rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-3634 
Parameter corruption in NDIS filter driver in Intel Online Connect Access 1.9.22.0 allows an attacker to cause a denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: Intel Corporation
product: Online Connect Access
Published: 2018-05-15T14:00:00.000Z
CVE-2018-3635 
Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access.
Problem types: description: Escalation of Privilege, Denial of Service
Affected products: vendor: Intel Corporation
product: Intel Rapid Store Technology
Published: 2018-11-14T14:00:00.000Z
CVE-2018-3638 
Escalation of privilege in all versions of the Intel Remote Keyboard allows an authorized local attacker to execute arbitrary code as a privileged user.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel Remote Keyboard
Published: 2018-04-03T21:00:00.000Z
CVE-2018-3639 
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
Problem types: description: Information Disclosure
Affected products: vendor: Intel Corporation
product: Multiple
Published: 2018-05-22T12:00:00.000Z
CVE-2018-3640 
Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.
Problem types: description: Information Disclosure
Affected products: vendor: Intel Corporation
product: Multiple
Published: 2018-05-22T12:00:00.000Z
CVE-2018-3641 
Escalation of privilege in all versions of the Intel Remote Keyboard allows a network attacker to inject keystrokes as a local user.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel Remote Keyboard
Published: 2018-04-03T21:00:00.000Z
CVE-2018-3643 
A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or Intel(R) Server Platform Services firmware before version 4.x.04 may allow an attacker with administrative privileges to uncover certain platform secrets via local access or to potentially execute arbitrary code.
Problem types: description: Escalation of Privilege, Information Disclosure
Affected products: vendor: Intel Corporation
product: Intel(R) Converged Security and Management Engine (CSME) and Intel(R) Server Platform Services firmware
Published: 2018-09-12T19:00:00.000Z
CVE-2018-3645 
Escalation of privilege in all versions of the Intel Remote Keyboard allows a local attacker to inject keystrokes into another remote keyboard session.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel Remote Keyboard
Published: 2018-04-03T21:00:00.000Z
CVE-2018-3646 
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.
Problem types: description: Information Disclosure
Affected products: vendor: Intel Corporation
product: Multiple
Published: 2018-08-14T19:00:00.000Z
CVE-2018-3649 
DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code execution.
Problem types: description: Elevation of Privilege
Affected products: vendor: Intel Corporation
product: Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products
Published: 2018-05-10T22:00:00.000Z
CVE-2018-3650 
Insufficient Input Validation in Bleach module in INTEL Distribution for Python versions prior to IDP 2018 Update 2 allows unprivileged user to bypass URI sanitization via local vector.
Problem types: description: Denial of Service
Affected products: vendor: Intel Corporation
product: Intel Distribution for Python
Published: 2018-08-01T15:00:00.000Z
CVE-2018-3652 
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.
Problem types: description: Information disclosure, Elevation of Privilege
Affected products: vendor: Intel Corporation
product: Intel Xeon Processor
Published: 2018-07-10T21:00:00.000Z
CVE-2018-3655 
A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access.
Problem types: description: Escalation of Privilege, Information Disclosure
Affected products: vendor: Intel Corporation
product: Intel(R) CSME before version 11.21.55, Intel(R) Server Platform Services before version 4.0 and Intel(R) Trusted Execution Engine Firmware
Published: 2018-09-12T19:00:00.000Z
CVE-2018-3657 
Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access.
Problem types: description: Denial of Service, Information Disclosure
Affected products: vendor: Intel Corporation
product: Intel(R) Active Management Technology
Published: 2018-09-12T19:00:00.000Z
CVE-2018-3658 
Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access.
Problem types: description: Denial of Service, Information Disclosure
Affected products: vendor: Intel Corporation
product: Intel(R) Active Management Technology
Published: 2018-09-12T19:00:00.000Z
CVE-2018-3659 
A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access.
Problem types: description: Information Disclosure
Affected products: vendor: Intel Corporation
product: Intel(R) Platform Trust Technology (PTT)
Published: 2018-09-12T19:00:00.000Z
CVE-2018-3661 
Buffer overflow in Intel system Configuration utilities selview.exe and syscfg.exe before version 14 build 11 allows a local user to crash these services potentially resulting in a denial of service.
Problem types: description: Denial of Service
Affected products: vendor: Intel Corporation
product: System Configuration Utilities
Published: 2018-05-15T14:00:00.000Z
CVE-2018-3662 
Escalation of privilege in Intel Saffron MemoryBase before version 11.4 potentially allows an authorized user of the Saffron application to execute arbitrary code as root.
Problem types: description: Privilege Escalation
Affected products: vendor: Intel Corporation
product: Saffron MemoryBase
Published: 2018-08-01T15:00:00.000Z
CVE-2018-3663 
Escalation of privilege in Intel Saffron MemoryBase before 11.4 allows an authenticated user access to privileged information.
Problem types: description: Privilege Escalation
Affected products: vendor: Intel Corporation
product: Saffron MemoryBase
Published: 2018-08-01T15:00:00.000Z
CVE-2018-3665 
System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.
Problem types: description: Information Disclosure
Affected products: vendor: Intel Corporation
product: Intel Core-based microprocessors
Published: 2018-06-21T20:00:00.000Z
CVE-2018-3666 
Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a non-paged pool overflow.
Problem types: description: Privilege Escalation
Affected products: vendor: Intel Corporation
product: Smart Sound Technology
Published: 2018-08-01T15:00:00.000Z
CVE-2018-3667 
Installation tool IPDT (Intel Processor Diagnostic Tool) 4.1.0.24 sets permissions of installed files incorrectly, allowing for execution of arbitrary code and potential privilege escalation.
Problem types: description: Privilege escalation
Affected products: vendor: Intel Corporation
product: Intel Processor Diagnostic Tool
Published: 2018-07-10T21:00:00.000Z
CVE-2018-3668 
Unquoted service paths in Intel Processor Diagnostic Tool (IPDT) before version 4.1.0.27 allows a local attacker to potentially execute arbitrary code.
Problem types: description: DLL Hijack
Affected products: vendor: Intel Corporation
product: Intel Processor Diagnostic Tool
Published: 2018-07-10T21:00:00.000Z
CVE-2018-3669 
A STOP error (BSoD) in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthenticated user to potentially send a malformed L2CAP Connection Request is sent to the Intel Bluetooth device via the network.
Problem types: description: Denial of Service
Affected products: vendor: Intel Corporation
product: Intel(R) Centrino(R) Wireless-N and Intel(R) Centrino(R) Advanced-N products Bluetooth
Published: 2018-09-12T19:00:00.000Z
CVE-2018-3670 
Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a buffer overflow.
Problem types: description: Privilege Escalation
Affected products: vendor: Intel Corporation
product: Smart Sound Technology
Published: 2018-08-01T15:00:00.000Z
CVE-2018-3671 
Escalation of privilege in Intel Saffron admin application before 11.4 allows an authenticated user to access unauthorized information.
Problem types: description: Information Disclosure
Affected products: vendor: Intel Corporation
product: Saffron MemoryBase
Published: 2018-08-01T15:00:00.000Z
CVE-2018-3672 
Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a system calls.
Problem types: description: Privilege Escalation
Affected products: vendor: Intel Corporation
product: Smart Sound Technology
Published: 2018-08-01T15:00:00.000Z
CVE-2018-3679 
Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated user to potentially execute code via administrator privileges.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) Data Center Manager SDK
Published: 2018-09-12T19:00:00.000Z
CVE-2018-3682 
BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unauthorized read\writes to the SMBUS.
Problem types: description: Denial of Service
Affected products: vendor: Intel Corporation
product: Intel Server Boards, Compute Modules and Systems
Published: 2018-07-10T21:00:00.000Z
CVE-2018-3683 
Unquoted service paths in Intel Quartus Prime in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code.
Problem types: description: Privilege Escalation
Affected products: vendor: Intel Corporation
product: Intel Quartus Prime
Published: 2018-07-10T21:00:00.000Z
CVE-2018-3684 
Unquoted service paths in Intel Quartus II in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code.
Problem types: description: Privilege Escalation
Affected products: vendor: Intel Corporation
product: Intel Quartus II
Published: 2018-07-10T21:00:00.000Z
CVE-2018-3686 
Code injection vulnerability in INTEL-SA-00086 Detection Tool before version 1.2.7.0 may allow a privileged user to potentially execute arbitrary code via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: INTEL-SA-00086 Detection Tool
Published: 2018-09-12T19:00:00.000Z
CVE-2018-3687 
Unquoted service paths in Intel Quartus II Programmer and Tools in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code.
Problem types: description: Privilege Escalation
Affected products: vendor: Intel Corporation
product: Intel Quartus II Programmer and Tools
Published: 2018-07-10T21:00:00.000Z
CVE-2018-3688 
Unquoted service paths in Intel Quartus Prime Programmer and Tools in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code.
Problem types: description: Privilege Escalation
Affected products: vendor: Intel Corporation
product: Intel Quartus Prime Programmer and Tools
Published: 2018-07-10T21:00:00.000Z
CVE-2018-3689 
AESM daemon in Intel Software Guard Extensions Platform Software Component for Linux before 2.1.102 can effectively be disabled by a local attacker creating a denial of services like remote attestation provided by the AESM.
Problem types: description: Denial of Service
Affected products: vendor: Intel Corporation
product: Guard Extensions Platform Software Component for Linux
Published: 2018-04-03T16:00:00.000Z
CVE-2018-3691 
Some implementations in Intel Integrated Performance Primitives Cryptography Library before version 2018 U3.1 do not properly ensure constant execution time.
Problem types: description: Information Disclosure
Affected products: vendor: Intel Corporation
product: Integrated Performance Primitives Cryptography Library
Published: 2018-06-05T21:00:00.000Z
CVE-2018-3693 
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
Problem types: description: Information Disclosure
Affected products: vendor: Intel Corporation
product: Most Modern Operating Systems
Published: 2018-07-10T21:00:00.000Z
CVE-2018-3696 
Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access.
Problem types: description: Information Disclosure
Affected products: vendor: Intel Corporation
product: Intel RAID Web Console v3 for Windows
Published: 2018-11-14T14:00:00.000Z
CVE-2018-3697 
Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel Media Server Studio
Published: 2018-11-14T14:00:00.000Z
CVE-2018-3698 
Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged access via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel Ready Mode Technology
Published: 2018-11-14T14:00:00.000Z
CVE-2018-3699 
Cross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated user to elevate privilege via remote access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel RAID Web Console v3
Published: 2018-11-14T14:00:00.000Z
CVE-2018-3700 
Code injection vulnerability in the installer for Intel(R) USB 3.0 eXtensible Host Controller Driver for Microsoft Windows 7 before version 5.0.4.43v2 may allow a user to potentially enable escalation of privilege via local access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T17:00:00.000Z
CVE-2018-3701 
Improper directory permissions in the installer for Intel(R) PROSet/Wireless WiFi Software version 20.100 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: Intel(R) PROSet/Wireless WiFi Software Advisory
Published: 2019-05-17T15:41:38.000Z
CVE-2018-3702 
Improper permissions in the installer for the ITE Tech* Consumer Infrared Driver for Windows 10 versions before 5.4.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: n/a
product: ITE Tech Consumer Infrared Driver for Windows 10 Advisory
Published: 2019-06-13T15:36:24.000Z
CVE-2018-3703 
Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) SSD Data Center Tool for Windows
Published: 2019-01-10T20:00:00.000Z
CVE-2018-3704 
Improper directory permissions in the installer for the Intel Parallel Studio before 2019 Gold may allow authenticated users to potentially enable an escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel Parallel Studio
Published: 2018-12-13T23:00:00.000Z
CVE-2018-3705 
Improper directory permissions in the installer for the Intel(R) System Defense Utility (all versions) may allow authenticated users to potentially enable a denial of service via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel System Defense Utility
Published: 2018-12-13T23:00:00.000Z
CVE-2018-3710 
Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execution.
Problem types: cwe_id: CWE-377
description: Insecure Temporary File (CWE-377)
Affected products: vendor: GitLab
product: GitLab Community and Enterprise Editions
Published: 2018-03-21T20:00:00.000Z
CVE-2018-3711 
Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" and a very large payload.
Problem types: cwe_id: CWE-770
description: Allocation of Resources Without Limits or Throttling (CWE-770)
Affected products: vendor: HackerOne
product: fastify node module
Published: 2018-06-07T02:00:00.000Z
CVE-2018-3712 
serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and allowing them in paths, which allows a malicious user to view the contents of any directory with known path.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: serve node module
Published: 2018-06-07T02:00:00.000Z
CVE-2018-3713 
angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a malicious user to read content of any file with known path.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: angular-http-server node module
Published: 2018-06-07T02:00:00.000Z
CVE-2018-3714 
node-srv node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malicious user to read content of any file with known path.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: node-srv node module
Published: 2018-06-07T02:00:00.000Z
CVE-2018-3715 
glance node module before 3.0.4 suffers from a Path Traversal vulnerability due to lack of validation of path passed to it, which allows a malicious user to read content of any file with known path.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: glance node module
Published: 2018-06-07T02:00:00.000Z
CVE-2018-3716 
simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.
Problem types: cwe_id: CWE-79
description: Cross-site Scripting (XSS) - Generic (CWE-79)
Affected products: vendor: HackerOne
product: simplehttpserver node module
Published: 2018-06-07T02:00:00.000Z
CVE-2018-3717 
connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware.
Problem types: cwe_id: CWE-79
description: Cross-site Scripting (XSS) - Generic (CWE-79)
Affected products: vendor: HackerOne
product: connect node module
Published: 2018-06-07T02:00:00.000Z
CVE-2018-3718 
serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded.
Problem types: cwe_id: CWE-177
description: Improper Handling of URL Encoding (Hex Encoding) (CWE-177)
Affected products: vendor: HackerOne
product: serve node module
Published: 2018-06-07T02:00:00.000Z
CVE-2018-3719 
mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.
Problem types: cwe_id: CWE-471
description: Modification of Assumed-Immutable Data (MAID) (CWE-471)
Affected products: vendor: HackerOne
product: mixin-deep node module
Published: 2018-06-07T02:00:00.000Z
CVE-2018-3720 
assign-deep node module before 0.4.7 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.
Problem types: cwe_id: CWE-471
description: Modification of Assumed-Immutable Data (MAID) (CWE-471)
Affected products: vendor: HackerOne
product: assign-deep node module
Published: 2018-06-07T02:00:00.000Z
CVE-2018-3721 
lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaultsDeep, merge, and mergeWith functions, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.
Problem types: cwe_id: CWE-471
description: Modification of Assumed-Immutable Data (MAID) (CWE-471)
Affected products: vendor: HackerOne
product: lodash node module
Published: 2018-06-07T02:00:00.000Z
CVE-2018-3722 
merge-deep node module before 3.0.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.
Problem types: cwe_id: CWE-471
description: Modification of Assumed-Immutable Data (MAID) (CWE-471)
Affected products: vendor: HackerOne
product: merge-deep node module
Published: 2018-06-07T02:00:00.000Z
CVE-2018-3723 
defaults-deep node module before 0.2.4 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.
Problem types: cwe_id: CWE-471
description: Modification of Assumed-Immutable Data (MAID) (CWE-471)
Affected products: vendor: HackerOne
product: defaults-deep node module
Published: 2018-06-07T02:00:00.000Z