rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-3909 
An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly handles pipelined HTTP requests, which allows successive requests to overwrite the previously parsed HTTP method, 'onmessagecomplete' callback. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: HTTP Request Smuggling
Affected products: vendor: Talos
product: Samsung
Published: 2018-08-24T00:00:00.000Z
CVE-2018-3910 
An exploitable code execution vulnerability exists in the cloud OTA setup functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted SSID can cause a command injection, resulting in code execution. An attacker can cause a camera to connect to this SSID to trigger this vulnerability. Alternatively, an attacker can convince a user to connect their camera to this SSID.
Problem types: description: OS command injection
Affected products: vendor: Yi
product: Yi Technology
Published: 2018-11-01T15:00:00.000Z
CVE-2018-3911 
An exploitable HTTP header injection vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process listens on port 39500 and relays any unauthenticated message to SmartThings' remote servers, which insecurely handle JSON messages, leading to partially controlled requests generated toward the internal video-core process. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: Improper Neutralization of CRLF Sequences in HTTP Headers
Affected products: vendor: Samsung
product: Samsung
Published: 2018-08-23T22:00:00.000Z
CVE-2018-3912 
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" table of its SQLite database, leading to a buffer overflow on the stack. The strcpy call overflows the destination buffer, which has a size of 128 bytes. An attacker can send an arbitrarily long "secretKey" value in order to exploit this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-08-23T18:00:00.000Z
CVE-2018-3913 
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 32 bytes. An attacker can send an arbitrarily long "accessKey" value in order to exploit this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T15:00:00.000Z
CVE-2018-3914 
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 2000 bytes. An attacker can send an arbitrarily long "sessionToken" value in order to exploit this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-09-21T15:00:00.000Z
CVE-2018-3915 
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 64 bytes. An attacker can send an arbitrarily long "bucket" value in order to exploit this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-09-21T15:00:00.000Z
CVE-2018-3916 
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 136 bytes. An attacker can send an arbitrarily long 'directory' value in order to exploit this vulnerability. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: Buffer Overflow
Affected products: vendor: Samsung
product: Samsung
Published: 2018-08-28T20:00:00.000Z
CVE-2018-3917 
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" table of its SQLite database, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. The strcpy call overflows the destination buffer, which has a size of 16 bytes. An attacker can send an arbitrarily long "region" value in order to exploit this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-08-23T15:00:00.000Z
CVE-2018-3918 
An exploitable vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process listens on port 39500 and relays any unauthenticated messages to SmartThings' remote servers, which incorrectly handle camera IDs for the 'sync' operation, leading to arbitrary deletion of cameras. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: denial of service
Affected products: vendor: Samsung
product: Samsung
Published: 2018-08-27T15:00:00.000Z
CVE-2018-3919 
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process insecurely extracts the fields from the "clips" table of its SQLite database, leading to a buffer overflow on the stack. An attacker can send a series of HTTP requests to trigger this vulnerability.
Problem types: description: Buffer copy without checking size
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-08-23T15:00:00.000Z
CVE-2018-3920 
An exploitable code execution vulnerability exists in the firmware update functionality of the Yi Home Camera 27US 1.8.7.0D. A specially crafted 7-Zip file can cause a CRC collision, resulting in a firmware update and code execution. An attacker can insert an SDcard to trigger this vulnerability.
Problem types: description: Reversible One-Way Hash
Affected products: vendor: unknown
product: Yi Technology
Published: 2018-11-02T17:00:00.000Z
CVE-2018-3921 
A memory corruption vulnerability exists in the PSD-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PSD image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver a PSD image to trigger this vulnerability and gain code execution.
Problem types: description: stack-based buffer overflow
Affected products: vendor: Computerinsel
product: Computerinsel Photoline
Published: 2018-08-01T15:00:00.000Z
CVE-2018-3922 
A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially crafted ANI image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver an ANI image to trigger this vulnerability and gain code execution.
Problem types: description: heap-based buffer overflow
Affected products: vendor: Computerinsel
product: Computerinsel Photoline
Published: 2018-08-01T15:00:00.000Z
CVE-2018-3923 
A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.
Problem types: description: out of bounds write
Affected products: vendor: Computerinsel
product: Computerinsel Photoline
Published: 2018-08-01T15:00:00.000Z
CVE-2018-3924 
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit
product: Foxit
Published: 2018-08-01T20:00:00.000Z
CVE-2018-3925 
An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process insecurely parses the AWSELB cookie while communicating with remote video-host servers, leading to a buffer overflow on the heap. An attacker able to impersonate the remote HTTP servers could trigger this vulnerability.
Problem types: description: Buffer copy without checking size
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-08-23T15:00:00.000Z
CVE-2018-3926 
An exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process incorrectly handles malformed files existing in its data directory, leading to an infinite loop, which eventually causes the process to crash. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: Integer Underflow
Affected products: vendor: Talos
product: Samsung
Published: 2018-08-28T17:00:00.000Z
CVE-2018-3927 
An exploitable information disclosure vulnerability exists in the crash handler of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. When hubCore crashes, Google Breakpad is used to record minidumps, which are sent over an insecure HTTPS connection to the backtrace.io service, leading to the exposure of sensitive data. An attacker can impersonate the remote backtrace.io server in order to trigger this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: Samsung
Published: 2018-08-27T15:00:00.000Z
CVE-2018-3928 
An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can cause a settings change, resulting in denial of service. An attacker can send a set of packets to trigger this vulnerability.
Problem types: description: Reversible One-Way Hash
Affected products: vendor: Yi
product: Yi Technology
Published: 2018-11-01T15:00:00.000Z
CVE-2018-3929 
An exploitable heap corruption exists in the PowerPoint document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312). A crafted PowerPoint (PPT) document can lead to heap corruption, resulting in remote code execution.
Problem types: description: out of bounds write
Affected products: vendor: Antenna House
product: Antenna House
Published: 2018-07-11T16:00:00.000Z
CVE-2018-3930 
In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the `vbgetfp` method.
Problem types: description: out of bounds write
Affected products: vendor: Antenna House
product: Antenna House
Published: 2018-07-11T16:00:00.000Z
CVE-2018-3931 
In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the `putShapeProperty` method.
Problem types: description: out of bounds write
Affected products: vendor: Antenna House
product: Antenna House
Published: 2018-07-11T16:00:00.000Z
CVE-2018-3932 
An exploitable stack-based buffer overflow exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312). A crafted Microsoft Word (DOC) document can lead to a stack-based buffer overflow, resulting in remote code execution.
Problem types: description: stack buffer overflow
Affected products: vendor: Antenna House
product: Antenna House
Published: 2018-07-11T16:00:00.000Z
CVE-2018-3933 
An exploitable out-of-bounds write exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312). A crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the `vbputanld` method.
Problem types: description: stack-based buffer overflow
Affected products: vendor: Antenna House
product: Antenna House
Published: 2018-07-11T16:00:00.000Z
CVE-2018-3934 
An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can cause a logic flaw, resulting in an authentication bypass. An attacker can sniff network traffic and send a set of packets to trigger this vulnerability.
Problem types: description: code execution
Affected products: vendor: unknown
product: Yi Technology
Published: 2018-11-02T17:00:00.000Z
CVE-2018-3935 
An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can allocate unlimited memory, resulting in denial of service. An attacker can send a set of packets to trigger this vulnerability.
Problem types: description: Uncontrolled Resource Consumption
Affected products: vendor: unknown
product: Yi Technology
Published: 2018-11-02T17:00:00.000Z
CVE-2018-3936 
In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution.
Problem types: description: stack-based buffer overflow
Affected products: vendor: Antenna House
product: Antenna House
Published: 2018-07-11T16:00:00.000Z
CVE-2018-3937 
An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00. A specially crafted GET request can cause arbitrary commands to be executed. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: command injection
Affected products: vendor: Talos
product: Sony
Published: 2018-08-14T19:00:00.000Z
CVE-2018-3938 
An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00. A specially crafted POST can cause a stack-based buffer overflow, resulting in remote code execution. An attacker can send a malicious POST request to trigger this vulnerability.
Problem types: description: buffer overflow
Affected products: vendor: Talos
product: Sony
Published: 2018-08-14T19:00:00.000Z
CVE-2018-3939 
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit
product: Foxit
Published: 2018-08-01T20:00:00.000Z
CVE-2018-3940 
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused. An attacker needs to trick the user to open the malicious file to trigger.
Problem types: description: remote code execution
Affected products: vendor: Foxit Software
product: Foxit PDF Reader
Published: 2018-10-08T16:00:00.000Z
CVE-2018-3941 
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit Software
product: Foxit PDF Reader
Published: 2018-10-08T16:00:00.000Z
CVE-2018-3942 
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit Software
product: Foxit PDF Reader
Published: 2018-10-08T16:00:00.000Z
CVE-2018-3943 
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit
product: Foxit PDF Reader
Published: 2018-10-02T21:00:00.000Z
CVE-2018-3944 
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit
product: Foxit PDF Reader
Published: 2018-10-02T21:00:00.000Z
CVE-2018-3945 
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit Software
product: Foxit PDF Reader
Published: 2018-10-08T16:00:00.000Z
CVE-2018-3946 
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foxit Software
product: Foxit PDF Reader
Published: 2018-10-03T15:00:00.000Z
CVE-2018-3947 
An exploitable information disclosure vulnerability exists in the phone-to-camera communications of Yi Home Camera 27US 1.8.7.0D. An attacker can sniff network traffic to exploit this vulnerability.
Problem types: description: Cleartext Transmission of Sensitive Information
Affected products: vendor: Yi
product: Yi Technology
Published: 2018-11-01T15:00:00.000Z
CVE-2018-3948 
An exploitable denial-of-service vulnerability exists in the URI-parsing functionality of the TP-Link TL-R600VPN HTTP server. A specially crafted URL can cause the server to stop responding to requests, resulting in downtime for the management portal. An attacker can send either an unauthenticated or authenticated web request to trigger this vulnerability.
Problem types: description: denial of service
Affected products: vendor: n/a
product: TP-Link
Published: 2018-11-30T17:00:00.000Z
CVE-2018-3949 
An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN. A specially crafted URL can cause a directory traversal, resulting in the disclosure of sensitive system files. An attacker can send either an unauthenticated or an authenticated web request to trigger this vulnerability.
Problem types: description: path traversal
Affected products: vendor: Talos
product: TP-Link
Published: 2018-12-01T03:00:00.000Z
CVE-2018-3950 
An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600VPN HWv3 FRNv1.3.0 and HWv2 FRNv1.2.3 http server. A specially crafted IP address can cause a stack overflow, resulting in remote code execution. An attacker can send a single authenticated HTTP request to trigger this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Talos
product: TP-Link
Published: 2018-12-01T04:00:00.000Z
CVE-2018-3951 
An exploitable remote code execution vulnerability exists in the HTTP header-parsing function of the TP-Link TL-R600VPN HTTP Server. A specially crafted HTTP request can cause a buffer overflow, resulting in remote code execution on the device. An attacker can send an authenticated HTTP request to trigger this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Talos
product: TP-Link
Published: 2018-12-01T06:00:00.000Z
CVE-2018-3952 
An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0. A specially crafted configuration file can cause a privilege escalation, resulting in the execution of arbitrary commands with system privileges.
Problem types: description: OS command injection
Affected products: vendor: Talos
product: NordVPN
Published: 2018-09-07T15:00:00.000Z
CVE-2018-3953 
Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are susceptible to OS command injection vulnerabilities due to improper filtering of data passed to and retrieved from NVRAM. Data entered into the 'Router Name' input field through the web portal is submitted to apply.cgi as the value to the 'machine_name' POST parameter. When the 'preinit' binary receives the SIGHUP signal, it enters a code path that continues until it reaches offset 0x0042B5C4 in the 'start_lltd' function. Within the 'start_lltd' function, a 'nvram_get' call is used to obtain the value of the user-controlled 'machine_name' NVRAM entry. This value is then entered directly into a command intended to write the host name to a file and subsequently executed.
Problem types: description: OS Command Injection
Affected products: vendor: Linksys
product: ESeries E1200
vendor: Linksys
product: ESeries E2500
Published: 2018-10-17T02:00:00.000Z