rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-16464 
A missing access check in Nextcloud Server prior to 14.0.0 could lead to continued access to password protected link shares when the owner had changed the password.
Problem types: cwe_id: CWE-287
description: Improper Authentication - Generic (CWE-287)
Affected products: vendor: n/a
product: Nextcloud Server
Published: 2018-10-30T21:00:00.000Z
CVE-2018-16465 
Missing state in Nextcloud Server prior to 14.0.0 would not enforce the use of a second factor at login if the the provider of the second factor failed to load.
Problem types: cwe_id: CWE-287
description: Improper Authentication - Generic (CWE-287)
Affected products: vendor: n/a
product: Nextcloud Server
Published: 2018-10-30T21:00:00.000Z
CVE-2018-16466 
Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens.
Problem types: cwe_id: CWE-284
description: Improper Access Control - Generic (CWE-284)
Affected products: vendor: n/a
product: Nextcloud Server
Published: 2018-10-30T21:00:00.000Z
CVE-2018-16467 
A missing check in Nextcloud Server prior to 14.0.0 could give unauthorized access to the previews of single file password protected shares.
Problem types: cwe_id: CWE-200
description: Information Disclosure (CWE-200)
Affected products: vendor: n/a
product: Nextcloud Server
Published: 2018-10-30T21:00:00.000Z
CVE-2018-16468 
In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.
Problem types: cwe_id: CWE-79
description: Cross-site Scripting (XSS) - Generic (CWE-79)
Affected products: vendor: n/a
product: Loofah (Ruby Gem)
Published: 2018-10-30T21:00:00.000Z
CVE-2018-16469 
The merge.recursive function in the merge package <1.2.1 can be tricked into adding or modifying properties of the Object prototype. These properties will be present on all objects allowing for a denial of service attack.
Problem types: cwe_id: CWE-400
description: Denial of Service (CWE-400)
Affected products: vendor: HackerOne
product: merge
Published: 2018-10-30T21:00:00.000Z
CVE-2018-16470 
There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6. Specially crafted requests can cause the multipart parser to enter a pathological state, causing the parser to use CPU resources disproportionate to the request size.
Problem types: cwe_id: CWE-400
description: Denial of Service (CWE-400)
Affected products: vendor: Rack
product: Rack
Published: 2018-11-13T23:00:00.000Z
CVE-2018-16471 
There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. Carefully crafted requests can impact the data returned by the `scheme` method on `Rack::Request`. Applications that expect the scheme to be limited to 'http' or 'https' and do not escape the return value could be vulnerable to an XSS attack. Note that applications using the normal escaping mechanisms provided by Rails may not impacted, but applications that bypass the escaping mechanisms, or do not use them may be vulnerable.
Problem types: cwe_id: CWE-79
description: Cross-site Scripting (XSS) - Stored (CWE-79)
Affected products: vendor: Rack
product: Rack
Published: 2018-11-13T23:00:00.000Z
CVE-2018-16472 
A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack.
Problem types: cwe_id: CWE-400
description: Denial of Service (CWE-400)
Affected products: vendor: npm
product: cached-path-relative
Published: 2018-11-06T00:00:00.000Z
CVE-2018-16473 
A path traversal in takeapeek module versions <=0.2.2 allows an attacker to list directory and files.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: npm
product: takeapeek
Published: 2018-11-06T19:00:00.000Z
CVE-2018-16474 
A stored xss in tianma-static module versions <=1.0.4 allows an attacker to execute arbitrary javascript.
Problem types: cwe_id: CWE-79
description: Cross-site Scripting (XSS) - Stored (CWE-79)
Affected products: vendor: npm
product: tianma-static
Published: 2018-11-06T19:00:00.000Z
CVE-2018-16475 
A Path Traversal in Knightjs versions <= 0.0.1 allows an attacker to read content of arbitrary files on a remote server.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: npm
product: knightjs
Published: 2018-11-06T19:00:00.000Z
CVE-2018-16476 
A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.
Problem types: cwe_id: CWE-284
description: Improper Access Control - Generic (CWE-284)
Affected products: vendor: n/a
product: https://github.com/rails/rails
Published: 2018-11-30T19:00:00.000Z
CVE-2018-16477 
A bypass vulnerability in Active Storage >= 5.2.0 for Google Cloud Storage and Disk services allow an attacker to modify the `content-disposition` and `content-type` parameters which can be used in with HTML files and have them executed inline. Additionally, if combined with other techniques such as cookie bombing and specially crafted AppCache manifests, an attacker can gain access to private signed URLs within a specific storage path. This vulnerability has been fixed in version 5.2.1.1.
Problem types: cwe_id: CWE-200
description: Information Disclosure (CWE-200)
Affected products: vendor: n/a
product: https://github.com/rails/rails
Published: 2018-11-30T19:00:00.000Z
CVE-2018-16478 
A Path Traversal in simplehttpserver versions <=0.2.1 allows to list any file in another folder of web root.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: n/a
product: simplehttpserver
Published: 2018-12-04T14:00:00.000Z
CVE-2018-16479 
Path traversal vulnerability in http-live-simulator <1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes after the URL.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: http-live-simulator
Published: 2019-02-01T18:00:00.000Z
CVE-2018-16480 
A XSS vulnerability was found in module public <0.1.4 that allows malicious Javascript code to run in the browser, due to the absence of sanitization of the file/folder names before rendering.
Problem types: cwe_id: CWE-79
description: Cross-site Scripting (XSS) - Generic (CWE-79)
Affected products: vendor: HackerOne
product: public
Published: 2019-02-01T18:00:00.000Z
CVE-2018-16481 
A XSS vulnerability was found in html-page <=2.1.1 that allows malicious Javascript code to be executed in the user's browser due to the absence of sanitization of the paths before rendering.
Problem types: cwe_id: CWE-79
description: Cross-site Scripting (XSS) - Generic (CWE-79)
Affected products: vendor: HackerOne
product: html-pages
Published: 2019-02-01T18:00:00.000Z
CVE-2018-16482 
A server directory traversal vulnerability was found on node module mcstatic <=0.0.20 that would allow an attack to access sensitive information in the file system by appending slashes in the URL path.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: mcstatic
Published: 2019-02-01T18:00:00.000Z
CVE-2018-16483 
A deficiency in the access control in module express-cart <=1.1.5 allows unprivileged users to add new users to the application as administrators.
Problem types: description: Privilege Escalation (CAPEC-233)
Affected products: vendor: HackerOne
product: express-cart
Published: 2019-02-01T18:00:00.000Z
CVE-2018-16484 
A XSS vulnerability was found in module m-server <1.4.2 that allows malicious Javascript code or HTML to be executed, due to the lack of escaping for special characters in folder names.
Problem types: cwe_id: CWE-79
description: Cross-site Scripting (XSS) - Stored (CWE-79)
Affected products: vendor: HackerOne
product: m-server
Published: 2019-02-01T18:00:00.000Z
CVE-2018-16485 
Path Traversal vulnerability in module m-server <1.4.1 allows malicious user to access unauthorized content of any file in the directory tree e.g. /etc/passwd by appending slashes to the URL request.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: m-server
Published: 2019-02-01T18:00:00.000Z
CVE-2018-16486 
A prototype pollution vulnerability was found in defaults-deep <=0.2.4 that would allow a malicious user to inject properties onto Object.prototype.
Problem types: cwe_id: CWE-400
description: Denial of Service (CWE-400)
Affected products: vendor: HackerOne
product: defaults-deep
Published: 2019-02-01T18:00:00.000Z
CVE-2018-16487 
A prototype pollution vulnerability was found in lodash <4.17.11 where the functions merge, mergeWith, and defaultsDeep can be tricked into adding or modifying properties of Object.prototype.
Problem types: cwe_id: CWE-400
description: Denial of Service (CWE-400)
Affected products: vendor: HackerOne
product: lodash
Published: 2019-02-01T18:00:00.000Z
CVE-2018-16489 
A prototype pollution vulnerability was found in just-extend <4.0.0 that allows attack to inject properties onto Object.prototype through its functions.
Problem types: cwe_id: CWE-400
description: Denial of Service (CWE-400)
Affected products: vendor: HackerOne
product: just-extend
Published: 2019-02-01T18:00:00.000Z
CVE-2018-16490 
A prototype pollution vulnerability was found in module mpath <0.5.1 that allows an attacker to inject arbitrary properties onto Object.prototype.
Problem types: cwe_id: CWE-400
description: Denial of Service (CWE-400)
Affected products: vendor: HackerOne
product: mpath
Published: 2019-02-01T18:00:00.000Z
CVE-2018-16491 
A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype.
Problem types: cwe_id: CWE-400
description: Denial of Service (CWE-400)
Affected products: vendor: HackerOne
product: node.extend
Published: 2019-02-01T18:00:00.000Z
CVE-2018-16492 
A prototype pollution vulnerability was found in module extend <2.0.2, ~<3.0.2 that allows an attacker to inject arbitrary properties onto Object.prototype.
Problem types: cwe_id: CWE-400
description: Denial of Service (CWE-400)
Affected products: vendor: HackerOne
product: extend
Published: 2019-02-01T18:00:00.000Z
CVE-2018-16493 
A path traversal vulnerability was found in module static-resource-server 1.7.2 that allows unauthorized read access to any file on the server by appending slashes in the URL.
Problem types: cwe_id: CWE-548
description: Information Exposure Through Directory Listing (CWE-548)
Affected products: vendor: HackerOne
product: static-resource-server
Published: 2019-02-01T18:00:00.000Z
CVE-2018-16494 
In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or execution of newly created files and directories. Insecure umask setting was present throughout the Versa servers.
Problem types: cwe_id: CWE-377
description: Insecure Temporary File (CWE-377)
Affected products: vendor: n/a
product: Versa VOS
Published: 2021-05-26T18:46:13.000Z
CVE-2018-16495 
In VOS user session identifier (authentication token) is issued to the browser prior to authentication but is not changed after the user successfully logs into the application. Failing to issue a new session ID following a successful login introduces the possibility for an attacker to set up a trap session on the device the victim is likely to login with.
Problem types: cwe_id: CWE-384
description: Session Fixation (CWE-384)
Affected products: vendor: n/a
product: Versa VOS
Published: 2021-05-26T18:46:08.000Z
CVE-2018-16496 
In Versa Director, the un-authentication request found.
Problem types: cwe_id: CWE-287
description: Improper Authentication - Generic (CWE-287)
Affected products: vendor: n/a
product: Versa Director
Published: 2021-05-26T18:46:03.000Z
CVE-2018-16497 
In Versa Analytics, the cron jobs are used for scheduling tasks by executing commands at specific dates and times on the server. If the job is run as the user root, there is a potential privilege escalation vulnerability. In this case, the job runs a script as root that is writable by users who are members of the versa group.
Problem types: cwe_id: CWE-269
description: Improper Privilege Management (CWE-269)
Affected products: vendor: n/a
product: Versa Analytics
Published: 2021-05-26T18:45:57.000Z
CVE-2018-16498 
In Versa Director, the unencrypted backup files stored on the Versa deployment contain credentials stored within configuration files. These credentials are for various application components such as SNMP, and SSL and Trust keystores.
Problem types: cwe_id: CWE-312
description: Cleartext Storage of Sensitive Information (CWE-312)
Affected products: vendor: n/a
product: Versa Director
Published: 2021-05-26T18:45:50.000Z
CVE-2018-16499 
In VOS compromised, an attacker at network endpoints can possibly view communications between an unsuspecting user and the service using man-in-the-middle attacks. Usage of unapproved SSH encryption protocols or cipher suites also violates the Data Protection TSR (Technical Security Requirements).
Problem types: cwe_id: CWE-326
description: Inadequate Encryption Strength (CWE-326)
Affected products: vendor: n/a
product: Versa VOS
Published: 2021-05-26T18:45:44.000Z
CVE-2018-16509 
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T06:00:00.000Z
CVE-2018-16510 
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF primitives could be used by remote attackers able to supply crafted PDFs to crash the interpreter or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T06:00:00.000Z
CVE-2018-16511 
An issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be used by remote attackers able to supply crafted PostScript to crash the interpreter or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T06:00:00.000Z
CVE-2018-16513 
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the setcolor function to crash the interpreter or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T13:00:00.000Z
CVE-2018-16514 
A cross-site scripting (XSS) vulnerability in the View Filters page (view_filters_page.php) and Edit Filter page (manage_filter_edit_page.php) in MantisBT 2.1.0 through 2.17.0 allows remote attackers to inject arbitrary code (if CSP settings permit it) through a crafted PATH_INFO. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-13055.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-20T13:18:36.000Z
CVE-2018-16515 
Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events and possibly have unspecified other impacts by leveraging improper transaction and event signature validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-18T21:00:00.000Z
CVE-2018-16516 
helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T14:00:00.000Z
CVE-2018-16517 
asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T23:00:00.000Z
CVE-2018-16518 
A directory traversal vulnerability with remote code execution in Prim'X Zed! FREE through 1.0 build 186 and Zed! Limited Edition through 6.1 build 2208 allows creation of arbitrary files on a user's workstation using crafted ZED! containers because the watermark loading function can place an executable file into a Startup folder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T15:00:00.000Z
CVE-2018-16519 
COYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting (XSS) via URLs used by "iFrame" widgets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T21:39:01.000Z
CVE-2018-16521 
An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T15:00:00.000Z
CVE-2018-16522 
Amazon Web Services (AWS) FreeRTOS through 1.3.1 has an uninitialized pointer free in SOCKETS_SetSockOpt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-06T23:00:00.000Z
CVE-2018-16523 
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow division by zero in prvCheckOptions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-06T23:00:00.000Z
CVE-2018-16524 
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of TCP options in prvCheckOptions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-06T23:00:00.000Z
CVE-2018-16525 
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to execute arbitrary code or leak information because of a Buffer Overflow during parsing of DNS\LLMNR packets in prvParseDNSReply.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-06T23:00:00.000Z
CVE-2018-16526 
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to leak information or execute arbitrary code because of a Buffer Overflow during generation of a protocol checksum in usGenerateProtocolChecksum and prvProcessIPPacket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-06T23:00:00.000Z
CVE-2018-16527 
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of ICMP packets in prvProcessICMPPacket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-06T23:00:00.000Z
CVE-2018-16528 
Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute arbitrary code because of mbedTLS context object corruption in prvSetupConnection and GGD_SecureConnect_Connect in AWS TLS connectivity modules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-06T23:00:00.000Z
CVE-2018-16529 
A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The password reset URL can be used after the intended expiration period or after the URL has already been used to reset a password.
Problem types: cwe_id: CWE-640
description: CWE-640: Weak Password Recovery Mechanism for Forgotten Password
Affected products: vendor: Forcepoint
product: Forcepoint Email Security
Published: 2019-03-28T16:02:03.000Z
CVE-2018-16530 
A stack-based buffer overflow in Forcepoint Email Security version 8.5 allows an attacker to craft malicious input and potentially crash a process creating a denial-of-service. While no known Remote Code Execution (RCE) vulnerabilities exist, as with all buffer overflows, the possibility of RCE cannot be completely ruled out. Data Execution Protection (DEP) is already enabled on the Email appliance as a risk mitigation.
Problem types: description: Stack-based Buffer Overflow
Affected products: vendor: Forcepoint
product: Forcepoint Email Security
Published: 2019-04-09T18:47:04.000Z
CVE-2018-16539 
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checking in temp file handling to disclose contents of files on the system otherwise not readable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T18:00:00.000Z
CVE-2018-16540 
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter could use a use-after-free in copydevice handling to crash the interpreter or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T18:00:00.000Z
CVE-2018-16541 
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in pagedevice replacement to crash the interpreter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T18:00:00.000Z
CVE-2018-16542 
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interpreter stack-size checking during error handling to crash the interpreter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T18:00:00.000Z
CVE-2018-16543 
In Artifex Ghostscript before 9.24, gssetresolution and gsgetresolution allow attackers to have an unspecified impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T18:00:00.000Z
CVE-2018-16545 
Kaizen Asset Manager (Enterprise Edition) and Training Manager (Enterprise Edition) allow a remote attacker to achieve arbitrary code execution via file impersonation. For example, a malicious dynamic-link library (dll) assumed the identity of a temporary (tmp) file (isxdl.dll) and an executable file assumed the identity of a temporary file (996E.temp).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T19:00:00.000Z
CVE-2018-16546 
Amcrest networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation, as demonstrated by Amcrest_IPC-HX1X3X-LEXUS_Eng_N_AMCREST_V2.420.AC01.3.R.20180206.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T20:00:00.000Z
CVE-2018-16548 
An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will lead to a denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T21:00:00.000Z
CVE-2018-16549 
HScripts PHP File Browser Script v1.0 allows Directory Traversal via the index.php path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T21:00:00.000Z
CVE-2018-16550 
TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, which makes it easier to determine the correct value of the default 4-digit PIN.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T22:00:00.000Z