rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-18830 
An issue was discovered in com\mingsoft\basic\action\web\FileAction.java in MCMS 4.6.5. Since the upload interface does not verify the user login status, you can use this interface to upload files without setting a cookie. First, start an upload of JSP code with a .png filename, and then intercept the data packet. In the name parameter, change the suffix to jsp. In the response, the server returns the storage path of the file, which can be accessed to execute arbitrary JSP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-30T06:00:00.000Z
CVE-2018-18831 
An issue was discovered in com\mingsoft\cms\action\GeneraterAction.java in MCMS 4.6.5. An attacker can write a .jsp file (in the position parameter) to an arbitrary directory via a ../ Directory Traversal in the url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-30T06:00:00.000Z
CVE-2018-18832 
admin/check.asp in DKCMS 9.4 allows SQL Injection via an ASPSESSIONID cookie to admin/admin.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-30T06:00:00.000Z
CVE-2018-18834 
An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoder_encodeOctetString in mms/asn1/ber_encoder.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-30T06:00:00.000Z
CVE-2018-18835 
upload_template() in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-30T06:00:00.000Z
CVE-2018-18836 
An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-18T15:13:26.000Z
CVE-2018-18837 
An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-18T15:11:43.000Z
CVE-2018-18838 
An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-18T15:10:28.000Z
CVE-2018-18839 
An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via api/v1/alarms. NOTE: the vendor says "is intentional.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-18T15:06:25.000Z
CVE-2018-18840 
XSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndTag.php?Class=edit&CF=SeoAndTag tag_indexmetatit parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-30T06:00:00.000Z
CVE-2018-18841 
XSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndTag.php?Class=edit&CF=SeoAndTag tag_indexkey parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-30T06:00:00.000Z
CVE-2018-18842 
CSRF exists in zb_users/plugin/AppCentre/theme.js.php in Z-BlogPHP 1.5.2.1935 (Zero), which allows remote attackers to execute arbitrary PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-30T06:00:00.000Z
CVE-2018-18843 
The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9, and 11.4.x before 11.4.4 has SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-04T23:00:00.000Z
CVE-2018-18845 
internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php in Advanced Comment System, version 1.0, contain a reflected cross-site scripting vulnerability via ACS_path. A remote unauthenticated attacker could potentially exploit this vulnerability to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser. The product is discontinued.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T19:44:33.000Z
CVE-2018-18849 
In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T19:56:41.000Z
CVE-2018-18850 
In Octopus Deploy 2018.8.0 through 2018.9.x before 2018.9.1, an authenticated user with permission to modify deployment processes could upload a maliciously crafted YAML configuration, potentially allowing for remote execution of arbitrary code, running in the same context as the Octopus Server (for self-hosted installations by default, SYSTEM).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-31T03:00:00.000Z
CVE-2018-18852 
Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use of Save.cgi to execute a ping command, as exploited in the wild in October 2018.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-18T15:00:32.000Z
CVE-2018-18853 
Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of a field composed of many decimal digits.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-31T05:00:00.000Z
CVE-2018-18854 
Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of many JSON object fields (with keys that have the same hash code).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-31T05:00:00.000Z
CVE-2018-18856 
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an unprotected XPC service and directly execute arbitrary OS commands as root or load a potentially malicious kernel extension because com.smr.liquidvpn.OVPNHelper uses the system function to execute the "openvpncmd" parameter as a shell command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-20T19:00:00.000Z
CVE-2018-18857 
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an unprotected XPC service and directly execute arbitrary OS commands as root or load a potentially malicious kernel extension because com.smr.liquidvpn.OVPNHelper uses the system function to execute the "command_line" parameter as a shell command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-20T19:00:00.000Z
CVE-2018-18858 
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an unprotected XPC service and directly execute arbitrary OS commands as root or load a potentially malicious kernel extension because com.smr.liquidvpn.OVPNHelper uses the system function to execute the "tun_path" or "tap_path" pathname within a shell command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-20T19:00:00.000Z
CVE-2018-18859 
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an unprotected XPC service and directly execute arbitrary OS commands as root or load a potentially malicious kernel extension because com.smr.liquidvpn.OVPNHelper uses the value of the "tun_path" or "tap_path" pathname in a kextload() call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-20T19:00:00.000Z
CVE-2018-18860 
A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-permissive configuration settings and a SUID binary, an attacker is able to execute arbitrary binaries as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-30T18:00:00.000Z
CVE-2018-18861 
Buffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-20T19:00:00.000Z
CVE-2018-18862 
BMC Remedy Mid-Tier 7.1.00 and 9.1.02.003 for BMC Remedy AR System has Incorrect Access Control in ITAM forms, as demonstrated by TLS%3APLR-Configuration+Details/Default+Admin+View/, AST%3AARServerConnection/Default+Admin+View/, and AR+System+Administration%3A+Server+Information/Default+Admin+View/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T20:19:26.000Z
CVE-2018-18863 
NGA ResourceLink 20.0.2.1 allows local file inclusion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T15:32:03.000Z
CVE-2018-18864 
Loadbalancer.org Enterprise VA MAX before 8.3.3 has XSS because Apache HTTP Server logs are displayed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-20T19:00:00.000Z
CVE-2018-18865 
The Royal browser extensions TS before 4.3.60728 (Release Date 2018-07-28) and TSX before 3.3.1 (Release Date 2018-09-13) allow Credentials Disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-20T19:00:00.000Z
CVE-2018-18867 
An SSRF issue was discovered in tecrail Responsive FileManager 9.13.4 via the upload.php url parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-15495.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-31T05:00:00.000Z
CVE-2018-18868 
No-CMS 1.1.3 is prone to Persistent XSS via a contact_us name parameter, as demonstrated by the VG48Z5PqVWname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-31T06:00:00.000Z
CVE-2018-18869 
EmpireCMS V7.5 allows remote attackers to upload and execute arbitrary code via ..%2F directory traversal in a .php filename in the upload/e/admin/ecmscom.php path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-31T06:00:00.000Z
CVE-2018-18871 
Missing password verification in the web interface on Gigaset Maxwell Basic VoIP phones with firmware 2.22.7 would allow a remote attacker (in the same network as the device) to change the admin password without authentication (and without knowing the original password).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-20T21:00:00.000Z
CVE-2018-18872 
The Kieran O'Shea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the event_title parameter in a wp-admin/admin.php?page=calendar add action, or the category name during category creation at the wp-admin/admin.php?page=calendar-categories URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T13:04:19.000Z
CVE-2018-18873 
An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-31T16:00:00.000Z
CVE-2018-18874 
nc-cms through 2017-03-10 allows remote attackers to execute arbitrary PHP code via the "Upload File or Image" feature, with a .php filename and "Content-Type: application/octet-stream" to the index.php?action=file_manager_upload URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-31T16:00:00.000Z
CVE-2018-18875 
In firmware version MS_2.6.9900 of Columbia Weather MicroServer, a stored Cross-site scripting (XSS) vulnerability allows remote authenticated users to inject arbitrary web script via changestationname.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-18T14:29:39.000Z
CVE-2018-18876 
In firmware version MS_2.6.9900 of Columbia Weather MicroServer, a readouts_rd.php directory traversal issue makes it possible to read any file present on the underlying operating system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-18T14:27:40.000Z
CVE-2018-18877 
In firmware version MS_2.6.9900 of Columbia Weather MicroServer, an authenticated web user can access an alternative configuration page config_main.php that allows manipulation of the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-18T14:26:17.000Z
CVE-2018-18878 
In firmware version MS_2.6.9900 of Columbia Weather MicroServer, the BACnet daemon does not properly validate input, which could allow a remote attacker to send specially crafted packets causing the device to become unavailable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-18T14:03:35.000Z
CVE-2018-18879 
In firmware version MS_2.6.9900 of Columbia Weather MicroServer, an authenticated web user can pipe commands directly to the underlying operating system as user input is not sanitized in networkdiags.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-18T14:00:08.000Z
CVE-2018-18880 
In firmware version MS_2.6.9900 of Columbia Weather MicroServer, a networkdiags.php reflected Cross-site scripting (XSS) vulnerability allows remote authenticated users to inject arbitrary web script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-18T13:20:05.000Z
CVE-2018-18881 
A Denial of Service (DOS) issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can configure invalid network settings, stopping TCP based communications to the device. A physical factory reset is required to restore the device to an operational state.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T21:09:32.000Z
CVE-2018-18882 
A stored cross-site scripting (XSS) issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can inject arbitrary script via setup.html in the web interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T21:10:38.000Z
CVE-2018-18883 
An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a host OS denial of service (NULL pointer dereference) or possibly have unspecified other impact because nested VT-x is not properly restricted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-01T00:00:00.000Z
CVE-2018-18886 
Helpy v2.1.0 has Stored XSS via the Ticket title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-18T13:08:35.000Z
CVE-2018-18887 
S-CMS PHP 1.0 has SQL injection in member/member_news.php via the type parameter (aka the $N_type field).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-01T01:00:00.000Z
CVE-2018-18888 
An issue was discovered in laravelCMS through 2018-04-02. \app\Http\Controllers\Backend\ProfileController.php allows upload of arbitrary PHP files because the file extension is not properly checked and uploaded files are not properly renamed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-01T01:00:00.000Z
CVE-2018-18890 
MiniCMS 1.10 allows full path disclosure via /mc-admin/post.php?state=delete&delete= with an invalid filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-01T01:00:00.000Z
CVE-2018-18891 
MiniCMS 1.10 allows file deletion via /mc-admin/post.php?state=delete&delete= because the authentication check occurs too late.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-01T01:00:00.000Z
CVE-2018-18892 
MiniCMS 1.10 allows execution of arbitrary PHP code via the install.php sitename parameter, which affects the site_name field in mc_conf.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-01T01:00:00.000Z
CVE-2018-18893 
Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T01:00:00.000Z
CVE-2018-18894 
Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T12:50:09.000Z
CVE-2018-18897 
An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-02T06:00:00.000Z
CVE-2018-18898 
The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T21:16:19.000Z
CVE-2018-18903 
Vanilla 2.6.x before 2.6.4 allows remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-03T05:00:00.000Z
CVE-2018-18907 
An issue was discovered on D-Link DIR-850L 1.21WW devices. A partially completed WPA handshake is sufficient for obtaining full access to the wireless network. A client can access the network by sending packets on Data Frames to the AP without encryption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-16T21:32:01.000Z
CVE-2018-18908 
The Sky Go Desktop application 1.0.19-1 through 1.0.23-1 for Windows performs several requests over cleartext HTTP. This makes the data submitted in these requests prone to Man in The Middle (MiTM) attacks, whereby an attacker would be able to obtain the data sent in these requests. Some of the requests contain potentially sensitive information that could be useful to an attacker, such as the victim's Sky username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-19T18:00:00.000Z
CVE-2018-18909 
xhEditor 1.2.2 allows XSS via JavaScript code in the SRC attribute of an IFRAME element within the editor's source-code view.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-03T16:00:00.000Z
CVE-2018-18912 
An issue was discovered in Easy File Sharing (EFS) Web Server 7.2. A stack-based buffer overflow vulnerability occurs when a malicious POST request has been made to forum.ghp upon creating a new topic in the forums, which allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T19:05:44.000Z
CVE-2018-18913 
Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a ZIP archive composed of an HTML page along with a malicious DLL to the target. Once the document is opened, it may allow the attacker to take full control of the system from any location within the system. The issue lies in the loading of the shcore.dll and dcomp.dll files: these files are being searched for by the program in the same system-wide directory where the HTML file is executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-21T21:06:16.000Z
CVE-2018-18915 
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-03T04:00:00.000Z
CVE-2018-18919 
The WP Editor.md plugin 10.0.1 for WordPress allows XSS via the comment area.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-04T04:00:00.000Z
CVE-2018-18920 
Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with '"stack": [100, 100, 0]' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed indefinitely without gas being paid."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-12T02:00:00.000Z
CVE-2018-18921 
PHP Server Monitor before 3.3.2 has CSRF, as demonstrated by a Delete action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-18T22:00:00.000Z
CVE-2018-18922 
add_user in AbiSoft Ticketly 1.0 allows remote attackers to create administrator accounts via an action/add_user.php POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-13T19:00:00.000Z
CVE-2018-18923 
AbiSoft Ticketly 1.0 is affected by multiple SQL Injection vulnerabilities through the parameters name, category_id and description in action/addproject.php; kind_id, priority_id, project_id, status_id and title in action/addticket.php; and kind_id and status_id in reports.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-13T19:00:00.000Z
CVE-2018-18924 
The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml file with "#exec cmd" because rejected files remain on the server, with predictable filenames, after a "This file is not a valid image" error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-04T06:00:00.000Z
CVE-2018-18925 
Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." session-file forgery in the file session provider in file.go. This is related to session ID handling in the go-macaron/session code for Macaron.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-04T06:00:00.000Z
CVE-2018-18926 
Gitea before 1.5.4 allows remote code execution because it does not properly validate session IDs. This is related to session ID handling in the go-macaron/session code for Macaron.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-04T06:00:00.000Z
CVE-2018-18927 
An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the page_list "attached" attribute (which typically has 'class="icon-globe icon-large"' in its value), as demonstrated by an 'UPDATE sys_module SET attached = "[XSS]" WHERE id="page_list"' statement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-04T06:00:00.000Z
CVE-2018-18928 
International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-04T20:00:00.000Z