rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-1000188 
A server-side request forgery vulnerability exists in Jenkins CAS Plugin 1.4.1 and older in CasSecurityRealm.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T20:00:00.000Z
CVE-2018-1000189 
A command execution vulnerability exists in Jenkins Absint Astree Plugin 1.0.5 and older in AstreeBuilder.java that allows attackers with Overall/Read access to execute a command on the Jenkins master.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T20:00:00.000Z
CVE-2018-1000190 
A exposure of sensitive information vulnerability exists in Jenkins Black Duck Hub Plugin 4.0.0 and older in PostBuildScanDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T20:00:00.000Z
CVE-2018-1000191 
A exposure of sensitive information vulnerability exists in Jenkins Black Duck Detect Plugin 1.4.0 and older in DetectPostBuildStepDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T20:00:00.000Z
CVE-2018-1000192 
A information exposure vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in AboutJenkins.java, ListPluginsCommand.java that allows users with Overall/Read access to enumerate all installed plugins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T21:00:00.000Z
CVE-2018-1000193 
A improper neutralization of control sequences vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in HudsonPrivateSecurityRealm.java that allows users to sign up using user names containing control characters that can then appear to have the same name as other users, and cannot be deleted via the UI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T21:00:00.000Z
CVE-2018-1000194 
A path traversal vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in FilePath.java, SoloFilePathFilter.java that allows malicious agents to read and write arbitrary files on the Jenkins master, bypassing the agent-to-master security subsystem protection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T21:00:00.000Z
CVE-2018-1000195 
A server-side request forgery vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in ZipExtractionInstaller.java that allows users with Overall/Read permission to have Jenkins submit a HTTP GET request to an arbitrary URL and learn whether the response is successful (200) or not.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T21:00:00.000Z
CVE-2018-1000196 
A exposure of sensitive information vulnerability exists in Jenkins Gitlab Hook Plugin 1.4.2 and older in gitlab_notifier.rb, views/gitlab_notifier/global.erb that allows attackers with local Jenkins master file system access or control of a Jenkins administrator's web browser (e.g. malicious extension) to retrieve the configured Gitlab token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T21:00:00.000Z
CVE-2018-1000197 
An improper authorization vulnerability exists in Jenkins Black Duck Hub Plugin 3.0.3 and older in PostBuildScanDescriptor.java that allows users with Overall/Read permission to read and write the Black Duck Hub plugin configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T21:00:00.000Z
CVE-2018-1000198 
A XML external entity processing vulnerability exists in Jenkins Black Duck Hub Plugin 3.1.0 and older in PostBuildScanDescriptor.java that allows attackers with Overall/Read permission to make Jenkins process XML eternal entities in an XML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T21:00:00.000Z
CVE-2018-1000199 
The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T13:00:00.000Z
CVE-2018-1000200 
The Linux Kernel versions 4.14, 4.15, and 4.16 has a null pointer dereference which can result in an out of memory (OOM) killing of large mlocked processes. The issue arises from an oom killed process's final thread calling exit_mmap(), which calls munlock_vma_pages_all() for mlocked vmas.This can happen synchronously with the oom reaper's unmap_page_range() since the vma's VM_LOCKED bit is cleared before munlocking (to determine if any other vmas share the memory and are mlocked).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T13:00:00.000Z
CVE-2018-1000201 
ruby-ffi version 1.9.23 and earlier has a DLL loading issue which can be hijacked on Windows OS, when a Symbol is used as DLL name instead of a String This vulnerability appears to have been fixed in v1.9.24 and later.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-22T18:00:00.000Z
CVE-2018-1000202 
A persisted cross-site scripting vulnerability exists in Jenkins Groovy Postbuild Plugin 2.3.1 and older in various Jelly files that allows attackers able to control build badge content to define JavaScript that would be executed in another user's browser when that other user performs some UI actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T21:00:00.000Z
CVE-2018-1000203 
Soar Labs Soar Coin version up to and including git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f (latest release as of Sept 2017) contains an intentional backdoor vulnerability in the function zero_fee_transaction() that can result in theft of Soar Coins by the "onlycentralAccount" (Soar Labs) after payment is processed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-06T19:00:00.000Z
CVE-2018-1000204 
Linux Kernel version 3.18 to 4.16 incorrectly handles an SG_IO ioctl on /dev/sg0 with dxfer_direction=SG_DXFER_FROM_DEV and an empty 6-byte cmdp. This may lead to copying up to 1000 kernel heap pages to the userspace. This has been fixed upstream in https://github.com/torvalds/linux/commit/a45b599ad808c3c982fdcdc12b0b8611c2f92824 already. The problem has limited scope, as users don't usually have permissions to access SCSI devices. On the other hand, e.g. the Nero user manual suggests doing `chmod o+r+w /dev/sg*` to make the devices accessible. NOTE: third parties dispute the relevance of this report, noting that the requirement for an attacker to have both the CAP_SYS_ADMIN and CAP_SYS_RAWIO capabilities makes it "virtually impossible to exploit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T14:00:00.000Z
CVE-2018-1000205 
U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T16:00:00.000Z
CVE-2018-1000206 
JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that can result in Classic CSRF attack allowing an attacker to perform actions as logged in user. This attack appear to be exploitable via The victim must run maliciously crafted flash component. This vulnerability appears to have been fixed in 6.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T18:00:00.000Z
CVE-2018-1000207 
MODX Revolution version <=2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability appears to have been fixed in commit 06bc94257408f6a575de20ddb955aca505ef6e68.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T18:00:00.000Z
CVE-2018-1000208 
MODX Revolution version <=2.6.4 contains a Directory Traversal vulnerability in /core/model/modx/modmanagerrequest.class.php that can result in remove files. This attack appear to be exploitable via web request via security/login processor. This vulnerability appears to have been fixed in pull 13980.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T18:00:00.000Z
CVE-2018-1000209 
Sensu, Inc. Sensu Core version Before version 1.4.2-3 contains a Insecure Permissions vulnerability in Sensu Core on Windows platforms that can result in Unprivileged users may execute code in context of Sensu service account. This attack appear to be exploitable via Unprivileged user may place an arbitrary DLL in the c:\opt\sensu\embedded\bin directory in order to exploit standard Windows DLL load order behavior. This vulnerability appears to have been fixed in 1.4.2-3 and later.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T18:00:00.000Z
CVE-2018-1000210 
YamlDotNet version 4.3.2 and earlier contains a Insecure Direct Object Reference vulnerability in The default behavior of Deserializer.Deserialize() will deserialize user-controlled types in the line "currentType = Type.GetType(nodeEvent.Tag.Substring(1), throwOnError: false);" and blindly instantiates them. that can result in Code execution in the context of the running process. This attack appear to be exploitable via Victim must parse a specially-crafted YAML file. This vulnerability appears to have been fixed in 5.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T18:00:00.000Z
CVE-2018-1000211 
Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that can result in Access tokens are not revoked for public OAuth apps, leaking access until expiry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T18:00:00.000Z
CVE-2018-1000215 
Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS). This attack appear to be exploitable via If the attacker can force the data to be printed and the system is in low memory it can force a leak of memory. This vulnerability appears to have been fixed in 1.7.7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T20:00:00.000Z
CVE-2018-1000216 
Dave Gamble cJSON version 1.7.2 and earlier contains a CWE-415: Double Free vulnerability in cJSON library that can result in Possible crash or RCE. This attack appear to be exploitable via Attacker must be able to force victim to print JSON data, depending on how cJSON library is used this could be either local or over a network. This vulnerability appears to have been fixed in 1.7.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T20:00:00.000Z
CVE-2018-1000217 
Dave Gamble cJSON version 1.7.3 and earlier contains a CWE-416: Use After Free vulnerability in cJSON library that can result in Possible crash, corruption of data or even RCE. This attack appear to be exploitable via Depends on how application uses cJSON library. If application provides network interface then can be exploited over a network, otherwise just local.. This vulnerability appears to have been fixed in 1.7.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T20:00:00.000Z
CVE-2018-1000218 
OpenEMR version v5_0_1_4 contains a Cross Site Scripting (XSS) vulnerability in The 'file' parameter in line #43 of interface/fax/fax_view.php that can result in The vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML.. This attack appear to be exploitable via The victim must visit on a specially crafted URL..
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T20:00:00.000Z
CVE-2018-1000219 
OpenEMR version v5_0_1_4 contains a Cross Site Scripting (XSS) vulnerability in The 'scan' parameter in line #41 of interface/fax/fax_view.php that can result in The vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML.. This attack appear to be exploitable via The victim must visit on a specially crafted URL..
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T20:00:00.000Z
CVE-2018-1000221 
pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote() that can result in dequote() function returns 1-byte allocation if initial length is 0, leading to buffer overflow. This attack appear to be exploitable via specially crafted .pc file. This vulnerability appears to have been fixed in 1.5.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T20:00:00.000Z
CVE-2018-1000222 
Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free. This vulnerability appears to have been fixed in after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T20:00:00.000Z
CVE-2018-1000223 
soundtouch version up to and including 2.0.0 contains a Buffer Overflow vulnerability in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock() that can result in arbitrary code execution. This attack appear to be exploitable via victim must open maliocius file in soundstretch utility.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T20:00:00.000Z
CVE-2018-1000224 
Godot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6. contains a Signed/unsigned comparison, wrong buffer size chackes, integer overflow, missing padding initialization vulnerability in (De)Serialization functions (core/io/marshalls.cpp) that can result in DoS (packet of death), possible leak of uninitialized memory. This attack appear to be exploitable via A malformed packet is received over the network by a Godot application that uses built-in serialization (e.g. game server, or game client). Could be triggered by multiplayer opponent. This vulnerability appears to have been fixed in 2.1.5, 3.0.6, master branch after commit feaf03421dda0213382b51aff07bd5a96b29487b.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T20:00:00.000Z
CVE-2018-1000225 
Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Cross Site Scripting (XSS) vulnerability in cobbler-web that can result in Privilege escalation to admin.. This attack appear to be exploitable via "network connectivity". Sending unauthenticated JavaScript payload to the Cobbler XMLRPC API (/cobbler_api).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T20:00:00.000Z
CVE-2018-1000226 
Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API (/cobbler_api) that can result in Privilege escalation, data manipulation or exfiltration, LDAP credential harvesting. This attack appear to be exploitable via "network connectivity". Taking advantage of improper validation of security tokens in API endpoints. Please note this is a different issue than CVE-2018-10931.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-20T20:00:00.000Z
CVE-2018-1000300 
curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl < 7.54.1 and curl >= 7.60.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T13:00:00.000Z
CVE-2018-1000301 
curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T13:00:00.000Z
CVE-2018-1000400 
Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270) vulnerability in the handling of ambient capabilities that can result in containers running with elevated privileges, allowing users abilities they should not have. This attack appears to be exploitable via container execution. This vulnerability appears to have been fixed in 1.9.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-18T18:00:00.000Z
CVE-2018-1000401 
Jenkins project Jenkins AWS CodePipeline Plugin version 0.36 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodePipelineSCM.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability appears to have been fixed in 0.37 and later.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-09T13:00:00.000Z
CVE-2018-1000402 
Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a File and Directory Information Exposure vulnerability in AWSCodeDeployPublisher.java that can result in Disclosure of environment variables. This vulnerability appears to have been fixed in 1.20 and later.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-09T13:00:00.000Z
CVE-2018-1000403 
Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodeDeployPublisher.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability appears to have been fixed in 1.20 and later.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-09T13:00:00.000Z
CVE-2018-1000404 
Jenkins project Jenkins AWS CodeBuild Plugin version 0.26 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSClientFactory.java, CodeBuilder.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability appears to have been fixed in 0.27 and later.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-09T13:00:00.000Z
CVE-2018-1000406 
A path traversal vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java that allows attackers with Job/Configure permission to define a file parameter with a file name outside the intended directory, resulting in an arbitrary file write on the Jenkins master when scheduling a build.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-09T23:00:00.000Z
CVE-2018-1000407 
A cross-site scripting vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/model/Api.java that allows attackers to specify URLs to Jenkins that result in rendering arbitrary attacker-controlled HTML by Jenkins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-09T23:00:00.000Z
CVE-2018-1000408 
A denial of service vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java that allows attackers without Overall/Read permission to access a specific URL on instances using the built-in Jenkins user database security realm that results in the creation of an ephemeral user record in memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-09T23:00:00.000Z
CVE-2018-1000409 
A session fixation vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java that prevented Jenkins from invalidating the existing session and creating a new one when a user signed up for a new user account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-09T23:00:00.000Z
CVE-2018-1000410 
An information exposure vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier, and the Stapler framework used by these releases, in core/src/main/java/org/kohsuke/stapler/RequestImpl.java, core/src/main/java/hudson/model/Descriptor.java that allows attackers with Overall/Administer permission or access to the local file system to obtain credentials entered by users if the form submission could not be successfully processed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-09T23:00:00.000Z
CVE-2018-1000411 
A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-09T23:00:00.000Z
CVE-2018-1000412 
An improper authorization vulnerability exists in Jenkins Jira Plugin 3.0.1 and earlier in JiraSite.java that allows attackers with Overall/Read access to have Jenkins connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-09T23:00:00.000Z
CVE-2018-1000413 
A cross-site scripting vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in configfiles.jelly, providerlist.jelly that allows users with the ability to configure configuration files to insert arbitrary HTML into some pages in Jenkins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-09T23:00:00.000Z
CVE-2018-1000414 
A cross-site request forgery vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in ConfigFilesManagement.java, FolderConfigFileAction.java that allows creating and editing configuration file definitions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-09T23:00:00.000Z