rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-14015 
The sdb_set_internal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file because of missing input validation in r_bin_dwarf_parse_comp_unit in libr/bin/dwarf.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-12T20:00:00.000Z
CVE-2018-14016 
The r_bin_mdmp_init_directory_entry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Mini Crash Dump file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-12T20:00:00.000Z
CVE-2018-14017 
The r_bin_java_annotation_new function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted .class file because of missing input validation in r_bin_java_line_number_table_attr_new.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-12T20:00:00.000Z
CVE-2018-14020 
An issue was discovered in the Paymorrow module 1.0.0 before 1.0.2 and 2.0.0 before 2.0.1 for OXID eShop. An attacker can bypass delivery-address change detection if the payment module doesn't use eShop's checkout procedure properly. To do so, the attacker must change the delivery address to one that is not verified by the Paymorrow module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T22:00:00.000Z
CVE-2018-14023 
Open Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.10 allows information leakage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T22:00:00.000Z
CVE-2018-14027 
Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T15:43:02.000Z
CVE-2018-14028 
In WordPress 4.9.7, plugins uploaded via the admin area are not verified as being ZIP files. This allows for PHP files to be uploaded. Once a PHP file is uploaded, the plugin extraction fails, but the PHP file remains in a predictable wp-content/uploads location, allowing for an attacker to then execute the file. This represents a security risk in limited scenarios where an attacker (who does have the required capabilities for plugin uploads) cannot simply place arbitrary PHP code into a valid plugin ZIP file and upload that plugin, because a machine's wp-content/plugins directory permissions were set up to block all new plugins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-10T16:00:00.000Z
CVE-2018-14029 
CSRF vulnerability in admin/user/edit in Creatiwity wityCMS 0.6.2 allows an attacker to take over a user account, as demonstrated by modifying the account's email field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T02:00:00.000Z
CVE-2018-14031 
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5T_copy in H5T.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T02:00:00.000Z
CVE-2018-14033 
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T02:00:00.000Z
CVE-2018-14034 
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5O_pline_reset in H5Opline.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T02:00:00.000Z
CVE-2018-14035 
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5VM_memcpyvv in H5VM.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T02:00:00.000Z
CVE-2018-14036 
Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() in user.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T12:00:00.000Z
CVE-2018-14037 
Cross-site scripting (XSS) vulnerability in Progress Kendo UI Editor v2018.1.221 allows remote attackers to inject arbitrary JavaScript into the DOM of the WYSIWYG editor because of the editorNS.Serializer toEditableHtml function in kendo.all.min.js. If the victim accesses the editor, the payload gets executed. Furthermore, if the payload is reflected at any other resource that does rely on the sanitisation of the editor itself, the JavaScript payload will be executed in the context of the application. This allows attackers (in the worst case) to take over user sessions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-28T00:00:00.000Z
CVE-2018-14040 
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T14:00:00.000Z
CVE-2018-14041 
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T14:00:00.000Z
CVE-2018-14042 
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T14:00:00.000Z
CVE-2018-14043 
mstdlib (aka the M Standard Library for C) 1.2.0 has incorrect file access control in situations where M_fs_perms_can_access attempts to delete an existing file (that lacks public read/write access) during a copy operation, related to fs/m_fs.c and fs/m_fs_path.c. An attacker could create the file and then would have access to the data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T14:00:00.000Z
CVE-2018-14044 
The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T15:00:00.000Z
CVE-2018-14045 
The FIRFilter::evaluateFilterMulti function in FIRFilter.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T15:00:00.000Z
CVE-2018-14046 
Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T15:00:00.000Z
CVE-2018-14047 
An issue has been found in PNGwriter 0.7.0. It is a SEGV in pngwriter::readfromfile in pngwriter.cc. NOTE: there is a "Warning: PNGwriter was never designed for reading untrusted files with it. Do NOT use this in sensitive environments, especially DO NOT read PNGs from unknown sources with it!" statement in the master/README.md file
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T16:00:00.000Z
CVE-2018-14048 
An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T16:00:00.000Z
CVE-2018-14049 
An issue has been found in libwav through 2017-04-20. It is a SEGV in the function print_info in wav_info/wav_info.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T16:00:00.000Z
CVE-2018-14050 
An issue has been found in libwav through 2017-04-20. It is a SEGV in the function wav_free in libwav.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T16:00:00.000Z
CVE-2018-14051 
The function wav_read in libwav.c in libwav through 2017-04-20 has an infinite loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T16:00:00.000Z
CVE-2018-14052 
An issue has been found in libwav through 2017-04-20. It is a SEGV in the function apply_gain in wav_gain/wav_gain.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T16:00:00.000Z
CVE-2018-14054 
A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling pointer is freed again in the destructor once an exception is triggered.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T00:00:00.000Z
CVE-2018-14055 
ZNC before 1.7.1-rc1 does not properly validate untrusted lines coming from the network, allowing a non-admin user to escalate his privilege and inject rogue values into znc.conf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-15T01:00:00.000Z
CVE-2018-14056 
ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-15T01:00:00.000Z
CVE-2018-14057 
Pimcore before 5.3.0 allows remote attackers to conduct cross-site request forgery (CSRF) attacks by leveraging validation of the X-pimcore-csrf-token anti-CSRF token only in the "Settings > Users / Roles" function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-17T18:00:00.000Z
CVE-2018-14058 
Pimcore before 5.3.0 allows SQL Injection via the REST web service API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-17T18:00:00.000Z
CVE-2018-14059 
Pimcore allows XSS via Users, Assets, Data Objects, Video Thumbnails, Image Thumbnails, Field-Collections, Objectbrick, Classification Store, Document Types, Predefined Properties, Predefined Asset Metadata, Quantity Value, and Static Routes functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-24T22:00:00.000Z
CVE-2018-14060 
OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem/set_router_wifiap on Xiaomi R3D before 2.26.4 devices allows an attacker to execute any command via crafted JSON data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-15T03:00:00.000Z
CVE-2018-14062 
The COSPAS-SARSAT protocol allows remote attackers to forge messages, replay encrypted messages, conduct denial of service attacks, and send private messages (unrelated to distress alerts) via a crafted 406 MHz digital signal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-15T21:00:08.000Z
CVE-2018-14063 
The increaseApproval function of a smart contract implementation for Tracto (TRCT), an Ethereum ERC20 token, has an integer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-15T15:00:00.000Z
CVE-2018-14064 
The uc-http service 1.0.0 on VelotiSmart WiFi B-380 camera devices allows Directory Traversal, as demonstrated by /../../etc/passwd on TCP port 80.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-15T15:00:00.000Z
CVE-2018-14065 
XMLReader.php in PHPOffice Common before 0.2.9 allows XXE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-15T15:00:00.000Z
CVE-2018-14066 
The content://wappush content provider in com.android.provider.telephony, as found in some custom ROMs for Android phones, allows SQL injection. One consequence is that an application without the READ_SMS permission can read SMS messages. This affects Infinix X571 phones, as well as various Lenovo phones (such as the A7020) that have since been fixed by Lenovo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-15T16:00:00.000Z
CVE-2018-14067 
Green Packet WiMax DV-360 2.10.14-g1.0.6.1 devices allow Command Injection, with unauthenticated remote command execution, via a crafted payload to the HTTPS port, because lighttpd listens on all network interfaces (including the external Internet) by default. NOTE: this may overlap CVE-2017-9980.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T02:22:44.000Z
CVE-2018-14068 
An issue was discovered in SRCMS V2.3.1. There is a CSRF vulnerability that can add an admin account via admin.php?m=Admin&c=manager&a=add.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-15T17:00:00.000Z
CVE-2018-14069 
An issue was discovered in SRCMS V2.3.1. There is a CSRF vulnerability that can add a user account via admin.php?m=Admin&c=member&a=add.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-15T17:00:00.000Z
CVE-2018-14071 
The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-16T13:00:00.000Z
CVE-2018-14072 
libsixel 1.8.1 has a memory leak in sixel_decoder_decode in decoder.c, image_buffer_resize in fromsixel.c, and sixel_decode_raw in fromsixel.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-15T18:00:00.000Z
CVE-2018-14073 
libsixel 1.8.1 has a memory leak in sixel_allocator_new in allocator.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-15T18:00:00.000Z
CVE-2018-14077 
Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T20:00:00.000Z
CVE-2018-14078 
Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL (Attackers can login using the "admin" username with password "admin" after a successful attack).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T20:00:00.000Z
CVE-2018-14079 
Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to obtain sensitive information via /Status/SystemStatusRpm.esp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T20:00:00.000Z
CVE-2018-14080 
An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. One can bypass authentication mechanisms to download the configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T15:00:00.000Z
CVE-2018-14081 
An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. Device passwords, such as the admin password and the WPA key, are stored in cleartext.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T15:00:00.000Z
CVE-2018-14082 
PHP Scripts Mall JOB SITE (aka Job Portal) 3.0.1 has Cross-site Scripting (XSS) via the search bar.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-18T16:00:00.000Z
CVE-2018-14083 
LICA miniCMTS E8K(u/i/...) devices allow remote attackers to obtain sensitive information via a direct POST request for the inc/user.ini file, leading to discovery of a password hash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-25T23:00:00.000Z
CVE-2018-14084 
An issue was discovered in a smart contract implementation for MKCB, an Ethereum token. If the owner sets the value of sellPrice to a large number in setPrices() then the "amount * sellPrice" will cause an integer overflow in sell().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-16T02:00:00.000Z
CVE-2018-14085 
An issue was discovered in a smart contract implementation for UserWallet 0x0a7bca9FB7AfF26c6ED8029BB6f0F5D291587c42, an Ethereum token. First, suppose that the owner adds the evil contract address to his sweepers. The evil contract looks like this: contract Exploit { uint public start; function sweep(address _token, uint _amount) returns (bool) { start = 0x123456789; return true;} }. Then, when one calls the function sweep() in the UserWallet contract, it will change the sweeperList to 0X123456789.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-16T02:00:00.000Z
CVE-2018-14086 
An issue was discovered in a smart contract implementation for SingaporeCoinOrigin (SCO), an Ethereum token. The contract has an integer overflow. If the owner sets the value of sellPrice to a large number in setPrices() then the "amount * sellPrice" will cause an integer overflow in sell().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-16T02:00:00.000Z
CVE-2018-14087 
An issue was discovered in a smart contract implementation for EUC (EUC), an Ethereum token. The contract has an integer overflow. If the owner sets the value of buyPrice to a large number in setPrices() then the "msg.value * buyPrice" will cause an integer overflow in the fallback function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-16T02:00:00.000Z
CVE-2018-14088 
An issue was discovered in a smart contract implementation for STeX White List (STE(WL)), an Ethereum token. The contract has an integer overflow. If the owner sets the value of amount to a large number then the "amount * 1000000000000000" will cause an integer overflow in withdrawToFounders().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-16T02:00:00.000Z
CVE-2018-14089 
An issue was discovered in a smart contract implementation for Virgo_ZodiacToken, an Ethereum token. In this contract, 'bool sufficientAllowance = allowance <= _value' will cause an arbitrary transfer in the function transferFrom because '<=' is used instead of '>=' (which was intended). An attacker can transfer from any address to his address, and does not need to meet the 'allowance > value' condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-16T02:00:00.000Z
CVE-2018-14241 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the addAnnot method. By performing actions in JavaScript, an attacker can trigger a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6004.
Problem types: cwe_id: CWE-843
description: CWE-843-Access of Resource Using Incompatible Type ('Type Confusion')
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14242 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the addField method. By performing actions in JavaScript, an attacker can trigger a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6005.
Problem types: cwe_id: CWE-843
description: CWE-843-Access of Resource Using Incompatible Type ('Type Confusion')
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14243 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the addPageOpenJSMessage method. By performing actions in JavaScript, an attacker can trigger a type confusion condition. The attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6006.
Problem types: cwe_id: CWE-843
description: CWE-843-Access of Resource Using Incompatible Type ('Type Confusion')
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14244 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the calculateNow method. By performing actions in JavaScript, an attacker can trigger a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6007.
Problem types: cwe_id: CWE-843
description: CWE-843-Access of Resource Using Incompatible Type ('Type Confusion')
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14245 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the closeDoc method. By performing actions in JavaScript, an attacker can trigger a type confusion condition. The attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6008.
Problem types: cwe_id: CWE-843
description: CWE-843-Access of Resource Using Incompatible Type ('Type Confusion')
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14246 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the convertTocPDF method. By performing actions in JavaScript, an attacker can trigger a type confusion condition. The attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6009.
Problem types: cwe_id: CWE-843
description: CWE-843-Access of Resource Using Incompatible Type ('Type Confusion')
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14247 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the exportAsFDF method. By performing actions in JavaScript, an attacker can trigger a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6010.
Problem types: cwe_id: CWE-843
description: CWE-843-Access of Resource Using Incompatible Type ('Type Confusion')
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z