rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-12458 
An improper integer type in the mpeg4_encode_gop_header function in libavcodec/mpeg4videoenc.c in FFmpeg 2.8 and 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-15T15:00:00.000Z
CVE-2018-12459 
An inconsistent bits-per-sample value in the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c in FFmpeg 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-15T15:00:00.000Z
CVE-2018-12460 
libavcodec in FFmpeg 4.0 may trigger a NULL pointer dereference if the studio profile is incorrectly detected while converting a crafted AVI file to MPEG4, leading to a denial of service, related to idctdsp.c and mpegvideo.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-15T15:00:00.000Z
CVE-2018-12461 Certificate Revocation Check failure
Fixed issues with NetIQ eDirectory prior to 9.1.1 when checking certificate revocation.
Problem types: description: Under some circumstances certificate revocation checks in NetIQ eDirectory versions prior to 9.1.1 do not work.
Affected products: vendor: NetIQ
product: eDirectory
Published: 2018-07-10T18:00:00.000Z
CVE-2018-12462 NetIQ iManager XSS vulnerabilities
NetIQ iManager 3.1.1 addresses potential XSS vulnerabilities.
Problem types: description: NetIQ iManager 3.1.1 addresses potential XSS vulnerabilities.
Affected products: vendor: NetIQ
product: iManager
Published: 2018-07-10T19:00:00.000Z
CVE-2018-12463 MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities
An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.
Problem types: description: Server-side Request Forgery (SSRF)
Affected products: vendor: Micro Focus
product: Fortify Software Security Center
Credits: lang: en
value: Micro Focus would like to extend a special thanks to Alex Hernandez aka alt3kx for responsibly disclosing this vulnerability.
Published: 2018-07-12T16:00:00.000Z
CVE-2018-12464 Unauthenticated SQL injection in Micro Focus Secure Messaging Gateway
A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows an unauthenticated remote attacker to execute arbitrary SQL statements against the database. This can be exploited to create an administrative account and used in conjunction with CVE-2018-12465 to achieve unauthenticated remote code execution. Affects Micro Focus Secure Messaging Gateway versions prior to 471. It does not affect previous versions of the product that use the GWAVA product name (i.e. GWAVA 6.5).
Problem types: cwe_id: CWE-89
description: Unauthenticated SQL injection (CWE-89)
Affected products: vendor: Micro Focus
product: Secure Messaging Gateway
Credits: lang: en
value: Mehmet INCE from PRODAFT
Published: 2018-06-29T16:00:00.000Z
CVE-2018-12465 Remote Code Execution in Micro Focus Secure Messaging Gateway
An OS command injection vulnerability in the web administration component of Micro Focus Secure Messaging Gateway (SMG) allows a remote attacker authenticated as a privileged user to execute arbitrary OS commands on the SMG server. This can be exploited in conjunction with CVE-2018-12464 to achieve unauthenticated remote code execution. Affects Micro Focus Secure Messaging Gateway versions prior to 471. It does not affect previous versions of the product that used GWAVA product name (i.e. GWAVA 6.5).
Problem types: cwe_id: CWE-77
description: OS command injection (CWE-77)
Affected products: vendor: Micro Focus
product: Secure Messaging Gateway
Credits: lang: en
value: Mehmet INCE from PRODAFT
Published: 2018-06-29T16:00:00.000Z
CVE-2018-12466 openbuildservice allowed deleting packages via project links
openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links.
Problem types: cwe_id: CWE-285
description: CWE-285
Affected products: vendor: opensuse
product: openbuildservice
Credits: lang: en
value: Marcus Hüwe
Published: 2018-08-01T15:00:00.000Z
CVE-2018-12467 delete package via link exploit in open buildservice
Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689.
Problem types: cwe_id: CWE-285
description: CWE-285
Affected products: vendor: opensuse
product: openbuildservice
Credits: lang: en
value: Marcus Hüwe
Published: 2018-08-01T15:00:00.000Z
CVE-2018-12468 Arbitrary File Upload in GroupWise Administration Console
A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attacker authenticated as an administrator to upload files to an arbitrary path on the server. In certain circumstances this could result in remote code execution.
Problem types: description: Arbitrary file upload potentially leading to remote code execution.
Affected products: vendor: Micro Focus
product: GroupWise
Credits: lang: en
value: Thanks to Vahagn Vardanyan <vvvaagn@gmail.com> and Arpine Maghakyan <Arpine.maghakyan@gmail.com> for reporting this vulnerability.
Published: 2018-08-01T20:00:00.000Z
CVE-2018-12469 
Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 Update 2 and earlier, 3.0 before Patch Update 12, and 4.0 before Patch Update 2 causes a null pointer dereference (CWE-476) and subsequent denial of service due to process termination.
Problem types: cwe_id: CWE-476
description: NULL Pointer Dereference (CWE-476)
Affected products: vendor: Micro Focus
product: Micro Focus Enterprise Developer, Micro Focus Enterprise Server
Published: 2018-10-12T13:00:00.000Z
CVE-2018-12470 SQL injection in RegistrationSharing module
A SQL Injection in the RegistrationSharing module of SUSE Linux SMT allows remote attackers to cause execute arbitrary SQL statements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.
Problem types: cwe_id: CWE-89
description: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: SUSE Linux
product: SMT
Credits: lang: en
value: Jake Miller
Published: 2018-10-04T14:00:00.000Z
CVE-2018-12471 External Entity processing in the RegistrationSharing module
A External Entity Reference ('XXE') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.
Problem types: cwe_id: CWE-611
description: CWE-611: Improper Restriction of XML External Entity Reference ('XXE')
Affected products: vendor: SUSE Linux
product: SMT
Credits: lang: en
value: Jake Miller
Published: 2018-10-04T14:00:00.000Z
CVE-2018-12472 Authentication bypass in sibling check
A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.
Problem types: cwe_id: CWE-287
description: CWE-287: Improper Authentication
Affected products: vendor: SUSE Linux
product: SMT
Credits: lang: en
value: Jake Miller
Published: 2018-10-04T14:00:00.000Z
CVE-2018-12473 path traversal in obs-service-tar_scm
A path traversal traversal vulnerability in obs-service-tar_scm of Open Build Service allows remote attackers to cause access files not in the current build. On the server itself this is prevented by confining the worker via KVM. Affected releases are openSUSE Open Build Service: versions prior to 70d1aa4cc4d7b940180553a63805c22fc62e2cf0.
Problem types: cwe_id: CWE-23
description: CWE-23, path traversal
Affected products: vendor: openSUSE
product: Open Build Service
Credits: lang: en
value: Ludwig Nussel of SUSE
Published: 2018-10-02T15:00:00.000Z
CVE-2018-12474 Crafted service parameters allows to induce unexpected behaviour in obs-service-tar_scm
Improper input validation in obs-service-tar_scm of Open Build Service allows remote attackers to cause access and extract information outside the current build or cause the creation of file in attacker controlled locations. Affected releases are openSUSE Open Build Service: versions prior to 51a17c553b6ae2598820b7a90fd0c11502a49106.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: openSUSE
product: Open Build Service
Credits: lang: en
value: Matthias Gerstner of SUSE
Published: 2018-10-09T13:00:00.000Z
CVE-2018-12475 obs-service-download_files allows downloading from localhost or intranet hosts
A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of openSUSE Open Build Service allows authenticated users to generate HTTP request against internal networks and potentially downloading data that is exposed there. This issue affects: openSUSE Open Build Service .
Problem types: cwe_id: CWE-610
description: CWE-610: Externally Controlled Reference to a Resource in Another Sphere
Affected products: vendor: openSUSE
product: Open Build Service
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: Matthias Gerstner of SUSE
Published: 2020-09-01T11:55:11.943Z
CVE-2018-12476 obs-service-extract_file's outfilename parameter allows to write files outside of package directory
Relative Path Traversal vulnerability in obs-service-tar_scm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers with control over a repository to overwrite files on the machine of the local user if a malicious service is executed. This issue affects: SUSE Linux Enterprise Server 15 obs-service-tar_scm versions prior to 0.9.2.1537788075.fefaa74:. openSUSE Factory obs-service-tar_scm versions prior to 0.9.2.1537788075.fefaa74.
Problem types: cwe_id: CWE-23
description: CWE-23: Relative Path Traversal
Affected products: vendor: SUSE
product: SUSE Linux Enterprise Server 15
vendor: openSUSE
product: Factory
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
version: 3.1
Credits: lang: en
value: Matthias Gerstner of SUSE
Published: 2020-01-27T08:30:14.943Z
CVE-2018-12477 obs-service-refresh_patches can be tricked into deleting '..' or other unrelated directories
A Improper Neutralization of CRLF Sequences vulnerability in Open Build Service allows remote attackers to cause deletion of directories by tricking obs-service-refresh_patches to delete them. Affected releases are openSUSE Open Build Service: versions prior to d6244245dda5367767efc989446fe4b5e4609cce.
Problem types: cwe_id: CWE-93
description: CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')
Affected products: vendor: openSUSE
product: Open Build Service
Credits: lang: en
value: Matthias Gerstner of SUSE
Published: 2018-10-09T13:00:00.000Z
CVE-2018-12478 obs-service-replace_using_package_version allows to specify arbitrary input files
A Improper Input Validation vulnerability in Open Build Service allows remote attackers to extract files from the system where the service runs. Affected releases are openSUSE Open Build Service: status of is unknown.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: openSUSE
product: Open Build Service
Credits: lang: en
value: Matthias Gerstner of SUSE
Published: 2018-10-09T13:00:00.000Z
CVE-2018-12479 Request controller allows to create requests with arbitrary request IDs
A Improper Input Validation vulnerability in Open Build Service allows remote attackers to cause DoS by specifying crafted request IDs. Affected releases are openSUSE Open Build Service: versions prior to 01b015ca2a320afc4fae823465d1e72da8bd60df.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: openSUSE
product: Open Build Service
Credits: lang: en
value: Matthias Gerstner of SUSE
Published: 2018-10-09T13:00:00.000Z
CVE-2018-12480 NetIQ Access Manager XSS vulnerability in versions prior to 4.4 SP3
Mitigates an XSS issue in NetIQ Access Manager versions prior to 4.4 SP3.
Problem types: description: XSS
Affected products: vendor: NetIQ eDirectory
product: NetIQ Access Manager (NAM)
Published: 2018-11-15T13:00:00.000Z
CVE-2018-12481 
The Olive Tree Ftp Server application 1.32 for Android has a "Sensitive Data on the Clipboard" vulnerability, as demonstrated by reading the "User password" field with the Drozer post.capture.clipboard module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-15T16:00:00.000Z
CVE-2018-12482 
OCS Inventory 2.4.1 contains multiple SQL injections in the search engine. Authentication is needed in order to exploit the issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T16:00:00.000Z
CVE-2018-12483 
OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability. Specifically, this issue occurs because the content of the ipdiscover_analyser rzo GET parameter is concatenated to a string used in an exec() call in the PHP code. Authentication is needed in order to exploit this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T16:00:00.000Z
CVE-2018-12491 
PHPOK 4.9.032 has an arbitrary file upload vulnerability in the import_f function in framework/admin/modulec_control.php, as demonstrated by uploading a .php file within a .php.zip archive, a similar issue to CVE-2018-8944.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-15T18:00:00.000Z
CVE-2018-12492 
PHPOK 4.9.032 has an arbitrary file deletion vulnerability in the delfile_f function in framework/admin/tpl_control.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-15T18:00:00.000Z
CVE-2018-12493 
An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsWebFile/list.html?path=../ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-15T18:00:00.000Z
CVE-2018-12494 
An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsTemplate/content.html?path=../ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-15T18:00:00.000Z
CVE-2018-12495 
The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-15T18:00:00.000Z
CVE-2018-12498 
spider.admincp.php in iCMS v7.0.8 has SQL Injection via the id parameter in an app=spider&do=batch request to admincp.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-15T19:00:00.000Z
CVE-2018-12499 
The Motorola MBP853 firmware does not correctly validate server certificates. This allows for a Man in The Middle (MiTM) attack to take place between a Motorola MBP853 camera and the servers it communicates with. In one such instance, it was identified that the device was downloading what appeared to be a client certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-02T16:00:00.000Z
CVE-2018-12501 
Nagios Fusion before 4.1.4 has XSS, aka TPS#13332-13335.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-16T13:00:00.000Z
CVE-2018-12503 
tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRImageFromMemory in tinyexr.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-16T15:00:00.000Z
CVE-2018-12504 
tinyexr 0.9.5 has an assertion failure in ComputeChannelLayout in tinyexr.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-16T15:00:00.000Z
CVE-2018-12511 
In the mintToken function of a smart contract implementation for Substratum (SUB), an Ethereum ERC20 token, the administrator can control mintedAmount, leverage an integer overflow, and modify a user account's balance arbitrarily.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T17:00:00.000Z
CVE-2018-12519 
An issue was discovered in ShopNx through 2017-11-17. The vulnerability allows a remote attacker to upload any malicious file to a Node.js application. An attacker can upload a malicious HTML file that contains a JavaScript payload to steal a user's credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T21:00:00.000Z
CVE-2018-12520 
An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of session IDs is not seeded at program startup. This results in deterministic session IDs being allocated for active user sessions. An attacker with foreknowledge of the operating system and standard library in use by the host running the service and the username of the user whose session they're targeting can abuse the deterministic random number generation in order to hijack the user's session, thus escalating their access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-05T20:00:00.000Z
CVE-2018-12522 
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /style/ provides a directory listing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-18T11:00:00.000Z
CVE-2018-12523 
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /etc/ provides a directory listing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-18T11:00:00.000Z
CVE-2018-12524 
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /lib/ provides a directory listing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-18T11:00:00.000Z
CVE-2018-12525 
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /images/ provides a directory listing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-18T11:00:00.000Z
CVE-2018-12526 
Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have a default factory account. Remote attackers can obtain access to the device via TELNET using a hardcoded account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-21T15:00:00.000Z
CVE-2018-12528 
An issue was discovered on Intex N150 devices. The backup/restore option does not check the file extension uploaded for importing a configuration files backup, which can lead to corrupting the router firmware settings or even the uploading of malicious files. In order to exploit the vulnerability, an attacker can upload any malicious file and force reboot the router with it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-02T16:00:00.000Z
CVE-2018-12529 
An issue was discovered on Intex N150 devices. The router firmware suffers from multiple CSRF injection point vulnerabilities including changing user passwords and router settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-02T16:00:00.000Z
CVE-2018-12530 
An issue was discovered in MetInfo 6.0.0. admin/app/batch/csvup.php allows remote attackers to delete arbitrary files via a flienamecsv=../ directory traversal. This can be exploited via CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-18T14:00:00.000Z
CVE-2018-12531 
An issue was discovered in MetInfo 6.0.0. install\index.php allows remote attackers to write arbitrary PHP code into config_db.php, a different vulnerability than CVE-2018-7271.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-18T14:00:00.000Z
CVE-2018-12532 
JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-18T12:00:00.000Z
CVE-2018-12533 
JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-18T12:00:00.000Z
CVE-2018-12534 
A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-18T14:00:00.000Z
CVE-2018-12536 
In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a java.nio.file.InvalidPathException which includes the full path to the base resource directory that the DefaultServlet and/or webapp is using. If this InvalidPathException is then handled by the default Error Handler, the InvalidPathException message is included in the error response, revealing the full server path to the requesting system.
Problem types: cwe_id: CWE-209
description: CWE-209: Information Exposure Through an Error Message
Affected products: vendor: The Eclipse Foundation
product: Eclipse Jetty
Published: 2018-06-27T17:00:00.000Z
CVE-2018-12537 
In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value. This allow unfiltered values to inject a new header in the client request or server response.
Problem types: cwe_id: CWE-93
description: CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')
Affected products: vendor: The Eclipse Foundation
product: Eclipse Vert.x
Published: 2018-08-14T19:00:00.000Z
CVE-2018-12538 
In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to access/hijack other HttpSessions and even delete unmatched HttpSessions present in the FileSystem's storage for the FileSessionDataStore.
Problem types: cwe_id: CWE-6
description: CWE-6: J2EE Misconfiguration: Insufficient Session-ID Length
Affected products: vendor: The Eclipse Foundation
product: Eclipse Jetty
Published: 2018-06-22T19:00:00.000Z