rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-10872 
A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, processor does not deliver interrupts and exceptions, they are delivered once the first instruction after the stack switch is executed. An unprivileged system user could use this flaw to crash the system kernel resulting in DoS. This CVE-2018-10872 was assigned due to regression of CVE-2018-8897 in Red Hat Enterprise Linux 6.10 GA kernel. No other versions are affected by this CVE.
Problem types: cwe_id: CWE-250
description: CWE-250
Affected products: vendor: Linux
product: kernel
Published: 2018-07-10T19:00:00.000Z
CVE-2018-10873 
A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: [UNKNOWN]
product: spice:
Published: 2018-08-17T12:00:00.000Z
CVE-2018-10874 
In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.
Problem types: cwe_id: CWE-426
description: CWE-426
Affected products: vendor: [UNKNOWN]
product: ansible
Published: 2018-07-02T13:00:00.000Z
CVE-2018-10875 
A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code.
Problem types: cwe_id: CWE-426
description: CWE-426
Affected products: vendor: [UNKNOWN]
product: ansible
Published: 2018-07-13T22:00:00.000Z
CVE-2018-10876 
A flaw was found in Linux kernel in the ext4 filesystem code. A use-after-free is possible in ext4_ext_remove_space() function when mounting and operating a crafted ext4 image.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: [UNKNOWN]
product: kernel
Published: 2018-07-26T18:00:00.000Z
CVE-2018-10877 
Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: [UNKNOWN]
product: kernel
Published: 2018-07-18T15:00:00.000Z
CVE-2018-10878 
A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write and a denial of service or unspecified other impact is possible by mounting and operating a crafted ext4 filesystem image.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: [UNKNOWN]
product: kernel
Published: 2018-07-26T18:00:00.000Z
CVE-2018-10879 
A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact may occur by renaming a file in a crafted ext4 filesystem image.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: [UNKNOWN]
product: kernel
Published: 2018-07-26T18:00:00.000Z
CVE-2018-10880 
Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could use this to cause a system crash and a denial of service.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: [UNKNOWN]
product: kernel
Published: 2018-07-25T13:00:00.000Z
CVE-2018-10881 
A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound access in ext4_get_group_info function, a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: [UNKNOWN]
product: kernel
Published: 2018-07-26T18:00:00.000Z
CVE-2018-10882 
A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: [UNKNOWN]
product: kernel
Published: 2018-07-27T18:00:00.000Z
CVE-2018-10883 
A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: [UNKNOWN]
product: kernel
Published: 2018-07-30T15:00:00.000Z
CVE-2018-10884 
Ansible Tower before versions 3.1.8 and 3.2.6 is vulnerable to cross-site request forgery (CSRF) in awx/api/authentication.py. An attacker could exploit this by tricking already authenticated users into visiting a malicious site and hijacking the authtoken cookie.
Problem types: cwe_id: CWE-352
description: CWE-352
Affected products: vendor: Red Hat
product: ansible-tower
Published: 2018-08-22T14:00:00.000Z
CVE-2018-10885 
In atomic-openshift before version 3.10.9 a malicious network-policy configuration can cause Openshift Routing to crash when using ovs-networkpolicy plugin. An attacker can use this flaw to cause a Denial of Service (DoS) attack on an Openshift 3.9, or 3.7 Cluster.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: [UNKNOWN]
product: atomic-openshift
Published: 2018-07-05T13:00:00.000Z
CVE-2018-10887 
A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c file may lead to an integer overflow which in turn leads to an out of bound read, allowing to read before the base object. An attacker may use this flaw to leak memory addresses or cause a Denial of Service.
Problem types: cwe_id: CWE-194
description: CWE-194->CWE-190->CWE-125
Affected products: vendor: libgit2
product: libgit2
Published: 2018-07-10T14:00:00.000Z
CVE-2018-10888 
A flaw was found in libgit2 before version 0.27.3. A missing check in git_delta_apply function in delta.c file, may lead to an out-of-bound read while reading a binary delta file. An attacker may use this flaw to cause a Denial of Service.
Problem types: cwe_id: CWE-20
description: CWE-20->CWE-125
Affected products: vendor: libgit2
product: libgit2
Published: 2018-07-10T14:00:00.000Z
CVE-2018-10889 
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted with the requester.
Problem types: cwe_id: CWE-532
description: CWE-532
Affected products: vendor: [UNKNOWN]
product: moodle
Published: 2018-07-10T18:00:00.000Z
CVE-2018-10890 
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. It was possible for the core_course_get_categories web service to return hidden categories, which should be omitted when fetching course categories.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: [UNKNOWN]
product: moodle
Published: 2018-07-10T18:00:00.000Z
CVE-2018-10891 
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. When a quiz question bank is imported, it was possible for the question preview that is displayed to execute JavaScript that is written into the question bank.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: [UNKNOWN]
product: moodle
Published: 2018-07-10T18:00:00.000Z
CVE-2018-10892 
The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. The flaw allows an attacker to modify host's hardware like enabling/disabling bluetooth or turning up/down keyboard brightness.
Problem types: cwe_id: CWE-250
description: CWE-250
Affected products: vendor: [UNKNOWN]
product: docker
Published: 2018-07-06T16:00:00.000Z
CVE-2018-10893 
Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code.
Problem types: cwe_id: CWE-122
description: CWE-122
cwe_id: CWE-190
description: CWE-190
Affected products: vendor: Red Hat
product: spice-client
Published: 2018-09-11T15:00:00.000Z
CVE-2018-10894 
It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further attacks.
Problem types: cwe_id: CWE-345
description: CWE-345
Affected products: vendor: Red Hat
product: keycloak
Published: 2018-08-01T17:00:00.000Z
CVE-2018-10895 
qutebrowser before version 1.4.1 is vulnerable to a cross-site request forgery flaw that allows websites to access 'qute://*' URLs. A malicious website could exploit this to load a 'qute://settings/set' URL, which then sets 'editor.command' to a bash script, resulting in arbitrary code execution.
Problem types: cwe_id: CWE-352
description: CWE-352
Affected products: vendor: qutebrowser
product: cross-site request forgery flaw allows sites to access 'qute
Published: 2018-07-12T12:00:00.000Z
CVE-2018-10896 
The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances created by cloning a golden master or template system, sharing ssh host keys, and being able to impersonate one another or conduct man-in-the-middle attacks.
Problem types: cwe_id: CWE-321
description: CWE-321
Affected products: vendor: Canonical
product: cloud-init
Published: 2018-08-01T17:00:00.000Z
CVE-2018-10897 
A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path traversal. If reposync is running with heightened privileges on a targeted system, this flaw could potentially result in system compromise via the overwriting of critical system files. Version 1.1.31 and older are believed to be affected.
Problem types: cwe_id: CWE-59
description: CWE-59
Affected products: vendor: The RPM Project
product: yum-utils:
Published: 2018-08-01T17:00:00.000Z
CVE-2018-10898 
A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configuration, Opendaylight in RHOSP13 is configured with easily guessable default credentials.
Problem types: cwe_id: CWE-798
description: CWE-798
Affected products: vendor: [UNKNOWN]
product: openstack-tripleo-heat-templates
Published: 2018-07-30T16:00:00.000Z
CVE-2018-10899 
A flaw was found in Jolokia versions from 1.2 to before 1.6.1. Affected versions are vulnerable to a system-wide CSRF. This holds true for properly configured instances with strict checking for origin and referrer headers. This could result in a Remote Code Execution attack.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: jolokia
product: jolokia
Published: 2019-08-01T13:27:13.000Z
CVE-2018-10900 
Network Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attack. A new line character can be used to inject a Password helper parameter into the configuration data passed to VPNC, allowing an attacker to execute arbitrary commands as root.
Problem types: cwe_id: CWE-78
description: CWE-78
Affected products: vendor: [UNKNOWN]
product: networkmanager-vpnc
Published: 2018-07-26T15:00:00.000Z
CVE-2018-10901 
A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges.
Problem types: cwe_id: CWE-665
description: CWE-665
Affected products: vendor: [UNKNOWN]
product: kernel:
Published: 2018-07-26T17:00:00.000Z
CVE-2018-10902 
It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: [UNKNOWN]
product: kernel
Published: 2018-08-21T19:00:00.000Z
CVE-2018-10903 
A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: [UNKNOWN]
product: python-cryptography
Published: 2018-07-30T15:00:00.000Z
CVE-2018-10904 
It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attribute which is used by the "debug/io-stats" translator. Attacker can use this flaw to create files and execute arbitrary code. To exploit this attacker would require sufficient access to modify the extended attributes of files on a gluster volume.
Problem types: cwe_id: CWE-426
description: CWE-426
Affected products: vendor: Red Hat
product: glusterfs
Published: 2018-09-04T13:00:00.000Z
CVE-2018-10905 
CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby component of CloudForms. An attacker with access to an unprivileged local shell could use this flaw to execute commands as a high privileged user.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: [UNKNOWN]
product: cfme
Published: 2018-07-24T13:00:00.000Z
CVE-2018-10906 
In fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction bypass when SELinux is active. This allows non-root users to mount a FUSE file system with the 'allow_other' mount option regardless of whether 'user_allow_other' is set in the fuse configuration. An attacker may use this flaw to mount a FUSE file system, accessible by other users, and trick them into accessing files on that file system, possibly causing Denial of Service or other unspecified effects.
Problem types: cwe_id: CWE-285
description: CWE-285
Affected products: vendor: [UNKNOWN]
product: fuse
Published: 2018-07-24T20:00:00.000Z
CVE-2018-10907 
It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers using 'alloca(3)'. An authenticated attacker could exploit this by mounting a gluster volume and sending a string longer that the fixed buffer size to cause crash or potential code execution.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: Red Hat
product: glusterfs
Published: 2018-09-04T13:00:00.000Z
CVE-2018-10908 
It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources. By uploading a specially crafted image, an attacker could cause the qemu-img process to consume unbounded amounts of memory of CPU time, causing a denial of service condition that could potentially impact other users of the host.
Problem types: cwe_id: CWE-20
description: CWE-20
cwe_id: CWE-770
description: CWE-770
Affected products: vendor: [UNKNOWN]
product: vdsm
Published: 2018-08-09T19:00:00.000Z
CVE-2018-10910 
A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable.
Problem types: cwe_id: CWE-863
description: CWE-863
Affected products: vendor: The Bluez Project
product: bluez
Published: 2019-01-28T15:00:00.000Z
CVE-2018-10911 
A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values. An attacker could use this flaw to read memory from other locations into the stored dict value.
Problem types: cwe_id: CWE-502
description: CWE-502
cwe_id: CWE-190
description: CWE-190
cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Red Hat
product: glusterfs:
Published: 2018-09-04T14:00:00.000Z
CVE-2018-10912 
keycloak before version 4.0.0.final is vulnerable to a infinite loop in session replacement. A Keycloak cluster with multiple nodes could mishandle an expired session replacement and lead to an infinite loop. A malicious authenticated user could use this flaw to achieve Denial of Service on the server.
Problem types: cwe_id: CWE-835
description: CWE-835
Affected products: vendor: [UNKNOWN]
product: keycloak
Published: 2018-07-23T22:00:00.000Z
CVE-2018-10913 
An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr request via glusterfs FUSE to determine the existence of any file.
Problem types: cwe_id: CWE-209
description: CWE-209
Affected products: vendor: Red Hat
product: glusterfs
Published: 2018-09-04T14:00:00.000Z
CVE-2018-10914 
It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a remote denial of service. If gluster multiplexing is enabled this will result in a crash of multiple bricks and gluster volumes.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: Red Hat
product: glusterfs
Published: 2018-09-04T14:00:00.000Z
CVE-2018-10915 
A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected.
Problem types: cwe_id: CWE-665
description: CWE-665
cwe_id: CWE-200
description: CWE-200
cwe_id: CWE-89
description: CWE-89
Affected products: vendor: PostgreSQL Global Development Group
product: postgresql
Published: 2018-08-09T20:00:00.000Z
CVE-2018-10916 
It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker controlled FTP server, resulting in the removal of all files in the current working directory of the victim's system.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: [UNKNOWN]
product: lftp
Published: 2018-08-01T14:00:00.000Z
CVE-2018-10917 
pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' user. This may lead to overwrite of published content on other iso repositories.
Problem types: cwe_id: CWE-22
description: CWE-22
Affected products: vendor: [UNKNOWN]
product: pulp
Published: 2018-08-15T17:00:00.000Z
CVE-2018-10918 
A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker could use this flaw to crash a samba server in an Active Directory Domain Controller configuration. Samba versions before 4.7.9 and 4.8.4 are vulnerable.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: The Samba Team
product: samba
Published: 2018-08-22T17:00:00.000Z
CVE-2018-10919 
The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
Problem types: cwe_id: CWE-203
description: CWE-203
Affected products: vendor: The Samba Team
product: samba
Published: 2018-08-22T17:00:00.000Z
CVE-2018-10920 
Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: cz.nic
product: knot-resolver
Published: 2018-08-02T13:00:00.000Z
CVE-2018-10921 
Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input file due to a lack of checking return codes of fgetc/fputc function calls.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: [UNKNOWN]
product: ttembed
Published: 2018-08-02T18:00:00.000Z
CVE-2018-10922 
An input validation flaw exists in ttembed. With a crafted input file, an attacker may be able to trigger a denial of service condition due to ttembed trusting attacker controlled values.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: [UNKNOWN]
product: ttembed
Published: 2018-08-02T18:00:00.000Z
CVE-2018-10923 
It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node. An authenticated attacker could use this to create an arbitrary device and read data from any device attached to the glusterfs server node.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Red Hat
product: glusterfs
Published: 2018-09-04T14:00:00.000Z
CVE-2018-10924 
It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: Red Hat
product: glusterfs
Published: 2018-09-04T15:00:00.000Z
CVE-2018-10925 
It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with "INSERT ... ON CONFLICT DO UPDATE". An attacker with "CREATE TABLE" privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain "INSERT" and limited "UPDATE" privileges to a particular table, they could exploit this to update other columns in the same table.
Problem types: cwe_id: CWE-863
description: CWE-863
Affected products: vendor: PostgreSQL Global Development Group
product: postgresql
Published: 2018-08-09T21:00:00.000Z
CVE-2018-10926 
A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path traversal and execute arbitrary code on a glusterfs server node.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Red Hat
product: glusterfs
Published: 2018-09-04T15:00:00.000Z
CVE-2018-10927 
A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use this flaw to leak information and execute remote denial of service by crashing gluster brick process.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Red Hat
product: glusterfs
Published: 2018-09-04T15:00:00.000Z