rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-12022 
An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db jar (for database access for the Jodd framework) in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T18:14:21.000Z
CVE-2018-12023 
An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Oracle JDBC jar in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T17:57:52.000Z
CVE-2018-12025 
The transferFrom function of a smart contract implementation for FuturXE (FXE), an Ethereum ERC20 token, allows attackers to accomplish an unauthorized transfer of digital assets because of a logic error. The developer messed up with the boolean judgment - if the input value is smaller than or equal to allowed value, the transfer session would stop execution by returning false. This makes no sense, because the transferFrom() function should require the transferring value to not exceed the allowed value in the first place. Suppose this function asks for the allowed value to be smaller than the input. Then, the attacker could easily ignore the allowance: after this condition, the `allowed[from][msg.sender] -= value;` would cause an underflow because the allowed part is smaller than the value. The attacker could transfer any amount of FuturXe tokens of any accounts to an appointed account (the `_to` address) because the allowed value is initialized to 0, and the attacker could bypass this restriction even without the victim's private key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-11T10:00:00.000Z
CVE-2018-12026 
During the spawning of a malicious Passenger-managed application, SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace key files or directories in the spawning communication directory with symlinks. This then could result in arbitrary reads and writes, which in turn can result in information disclosure and privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-17T20:00:00.000Z
CVE-2018-12027 
An Insecure Permissions vulnerability in SpawningKit in Phusion Passenger 5.3.x before 5.3.2 causes information disclosure in the following situation: given a Passenger-spawned application process that reports that it listens on a certain Unix domain socket, if any of the parent directories of said socket are writable by a normal user that is not the application's user, then that non-application user can swap that directory with something else, resulting in traffic being redirected to a non-application user's process through an alternative Unix domain socket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-17T20:00:00.000Z
CVE-2018-12028 
An Incorrect Access Control vulnerability in SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows a Passenger-managed malicious application, upon spawning a child process, to report an arbitrary different PID back to Passenger's process manager. If the malicious application then generates an error, it would cause Passenger's process manager to kill said reported arbitrary PID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-17T20:00:00.000Z
CVE-2018-12029 
A race condition in the nginx module in Phusion Passenger 3.x through 5.x before 5.3.2 allows local escalation of privileges when a non-standard passenger_instance_registry_dir with insufficiently strict permissions is configured. Replacing a file with a symlink after the file was created, but before it was chowned, leads to the target of the link being chowned via the path. Targeting sensitive files such as root's crontab file allows privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-17T20:00:00.000Z
CVE-2018-12030 
Chevereto Free before 1.0.13 has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-15T16:00:00.000Z
CVE-2018-12031 
Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory traversal with the firmware parameter in a downloadFirmware action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-07T16:00:00.000Z
CVE-2018-12034 
In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in yr_execute_code in libyara/exec.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-15T16:00:00.000Z
CVE-2018-12035 
In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds write vulnerability in yr_execute_code in libyara/exec.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-15T16:00:00.000Z
CVE-2018-12036 
OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-07T18:00:00.000Z
CVE-2018-12037 
An issue was discovered on Samsung 840 EVO and 850 EVO devices (only in "ATA high" mode, not vulnerable in "TCG" or "ATA max" mode), Samsung T3 and T5 portable drives, and Crucial MX100, MX200 and MX300 devices. Absence of a cryptographic link between the password and the Disk Encryption Key allows attackers with privileged access to SSD firmware full access to encrypted data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-20T19:00:00.000Z
CVE-2018-12038 
An issue was discovered on Samsung 840 EVO devices. Vendor-specific commands may allow access to the disk-encryption key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-20T19:00:00.000Z
CVE-2018-12039 
joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary SQL command execution issue in manager/index.php involving use of a "/!select/" substring in place of a select substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-07T19:00:00.000Z
CVE-2018-12040 
Reflected Cross-site scripting (XSS) vulnerability in the web profiler in SensioLabs Symfony 3.3.6 allows remote attackers to inject arbitrary web script or HTML via the "file" parameter, aka an _profiler/open?file= URI.  NOTE: The vendor states "The XSS ... is in the web profiler, a tool that should never be deployed in production (so, we don't handle those issues as security issues).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-13T22:00:00.000Z
CVE-2018-12041 
An issue was discovered on the MediaTek AWUS036NH wireless USB adapter through 5.1.25.0. Attackers can remotely deny service by sending specially constructed 802.11 frames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T01:00:00.000Z
CVE-2018-12042 
Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-07T20:00:00.000Z
CVE-2018-12043 
content/content.blueprintspages.php in Symphony 2.7.6 has XSS via the pages content page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-07T20:00:00.000Z
CVE-2018-12045 
DedeCMS through V5.7SP2 allows arbitrary file upload in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=upload request with an upfile1 parameter, as demonstrated by uploading a .php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T01:00:00.000Z
CVE-2018-12046 
DedeCMS through 5.7SP2 allows arbitrary file write in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=newfile request with name and str parameters, as demonstrated by writing to a new .php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T01:00:00.000Z
CVE-2018-12047 
xfind/search in Ximdex 4.0 has XSS via the filter[n][value] parameters for non-negative values of n, as demonstrated by n equal to 0 through 12.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T01:00:00.000Z
CVE-2018-12048 
A remote attacker can bypass the Management Mode on the Canon LBP7110Cw web interface without a PIN for /checkLogin.cgi via vectors involving /portal_top.html to get full access to the device. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the default settings without using the countermeasures and best practices shown in the documentation
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T01:00:00.000Z
CVE-2018-12049 
A remote attacker can bypass the System Manager Mode on the Canon LBP6030w web interface without a PIN for /checkLogin.cgi via vectors involving /portal_top.html to get full access to the device. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the default settings without using the countermeasures and best practices shown in the documentation
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T01:00:00.000Z
CVE-2018-12051 
Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $_FILE in /webmasterst/general.php, as demonstrated by a .php file with the image/jpeg content type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T11:00:00.000Z
CVE-2018-12052 
SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in get_sec.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T11:00:00.000Z
CVE-2018-12053 
Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in delete_img.php by using directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T11:00:00.000Z
CVE-2018-12054 
Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f parameter in img.php, aka absolute path traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T11:00:00.000Z
CVE-2018-12055 
Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contact_us.php, faq.php, about.php, photo_gallery.php, privacy.php, and so on.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T11:00:00.000Z
CVE-2018-12056 
The maxRandom function of a smart contract implementation for All For One, an Ethereum gambling game, generates a random value with publicly readable variables because the _seed value can be retrieved with a getStorageAt call. Therefore, it allows attackers to always win and get rewards.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-15T17:00:00.000Z
CVE-2018-12062 
The sell function of a smart contract implementation for SwftCoin (SWFTC), a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the "tradeTrap" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T11:00:00.000Z
CVE-2018-12063 
The sell function of a smart contract implementation for Internet Node Token (INT), a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the "tradeTrap" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T11:00:00.000Z
CVE-2018-12064 
tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T12:00:00.000Z
CVE-2018-12065 
A Local File Inclusion vulnerability in /system/WCore/WHelper.php in Creatiwity wityCMS 0.6.2 allows remote attackers to include local PHP files (execute PHP code) or read non-PHP files by replacing a helper.json file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T12:00:00.000Z
CVE-2018-12066 
BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service (stack consumption and daemon crash) via BGP mask expressions in birdc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T14:00:00.000Z
CVE-2018-12067 
The sell function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the "tradeTrap" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T11:00:00.000Z
CVE-2018-12068 
The sell function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the "tradeTrap" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T11:00:00.000Z
CVE-2018-12070 
The sell function of a smart contract implementation for SEC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the "tradeTrap" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T11:00:00.000Z
CVE-2018-12071 
A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.use_strict_mode in the Session Library was mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-17T20:00:00.000Z
CVE-2018-12072 
An issue was discovered in Cloud Media Popcorn A-200 03-05-130708-21-POP-411-000 firmware. It is configured to provide TELNET remote access (without a password) that pops a shell as root. If an attacker can connect to port 23 on the device, he can completely compromise it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-17T20:00:00.000Z
CVE-2018-12073 
An issue was discovered on Eminent EM4544 9.10 devices. The device does not require the user's current password to set a new one within the web interface. Therefore, it is possible to exploit this issue (e.g., in combination with a successful XSS, or at an unattended workstation) to change the admin password to an attacker-chosen value without knowing the current password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-17T20:00:00.000Z
CVE-2018-12076 
A vulnerability in the UPC bar code of the Avanti Markets MarketCard could allow an unauthenticated, local attacker to access funds within the customer's MarketCard balance, and also could lead to Customer Information Disclosure. The vulnerability is due to lack of proper validation of the UPC bar code present on the MarketCard. An attacker could exploit this vulnerability by generating a copy of a customer's bar code. An exploit could allow the attacker to access all funds located within the MarketCard or allow unauthenticated disclosure of information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-13T19:00:00.000Z
CVE-2018-12078 
The mintToken function of a smart contract implementation for PolyAI (AI), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T11:00:00.000Z
CVE-2018-12079 
The mintToken function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T11:00:00.000Z
CVE-2018-12080 
The mintToken function of a smart contract implementation for Internet Node Token (INT), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T11:00:00.000Z
CVE-2018-12081 
The mintToken function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T11:00:00.000Z
CVE-2018-12082 
The mintToken function of a smart contract implementation for Fujinto (NTO), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T11:00:00.000Z
CVE-2018-12083 
The mintToken function of a smart contract implementation for GOAL Bonanza (GOAL), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T11:00:00.000Z
CVE-2018-12084 
The mintToken function of a smart contract implementation for BitAsean (BAS), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-25T11:00:00.000Z
CVE-2018-12085 
Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-09T11:00:00.000Z
CVE-2018-12086 
Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-14T21:00:00.000Z
CVE-2018-12087 
Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-03T18:00:00.000Z
CVE-2018-12088 
S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present old versions of the filesystem metadata database as up-to-date, temporarily inject zero-valued bytes into files, or temporarily hide parts of files. This is related to the checksum_basic_mapping function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-10T23:00:00.000Z
CVE-2018-12089 
In Octopus Deploy version 2018.5.1 to 2018.5.7, a user with Task View is able to view a password for a Service Fabric Cluster, when the Service Fabric Cluster target is configured in Azure Active Directory security mode and a deployment is executed with OctopusPrintVariables set to True. This is fixed in 2018.6.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-11T10:00:00.000Z
CVE-2018-12090 
There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaScript via manipulation of an unsanitized GET parameter during a forgotPasswordChange.jsp?key= password change.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-11T10:00:00.000Z
CVE-2018-12092 
tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-11T11:00:00.000Z
CVE-2018-12093 
tinyexr 0.9.5 has a memory leak in ParseEXRHeaderFromMemory in tinyexr.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-11T11:00:00.000Z
CVE-2018-12094 
Cross-site scripting (XSS) vulnerability in news.php in Dimofinf CMS Version 3.0.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-11T11:00:00.000Z
CVE-2018-12095 
A Reflected Cross-Site Scripting web vulnerability has been discovered in the OEcms v3.1 web-application. The vulnerability is located in the mod parameter of info.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-11T11:00:00.000Z
CVE-2018-12096 
The liblnk_data_string_get_utf8_string_size function in liblnk_data_string.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T21:00:00.000Z
CVE-2018-12097 
The liblnk_location_information_read_data function in liblnk_location_information.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T21:00:00.000Z
CVE-2018-12098 
The liblnk_data_block_read function in liblnk_data_block.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T21:00:00.000Z
CVE-2018-12099 
Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-11T11:00:00.000Z