rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-3814 
Craft CMS 2.6.3000 allows remote attackers to execute arbitrary PHP code by using the "Assets->Upload files" screen and then the "Replace it" option, because this allows a .jpg file to have embedded PHP code, and then be renamed to a .php extension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-01T20:00:00.000Z
CVE-2018-3815 
The "XML Interface to Messaging, Scheduling, and Signaling" (XIMSS) protocol implementation in CommuniGate Pro (CGP) 6.2 suffers from a Missing XIMSS Protocol Validation attack that leads to an email spoofing attack, allowing a malicious authenticated attacker to send a message from any source email address. The attack uses an HTTP POST request to a /Session URI, and interchanges the XML From and To elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-08T05:00:00.000Z
CVE-2018-3817 
When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information.
Problem types: cwe_id: CWE-532
description: CWE-532: Information Exposure Through Log Files
Affected products: vendor: Elastic
product: Logstash
Published: 2018-03-30T20:00:00.000Z
CVE-2018-3818 
Kibana versions 5.1.1 to 6.1.2 and 5.6.6 had a cross-site scripting (XSS) vulnerability via the colored fields formatter that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Elastic
product: Kibana
Published: 2018-03-30T20:00:00.000Z
CVE-2018-3819 
The fix in Kibana for ESA-2017-23 was incomplete. With X-Pack security enabled, Kibana versions before 6.1.3 and 5.6.7 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website.
Problem types: cwe_id: CWE-601
description: CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Affected products: vendor: Elastic
product: Kibana
Published: 2018-03-30T20:00:00.000Z
CVE-2018-3820 
Kibana versions after 6.1.0 and before 6.1.3 had a cross-site scripting (XSS) vulnerability in labs visualizations that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Elastic
product: Kibana
Published: 2018-03-30T20:00:00.000Z
CVE-2018-3821 
Kibana versions after 5.1.1 and before 5.6.7 and 6.1.3 had a cross-site scripting (XSS) vulnerability in the tag cloud visualization that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Elastic
product: Kibana
Published: 2018-03-30T20:00:00.000Z
CVE-2018-3822 
X-Pack Security versions 6.2.0, 6.2.1, and 6.2.2 are vulnerable to a user impersonation attack via incorrect XML canonicalization and DOM traversal. An attacker might have been able to impersonate a legitimate user if the SAML Identity Provider allows for self registration with arbitrary identifiers and the attacker can register an account which an identifier that shares a suffix with a legitimate account. Both of those conditions must be true in order to exploit this flaw.
Problem types: cwe_id: CWE-287
description: CWE-287: Improper Authentication
Affected products: vendor: Elastic
product: X-Pack Security
Published: 2018-03-30T20:00:00.000Z
CVE-2018-3823 
X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. Users with manage_ml permissions could create jobs containing malicious data as part of their configuration that could allow the attacker to obtain sensitive information from or perform destructive actions on behalf of other ML users viewing the results of the jobs.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Elastic
product: Elasticsearch X-Pack Machine Learning
Published: 2018-09-19T19:00:00.000Z
CVE-2018-3824 
X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive information from or perform destructive actions on behalf of that other ML user.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Elastic
product: Elasticsearch X-Pack Machine Learning
Published: 2018-09-19T19:00:00.000Z
CVE-2018-3825 
In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 a default master encryption key is used in the process of granting ZooKeeper access to Elasticsearch clusters. Unless explicitly overwritten, this master key is predictable across all ECE deployments. If an attacker can connect to ZooKeeper directly they would be able to access configuration information of other tenants if their cluster ID is known.
Problem types: cwe_id: CWE-321
description: CWE-321: Use of Hard-coded Cryptographic Key
Affected products: vendor: Elastic
product: Elastic Cloud Enterprise (ECE)
Published: 2018-09-19T19:00:00.000Z
CVE-2018-3826 
In Elasticsearch versions 6.0.0-beta1 to 6.2.4 a disclosure flaw was found in the _snapshot API. When the access_key and security_key parameters are set using the _snapshot API they can be exposed as plain text by users able to query the _snapshot API.
Problem types: cwe_id: CWE-200
description: CWE-200: Information Exposure
Affected products: vendor: Elastic
product: Elasticsearch
Published: 2018-09-19T19:00:00.000Z
CVE-2018-3827 
A sensitive data disclosure flaw was found in the Elasticsearch repository-azure (formerly elasticsearch-cloud-azure) plugin. When the repository-azure plugin is set to log at TRACE level Azure credentials can be inadvertently logged.
Problem types: cwe_id: CWE-532
description: CWE-532: Information Exposure Through Log Files
Affected products: vendor: Elastic
product: Elasticsearch
Published: 2018-09-19T19:00:00.000Z
CVE-2018-3828 
Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 contain an information exposure vulnerability. It was discovered that certain exception conditions would result in encryption keys, passwords, and other security sensitive headers being leaked to the allocator logs. An attacker with access to the logging cluster may obtain leaked credentials and perform authenticated actions using these credentials.
Problem types: cwe_id: CWE-532
description: CWE-532: Information Exposure Through Log Files
Affected products: vendor: Elastic
product: Elastic Cloud Enterprise
Published: 2018-09-19T19:00:00.000Z
CVE-2018-3829 
In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 it was discovered that a user could scale out allocators on new hosts with an invalid roles token. An attacker with access to the previous runner ID and IP address of the coordinator-host could add a allocator to an existing ECE install to gain access to other clusters data.
Problem types: cwe_id: CWE-285
description: CWE-285: Improper Authorization
Affected products: vendor: Elastic
product: Elastic Cloud Enterprise
Published: 2018-09-19T19:00:00.000Z
CVE-2018-3830 
Kibana versions 5.3.0 to 6.4.1 had a cross-site scripting (XSS) vulnerability via the source field formatter that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Elastic
product: Kibana
Published: 2018-09-19T19:00:00.000Z
CVE-2018-3831 
Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12 have an information disclosure issue when secrets are configured via the API. The Elasticsearch _cluster/settings API, when queried, could leak sensitive configuration information such as passwords, tokens, or usernames. This could allow an authenticated Elasticsearch user to improperly view these details.
Problem types: cwe_id: CWE-200
description: CWE-200: Information Exposure
Affected products: vendor: Elastic
product: Elasticsearch
Published: 2018-09-19T19:00:00.000Z
CVE-2018-3832 
An exploitable firmware update vulnerability exists in Insteon Hub running firmware version 1013. The HTTP server allows for uploading arbitrary MPFS binaries that could be modified to enable access to hidden resources which allow for uploading unsigned firmware images to the device. To trigger this vulnerability, an attacker can upload an MPFS binary via the '/mpfsupload' HTTP form and later on upload the firmware via a POST request to 'firmware.htm'.
Problem types: description: leftover debug code
Affected products: vendor: Insteon
product: Insteon
Published: 2018-08-23T14:00:00.000Z
CVE-2018-3833 
An exploitable firmware downgrade vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrade functionality, triggered via PubNub, retrieves signed firmware binaries using plain HTTP requests. The device doesn't check the firmware version that is going to be installed and thus allows for flashing older firmware images. To trigger this vulnerability, an attacker needs to impersonate the remote server 'cache.insteon.com' and serve any signed firmware image.
Problem types: description: Improper Access Control
Affected products: vendor: Insteon
product: Insteon
Published: 2018-08-23T14:00:00.000Z
CVE-2018-3834 
An exploitable permanent denial of service vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrade functionality, triggered via PubNub, retrieves signed firmware binaries using plain HTTP requests. The device doesn't check the kind of firmware image that is going to be installed and thus allows for flashing any signed firmware into any MCU. Since the device contains different and incompatible MCUs, flashing one firmware to the wrong MCU will result in a permanent brick condition. To trigger this vulnerability, an attacker needs to impersonate the remote server "cache.insteon.com" and serve a signed firmware image.
Problem types: description: Improper Access Control
Affected products: vendor: Insteon
product: Insteon
Published: 2018-08-02T19:00:00.000Z
CVE-2018-3835 
An exploitable out of bounds write vulnerability exists in version 2.2 of the Per Face Texture mapping application known as PTEX. The vulnerability is present in the reading of a file without proper parameter checking. The value read in, is not verified to be valid and its use can lead to a buffer overflow, potentially resulting in code execution.
Problem types: description: buffer overflow
Affected products: vendor: Talos
product: Walt Disney Animation Studios PTEX
Published: 2018-01-29T20:00:00.000Z
CVE-2018-3836 
An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. A specially crafted gplot rootname argument can cause a command injection resulting in arbitrary code execution. An attacker can provide a malicious path as input to an application that passes attacker data to this function to trigger this vulnerability.
Problem types: description: arbitrary code execution
Affected products: vendor: Dan Bloomberg
product: Leptonica
Published: 2018-04-24T19:00:00.000Z
CVE-2018-3837 
An exploitable information disclosure vulnerability exists in the PCX image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted PCX image can cause an out-of-bounds read on the heap, resulting in information disclosure . An attacker can display a specially crafted image to trigger this vulnerability.
Problem types: description: Heap Based-Overflow
Affected products: vendor: Cisco Systems, Inc.
product: Simple Direct Media
Published: 2018-04-10T21:00:00.000Z
CVE-2018-3838 
An exploitable information vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted XCF image can cause an out-of-bounds read on the heap, resulting in information disclosure. An attacker can display a specially crafted image to trigger this vulnerability.
Problem types: description: Heap Based-Overflow
Affected products: vendor: Cisco Systems, Inc.
product: Simple DirectMedia
Published: 2018-04-10T21:00:00.000Z
CVE-2018-3839 
An exploitable code execution vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted XCF image can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
Problem types: description: Heap Based Overflow
Affected products: vendor: Cisco Systems, Inc.
product: Simple DirectMedia
Published: 2018-04-10T21:00:00.000Z
CVE-2018-3840 
A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x67). The vulnerability is present in the parsing of a network packet without proper validation of the packet. The data read by the application is not validated, and its use can lead to a null pointer dereference. The IT application is opened by a user and then listens for a connection on port 4001. An attacker can deliver an attack once the application has been opened.
Problem types: description: denial of service
Affected products: vendor: Talos
product: Pixar Renderman
Published: 2018-06-26T21:00:00.000Z
CVE-2018-3841 
A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x69). The vulnerability is present in the parsing of a network packet without proper validation of the packet. The data read-in is not validated, and its use can lead to a null pointer dereference. The IT application is opened by a user and then listens for a connection on port 4001. An attacker can deliver an attack once the application has been opened.
Problem types: description: denial of service
Affected products: vendor: Talos
product: Pixar Renderman
Published: 2018-06-26T21:00:00.000Z
CVE-2018-3842 
An exploitable use of an uninitialized pointer vulnerability exists in the JavaScript engine in Foxit PDF Reader version 9.0.1.1049. A specially crafted PDF document can lead to a dereference of an uninitialized pointer which, if under attacker control, can result in arbitrary code execution. An attacker needs to trick the user to open a malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: Use of Uninitialized Variable
Affected products: vendor: Talos
product: Foxit
Published: 2018-04-19T19:00:00.000Z
CVE-2018-3843 
An exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with associated file annotations. A specially crafted PDF document can lead to an object of invalid type to be dereferenced, which can potentially lead to sensitive memory disclosure, and possibly to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: Access of Resource Using Incompatible Type
Affected products: vendor: Talos
product: Foxit
Published: 2018-04-19T19:00:00.000Z
CVE-2018-3844 
In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted DOCX document can lead to a use-after-free resulting in direct code execution.
Problem types: description: Use After Free
Affected products: vendor: Hyland Software, Inc.
product: Perceptive Document Filters
Published: 2018-04-26T20:00:00.000Z
CVE-2018-3845 
In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution.
Problem types: description: remote code execution
Affected products: vendor: Hyland Software, Inc.
product: Perceptive Document Filters
Published: 2018-04-26T20:00:00.000Z
CVE-2018-3846 
In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.
Problem types: description: stack-based buffer overflow
Affected products: vendor: Talos
product: NASA CFITSIO
Published: 2018-04-16T15:00:00.000Z
CVE-2018-3847 
Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library version 3.42. Specially crafted images parsed via the library, can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.
Problem types: description: stack-based buffer overflow
Affected products: vendor: NASA
product: CFITSIO
Published: 2018-08-01T19:00:00.000Z
CVE-2018-3848 
In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.
Problem types: description: Stack-based buffer overflow
Affected products: vendor: Talos
product: NASA CFITSIO
Published: 2018-04-16T15:00:00.000Z
CVE-2018-3849 
In the ffghtb function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.
Problem types: description: Stack-based buffer overflow
Affected products: vendor: Talos
product: NASA CFITSIO
Published: 2018-04-16T15:00:00.000Z
CVE-2018-3850 
An exploitable use-after-free vulnerability exists in the JavaScript engine Foxit Software Foxit PDF Reader version 9.0.1.1049. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If a browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Talos
product: Foxit
Published: 2018-04-23T15:00:00.000Z
CVE-2018-3851 
In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, an exploitable stack-based buffer overflow exists in the DOC-to-HTML conversion functionality of the Hyland Perceptive Document Filters version 11.4.0.2647. A crafted .doc document can lead to a stack-based buffer, resulting in direct code execution.
Problem types: description: Out of bounds Write
Affected products: vendor: Hyland Software, Inc.
product: Perceptive Document Filters
Published: 2018-04-26T20:00:00.000Z
CVE-2018-3852 
An exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of Ocularis 5.5.0.242. A specially crafted TCP packet can cause a process to terminate resulting in denial of service. An attacker can send a crafted TCP packet to trigger this vulnerability.
Problem types: description: denial of service
Affected products: vendor: Talos
product: Ocularis
Published: 2018-06-06T21:00:00.000Z
CVE-2018-3853 
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software Foxit PDF Reader version 9.0.1.1049. A specially crafted PDF document can trigger a previously freed object in memory to be reused resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Talos
product: Foxit
Published: 2018-06-04T20:00:00.000Z
CVE-2018-3854 
An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken Deluxe 2018 for Mac version 5.2.2. A specially crafted sqlite3 request can cause the removal of the password protection, allowing an attacker to access and modify the data without knowing the password. An attacker needs to have access to the password-protected files to trigger this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-03T22:00:00.000Z
CVE-2018-3855 
In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution.
Problem types: description: direct code execution
Affected products: vendor: Hyland Software, Inc.
product: Perceptive Document Filters
Published: 2018-04-26T20:00:00.000Z
CVE-2018-3856 
An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The device incorrectly handles spaces in the URL field, leading to an arbitrary operating system command injection. An attacker can send a series of HTTP requests to trigger this vulnerability.
Problem types: description: Argument Injection or Modification
Affected products: vendor: Samsung
product: Samsung
Published: 2018-08-23T22:00:00.000Z
CVE-2018-3857 
An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3858.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-Based Buffer Overflow
Affected products: vendor: ACD Systems
product: Canvas Draw
Published: 2018-07-19T19:00:00.000Z
CVE-2018-3858 
An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain the ability to execute code. A different vulnerability than CVE-2018-3857.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-Based Buffer Overflow
Affected products: vendor: ACD Systems
product: Canvas Draw
Published: 2018-07-19T19:00:00.000Z
CVE-2018-3859 
An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3860.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-Bounds Write
Affected products: vendor: ACD Systems
product: Canvas Draw
Published: 2018-07-19T19:00:00.000Z
CVE-2018-3860 
An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain the ability to execute code. A different vulnerability than CVE-2018-3859.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-Bounds Write
Affected products: vendor: ACD Systems
product: Canvas Draw
Published: 2018-07-19T19:00:00.000Z