:00:00.000Z
CVE-2018-11616 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Tencent Foxmail 7.2.9.115. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of URI handlers. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5543.
Problem types: cwe_id: CWE-78
description: CWE-78-Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: Tencent
product: Tencent Foxmail
Published: 2018-08-30T12:00:00.000Z
CVE-2018-11617 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Format events for ComboBox fields. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5415.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-11618 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the resetForm method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5416.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-11619 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the setFocus method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5417.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-11620 
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ConvertToPDF_x86.dll. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-5756.
Problem types: cwe_id: CWE-125
description: CWE-125-Out-of-bounds Read
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-11621 
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ConvertToPDF_x86.dll. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-5896.
Problem types: cwe_id: CWE-125
description: CWE-125-Out-of-bounds Read
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-11622 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ConvertToPDF_x86.dll. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-5873.
Problem types: cwe_id: CWE-787
description: CWE-787-Out-of-bounds Write
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-11623 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the addAdLayer method. By performing actions in JavaScript, an attacker can trigger a type confusion condition. The attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6003.
Problem types: cwe_id: CWE-843
description: CWE-843-Access of Resource Using Incompatible Type ('Type Confusion')
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-11624 
In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T16:00:00.000Z
CVE-2018-11625 
In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T16:00:00.000Z
CVE-2018-11626 
SELA (aka SimplE Lossless Audio) v0.1.2-alpha has a stack-based buffer overflow in the core/apev2.c init_apev2_keys function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T18:00:00.000Z
CVE-2018-11627 
Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T19:00:00.000Z
CVE-2018-11628 
Data input into EMS Master Calendar before 8.0.0.201805210 via URL parameters is not properly sanitized, allowing malicious attackers to send a crafted URL for XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T15:00:00.000Z
CVE-2018-11629 
Default and unremovable support credentials (user:lutron password:integration) allow attackers to gain total super user control of an IoT device through a TELNET session to products using the HomeWorks QS Lutron integration protocol Revision M to Revision Y. NOTE: The vendor disputes this id as not being a vulnerability because what can be done through the ports revolve around controlling lighting, not code execution. A certain set of commands are listed, which bear some similarity to code, but they are not arbitrary and do not allow admin-level control of a machine
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-02T13:00:00.000Z
CVE-2018-11631 
Rondaful M1 Wristband Smart Band 1 devices allow remote attackers to send an arbitrary number of call or SMS notifications via crafted Bluetooth Low Energy (BLE) traffic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T20:00:00.000Z
CVE-2018-11632 
An issue was discovered in the MULTIDOTS Add Social Share Messenger Buttons Whatsapp and Viber plugin 1.0.8 for WordPress. If an admin user can be tricked into visiting a crafted URL created by an attacker (via spear phishing/social engineering), the attacker can change the plugin settings via wp-admin/admin-post.php CSRF. There's no nonce or capability check in the whatsapp_share_setting_add_update() function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T20:00:00.000Z
CVE-2018-11633 
An issue was discovered in the MULTIDOTS Woo Checkout for Digital Goods plugin 2.1 for WordPress. If an admin user can be tricked into visiting a crafted URL created by an attacker (via spear phishing/social engineering), the attacker can change the plugin settings. The function woo_checkout_settings_page in the file class-woo-checkout-for-digital-goods-admin.php doesn't do any check against wp-admin/admin-post.php Cross-site request forgery (CSRF) and user capabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T20:00:00.000Z
CVE-2018-11634 
Plaintext Storage of Passwords in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows local users to access the web application's user passwords in cleartext by reading /var/www/xms/xmsdb/default.db.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-03T17:00:00.000Z
CVE-2018-11635 
Use of a Hard-coded Cryptographic Key used to protect cookie session data in /var/www/xms/application/config/config.php in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to bypass authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-03T17:00:00.000Z
CVE-2018-11636 
Cross-site request forgery (CSRF) vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to execute malicious and unauthorized actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-03T17:00:00.000Z
CVE-2018-11637 
Information leakage vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to read arbitrary files from the /var/ directory because a symlink exists under the web root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-03T17:00:00.000Z
CVE-2018-11638 
Unrestricted Upload of a File with a Dangerous Type in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote authenticated users to upload malicious code to the web root to gain code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-03T17:00:00.000Z
CVE-2018-11639 
Plaintext Storage of Passwords within Cookies in /var/www/xms/application/controllers/verifyLogin.php in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to access a user's password in cleartext.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-03T17:00:00.000Z
CVE-2018-11640 
XML External Entity (XXE) vulnerability in the web service in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to read arbitrary files or cause a denial of service (resource consumption).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-03T17:00:00.000Z
CVE-2018-11641 
Use of Hard-coded Credentials in /var/www/xms/application/controllers/gatherLogs.php in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to interact with a web service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-03T17:00:00.000Z