rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-1000542 
netbeans-mmd-plugin version <= 1.4.3 contains a XML External Entity (XXE) vulnerability in MMD file import that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted MMD file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T16:00:00.000Z
CVE-2018-1000543 
Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration vulnerability in "Details" of a task is not validated that can result in XSS leading to abritrary code execution. This attack appear to be exploitable via The attacker tricks the victim into opening a crafted markdown.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T16:00:00.000Z
CVE-2018-1000544 
rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames "../" to write arbitrary files to the filesystem..
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T16:00:00.000Z
CVE-2018-1000546 
Triplea version <= 1.9.0.0.10291 contains a XML External Entity (XXE) vulnerability in Importing game data that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted game data file (XML).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T16:00:00.000Z
CVE-2018-1000547 
coreBOS version 7.0 and earlier contains a Incorrect Access Control vulnerability in Module: Contacts that can result in The error allows you to access records that you have no permissions to. .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T16:00:00.000Z
CVE-2018-1000548 
Umlet version < 14.3 contains a XML External Entity (XXE) vulnerability in File parsing that can result in disclosure of confidential data, denial of service, server side request forgery. This attack appear to be exploitable via Specially crafted UXF file. This vulnerability appears to have been fixed in 14.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T16:00:00.000Z
CVE-2018-1000549 
Wekan version 1.04.0 contains a Email / Username Enumeration vulnerability in Register' and 'Forgot your password?' pages that can result in A remote attacker could perform a brute force attack to obtain valid usernames and email addresses.. This attack appear to be exploitable via HTTP Request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T16:00:00.000Z
CVE-2018-1000550 
The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal vulnerability in wwsympa.fcgi template editing function that can result in Possibility to create or modify files on the server filesystem. This attack appear to be exploitable via HTTP GET/POST request. This vulnerability appears to have been fixed in 6.2.32.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T16:00:00.000Z
CVE-2018-1000551 
Trovebox version <= 4.0.0-rc6 contains a PHP Type juggling vulnerability in album view component that can result in Authentication bypass. This attack appear to be exploitable via HTTP Request. This vulnerability appears to have been fixed in after commit 742b8edbe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T16:00:00.000Z
CVE-2018-1000552 
Trovebox version <= 4.0.0-rc6 contains a SQL Injection vulnerability in album component that can result in SQL code injection. This attack appear to be exploitable via HTTP request. This vulnerability appears to have been fixed in after commit 742b8ed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T16:00:00.000Z
CVE-2018-1000553 
Trovebox version <= 4.0.0-rc6 contains a Server-Side request forgery vulnerability in webhook component that can result in read or update internal resources. This attack appear to be exploitable via HTTP request. This vulnerability appears to have been fixed in after commit 742b8ed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T16:00:00.000Z
CVE-2018-1000554 
Trovebox version <= 4.0.0-rc6 contains a Unsafe password reset token generation vulnerability in user component that can result in Password reset. This attack appear to be exploitable via HTTP request. This vulnerability appears to have been fixed in after commit 742b8ed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T16:00:00.000Z
CVE-2018-1000556 
WordPress version 4.8 + contains a Cross Site Scripting (XSS) vulnerability in plugins.php or core wordpress on delete function that can result in An attacker can perform client side attacks which could be from stealing a cookie to code injection. This attack appear to be exploitable via an attacker must craft an URL with payload and send to the user. Victim need to open the link to be affected by reflected XSS. .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T16:00:00.000Z
CVE-2018-1000557 
OCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross Site Scripting (XSS) vulnerability in login form and search functionality that can result in An attacker is able to execute arbitrary (javascript) code within a victims' browser. This attack appear to be exploitable via Victim must open a crafted link to the application. This vulnerability appears to have been fixed in ocsreports 2.4.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T16:00:00.000Z
CVE-2018-1000558 
OCS Inventory NG ocsreports 2.4 and ocsreports 2.3.1 version 2.4 and 2.3.1 contains a SQL Injection vulnerability in web search that can result in An authenticated attacker is able to gain full access to data stored within database. This attack appear to be exploitable via By sending crafted requests it is possible to gain database access. This vulnerability appears to have been fixed in 2.4.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T16:00:00.000Z
CVE-2018-1000559 
qutebrowser version introduced in v0.11.0 (1179ee7a937fb31414d77d9970bac21095358449) contains a Cross Site Scripting (XSS) vulnerability in history command, qute://history page that can result in Via injected JavaScript code, a website can steal the user's browsing history. This attack appear to be exploitable via the victim must open a page with a specially crafted <title> attribute, and then open the qute://history site via the :history command. This vulnerability appears to have been fixed in fixed in v1.3.3 (4c9360237f186681b1e3f2a0f30c45161cf405c7, to be released today) and v1.4.0 (5a7869f2feaa346853d2a85413d6527c87ef0d9f, released later this week).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T16:00:00.000Z
CVE-2018-1000600 
A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier in GitHubTokenCredentialsCreator.java that allows attackers to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T17:00:00.000Z
CVE-2018-1000601 
A arbitrary file read vulnerability exists in Jenkins SSH Credentials Plugin 1.13 and earlier in BasicSSHUserPrivateKey.java that allows attackers with a Jenkins account and the permission to configure credential bindings to read arbitrary files from the Jenkins master file system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T17:00:00.000Z
CVE-2018-1000602 
A session fixation vulnerability exists in Jenkins SAML Plugin 1.0.6 and earlier in SamlSecurityRealm.java that allows unauthorized attackers to impersonate another users if they can control the pre-authentication session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T17:00:00.000Z
CVE-2018-1000603 
A exposure of sensitive information vulnerability exists in Jenkins Openstack Cloud Plugin 2.35 and earlier in BootSource.java, InstancesToRun.java, JCloudsCleanupThread.java, JCloudsCloud.java, JCloudsComputer.java, JCloudsPreCreationThread.java, JCloudsRetentionStrategy.java, JCloudsSlave.java, JCloudsSlaveTemplate.java, LauncherFactory.java, OpenstackCredentials.java, OpenStackMachineStep.java, SlaveOptions.java, SlaveOptionsDescriptor.java that allows attackers with Overall/Read access to Jenkins to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins, and to cause Jenkins to submit HTTP requests to attacker-specified URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T17:00:00.000Z
CVE-2018-1000604 
A persisted cross-site scripting vulnerability exists in Jenkins Badge Plugin 1.4 and earlier in BadgeSummaryAction.java, HtmlBadgeAction.java that allows attackers able to control build badge content to define JavaScript that would be executed in another user's browser when that other user performs some UI actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T17:00:00.000Z
CVE-2018-1000605 
A man in the middle vulnerability exists in Jenkins CollabNet Plugin 2.0.4 and earlier in CollabNetApp.java, CollabNetPlugin.java, CNFormFieldValidator.java that allows attackers to impersonate any service that Jenkins connects to.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T17:00:00.000Z
CVE-2018-1000606 
A server-side request forgery vulnerability exists in Jenkins URLTrigger Plugin 0.41 and earlier in URLTrigger.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T17:00:00.000Z
CVE-2018-1000607 
A arbitrary file write vulnerability exists in Jenkins Fortify CloudScan Plugin 1.5.1 and earlier in ArchiveUtil.java that allows attackers able to control rulepack zip file contents to overwrite any file on the Jenkins master file system, only limited by the permissions of the user the Jenkins master process is running as.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T17:00:00.000Z
CVE-2018-1000608 
A exposure of sensitive information vulnerability exists in Jenkins z/OS Connector Plugin 1.2.6.1 and earlier in SCLMSCM.java that allows an attacker with local file system access or control of a Jenkins administrator's web browser (e.g. malicious extension) to retrieve the configured password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T17:00:00.000Z
CVE-2018-1000609 
A exposure of sensitive information vulnerability exists in Jenkins Configuration as Code Plugin 0.7-alpha and earlier in ConfigurationAsCode.java that allows attackers with Overall/Read access to obtain the YAML export of the Jenkins configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T17:00:00.000Z
CVE-2018-1000610 
A exposure of sensitive information vulnerability exists in Jenkins Configuration as Code Plugin 0.7-alpha and earlier in DataBoundConfigurator.java, Attribute.java, BaseConfigurator.java, ExtensionConfigurator.java that allows attackers with access to Jenkins log files to obtain the passwords configured using Configuration as Code Plugin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T17:00:00.000Z
CVE-2018-1000611 
SURFnet OpenConext EngineBlock version 5.7.0 to 5.7.3 contains a Cross Site Scripting (XSS) vulnerability that can result in Allows an attacker to inject arbitrary web scripts or HTML into help and login pages. This attack appear to be exploitable via the victim opening a specially crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-09T20:00:00.000Z
CVE-2018-1000613 
Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in XMSS/XMSS^MT private key deserialization that can result in Deserializing an XMSS/XMSS^MT private key can result in the execution of unexpected code. This attack appear to be exploitable via A handcrafted private key can include references to unexpected classes which will be picked up from the class path for the executing application. This vulnerability appears to have been fixed in 1.60 and later.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-09T20:00:00.000Z
CVE-2018-1000614 
ONOS ONOS Controller version 1.13.1 and earlier contains a XML External Entity (XXE) vulnerability in providers/netconf/alarm/src/main/java/org/onosproject/provider/netconf/alarm/NetconfAlarmTranslator.java that can result in An adversary can remotely launch advanced XXE attacks on ONOS controller without authentication.. This attack appear to be exploitable via crafted protocol message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-09T20:00:00.000Z
CVE-2018-1000615 
ONOS ONOS Controller version 1.13.1 and earlier contains a Denial of Service (Service crash) vulnerability in OVSDB component in ONOS that can result in An adversary can remotely crash OVSDB service ONOS controller via a normal switch.. This attack appear to be exploitable via the attacker should be able to control or forge a switch in the network..
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-09T20:00:00.000Z
CVE-2018-1000616 
ONOS ONOS controller version 1.13.1 and earlier contains a XML External Entity (XXE) vulnerability in onos\drivers\utilities\src\main\java\org\onosproject\drivers\utilities\XmlConfigParser.java loadxml() that can result in An adversary can remotely launch XXE attacks on ONOS controller via an OpenConfig Terminal Device.. This attack appear to be exploitable via network connectivity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-09T20:00:00.000Z
CVE-2018-1000617 
Atlassian Floodlight Atlassian Floodlight Controller version 1.2 and earlier versions contains a Denial of Service vulnerability in Forwarding module that can result in Improper type cast in Forwarding module allows remote attackers to cause a DoS(thread crash).. This attack appear to be exploitable via network connectivity (Remote attack).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-09T20:00:00.000Z
CVE-2018-1000618 
EOSIO/eos eos version after commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168 contains a stack overflow vulnerability in abi_serializer that can result in attack eos network node. This attack appear to be exploitable via network request. This vulnerability appears to have been fixed in after commit cf7209e703e6d3f7a5413e0cb1fe88a4d8e4b38d .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-09T20:00:00.000Z
CVE-2018-1000619 
Ovidentia version 8.4.3 and earlier contains a Unsanitized User Input vulnerability in utilit.php, bab_getAddonFilePathfromTg that can result in Authenticated Remote Code Execution. This attack appear to be exploitable via The attacker must have permission to upload addons.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-09T20:00:00.000Z
CVE-2018-1000620 
Eran Hammer cryptiles version 4.1.1 earlier contains a CWE-331: Insufficient Entropy vulnerability in randomDigits() method that can result in An attacker is more likely to be able to brute force something that was supposed to be random.. This attack appear to be exploitable via Depends upon the calling application.. This vulnerability appears to have been fixed in 4.1.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-09T20:00:00.000Z
CVE-2018-1000621 
Mycroft AI mycroft-core version 18.2.8b and earlier contains a Incorrect Access Control vulnerability in Websocket configuration that can result in code execution. This impacts ONLY the Mycroft for Linux and "non-enclosure" installs - Mark 1 and Picroft unaffected. This attack appear to be exploitable remote access to the unsecured websocket server. This vulnerability appears to have been fixed in No fix currently available.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-09T20:00:00.000Z
CVE-2018-1000622 
The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-09T20:00:00.000Z
CVE-2018-1000623 
JFrog JFrog Artifactory version Prior to version 6.0.3, since version 4.0.0 contains a Directory Traversal vulnerability in The "Import Repository from Zip" feature, available through the Admin menu -> Import & Export -> Repositories, triggers a vulnerable UI REST endpoint (/ui/artifactimport/upload) that can result in Directory traversal / file overwrite and remote code execution. This attack appear to be exploitable via An attacker with Admin privileges may use the aforementioned UI endpoint and exploit the publicly known "Zip Slip" vulnerability, to add/overwrite files outside the target directory. This vulnerability appears to have been fixed in 6.0.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-09T20:00:00.000Z
CVE-2018-1000624 
Battelle V2I Hub 2.5.1 is vulnerable to a denial of service, caused by the failure to restrict access to a sensitive functionality. By visiting http://V2I_HUB/UI/powerdown.php, a remote attacker could exploit this vulnerability to shut down the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T14:00:00.000Z
CVE-2018-1000625 
Battelle V2I Hub 2.5.1 contains hard-coded credentials for the administrative account. An attacker could exploit this vulnerability to log in as an admin on any installation and gain unauthorized access to the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T14:00:00.000Z
CVE-2018-1000626 
Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the lack of requirement to change the default API key. An attacker could exploit this vulnerability using all available API functions containing an unchanged API key to gain unauthorized access to the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T14:00:00.000Z
CVE-2018-1000627 
Battelle V2I Hub 2.5.1 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict access to the API key file. An attacker could exploit this vulnerability to obtain the current API key to gain unauthorized access to the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T14:00:00.000Z
CVE-2018-1000628 
Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the direct checking of the API key against a user-supplied value in PHP's GET global variable array using PHP's strcmp() function. By adding "[]" to the end of "key" in the URL when accessing API functions, an attacker could exploit this vulnerability to execute API functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T14:00:00.000Z
CVE-2018-1000629 
Battelle V2I Hub 2.5.1 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by api/SystemConfigActions.php?action=add and the index.php script. A remote attacker could exploit this vulnerability using the parameterName or _login_username parameter in a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T14:00:00.000Z
CVE-2018-1000630 
Battelle V2I Hub 2.5.1 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to /api/PluginStatusActions.php and /status/pluginStatus.php using the jtSorting or id parameter, which could allow the attacker to view, add, modify or delete information in the back-end database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T14:00:00.000Z
CVE-2018-1000631 
Battelle V2I Hub 3.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the tmx/TmxCtl/src/lib/PluginStatus.cpp and TmxControl::user_info() function, which could allow the attacker to view, add, modify or delete information in the back-end database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T14:00:00.000Z
CVE-2018-1000632 
dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000633 
The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log Files vulnerability in the login form and change password form that can result in User's password being revealed. Attacker can log in as that user. This attack appear to be exploitable via an attacker reading the web server log. This vulnerability appears to have been fixed in 5.4.7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z
CVE-2018-1000634 
The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulnerability in User management that can result in administrative user with privilege restrictions logging in as a more powerful administrator. This attack appear to be exploitable via Use user administration privilege to set the password of a more powerful administrator. This vulnerability appears to have been fixed in 5.4.7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T19:00:00.000Z