rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-1000635 
The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Sent Data vulnerability in OMERO.server that can result in an Attacker gaining full administrative access to server and may be able to disable it. This vulnerability appears to have been fixed in 5.4.7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000636 
JerryScript version Tested on commit f86d7459d195c8ba58479d1861b0cc726c8b3793. Analysing history it seems that the issue has been present since commit 64a340ffeb8809b2b66bbe32fd443a8b79fdd860 contains a CWE-476: NULL Pointer Dereference vulnerability in Triggering undefined behavior at jerry-core/ecma/builtin-objects/typedarray/ecma-builtin-typedarray-prototype.c:598 (passing NULL to memcpy as 2nd argument) results in null pointer dereference (segfault) at jerry-core/jmem/jmem-heap.c:463 that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute specially crafted javascript code. This vulnerability appears to have been fixed in after commit 87897849f6879df10e8ad68a41bf8cf507edf710.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000637 
zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code execution. This attack appear to be exploitable via the victim openning a crafted compressed file. This vulnerability appears to have been fixed in 1.8-pre2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000638 
MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.org/mc-admin/page.php?date={payload} that can result in code injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000639 
LatexDraw version <=4.0 contains a XML External Entity (XXE) vulnerability in SVG parsing functionality that can result in disclosure of data, server side request forgery, port scanning, possible rce. This attack appear to be exploitable via Specially crafted SVG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000640 
OpenCart-Overclocked version <=1.11.1 contains a Cross Site Scripting (XSS) vulnerability in User input entered unsanitised within JS function in the template that can result in Unauthorised actions and access to data, stealing session information, denial of service. This attack appear to be exploitable via Malicious input passed in GET parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000641 
YesWiki version <= cercopitheque beta 1 contains a PHP Object Injection vulnerability in Unserialising user entered parameter in i18n.inc.php that can result in execution of code, disclosure of information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000642 
FlightAirMap version <=v1.0-beta.21 contains a Cross Site Scripting (XSS) vulnerability in GET variable used within registration sub menu page that can result in unauthorised actions and access to data, stealing session information. This vulnerability appears to have been fixed in after commit 22b09a3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000644 
Eclipse RDF4j version < 2.4.0 Milestone 2 contains a XML External Entity (XXE) vulnerability in RDF4j XML parser parsing RDF files that can result in the disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted RDF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000645 
LibreHealthIO lh-ehr version <REL-2.0.0 contains an Authenticated Local File Disclosure vulnerability in Importing of templates allows local file disclosure that can result in Disclosure of sensitive files on the server. This attack appear to be exploitable via User controlled variable in import templates function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000646 
LibreHealthIO LH-EHR version REL-2.0.0 contains an Authenticated Unrestricted File Write vulnerability in Import template that can result in write files with malicious content and may lead to remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000647 
LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion vulnerability in Import template that can result in Denial of service. This attack appear to be exploitable via User controlled parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000648 
LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write vulnerability in Patient file letter functions that can result in Write files with malicious content and may lead to remote code execution. This attack appear to be exploitable via User controlled parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000649 
LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write in letter.php (2) vulnerability in Patient file letter functions that can result in Write files with malicious content and may lead to remote code execution. This attack appear to be exploitable via User controlled input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000650 
LibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups Popup SQL query functions that can result in Ability to perform malicious database queries. This attack appear to be exploitable via User controlled parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000651 
Stroom version <5.4.5 contains a XML External Entity (XXE) vulnerability in XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted XML file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000652 
JabRef version <=4.3.1 contains a XML External Entity (XXE) vulnerability in MsBibImporter XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted MsBib file. This vulnerability appears to have been fixed in after commit 89f855d.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000653 
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000654 
GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id(p_tree), after a long time, the program will be killed. This attack appears to be exploitable via parsing a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000655 
Jsish version 2.4.65 contains a CWE-476: NULL Pointer Dereference vulnerability in Function jsi_ValueCopyMove from jsiValue.c:240 that can result in Crash due to segmentation fault. This attack appear to be exploitable via a crafted javascript code. This vulnerability appears to have been fixed in 2.4.67.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000656 
The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2019-1010083.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000657 
Rust Programming Language Rust standard library version Commit bfa0e1f58acf1c28d500c34ed258f09ae021893e and later; stable release 1.3.0 and later contains a Buffer Overflow vulnerability in std::collections::vec_deque::VecDeque::reserve() function that can result in Arbitrary code execution, but no proof-of-concept exploit is currently published.. This vulnerability appears to have been fixed in after commit fdfafb510b1a38f727e920dccbeeb638d39a8e60; stable release 1.22.0 and later.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000658 
LimeSurvey version prior to 3.14.4 contains a file upload vulnerability in upload functionality that can result in an attacker gaining code execution via webshell. This attack appear to be exploitable via an authenticated user uploading a zip archive which can contains malicious php files that can be called under certain circumstances. This vulnerability appears to have been fixed in after commit 91d143230eb357260a19c8424b3005deb49a47f7 / version 3.14.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T17:00:00.000Z
CVE-2018-1000659 
LimeSurvey version 3.14.4 and earlier contains a directory traversal in file upload that allows upload of webshell vulnerability in file upload functionality that can result in remote code execution as authenticated user. This attack appear to be exploitable via An authenticated user can upload a specially crafted zip file to get remote code execution. This vulnerability appears to have been fixed in after commit 72a02ebaaf95a80e26127ee7ee2b123cccce05a7 / version 3.14.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T17:00:00.000Z
CVE-2018-1000660 
TOCK version prior to commit 42f7f36e74088036068d62253e1d8fb26605feed. For example dfde28196cd12071fcf6669f7654be7df482b85d contains a Insecure Permissions vulnerability in Function get_package_name in the file kernel/src/tbfheader.rs, variable "pub package_name: &'static str," in the file process.rs that can result in A tock capsule (untrusted driver) could access arbitrary memory by using only safe code. This vulnerability appears to have been fixed in commit 42f7f36e74088036068d62253e1d8fb26605feed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T17:00:00.000Z
CVE-2018-1000661 
jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in Jsi_LogMsg (jsiUtils.c:196) that can result in Crash due to segmentation fault. This attack appear to be exploitable via the victim executing specially crafted javascript code. This vulnerability appears to have been fixed in 2.4.69.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T17:00:00.000Z
CVE-2018-1000663 
jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function _jsi_evalcode from jsiEval.c that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T17:00:00.000Z
CVE-2018-1000664 
daneren2005 DSub for Subsonic (Android client) version 5.4.1 contains a CWE-295: Improper Certificate Validation vulnerability in HTTPS Client that can result in Any non-CA signed server certificate, including self signed and expired, are accepted by the client. This attack appear to be exploitable via The victim connects to a server that's MITM/Proxied by an attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T17:00:00.000Z
CVE-2018-1000665 
Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDOH/_base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/_base/i18nExhaustive.js in the DOH that can result in Victim attacked through their browser - deliver malware, steal HTTP cookies, bypass CORS trust. This attack appear to be exploitable via Victims are typically lured to a web site under the attacker's control; the XSS vulnerability on the target domain is silently exploited without the victim's knowledge. This vulnerability appears to have been fixed in 1.14.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T17:00:00.000Z
CVE-2018-1000666 
GIG Technology NV JumpScale Portal 7 version before commit 15443122ed2b1cbfd7bdefc048bf106f075becdb contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in method: notifySpaceModification; that can result in Improper validation of parameters results in command execution. This attack appear to be exploitable via Network connectivity, required minimal auth privileges (everyone can register an account). This vulnerability appears to have been fixed in After commit 15443122ed2b1cbfd7bdefc048bf106f075becdb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T17:00:00.000Z
CVE-2018-1000667 
NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption (crashed) of nasm when handling a crafted file due to function assemble_file(inname, depend_ptr) at asm/nasm.c:482. vulnerability in function assemble_file(inname, depend_ptr) at asm/nasm.c:482. that can result in aborting/crash nasm program. This attack appear to be exploitable via a specially crafted asm file..
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T17:00:00.000Z
CVE-2018-1000668 
jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsi_ObjArrayLookup (jsiObj.c:274) that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code. This vulnerability appears to have been fixed in 2.4.71.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T17:00:00.000Z
CVE-2018-1000669 
KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Request Forgery (CSRF) vulnerability in /cgi-bin/koha/members/paycollect.pl Parameters affected: borrowernumber, amount, amountoutstanding, paid that can result in Attackers can mark payments as paid for certain users on behalf of Administrators. This attack appear to be exploitable via The victim must be socially engineered into clicking a link, usually via email. This vulnerability appears to have been fixed in 17.11.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T19:00:00.000Z
CVE-2018-1000670 
KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Scripting (XSS) vulnerability in Multiple fields on multiple pages including /cgi-bin/koha/acqui/supplier.pl?op=enter , /cgi-bin/koha/circ/circulation.pl?borrowernumber=[number] , /cgi-bin/koha/serials/subscription-add.pl that can result in Privilege escalation by taking control of higher privileged users browser sessions. This attack appear to be exploitable via Victims must be socially engineered to visit a vulnerable webpage containing malicious payload. This vulnerability appears to have been fixed in 17.11.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T19:00:00.000Z
CVE-2018-1000671 
sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in The "referer" parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim's browser must follow a URL supplied by the attacker. This vulnerability appears to have been fixed in none available.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T18:00:00.000Z
CVE-2018-1000773 
WordPress version 4.9.8 and earlier contains a CWE-20 Input Validation vulnerability in thumbnail processing that can result in remote code execution due to an incomplete fix for CVE-2017-1000600. This attack appears to be exploitable via thumbnail upload by an authenticated user and may require additional plugins in order to be exploited however this has not been confirmed at this time.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T16:00:00.000Z
CVE-2018-1000800 
zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs (system sys_ring_buf_get() and sys_ring_buf_put).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T17:00:00.000Z
CVE-2018-1000801 
okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular archive. This issue appears to have been corrected in version 18.08.1
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T18:00:00.000Z
CVE-2018-1000802 
Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in shutil module (make_archive function) that can result in Denial of service, Information gain via injection of arbitrary files on the system or entire drive. This attack appear to be exploitable via Passage of unfiltered user input to the function. This vulnerability appears to have been fixed in after commit add531a1e55b0a739b0f42582f1c9747e5649ace.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-18T00:00:00.000Z
CVE-2018-1000803 
Gitea version prior to version 1.5.1 contains a CWE-200 vulnerability that can result in Exposure of users private email addresses. This attack appear to be exploitable via Watch a repository to receive email notifications. Emails received contain the other recipients even if they have the email set as private. This vulnerability appears to have been fixed in 1.5.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-08T15:00:00.000Z
CVE-2018-1000804 
contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL (Antelope Query Language) database engine that can result in Attacker can perform Remote Code Execution on device using Contiki-NG operating system. This attack appear to be exploitable via Attacker must be able to run malicious AQL code (e.g. via SQL-like Injection attack).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-08T15:00:00.000Z
CVE-2018-1000805 
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-08T15:00:00.000Z
CVE-2018-1000807 
Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack appear to be exploitable via Depends on the calling application and if it retains a reference to the memory.. This vulnerability appears to have been fixed in 17.5.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-08T00:00:00.000Z
CVE-2018-1000808 
Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be exploitable via Depends upon calling application, however it could be as simple as initiating a TLS connection. Anything that would cause the calling application to reload certificates from a PKCS #12 store.. This vulnerability appears to have been fixed in 17.5.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-08T15:00:00.000Z
CVE-2018-1000809 
privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability in token validation api that can result in Denial-of-Service. This attack appear to be exploitable via http request with user=<space>&pass= to /validate/check url. This vulnerability appears to have been fixed in 2.23.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-08T15:00:00.000Z
CVE-2018-1000810 
The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat, passed a large number, can overflow an internal buffer. This vulnerability appears to have been fixed in 1.29.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-08T15:00:00.000Z
CVE-2018-1000811 
bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-20T15:00:00.000Z
CVE-2018-1000812 
Artica Integria IMS version 5.0 MR56 Package 58, likely earlier versions contains a CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability in Password recovery process, line 45 of general/password_recovery.php that can result in IntegriaIMS web app user accounts can be taken over. This attack appear to be exploitable via Network access to IntegriaIMS web interface . This vulnerability appears to have been fixed in fixed in versions released after commit f2ff0ba821644acecb893483c86a9c4d3bb75047.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-20T15:00:00.000Z