rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-6291 
WebConsole Cross-Site Scripting in Kaspersky Secure Mail Gateway version 1.1.
Problem types: description: WebConsole Cross-Site Scripting
Affected products: vendor: Kaspersky Labs
product: Kaspersky Secure Mail Gateway
Published: 2018-02-06T15:00:00.000Z
CVE-2018-6292 
Remote Code Execution in Saperion Web Client version 7.5.2 83166.
Problem types: description: Remote code execution
Affected products: vendor: Kofax
product: Saperion Web Client
Published: 2018-02-13T13:00:00.000Z
CVE-2018-6293 
Arbitrary File Read in Saperion Web Client version 7.5.2 83166.
Problem types: description: Arbitrary File Read
Affected products: vendor: Kofax
product: Saperion Web Client
Published: 2018-02-13T13:00:00.000Z
CVE-2018-6294 
Unsecured way of firmware update in Hanwha Techwin Smartcams
Problem types: description: Unsecured way of firmware update
Affected products: vendor: Hanwha Techwin
product: Hanwha Techwin Smartcams
Published: 2018-03-13T17:00:00.000Z
CVE-2018-6295 
Unencrypted way of remote control and communications in Hanwha Techwin Smartcams
Problem types: description: Unencrypted way of remote control and communications
Affected products: vendor: Hanwha Techwin
product: Hanwha Techwin Smartcams
Published: 2018-03-13T17:00:00.000Z
CVE-2018-6296 
An undocumented (hidden) capability for switching the web interface in Hanwha Techwin Smartcams
Problem types: description: An undocumented (hidden) capability for switching the web interface
Affected products: vendor: Hanwha Techwin
product: Hanwha Techwin Smartcams
Published: 2018-03-13T17:00:00.000Z
CVE-2018-6297 
Buffer overflow in Hanwha Techwin Smartcams
Problem types: description: Buffer overflow
Affected products: vendor: Hanwha Techwin
product: Hanwha Techwin Smartcams
Published: 2018-03-13T17:00:00.000Z
CVE-2018-6298 
Remote code execution in Hanwha Techwin Smartcams
Problem types: description: Remote code execution
Affected products: vendor: Hanwha Techwin
product: Hanwha Techwin Smartcams
Published: 2018-03-13T17:00:00.000Z
CVE-2018-6299 
Authentication bypass in Hanwha Techwin Smartcams
Problem types: description: Authentication bypass
Affected products: vendor: Hanwha Techwin
product: Hanwha Techwin Smartcams
Published: 2018-03-13T17:00:00.000Z
CVE-2018-6300 
Remote password change in Hanwha Techwin Smartcams
Problem types: description: Remote password change
Affected products: vendor: Hanwha Techwin
product: Hanwha Techwin Smartcams
Published: 2018-03-13T17:00:00.000Z
CVE-2018-6301 
Arbitrary camera access and monitoring via cloud in Hanwha Techwin Smartcams
Problem types: description: Arbitrary camera access and monitoring via cloud
Affected products: vendor: Hanwha Techwin
product: Hanwha Techwin Smartcams
Published: 2018-03-13T17:00:00.000Z
CVE-2018-6302 
Denial of service by blocking of new camera registration on the cloud server in Hanwha Techwin Smartcams
Problem types: description: Denial of service by blocking of new camera registration on the cloud server
Affected products: vendor: Hanwha Techwin
product: Hanwha Techwin Smartcams
Published: 2018-03-13T17:00:00.000Z
CVE-2018-6303 
Denial of service by uploading malformed firmware in Hanwha Techwin Smartcams
Problem types: description: Denial of service by uploading malformed firmware
Affected products: vendor: Hanwha Techwin
product: Hanwha Techwin Smartcams
Published: 2018-03-13T17:00:00.000Z
CVE-2018-6304 
Stack overflow in custom XML-parser in Gemalto's Sentinel LDK RTE version before 7.65 leads to remote denial of service
Problem types: description: Stack overflow in custom XML-parser leads to remote denial of service
Affected products: vendor: Gemalto
product: Gemalto's Sentinel LDK RTE
Published: 2018-03-13T17:00:00.000Z
CVE-2018-6305 
Denial of service in Gemalto's Sentinel LDK RTE version before 7.65
Problem types: description: Denial of service
Affected products: vendor: Gemalto
product: Gemalto's Sentinel LDK RTE
Published: 2018-03-13T17:00:00.000Z
CVE-2018-6306 
Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538.
Problem types: description: Unauthorized code execution from specific DLL
Affected products: vendor: Kaspersky Lab
product: Kaspersky Password Manager
Published: 2018-04-19T13:00:00.000Z
CVE-2018-6307 
LibVNC before commit ca2a5ac02fbbadd0a21fabba779c1ea69173d10b contains heap use-after-free vulnerability in server code of file transfer extension that can result remote code execution.
Problem types: description: Heap Use-After-Free
Affected products: vendor: n/a
product: LibVNC
Published: 2018-12-19T16:00:00.000Z
CVE-2018-6308 
Multiple SQL injections exist in SugarCRM Community Edition 6.5.26 and below via the track parameter to modules\Campaigns\Tracker.php and modules\Campaigns\utils.php, the default_currency_name parameter to modules\Configurator\controller.php and modules\Currencies\Currency.php, the duplicate parameter to modules\Contacts\ShowDuplicates.php, the mergecur parameter to modules\Currencies\index.php and modules\Opportunities\Opportunity.php, and the load_signed_id parameter to modules\Documents\Document.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-25T08:00:00.000Z
CVE-2018-6311 
One can gain root access on the Foxconn femtocell FEMTO AP-FC4064-T version AP_GT_B38_5.8.3lb15-W47 LTE Build 15 via UART pins without any restrictions, which leads to full system compromise and disclosure of user communications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-10T22:00:00.000Z
CVE-2018-6312 
A privileged account with a weak default password on the Foxconn femtocell FEMTO AP-FC4064-T version AP_GT_B38_5.8.3lb15-W47 LTE Build 15 can be used to turn on the TELNET service via the web interface, which allows root login without any password. This vulnerability will lead to full system compromise and disclosure of user communications. The foxconn account with an 8-character lowercase alphabetic password can be used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-10T22:00:00.000Z
CVE-2018-6313 
Cross-site scripting (XSS) in WBCE CMS 1.3.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the Modify Page screen, a different issue than CVE-2017-2118.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-25T22:00:00.000Z
CVE-2018-6315 
The outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds read, which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-25T22:00:00.000Z
CVE-2018-6316 
Ivanti Endpoint Security (formerly HEAT Endpoint Management and Security Suite) 8.5 Update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass application whitelisting when using the Application Control module on Ivanti Endpoint Security in lockdown mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-15T23:00:00.000Z
CVE-2018-6317 
The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format string vulnerability, allowing remote attackers to read memory or cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-02T21:00:00.000Z
CVE-2018-6318 
In Sophos Tester Tool 3.2.0.7 Beta, the driver loads (in the context of the application used to test an exploit or ransomware) the DLL using a payload that runs from NTDLL.DLL (so, it's run in userland), but the driver doesn't perform any validation of this DLL (not its signature, not its hash, etc.). A person can change this DLL in a local way, or with a remote connection, to a malicious DLL with the same name -- and when the product is used, this malicious DLL will be loaded, aka a DLL Hijacking attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-02T21:00:00.000Z
CVE-2018-6319 
In Sophos Tester Tool 3.2.0.7 Beta, the driver accepts a special DeviceIoControl code that doesn't check its argument. This argument is a memory address: if a caller passes a NULL pointer or a random invalid address, the driver will cause a Blue Screen of Death. If a program or malware does this at boot time, it can cause a persistent denial of service on the machine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-02T21:00:00.000Z
CVE-2018-6320 
A vulnerability has been discovered in login.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1RX before 8.1R12 and 8.3RX before 8.3R2 and Pulse Policy Secure (PPS) 5.2RX before 5.2R9 and 5.4RX before 5.4R2 wherein an http(s) Host header received from the browser is trusted without validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T23:00:00.000Z
CVE-2018-6321 
Unquoted Windows search path vulnerability in the panda_url_filtering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-12T21:00:00.000Z
CVE-2018-6322 
Panda Global Protection 17.0.1 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of \.\pipe\PSANMSrvcPpal -- an "insecurely created named pipe." Ensures full access to Everyone users group.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-12T21:00:00.000Z
CVE-2018-6323 
The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, has an unsigned integer overflow because bfd_size_type multiplication is not used. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T08:00:00.000Z
CVE-2018-6324 
F-Secure Radar (on-premises) before 2018-02-15 has an Unvalidated Redirect via the ReturnUrl parameter that triggers upon a user login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-16T04:00:00.000Z
CVE-2018-6328 
It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could allow an unauthenticated user to inject arbitrary commands into its /api/hosts parameters using backquotes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-14T19:00:00.000Z
CVE-2018-6329 
It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL injection, allowing a remote attacker to place a privilege escalation exploit on the target system and subsequently execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-14T19:00:00.000Z
CVE-2018-6330 
Laravel 5.4.15 is vulnerable to Error based SQL injection in save.php via dhx_user and dhx_version parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-28T15:41:02.000Z
CVE-2018-6331 
Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it could lead to code execution. This issue affects Buck versions prior to v2018.06.25.01.
Problem types: cwe_id: CWE-502
description: Deserialization of Untrusted Data (CWE-502)
Affected products: vendor: Facebook
product: Buck
Published: 2018-12-31T23:00:00.000Z
CVE-2018-6332 
A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources. This affects all supported versions of HHVM (3.24.3 and 3.21.7 and below) when using the proxygen server to handle HTTP2 requests.
Problem types: cwe_id: CWE-400
description: Denial of Service (CWE-400)
Affected products: vendor: Facebook
product: HHVM
Published: 2018-12-03T14:00:00.000Z
CVE-2018-6333 
The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This issue affected Nuclide prior to v0.290.0.
Problem types: cwe_id: CWE-79
description: Improper Neutralization of Input During Web Page Generation (CWE-79)
Affected products: vendor: Facebook
product: Nuclide
Published: 2018-12-31T23:00:00.000Z
CVE-2018-6334 
Multipart-file uploads call variables to be improperly registered in the global scope. In cases where variables are not declared explicitly before being used this can lead to unexpected behavior. This affects all supported versions of HHVM prior to the patch (3.25.1, 3.24.5, and 3.21.9 and below).
Problem types: cwe_id: CWE-621
description: Variable Extraction Error (CWE-621)
Affected products: vendor: Facebook
product: HHVM
Published: 2018-12-31T20:00:00.000Z
CVE-2018-6335 
A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to denial-of-service. This affects all supported versions of HHVM (3.25.2, 3.24.6, and 3.21.10 and below) when using the proxygen server to handle HTTP2 requests.
Problem types: cwe_id: CWE-400
description: Denial of Service (CWE-400)
Affected products: vendor: Facebook
product: HHVM
Published: 2018-12-31T20:00:00.000Z
CVE-2018-6336 
An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. This issue affects osquery prior to v3.2.7
Problem types: cwe_id: CWE-254
description: Security Features (CWE-254)
Affected products: vendor: Facebook
product: osquery
Published: 2018-12-31T20:00:00.000Z
CVE-2018-6337 
folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in multiple forked children producing repeat (or similar) results. This affects HHVM 3.26 prior to 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09.00.
Problem types: cwe_id: CWE-212
description: Improper Cross-boundary Removal of Sensitive Data (CWE-212)
Affected products: vendor: Facebook
product: HHVM
vendor: Facebook
product: folly
Published: 2018-12-31T22:00:00.000Z
CVE-2018-6339 
When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. An off-by-one error meant that data was written beyond the allocated space on the stack. This issue affects WhatsApp for Android starting in version 2.18.180 and was fixed in version 2.18.295. It also affects WhatsApp Business for Android starting in version v2.18.103 and was fixed in version v2.18.150.
Problem types: cwe_id: CWE-121
description: Stack-based Buffer Overflow (CWE-121)
Affected products: vendor: Facebook
product: WhatsApp for Android
vendor: Facebook
product: WhatsApp Business for Android
Published: 2019-06-14T17:02:57.000Z
CVE-2018-6340 
The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires control over memcached server hostnames and/or ports. This affects all supported versions of HHVM (3.30 and 3.27.4 and below).
Problem types: cwe_id: CWE-125
description: Out-of-bounds Read (CWE-125)
Affected products: vendor: Facebook
product: HHVM
Published: 2018-12-31T22:00:00.000Z
CVE-2018-6341 
React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time. That lack of escaping could lead to a cross-site scripting vulnerability. This issue affected minor releases 16.0.x, 16.1.x, 16.2.x, 16.3.x, and 16.4.x. It was fixed in 16.0.1, 16.1.2, 16.2.1, 16.3.3, and 16.4.2.
Problem types: cwe_id: CWE-79
description: Improper Neutralization of Input During Web Page Generation (CWE-79)
Affected products: vendor: Facebook
product: react-dom
Published: 2018-12-31T22:00:00.000Z
CVE-2018-6342 
react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to that command was not properly sanitized, allowing an attacker who can make a network request to the server (either via CSRF or by direct request) to execute arbitrary commands on the targeted system. This issue affects multiple branches: 1.x.x prior to 1.0.4, 2.x.x prior to 2.0.2, 3.x.x prior to 3.1.2, 4.x.x prior to 4.2.2, and 5.x.x prior to 5.0.2.
Problem types: cwe_id: CWE-78
description: Improper Neutralization of Special Elements used in an OS Command (CWE-78)
Affected products: vendor: Facebook
product: react-dev-utils
Published: 2018-12-31T22:00:00.000Z
CVE-2018-6343 
Proxygen fails to validate that a secondary auth manager is set before dereferencing it. That can cause a denial of service issue when parsing a Certificate/CertificateRequest HTTP2 Frame over a fizz (TLS 1.3) transport. This issue affects Proxygen releases starting from v2018.10.29.00 until the fix in v2018.11.19.00.
Problem types: cwe_id: CWE-476
description: NULL Pointer Dereference (CWE-476)
Affected products: vendor: Facebook
product: Proxygen
Published: 2018-12-31T22:00:00.000Z
CVE-2018-6344 
A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of service. It affects WhatsApp for Android prior to v2.18.293, WhatsApp for iOS prior to v2.18.93, and WhatsApp for Windows Phone prior to v2.18.172.
Problem types: cwe_id: CWE-122
description: Heap-based Buffer Overflow (CWE-122)
Affected products: vendor: Facebook
product: WhatsApp for Android
vendor: Facebook
product: WhatsApp for iOS
vendor: Facebook
product: WhatsApp for Windows Phone
Published: 2018-12-31T22:00:00.000Z
CVE-2018-6345 
The function number_format is vulnerable to a heap overflow issue when its second argument ($dec_points) is excessively large. The internal implementation of the function will cause a string to be created with an invalid length, which can then interact poorly with other functions. This affects all supported versions of HHVM (3.30.1 and 3.27.5 and below).
Problem types: cwe_id: CWE-122
description: Heap-based Buffer Overflow (CWE-122)
Affected products: vendor: Facebook
product: HHVM
Published: 2019-01-15T22:00:00.000Z
CVE-2018-6346 
A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circular dependency). This affects Proxygen prior to v2018.12.31.00.
Problem types: cwe_id: CWE-400
description: Denial of Service (CWE-400)
Affected products: vendor: Facebook
product: Proxygen
Published: 2018-12-31T22:00:00.000Z
CVE-2018-6347 
An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack. This affects Proxygen prior to v2018.12.31.00.
Problem types: cwe_id: CWE-400
description: Denial of Service (CWE-400)
Affected products: vendor: Facebook
product: Proxygen
Published: 2018-12-31T22:00:00.000Z
CVE-2018-6349 
When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for Android prior to 2.18.248 and WhatsApp Business for Android prior to 2.18.132.
Problem types: cwe_id: CWE-121
description: Stack-based Buffer Overflow (CWE-121)
Affected products: vendor: Facebook
product: WhatsApp for Android
vendor: Facebook
product: WhatsApp Business for Android
Published: 2019-06-14T17:02:57.000Z
CVE-2018-6350 
An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects WhatsApp for Android prior to 2.18.276, WhatsApp Business for Android prior to 2.18.99, WhatsApp for iOS prior to 2.18.100.6, WhatsApp Business for iOS prior to 2.18.100.2, and WhatsApp for Windows Phone prior to 2.18.224.
Problem types: cwe_id: CWE-125
description: Out-of-bounds Read (CWE-125)
Affected products: vendor: Facebook
product: WhatsApp for Android
vendor: Facebook
product: WhatsApp Business for Android
vendor: Facebook
product: WhatsApp for iOS
vendor: Facebook
product: WhatsApp Business for iOS
vendor: Facebook
product: WhatsApp for Windows Phone
Published: 2019-06-14T17:02:57.000Z
CVE-2018-6352 
In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-27T15:00:00.000Z
CVE-2018-6353 
The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary Python code without considering (1) social-engineering attacks in which a user pastes code that they do not understand and (2) code pasted by a physically proximate attacker at an unattended workstation, which makes it easier for attackers to steal Bitcoin via hook code that runs at a later time when the wallet password has been entered, a different vulnerability than CVE-2018-1000022.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-27T15:00:00.000Z
CVE-2018-6354 
templates/forms/thanks.html in Formspree before 2018-01-23 allows XSS related to the _next parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-27T15:00:00.000Z
CVE-2018-6355 
/goform/setLang on iBall 300M devices with "iB-WRB302N_1.0.1-Sep 8 2017" firmware has Unauthenticated Stored Cross Site Scripting via the lang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-30T17:00:00.000Z
CVE-2018-6356 
Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs accessing plugin resource files. This allowed users with Overall/Read permission to download files from the Jenkins master they should not have access to. On Windows, any file accessible to the Jenkins master process could be downloaded. On other operating systems, any file within the Jenkins home directory accessible to the Jenkins master process could be downloaded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-20T15:00:00.000Z
CVE-2018-6357 
The acx_asmw_saveorder_callback function in function.php in the acurax-social-media-widget plugin before 3.2.6 for WordPress has CSRF via the recordsArray parameter to wp-admin/admin-ajax.php, with resultant social_widget_icon_array_order XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-27T17:00:00.000Z
CVE-2018-6358 
The printDefineFont2 function (util/listfdb.c) in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attackers to cause a denial of service or unspecified other impact via a crafted FDB file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-27T21:00:00.000Z
CVE-2018-6359 
The decompileIF function (util/decompile.c) in libming through 0.4.8 is vulnerable to a use-after-free, which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-27T21:00:00.000Z