rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-6874 
CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-04T17:00:00.000Z
CVE-2018-6875 
Format String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information display (of information that should not be accessible), related to text containing characters that the device's font lacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-14T13:00:00.000Z
CVE-2018-6876 
The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other products, allows remote attackers to cause a denial of service (stack-based buffer under-read) via a crafted bmp image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-09T18:00:00.000Z
CVE-2018-6878 
Cross Site Scripting (XSS) exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-09T18:00:00.000Z
CVE-2018-6879 
PHP Scripts Mall Website Seller Script 2.0.3 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-12T22:00:00.000Z
CVE-2018-6880 
EmpireCMS 6.6 through 7.2 allows remote attackers to discover the full path via an array value for a parameter to class/connect.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-12T03:00:00.000Z
CVE-2018-6881 
EmpireCMS 6.6 allows remote attackers to discover the full path via an array value for a parameter to admin/tool/ShowPic.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-12T03:00:00.000Z
CVE-2018-6882 
Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite (ZCS) before 8.7 Patch 1 and 8.8.x before 8.8.7 might allow remote attackers to inject arbitrary web script or HTML via a Content-Location header in an email attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T16:00:00.000Z
CVE-2018-6883 
Piwigo before 2.9.3 has SQL injection in admin/tags.php in the administration panel, via the tags array parameter in an admin.php?page=tags request. The attacker must be an administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-24T16:00:00.000Z
CVE-2018-6885 
An issue was discovered in MicroStrategy Web Services (the Microsoft Office plugin) before 10.4 Hotfix 7, and before 10.11. The vulnerability is unauthenticated and leads to access to the asset files with the MicroStrategy user privileges. (This includes the credentials to access the admin dashboard which may lead to RCE.) The path traversal is located in a SOAP request in the web service component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-14T18:35:15.000Z
CVE-2018-6888 
An issue was discovered in Typesetter 5.1. The User Permissions page (aka Admin/Users) suffers from critical flaw of Cross Site Request forgery: using a forged HTTP request, a malicious user can lead a user to unknowingly create / delete or modify a user account due to the lack of an anti-CSRF token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-12T03:00:00.000Z
CVE-2018-6889 
An issue was discovered in Typesetter 5.1. It suffers from a Host header injection vulnerability, Using this attack, a malicious user can poison the web cache or perform advanced password reset attacks or even trigger arbitrary user re-direction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-12T03:00:00.000Z
CVE-2018-6890 
Cross-site scripting (XSS) vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/page/edit/3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-22T19:00:00.000Z
CVE-2018-6891 
Bookly #1 WordPress Booking Plugin Lite before 14.5 has XSS via a jQuery.ajax request to ng-payment_details_dialog.js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-11T06:00:00.000Z
CVE-2018-6892 
An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-11T18:00:00.000Z
CVE-2018-6893 
controllers/member/Api.php in dayrui FineCms 5.2.0 has SQL Injection: a request with s=member,c=api,m=checktitle, and the parameter 'module' with a SQL statement, lacks effective filtering.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-12T14:00:00.000Z
CVE-2018-6900 
PHP Scripts Mall Website Broker Script 3.0.6 has XSS via the Last Name field on the My Profile page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-12T22:00:00.000Z
CVE-2018-6902 
PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-12T22:00:00.000Z
CVE-2018-6903 
PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-12T22:00:00.000Z
CVE-2018-6904 
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-12T22:00:00.000Z
CVE-2018-6905 
The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename'], as demonstrated by an admin entering a crafted site name during the installation process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-08T17:00:00.000Z
CVE-2018-6906 
A persistent Cross Site Scripting (XSS) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allows an attacker to inject arbitrary JavaScript via the REST API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-01T17:00:00.000Z
CVE-2018-6907 
A Cross Site Request Forgery (CSRF) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allows an attacker to control the RainMachine device via the REST API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-01T17:00:00.000Z
CVE-2018-6908 
An authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allowing an unauthenticated attacker to perform authenticated actions on the device via a 127.0.0.1:port value in the HTTP 'Host' header, as demonstrated by retrieving credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-01T17:00:00.000Z
CVE-2018-6909 
A missing X-Frame-Options header in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application could be used by a remote attacker for clickjacking, as demonstrated by triggering an API page request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-01T17:00:00.000Z
CVE-2018-6910 
DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/inc_archives_functions.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-13T21:00:00.000Z
CVE-2018-6911 
The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS commands via a single argument (aka the command parameter).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-13T14:00:00.000Z
CVE-2018-6912 
The decode_plane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out of array read) via a crafted AVI file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-12T02:00:00.000Z
CVE-2018-6913 
Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-17T20:00:00.000Z
CVE-2018-6914 
Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 might allow attackers to create arbitrary directories or files via a .. (dot dot) in the prefix argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-03T22:00:00.000Z
CVE-2018-6916 
In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE, 10.4-RELEASE-p7, and 10.3-RELEASE-p28, the kernel does not properly validate IPsec packets coming from a trusted host. Additionally, a use-after-free vulnerability exists in the IPsec AH handling code. This issue could cause a system crash or other unpredictable results.
Problem types: description: Improper validation
Affected products: vendor: FreeBSD
product: FreeBSD
Published: 2018-03-09T15:00:00.000Z
CVE-2018-6917 
In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, insufficient validation of user-provided font parameters can result in an integer overflow, leading to the use of arbitrary kernel memory as glyph data. Unprivileged users may be able to access privileged kernel data.
Problem types: description: Kernel memory disclosure
Affected products: vendor: FreeBSD
product: FreeBSD
Published: 2018-04-04T14:00:00.000Z
CVE-2018-6918 
In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option header does not count the size of the option header itself, causing an infinite loop when the length is zero. This issue can allow a remote attacker who is able to send an arbitrary packet to cause the machine to crash.
Problem types: description: Kernel crash or denial of service
Affected products: vendor: FreeBSD
product: FreeBSD
Published: 2018-04-04T14:00:00.000Z
CVE-2018-6919 
In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, due to insufficient initialization of memory copied to userland, small amounts of kernel memory may be disclosed to userland processes. Unprivileged users may be able to access small amounts privileged kernel data.
Problem types: description: Kernel memory disclosure
Affected products: vendor: FreeBSD
product: FreeBSD
Published: 2018-04-04T14:00:00.000Z
CVE-2018-6920 
In FreeBSD before 11.1-STABLE(r332303), 11.1-RELEASE-p10, 10.4-STABLE(r332321), and 10.4-RELEASE-p9, due to insufficient initialization of memory copied to userland in the Linux subsystem and Atheros wireless driver, small amounts of kernel memory may be disclosed to userland processes. Unprivileged authenticated local users may be able to access small amounts of privileged kernel data.
Problem types: description: Kernel memory disclosure
Affected products: vendor: FreeBSD
product: FreeBSD
Published: 2018-05-08T19:00:00.000Z
CVE-2018-6921 
In FreeBSD before 11.1-STABLE(r332066) and 11.1-RELEASE-p10, due to insufficient initialization of memory copied to userland in the network subsystem, small amounts of kernel memory may be disclosed to userland processes. Unprivileged authenticated local users may be able to access small amounts of privileged kernel data.
Problem types: description: Kernel memory disclosure
Affected products: vendor: FreeBSD
product: FreeBSD
Published: 2018-05-08T19:00:00.000Z
CVE-2018-6922 
One of the data structures that holds TCP segments in all versions of FreeBSD prior to 11.2-RELEASE-p1, 11.1-RELEASE-p12, and 10.4-RELEASE-p10 uses an inefficient algorithm to reassemble the data. This causes the CPU time spent on segment processing to grow linearly with the number of segments in the reassembly queue. An attacker who has the ability to send TCP traffic to a victim system can degrade the victim system's network performance and/or consume excessive CPU by exploiting the inefficiency of TCP reassembly handling, with relatively small bandwidth cost.
Problem types: cwe_id: CWE-400
description: CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')
Affected products: vendor: FreeBSD
product: FreeBSD
Published: 2018-08-09T18:00:00.000Z
CVE-2018-6923 
In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE-p13, ip fragment reassembly code is vulnerable to a denial of service due to excessive system resource consumption. This issue can allow a remote attacker who is able to send an arbitrary ip fragments to cause the machine to consume excessive resources.
Problem types: description: Denial of service
Affected products: vendor: FreeBSD
product: FreeBSD
Published: 2018-09-04T18:00:00.000Z
CVE-2018-6924 
In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE-p12, insufficient validation in the ELF header parser could allow a malicious ELF binary to cause a kernel crash or disclose kernel memory.
Problem types: description: Kernel memory disclosure
Affected products: vendor: FreeBSD
product: FreeBSD
Published: 2018-09-12T15:00:00.000Z
CVE-2018-6925 
In FreeBSD before 11.2-STABLE(r338986), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338985), and 10.4-RELEASE-p13, due to improper maintenance of IPv6 protocol control block flags through various failure paths, an unprivileged authenticated local user may be able to cause a NULL pointer dereference causing the kernel to crash.
Problem types: description: Denial of service
Affected products: vendor: FreeBSD
product: FreeBSD
Published: 2018-09-28T13:00:00.000Z
CVE-2018-6926 
In app/Controller/ServersController.php in MISP 2.4.87, a server setting permitted the override of a path variable on certain Red Hed Enterprise Linux and CentOS systems (where rh_shell_fix was enabled), and consequently allowed site admins to inject arbitrary OS commands. The impact is limited by the setting being only accessible to the site administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-12T17:00:00.000Z
CVE-2018-6927 
The futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact by triggering a negative wake or requeue value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-12T19:00:00.000Z
CVE-2018-6928 
PHP Scripts Mall News Website Script 2.0.4 has SQL Injection via a search term.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-13T17:00:00.000Z
CVE-2018-6930 
A stack-based buffer over-read in the ComputeResizeImage function in the MagickCore/accelerate.c file of ImageMagick 7.0.7-22 allows a remote attacker to cause a denial of service (application crash) via a maliciously crafted pict file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-13T05:00:00.000Z
CVE-2018-6934 
CSRF exists in student/personal-info in PHP Scripts Mall Online Tutoring Script 2.0.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-12T22:00:00.000Z
CVE-2018-6935 
PHP Scripts Mall Student Profile Management System Script v2.0.6 has XSS via the Name field to list_student.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-12T22:00:00.000Z
CVE-2018-6936 
Cross Site Scripting (XSS) exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T22:00:00.000Z
CVE-2018-6940 
A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote Code Execution in conjunction with CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-20T15:00:00.000Z
CVE-2018-6941 
A /shell?cmd= CSRF issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote Code Execution in conjunction with XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-20T15:00:00.000Z
CVE-2018-6942 
An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-13T05:00:00.000Z
CVE-2018-6943 
core/lib/upload/um-image-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerability because it fails to properly sanitize user input passed to the $temp variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-16T14:00:00.000Z
CVE-2018-6944 
core/lib/upload/um-file-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerability because it fails to properly sanitize user input passed to the $temp variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-16T14:00:00.000Z
CVE-2018-6947 
An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit), and denial of service for Windows 8 and 10.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-28T22:00:00.000Z
CVE-2018-6948 
In CCN-lite 2, the function ccnl_prefix_to_str_detailed can cause a buffer overflow, when writing a prefix to the buffer buf. The maximal size of the prefix is CCNL_MAX_PREFIX_SIZE; the buffer has the size CCNL_MAX_PREFIX_SIZE. However, when NFN is enabled, additional characters are written to the buffer (e.g., the "NFN" and "R2C" tags). Therefore, sending an NFN-R2C packet with a prefix of size CCNL_MAX_PREFIX_SIZE can cause an overflow of buf inside ccnl_prefix_to_str_detailed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-13T17:00:00.000Z
CVE-2018-6951 
An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-13T19:00:00.000Z
CVE-2018-6952 
A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-13T19:00:00.000Z
CVE-2018-6953 
In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the actual component length, which has a resultant buffer overflow and out-of-bounds memory accesses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-13T20:00:00.000Z
CVE-2018-6954 
systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protected_symlinks sysctl is turned on.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-13T20:00:00.000Z
CVE-2018-6957 
VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by opening a large number of VNC sessions. Note: In order for exploitation to be possible on Workstation and Fusion, VNC must be manually enabled.
Problem types: description: Denial-of-service vulnerability
Affected products: vendor: VMware
product: Workstation
vendor: VMware
product: Fusion
Published: 2018-03-15T19:00:00.000Z
CVE-2018-6958 
VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scripting (XSS) attack. Exploitation of this issue may lead to the compromise of the vRA user's workstation.
Problem types: description: DOM-based cross-site scripting (XSS) vulnerability
Affected products: vendor: VMware
product: vRealize Automation
Published: 2018-04-13T13:00:00.000Z
CVE-2018-6959 
VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. Exploitation of this issue may lead to the hijacking of a valid vRA user's session.
Problem types: description: Missing renewal of session tokens vulnerability
Affected products: vendor: VMware
product: vRealize Automation
Published: 2018-04-13T13:00:00.000Z
CVE-2018-6960 
VMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may allow an attacker to bypass two-factor authentication. Note: In order to exploit this issue, an attacker must have a legitimate account on Horizon DaaS.
Problem types: description: Broken authentication vulnerability
Affected products: vendor: VMware
product: Horizon DaaS
Published: 2018-04-20T13:00:00.000Z
CVE-2018-6961 
VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this service from the product in future releases. Successful exploitation of this issue could result in remote code execution.
Problem types: description: Command Injection
Affected products: vendor: VMware
product: NSX SD-WAN by VeloCloud
Published: 2018-06-11T22:00:00.000Z
CVE-2018-6962 
VMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may lead to a local privilege escalation.
Problem types: description: Signature bypass vulnerability
Affected products: vendor: VMware
product: Fusion
Published: 2018-05-22T13:00:00.000Z
CVE-2018-6963 
VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due to NULL pointer dereference issues in the RPC handler. Successful exploitation of these issues may allow an attacker with limited privileges on the guest machine trigger a denial-of-Service of their guest machine.
Problem types: description: Multiple Denial-of-service vulnerabilities
Affected products: vendor: VMware
product: Workstation
vendor: VMware
product: Fusion
Published: 2018-05-22T13:00:00.000Z