rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-3954 
Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are susceptible to OS command injection vulnerabilities due to improper filtering of data passed to and retrieved from NVRAMData entered into the 'Router Name' input field through the web portal is submitted to apply.cgi as the value to the 'machine_name' POST parameter. When the 'preinit' binary receives the SIGHUP signal it enters a code path that calls a function named 'set_host_domain_name' from its libshared.so shared object.
Problem types: description: OS Command Injection
Affected products: vendor: Linksys
product: ESeries E1200
vendor: Linksys
product: ESeries E2500
Published: 2018-10-17T02:00:00.000Z
CVE-2018-3955 
An exploitable operating system command injection exists in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04). Specially crafted entries to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker can send an authenticated HTTP request to trigger this vulnerability. Data entered into the 'Domain Name' input field through the web portal is submitted to apply.cgi as the value to the 'wan_domain' POST parameter. The wan_domain data goes through the nvram_set process described above. When the 'preinit' binary receives the SIGHUP signal it enters a code path that calls a function named 'set_host_domain_name' from its libshared.so shared object.
Problem types: description: OS Command Injection
Affected products: vendor: Linksys
product: ESeries E1200
vendor: Linksys
product: ESeries E2500
Published: 2018-10-17T02:00:00.000Z
CVE-2018-3956 
An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger an out-of-bounds read, which can disclose sensitive memory content and aid in exploitation when coupled with another vulnerability. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: Out-of-bounds read
Affected products: vendor: Foxit
product: Foxit
Published: 2019-01-30T22:00:00.000Z
CVE-2018-3957 
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Keywords property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit
product: Foxit PDF Reader
Published: 2018-10-02T21:00:00.000Z
CVE-2018-3958 
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Subject property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit
product: Foxit PDF Reader
Published: 2018-10-02T21:00:00.000Z
CVE-2018-3959 
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Author property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit
product: Foxit PDF Reader
Published: 2018-10-02T21:00:00.000Z
CVE-2018-3960 
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Producer property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit
product: Foxit PDF Reader
Published: 2018-10-02T21:00:00.000Z
CVE-2018-3961 
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Creator property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit
product: Foxit PDF Reader
Published: 2018-10-02T21:00:00.000Z
CVE-2018-3962 
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the CreationDate property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit
product: Foxit PDF Reader
Published: 2018-10-02T21:00:00.000Z
CVE-2018-3963 
An exploitable command injection vulnerability exists in the DHCP daemon configuration of the CUJO Smart Firewall. When adding a new static DHCP address, its corresponding hostname is inserted into the dhcpd.conf file without prior sanitization, allowing for arbitrary execution of system commands. To trigger this vulnerability, an attacker can send a DHCP request message and set up the corresponding static DHCP entry.
Problem types: description: command injection
Affected products: vendor: n/a
product: CUJO
Published: 2019-03-21T15:52:13.000Z
CVE-2018-3964 
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit Software
product: Foxit PDF Reader
Published: 2018-10-03T15:00:00.000Z
CVE-2018-3965 
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit Software
product: Foxit PDF Reader
Published: 2018-10-03T15:00:00.000Z
CVE-2018-3966 
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit Software
product: Foxit PDF Reader
Published: 2018-10-03T15:00:00.000Z
CVE-2018-3967 
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit Software
product: Foxit PDF Reader
Published: 2018-10-03T15:00:00.000Z
CVE-2018-3968 
An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack proper FIT signature enforcement, which allows an attacker to bypass U-Boot's verified boot and execute an unsigned kernel, embedded in a legacy image format. To trigger this vulnerability, a local attacker needs to be able to supply the image to boot.
Problem types: description: Improper Verification of Cryptographic Signature
Affected products: vendor: n/a
product: Das U-Boot
Published: 2019-03-21T16:36:03.000Z
CVE-2018-3969 
An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall. It is possible to add arbitrary shell commands into the dhcpd.conf file, that persist across reboots and firmware updates, and thus allow for executing unverified commands. To trigger this vulnerability, a local attacker needs to be able to write into /config/dhcpd.conf.
Problem types: description: permissions, privileges, and access controls
Affected products: vendor: n/a
product: CUJO
Published: 2019-03-21T15:26:08.000Z
CVE-2018-3970 
An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP request to trigger this vulnerability.
Problem types: description: memory disclosure
Affected products: vendor: Talos
product: Sophos
Published: 2018-10-25T18:00:00.000Z
CVE-2018-3971 
An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to write data under controlled by an attacker address, resulting in memory corruption. An attacker can send IRP request to trigger this vulnerability.
Problem types: description: write-what-where condition
Affected products: vendor: Talos
product: Sophos
Published: 2018-10-25T18:00:00.000Z
CVE-2018-3972 
An exploitable code execution vulnerability exists in the Levin deserialization functionality of the Epee library, as used in Monero 'Lithium Luna' (v0.12.2.0-master-ffab6700) and other cryptocurrencies. A specially crafted network packet can cause a logic flaw, resulting in code execution. An attacker can send a packet to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: https://github.com/sabelnikov
product: Epee
Published: 2018-09-26T13:00:00.000Z
CVE-2018-3973 
An exploitable out of bounds write exists in the CAL parsing functionality of Canvas Draw version 5.0.0. A specially crafted CAL image processed via the application can lead to an out of bounds write overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.
Problem types: description: Out of bounds write code execution
Affected products: vendor: Talos
product: ACD Systems
Published: 2019-02-06T21:00:00.000Z
CVE-2018-3974 
An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install directory. An attacker can overwrite an executable that is launched as a system service on boot by default to exploit this vulnerability and execute arbitrary code with system privileges.
Problem types: description: local privilege elevation
Affected products: vendor: GOG.COM
product: GOG Galaxy
Published: 2019-04-02T15:19:37.000Z
CVE-2018-3975 
An exploitable uninitialized variable vulnerability exists in the RTF-parsing functionality of Atlantis Word Processor 3.2.6 version. A specially crafted RTF file can leverage an uninitialized stack address, resulting in an out-of-bounds write, which in turn could lead to code execution.
Problem types: description: remote code execution
Affected products: vendor: The Atlantis Word Processor Team
product: Atlantis Word Processor
Published: 2018-10-01T20:00:00.000Z
CVE-2018-3976 
An exploitable out-of-bounds write exists in the CALS Raster file format-parsing functionality of Canvas Draw version 5.0.0.28. A specially crafted CAL image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a CAL image to trigger this vulnerability and gain code execution.
Problem types: description: Out of bounds write code execution
Affected products: vendor: Talos
product: ACD Systems
Published: 2019-02-06T21:00:00.000Z
CVE-2018-3977 
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
Problem types: description: Heap-based Buffer Overflow
Affected products: vendor: Simple DirectMedia Layer
product: Simple DirectMedia Layer
Published: 2018-11-01T15:00:00.000Z
CVE-2018-3978 
An exploitable out-of-bounds write vulnerability exists in the Word Document parser of the Atlantis Word Processor 3.0.2.3, 3.0.2.5. A specially crafted document can cause Atlantis to write a value outside the bounds of a heap allocation, resulting in a buffer overflow. An attacker must convince a victim to open a document in order to trigger this vulnerability.
Problem types: description: heap-based buffer overflow
Affected products: vendor: The Atlantis Word Processor Team
product: Atlantis Word Processor
Published: 2018-10-01T20:00:00.000Z
CVE-2018-3979 
A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the default Ubuntu Nvidia display driver) handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to trigger this vulnerability. This vulnerability can be triggered remotely after the user visits a malformed website. No further user interaction is required. Vulnerable versions include Ubuntu 18.04 LTS (linux 4.15.0-29-generic x86_64), Nouveau Display Driver NV117 (vermagic: 4.15.0-29-generic SMP mod_unload).
Problem types: description: denial of service
Affected products: vendor: Nouveau
product: Nouveau
Published: 2019-04-01T20:10:28.000Z
CVE-2018-3980 
An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution.
Problem types: description: Out of bounds write code execution
Affected products: vendor: Talos
product: ACD Systems
Published: 2019-02-06T21:00:00.000Z
CVE-2018-3981 
An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution.
Problem types: description: Out of bounds write code execution
Affected products: vendor: Talos
product: ACD Systems
Published: 2018-10-01T20:00:00.000Z
CVE-2018-3982 
An exploitable arbitrary write vulnerability exists in the Word document parser of the Atlantis Word Processor 3.0.2.3 and 3.0.2.5. A specially crafted document can prevent Atlas from adding elements to an array that is indexed by a loop. When reading from this array, the application will use an out-of-bounds index which can result in arbitrary data being read as a pointer. Later, when the application attempts to write to said pointer, an arbitrary write will occur. This can allow an attacker to further corrupt memory, which leads to code execution under the context of the application. An attacker must convince a victim to open a document in order to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: The Atlantis Word Processor Team
product: Atlantis Word Processor
Published: 2018-10-01T20:00:00.000Z
CVE-2018-3983 
An exploitable uninitialized pointer vulnerability exists in the Word document parser of the the Atlantis Word Processor. A specially crafted document can cause an array fetch to return an uninitialized pointer and then performs some arithmetic before writing a value to the result. Usage of this uninitialized pointer can allow an attacker to corrupt heap memory resulting in code execution under the context of the application. An attacker must convince a victim to open a document in order to trigger this vulnerability.
Problem types: description: Unchecked error condition
Affected products: vendor: n/a
product: Atlantis Word Processor
Published: 2019-10-31T20:32:56.000Z
CVE-2018-3984 
An exploitable uninitialized length vulnerability exists within the Word document-parser of the Atlantis Word Processor 3.0.2.3 and 3.0.2.5. A specially crafted document can cause Atlantis to skip initializing a value representing the number of columns of a table. Later, the application will use this as a length within a loop that will write to a pointer on the heap. Due to this value being controlled, a buffer overflow will occur, which can lead to code execution under the context of the application. An attacker must convince a victim to open a document in order to trigger this vulnerability.
Problem types: description: heap-based buffer overflow
Affected products: vendor: The Atlantis Word Processor Team
product: Atlantis Word Processor
Published: 2018-10-01T20:00:00.000Z
CVE-2018-3985 
An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS packets, a memory space is freed twice if an invalid query name is encountered, leading to arbitrary code execution in the context of the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.
Problem types: description: double-free
Affected products: vendor: n/a
product: CUJO
Published: 2019-03-21T15:30:19.000Z
CVE-2018-3986 
An exploitable information disclosure vulnerability exists in the "Secret Chats" functionality of the Telegram Android messaging application version 4.9.0. The "Secret Chats" functionality allows a user to delete all traces of a chat, either by using a time trigger or by direct request. There is a bug in this functionality that leaves behind photos taken and shared on the secret chats, even after the chats are deleted. These photos will be stored in the device and accessible to all applications installed on the Android device.
Problem types: description: Exposure of Private Information
Affected products: vendor: n/a
product: Telegram
Published: 2019-01-03T23:00:00.000Z
CVE-2018-3987 
An exploitable information disclosure vulnerability exists in the 'Secret Chats' functionality of Rakuten Viber on Android 9.3.0.6. The 'Secret Chats' functionality allows a user to delete all traces of a chat either by using a time trigger or by direct request. There is a bug in this functionality which leaves behind photos taken and shared on the secret chats, even after the chats are deleted. These photos will be stored in the device and accessible to all applications installed on the Android device.
Problem types: description: information disclosure
Affected products: vendor: n/a
product: Rakuten Viber
Published: 2020-02-12T23:36:14.000Z
CVE-2018-3988 
Signal Messenger for Android 4.24.8 may expose private information when using "disappearing messages." If a user uses the photo feature available in the "attach file" menu, then Signal will leave the picture in its own cache directory, which is available to any application on the system.
Problem types: description: privacy violation
Affected products: vendor: n/a
product: Signal
Published: 2018-12-10T17:00:00.000Z
CVE-2018-3989 
An exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400).A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP request to trigger this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-05T22:00:00.000Z
CVE-2018-3990 
An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400). A specially crafted IRP request can cause a buffer overflow, resulting in kernel memory corruption and, potentially, privilege escalation. An attacker can send an IRP request to trigger this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-05T22:00:00.000Z
CVE-2018-3991 
An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet to trigger this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-05T22:00:00.000Z
CVE-2018-3992 
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit Software
product: Foxit PDF Reader
Published: 2018-10-08T16:00:00.000Z
CVE-2018-3993 
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit Software
product: Foxit PDF Reader
Published: 2018-10-03T15:00:00.000Z
CVE-2018-3994 
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit Software
product: Foxit PDF Reader
Published: 2018-10-03T15:00:00.000Z