rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-5679 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of specially crafted pdf files with embedded u3d images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process, a different vulnerability than CVE-2018-5677 and CVE-2018-5680.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T21:00:00.000Z
CVE-2018-5680 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of specially crafted pdf files with embedded u3d images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process, a different vulnerability than CVE-2018-5677 and CVE-2018-5679.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T21:00:00.000Z
CVE-2018-5681 
PrestaShop 1.7.2.4 has XSS via source-code editing on the "Pages > Edit page" screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-13T05:00:00.000Z
CVE-2018-5682 
PrestaShop 1.7.2.4 allows user enumeration via the Reset Password feature, by noticing which reset attempts do not produce a "This account does not exist" error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-13T05:00:00.000Z
CVE-2018-5683 
The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-23T18:00:00.000Z
CVE-2018-5684 
In Libav through 12.2, there is an invalid memcpy call in the ff_mov_read_stsd_entries function of libavformat/mov.c. Remote attackers could leverage this vulnerability to cause a denial of service (segmentation fault) and program failure with a crafted avi file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-14T02:00:00.000Z
CVE-2018-5685 
In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function (coders/bmp.c). Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-14T02:00:00.000Z
CVE-2018-5686 
In MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the pdf_parse_array function (pdf/pdf-parse.c) because EOF is not considered. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-14T02:00:00.000Z
CVE-2018-5687 
NewsBee allows XSS via the Company Name field in the Settings under admin/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-14T02:00:00.000Z
CVE-2018-5688 
ILIAS before 5.2.4 has XSS via the cmd parameter to the displayHeader function in setup/classes/class.ilSetupGUI.php in the Setup component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-14T20:00:00.000Z
CVE-2018-5689 
Cross-site scripting (XSS) vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-14T04:00:00.000Z
CVE-2018-5690 
Cross-site scripting (XSS) vulnerability in admin/users.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the nb parameter (aka the page limit number).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-14T04:00:00.000Z
CVE-2018-5691 
SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values of the `/sgms/TreeControl` module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-14T04:00:00.000Z
CVE-2018-5692 
Piwigo v2.8.2 has XSS via the `tab`, `to`, `section`, `mode`, `installstatus`, and `display` parameters of the `admin.php` file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-14T04:00:00.000Z
CVE-2018-5693 
The LinuxMagic MagicSpam extension before 2.0.14-1 for Plesk allows local users to discover mailbox names by reading /var/log/magicspam/mslog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-14T04:00:00.000Z
CVE-2018-5694 
The callforward module in User Control Panel (UCP) in Nicolas Gudino (aka Asternic) Flash Operator Panel (FOP) 2.31.03 allows remote authenticated users to execute arbitrary commands via the command parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-14T04:00:00.000Z
CVE-2018-5695 
The WpJobBoard plugin 4.4.4 for WordPress allows SQL injection via the order or sort parameter to the wpjb-job or wpjb-alerts module, with a request to wp-admin/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-14T04:00:00.000Z
CVE-2018-5696 
The iJoomla com_adagency plugin 6.0.9 for Joomla! allows SQL injection via the `advertiser_status` and `status_select` parameters to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-14T04:00:00.000Z
CVE-2018-5697 
Icy Phoenix 2.2.0.105 allows SQL injection via an unapprove request to admin_kb_art.php or the order parameter to admin_jr_admin.php, related to functions_kb.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-14T04:00:00.000Z
CVE-2018-5698 
libreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer over-read via an unterminated string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-14T04:00:00.000Z
CVE-2018-5700 
Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copy_folder_file call (in inc/class.ftpfolder.php) to move a .php file from the FTP folder into a web folder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-14T20:00:00.000Z
CVE-2018-5701 
In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x00226003.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-31T18:00:00.000Z
CVE-2018-5702 
Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-15T16:00:00.000Z
CVE-2018-5703 
The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.14.11 allows attackers to cause a denial of service (slab out-of-bounds write) or possibly have unspecified other impact via vectors involving TLS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T09:00:00.000Z
CVE-2018-5704 
Open On-Chip Debugger (OpenOCD) 0.10.0 does not block attempts to use HTTP POST for sending data to 127.0.0.1 port 4444, which allows remote attackers to conduct cross-protocol scripting attacks, and consequently execute arbitrary commands, via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T09:00:00.000Z
CVE-2018-5705 
Reservo Image Hosting 1.6 is vulnerable to XSS attacks. The affected function is its search engine (the t parameter to the /search URI). Since there is an user/admin login interface, it's possible for attackers to steal sessions of users and thus admin(s). By sending users an infected URL, code will be executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-24T17:00:00.000Z
CVE-2018-5706 
An issue was discovered in Octopus Deploy before 4.1.9. Any user with user editing permissions can modify teams to give themselves Administer System permissions even if they didn't have them, as demonstrated by use of the RoleEdit or TeamEdit permission.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T10:00:00.000Z
CVE-2018-5708 
An issue was discovered on D-Link DIR-601 B1 2.02NA devices. Being on the same local network as, but being unauthenticated to, the administrator's panel, a user can obtain the admin username and cleartext password in the response (specifically, the configuration file restore_default), which is displayed in XML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-30T21:00:00.000Z
CVE-2018-5709 
An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T09:00:00.000Z
CVE-2018-5710 
An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the Key Distribution Center (KDC), which allows remote authenticated users to cause a denial of service (NULL pointer dereference) via a modified kadmin client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T09:00:00.000Z
CVE-2018-5711 
gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or imagecreatefromstring PHP function. This is related to GetCode_ and gdImageCreateFromGifCtx.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T09:00:00.000Z
CVE-2018-5712 
An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T09:00:00.000Z
CVE-2018-5713 
In Malwarefox Anti-Malware 2.72.169, the driver file (zam64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002010.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T19:00:00.000Z
CVE-2018-5714 
In Malwarefox Anti-Malware 2.72.169, the driver file (zam64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002054.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T19:00:00.000Z
CVE-2018-5715 
phprint.php in SugarCRM 3.5.1 has XSS via a parameter name in the query string (aka a $key variable).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T20:00:00.000Z
CVE-2018-5716 
An issue was discovered in Reprise License Manager 11.0. This vulnerability is a Path Traversal where the attacker, by changing a field in the Web Request, can have access to files on the File System of the Server. By specifying a pathname in the POST parameter "lf" to the goform/edit_lf_get_data URI, the attacker can retrieve the content of a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T15:00:00.000Z
CVE-2018-5717 
Memory write mechanism in NCR S2 Dispenser controller before firmware version 0x0108 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-20T14:00:00.000Z
CVE-2018-5718 
Improper restriction of write operations within the bounds of a memory buffer in snscore.sys in SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, SoftControl/SafenSoft Enterprise Suite before version 4.4.1 allows local users to cause a denial of service (BSOD) or modify kernel-mode memory via loading of a forged DLL into an user-mode process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-12T16:00:00.000Z
CVE-2018-5720 
An issue was discovered on DODOCOOL DC38 3-in-1 N300 Mini Wireless Range Extend RTN2-AW.GD.R3465.1.20161103 devices. A Cross-site request forgery (CSRF) vulnerability allows remote attackers to hijack the authentication of users for requests that modify all the settings. This vulnerability can lead to changing an existing user's username and password, changing the Wi-Fi password, etc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-29T05:00:00.000Z
CVE-2018-5721 
Stack-based buffer overflow in the ej_update_variables function in router/httpd/web.c on ASUS routers (when using software from https://github.com/RMerl/asuswrt-merlin) allows web authenticated attackers to execute code via a request that updates a setting. In ej_update_variables, the length of the variable action_script is not checked, as long as it includes a "_wan_if" substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-17T06:00:00.000Z
CVE-2018-5723 
MASTER IPCAMERA01 3.3.4.2103 devices have a hardcoded password of cat1029 for the root account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T22:00:00.000Z
CVE-2018-5724 
MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T22:00:00.000Z
CVE-2018-5725 
MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Change, as demonstrated by the port number of the web server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T22:00:00.000Z
CVE-2018-5726 
MASTER IPCAMERA01 3.3.4.2103 devices allow remote attackers to obtain sensitive information via a crafted HTTP request, as demonstrated by the username, password, and configuration settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T22:00:00.000Z
CVE-2018-5727 
In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opj_t1_encode_cblks function (openjp2/t1.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T22:00:00.000Z
CVE-2018-5728 
Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information via a /cgi-bin/getSysStatus request, as demonstrated by the Latitude/Longitude of the ship, or satellite details.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-16T23:00:00.000Z
CVE-2018-5729 
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T20:00:00.000Z
CVE-2018-5730 
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T20:00:00.000Z
CVE-2018-5731 
An issue was discovered in Heimdal PRO 2.2.190. As part of the scanning feature, a process called md.hs writes an executable called CS1.tmp to C:\windows\TEMP. Afterwards the executable is run. It is possible for an attacker to create the file first, let md.hs overwrite it, and then rewrite the file in the window between md.hs closing the file and executing it. This can be exploited via opportunistic locks and a high priority thread. The vulnerability is triggered when a scan starts. NOTE: any affected Heimdal products are completely unrelated to the Heimdal vendor of a Kerberos 5 product on the h5l.org web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-22T16:00:00.000Z
CVE-2018-5732 A specially constructed response from a malicious server can cause a buffer overflow in dhclient
Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0
Problem types: description: Affected versions of dhclient should crash due to an out-of-bounds memory access if they receive and process a triggering response packet. However, buffer overflow outcomes can vary by operating system, and outcomes such as remote code execution may be possible in some circumstances. Where they are present, operating system mitigation strategies such as address space layout randomization (ASLR) should make it difficult to leverage this vulnerability to achieve remote code execution, but we cannot rule it out as impossible. The safest course is to patch dhclient so that the buffer overflow cannot occur.
Affected products: vendor: ISC
product: ISC DHCP
Credits: lang: en
value: ISC would like to thank Felix Wilhelm, Google Security Team, for reporting this vulnerability.
Published: 2019-10-09T14:17:14.251Z
CVE-2018-5733 A malicious client can overflow a reference counter in ISC dhcpd
A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0.
Problem types: description: Successful exploitation of this vulnerability may exhaust the memory available to dhcpd and/or cause it to crash, resulting in a denial of service to clients.
Affected products: vendor: ISC
product: ISC DHCP
Credits: lang: en
value: ISC would like to thank Felix Wilhelm, Google Security Team, for reporting this vulnerability.
Published: 2019-01-16T20:00:00.000Z
CVE-2018-5734 A malformed request can trigger an assertion failure in badcache.c
While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all of the expected information. Affects BIND 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2.
Problem types: description: Servers running the affected versions (9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, and 9.10.6-S2) are vulnerable if they allow recursion, unless the SERVFAIL cache is disabled for the receiving view.
Affected products: vendor: ISC
product: BIND 9
Published: 2019-01-16T20:00:00.000Z
CVE-2018-5735 Backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858
The Debian backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858; Affects Debian versions 9.9.5.dfsg-9+deb8u15; 9.9.5.dfsg-9+deb8u18; 9.10.3.dfsg.P4-12.3+deb9u5; 9.11.5.P4+dfsg-5.1 No ISC releases are affected. Other packages from other distributions who did similar backports for the fix for 2017-3137 may also be affected.
Problem types: description: The Debian backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858
Affected products: vendor: Debian
product: BIND9
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2019-10-30T13:42:57.183Z
CVE-2018-5736 
An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone in quick succession. This defect could be deliberately exercised by an attacker who is permitted to cause a vulnerable server to initiate zone transfers (for example: by sending valid NOTIFY messages), causing the named process to exit after failing the assertion test. Affects BIND 9.12.0 and 9.12.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-16T20:00:00.000Z
CVE-2018-5737 BIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled.
A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause undesirable behavior from named, such as a recursion loop or excessive logging. Deliberate exploitation of this condition could cause operational problems depending on the particular manifestation -- either degradation or denial of service. Affects BIND 9.12.0 and 9.12.1.
Problem types: description: Servers running a vulnerable version of BIND (9.12.0, 9.12.1) which permit recursion to clients and which have the max-stale-ttl parameter set to a non-zero value are at risk.
Affected products: vendor: ISC
product: BIND 9
Credits: lang: en
value: ISC would like to thank Tony Finch of the University of Cambridge for his assistance in discovering and analyzing this vulnerability.
Published: 2019-01-16T20:00:00.000Z