rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-7706 
Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via a .. (dot dot) in the option2 parameter in an attachment action to secmail/getmessage.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-14T20:00:00.000Z
CVE-2018-7707 
Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitrary web script or HTML via an HTML-formatted e-mail message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-14T20:00:00.000Z
CVE-2018-7711 
HTTPRedirect.php in the saml2 library in SimpleSAMLphp before 1.15.4 has an incorrect check of return values in the signature validation utilities, allowing an attacker to get invalid signatures accepted as valid by forcing an error during validation. This occurs because of a dependency on PHP functionality that interprets a -1 error code as a true boolean value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T22:00:00.000Z
CVE-2018-7712 
The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failure) because (size.height <= (1<<20)) may be false. Note: “OpenCV CV_Assert is not an assertion (C-like assert()), it is regular C++ exception which can raised in case of invalid or non-supported parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T23:00:00.000Z
CVE-2018-7713 
The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failure) because (size.width <= (1<<20)) may be false. Note: “OpenCV CV_Assert is not an assertion (C-like assert()), it is regular C++ exception which can raised in case of invalid or non-supported parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T23:00:00.000Z
CVE-2018-7714 
The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failure) because (pixels <= (1<<30)) may be false. Note: “OpenCV CV_Assert is not an assertion (C-like assert()), it is regular C++ exception which can raised in case of invalid or non-supported parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T23:00:00.000Z
CVE-2018-7715 
PrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability with its com.privat.vpn.helper privileged helper tool. This privileged helper tool implements an XPC service that allows arbitrary installed applications to connect and send messages. The XPC service extracts the path string from the corresponding XPC message. This string is supposed to point to PrivateVPN's internal openvpn binary. If a new connection has not already been established, an attacker can send the XPC service a malicious XPC message with the path string pointing at a binary that he or she controls. This results in the execution of arbitrary code as the root user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T23:00:00.000Z
CVE-2018-7716 
PrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability with its com.privat.vpn.helper privileged helper tool. This privileged helper tool implements an XPC service that allows arbitrary installed applications to connect and send messages. The XPC service extracts the config string from the corresponding XPC message. This string is supposed to point to an internal OpenVPN configuration file. If a new connection has not already been established, an attacker can send the XPC service a malicious XPC message with the config string pointing at an OpenVPN configuration file that he or she controls. In the configuration file, an attacker can specify a dynamic library plugin that should run for every new VPN connection. This plugin will execute code in the context of the root user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T23:00:00.000Z
CVE-2018-7717 
The htmlImageAddTitleAttribute function in sige.php in the Kubik-Rubik Simple Image Gallery Extended (SIGE) extension 3.2.3 for Joomla! has XSS via a crafted image header, as demonstrated by the Caption-Abstract header object in a JPEG file. This is fixed in 3.3.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T23:00:00.000Z
CVE-2018-7718 
An issue was discovered in Telexy QPath 5.4.462. A low privileged authenticated user supplying a specially crafted serialized request to AdanitDataService.svc may modify user information, including but not limited to email address, username, and password, of other user accounts. The simplest attack approach is for the attacker to intercept their own password-change request and modify the username before the request reaches the server. Also, changing a victim's email address can have a similar account-takeover consequence.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-08T21:00:00.000Z
CVE-2018-7719 
Acrolinx Server before 5.2.5 on Windows allows Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T16:00:00.000Z
CVE-2018-7720 
A cross-site request forgery (CSRF) vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/, resulting in account creation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-07T08:00:00.000Z
CVE-2018-7721 
Cross Site Scripting (XSS) exists in MetInfo 6.0.0 via /feedback/index.php because app/system/feedback/web/feedback.class.php mishandles input data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-07T08:00:00.000Z
CVE-2018-7722 
The management panel in Piwigo 2.9.3 has stored XSS via the name parameter in a /ws.php?format=json request. CSRF exploitation, related to CVE-2017-10681, may be possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T17:00:00.000Z
CVE-2018-7723 
The management panel in Piwigo 2.9.3 has stored XSS via the virtual_name parameter in a /admin.php?page=cat_list request, a different issue than CVE-2017-9836. CSRF exploitation, related to CVE-2017-10681, may be possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T17:00:00.000Z
CVE-2018-7724 
The management panel in Piwigo 2.9.3 has stored XSS via the name parameter in a /admin.php?page=photo-${photo_number} request. CSRF exploitation, related to CVE-2017-10681, may be possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T17:00:00.000Z
CVE-2018-7725 
An issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered in zzip_disk_fread in mmapped.c. The vulnerability causes an application crash, which leads to denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T17:00:00.000Z
CVE-2018-7726 
An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the __zzip_parse_root_directory function of zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T17:00:00.000Z
CVE-2018-7727 
An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T17:00:00.000Z
CVE-2018-7728 
An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFF_Handler.cpp mishandles a case of a zero length, leading to a heap-based buffer over-read in the MD5Update() function in third-party/zuid/interfaces/MD5.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T18:00:00.000Z
CVE-2018-7729 
An issue was discovered in Exempi through 2.4.4. There is a stack-based buffer over-read in the PostScript_MetaHandler::ParsePSFile() function in XMPFiles/source/FileHandlers/PostScript_Handler.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T18:00:00.000Z
CVE-2018-7730 
An issue was discovered in Exempi through 2.4.4. A certain case of a 0xffffffff length is mishandled in XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp, leading to a heap-based buffer over-read in the PSD_MetaHandler::CacheFileData() function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T18:00:00.000Z
CVE-2018-7731 
An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FormatSupport/WEBP_Support.cpp does not check whether a bitstream has a NULL value, leading to a NULL pointer dereference in the WEBP::VP8XChunk class.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T18:00:00.000Z
CVE-2018-7732 
An issue was discovered in YxtCMF 3.1. SQL Injection exists in ShitiController.class.php via the ids array parameter to exam/shiti/delshiti.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T18:00:00.000Z
CVE-2018-7733 
An issue was discovered in YxtCMF 3.1. RbacController.class.php has CSRF, as demonstrated by modifying an administrator account via index.php/admin/user/add_post.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T18:00:00.000Z
CVE-2018-7734 
Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T19:00:00.000Z
CVE-2018-7735 
Afian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata&section=cpanel&page=list_filetypes request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T19:00:00.000Z
CVE-2018-7736 
In Z-BlogPHP 1.5.1.1740, cmd.php has XSS via the ZC_BLOG_SUBNAME parameter or ZC_UPLOAD_FILETYPE parameter. NOTE: the software maintainer disputes that this is a vulnerability
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T21:00:00.000Z
CVE-2018-7737 
In Z-BlogPHP 1.5.1.1740, there is Web Site physical path leakage, as demonstrated by admin_footer.php or admin_footer.php. NOTE: the software maintainer disputes that this is a vulnerability
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T21:00:00.000Z
CVE-2018-7738 
In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command (within Bash) by a different user, as demonstrated by logging in as root and entering umount followed by a tab character for autocompletion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T22:00:00.000Z
CVE-2018-7739 
antsle antman before 0.9.1a allows remote attackers to bypass authentication via invalid characters in the username and password parameters, as demonstrated by a username=>&password=%0a string to the /login URI. This allows obtaining root permissions within the web management console, because the login process uses Java's ProcessBuilder class and a bash script called antsle-auth with insufficient input validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T22:00:00.000Z
CVE-2018-7740 
The resv_map_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (BUG) via a crafted application that makes mmap system calls and has a large pgoff argument to the remap_file_pages system call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-07T08:00:00.000Z
CVE-2018-7741 
Eramba e1.0.6.033 has Reflected XSS in the Date Filter via the created parameter to the /crons URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-07T09:00:00.000Z
CVE-2018-7745 
An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/install/installation/createuserinfo requests, resulting in account creation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-07T17:00:00.000Z
CVE-2018-7746 
An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/manage/channel/modifychannel. For example, with a crafted channel name, stored XSS is triggered during a later /index.php?/manage/channel request by an admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-07T17:00:00.000Z
CVE-2018-7747 
Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a greeting message, (2) the email transaction log, or (3) an imported form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-20T21:00:00.000Z
CVE-2018-7748 
report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '${xyz}' Glide Scripting Injection in the sysparm_media parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T18:00:00.000Z
CVE-2018-7749 
The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests. A customized SSH client can simply skip the authentication step.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-12T19:00:00.000Z
CVE-2018-7750 
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-13T18:00:00.000Z
CVE-2018-7751 
The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a crafted XML file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-24T06:00:00.000Z
CVE-2018-7752 
GPAC through 0.7.1 has a Buffer Overflow in the gf_media_avc_read_sps function in media_tools/av_parsers.c, a different vulnerability than CVE-2018-1000100.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-07T23:00:00.000Z
CVE-2018-7753 
An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if the values contained character entities. Using character entities, it was possible to construct a URI value with a scheme that was not allowed that would slide through unsanitized.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-07T23:00:00.000Z
CVE-2018-7754 
The aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by reading "ffree: " lines in a debugfs file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-10T16:00:00.000Z
CVE-2018-7755 
An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-08T07:00:00.000Z
CVE-2018-7756 
RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TCP port 1999, which allows remote attackers to execute arbitrary code or access internal commands, as demonstrated by a RUN command that launches a .EXE file located at an arbitrary external URL, or a "SETFIREWALL Off" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-14T20:00:00.000Z
CVE-2018-7757 
Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (memory consumption) via many read accesses to files in the /sys/class/sas_phy directory, as demonstrated by the /sys/class/sas_phy/phy-1:0:12/invalid_dword_count file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-08T14:00:00.000Z
CVE-2018-7758 
A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 (DNP3oE) if an older TCI/IP session is still open with identical IP address and port number.
Problem types: description: Denial of Service
Affected products: vendor: Schneider Electric SE
product: MiCOM P540D Range with Legacy Ethernet Board
Published: 2018-04-18T20:00:00.000Z
CVE-2018-7759 
A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source string specified (instead of the buffer size) as the number of bytes to be copied.
Problem types: description: Buffer overflow
Affected products: vendor: Schneider Electric SE
product: Modicon M340, Modicon Premium, Modicon Quantum, BMXNOR0200
Published: 2018-04-18T20:00:00.000Z
CVE-2018-7760 
An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authorization.
Problem types: description: Authorization Bypass
Affected products: vendor: Schneider Electric SE
product: Modicon M340, Modicon Premium, Modicon Quantum, BMXNOR0201
Published: 2018-04-18T20:00:00.000Z
CVE-2018-7761 
A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution.
Problem types: description: Arbritrary Code Execution
Affected products: vendor: Schneider Electric SE
product: Modicon M340, Modicon Premium, Modicon Quantum, BMXNOR0202
Published: 2018-04-18T20:00:00.000Z
CVE-2018-7762 
A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow result in a buffer overflow.
Problem types: description: Buffer overflow
Affected products: vendor: Schneider Electric SE
product: Modicon M340, Modicon Premium, Modicon Quantum, BMXNOR0203
Published: 2018-04-18T20:00:00.000Z
CVE-2018-7763 
The vulnerability exists within css.inc.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The 'css' parameter contains a directory traversal vulnerability.
Problem types: description: Directory Traversal Information Disclosure
Affected products: vendor: Schneider Electric SE
product: U.Motion
Published: 2018-07-03T14:00:00.000Z
CVE-2018-7764 
The vulnerability exists within runscript.php applet in Schneider Electric U.motion Builder software versions prior to v1.3.4. There is a directory traversal vulnerability in the processing of the 's' parameter of the applet.
Problem types: description: Directory Traversal Information Disclosure
Affected products: vendor: Schneider Electric SE
product: U.Motion
Published: 2018-07-03T14:00:00.000Z
CVE-2018-7765 
The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the object_id input parameter.
Problem types: description: SQL Injection Remote Code Execution
Affected products: vendor: Schneider Electric SE
product: U.Motion
Published: 2018-07-03T14:00:00.000Z
CVE-2018-7766 
The vulnerability exists within processing of track_getdata.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the id input parameter.
Problem types: description: SQL Injection Remote Code Execution
Affected products: vendor: Schneider Electric SE
product: U.Motion
Published: 2018-07-03T14:00:00.000Z
CVE-2018-7767 
The vulnerability exists within processing of editobject.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the type input parameter.
Problem types: description: SQL Injection Remote Code Execution
Affected products: vendor: Schneider Electric SE
product: U.Motion
Published: 2018-07-03T14:00:00.000Z
CVE-2018-7768 
The vulnerability exists within processing of loadtemplate.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the tpl input parameter.
Problem types: description: SQL Injection Remote Code Execution
Affected products: vendor: Schneider Electric SE
product: U.Motion
Published: 2018-07-03T14:00:00.000Z
CVE-2018-7769 
The vulnerability exists within processing of xmlserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the id input parameter.
Problem types: description: SQL Injection Remote Code Execution
Affected products: vendor: Schneider Electric SE
product: U.Motion
Published: 2018-07-03T14:00:00.000Z
CVE-2018-7770 
The vulnerability exists within processing of sendmail.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The applet allows callers to select arbitrary files to send to an arbitrary email address.
Problem types: description: Path Traversal Information Disclosure
Affected products: vendor: Schneider Electric SE
product: U.Motion
Published: 2018-07-03T14:00:00.000Z
CVE-2018-7771 
The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A directory traversal vulnerability allows a caller with standard user privileges to write arbitrary php files anywhere in the web service directory tree.
Problem types: description: Directory Traversal Remote Code Execution
Affected products: vendor: Schneider Electric SE
product: U.Motion
Published: 2018-07-03T14:00:00.000Z