rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-7523 
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability.
Problem types: cwe_id: CWE-415
description: DOUBLE FREE CWE-415
Affected products: vendor: ICS-CERT
product: Omron CX-Supervisor
Published: 2018-03-21T20:00:00.000Z
CVE-2018-7524 
A cross-site request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an unauthorized user to be added to the system.
Problem types: cwe_id: CWE-352
description: CROSS-SITE REQUEST FORGERY (CSRF) CWE-352
Affected products: vendor: Geutebr&#195;&#188;ck
product: Geutebr&#195;&#188;ck G-Cam/EFD-2250 (part n&#194;&#176; 5.02024) firmware and Topline TopFD-2125 (part n&#194;&#176; 5.02820) firmware
Published: 2018-03-22T18:00:00.000Z
CVE-2018-7525 
In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vulnerability.
Problem types: cwe_id: CWE-822
description: UNTRUSTED POINTER DEREFERENCE CWE-822
Affected products: vendor: ICS-CERT
product: Omron CX-Supervisor
Published: 2018-03-21T20:00:00.000Z
CVE-2018-7526 
In TotalAlert Web Application in BeaconMedaes Scroll Medical Air Systems prior to v4107600010.23, by accessing a specific uniform resource locator (URL) on the webserver, a malicious user may be able to access information in the application without authenticating.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-24T20:00:00.000Z
CVE-2018-7527 
A buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon LeviStudioU 1.8.29, and PI Studio HMI Project Programmer, Build: November 11, 2017 and prior by opening a specially crafted file.
Problem types: cwe_id: CWE-121
description: Stack-Based Buffer Overflow CWE-121
Affected products: vendor: WECON Technology Co., Ltd.
product: LeviStudio HMI Editor
vendor: WECON Technology Co., Ltd.
product: PI Studio HMI Project Programmer
Published: 2018-04-26T20:00:00.000Z
CVE-2018-7528 
An SQL injection vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an attacker to alter stored data.
Problem types: cwe_id: CWE-89
description: IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USED IN AN SQL COMMAND ('SQL INJECTION') CWE-89
Affected products: vendor: Geutebr&#195;&#188;ck
product: Geutebr&#195;&#188;ck G-Cam/EFD-2250 (part n&#194;&#176; 5.02024) firmware and Topline TopFD-2125 (part n&#194;&#176; 5.02820) firmware
Published: 2018-03-22T18:00:00.000Z
CVE-2018-7529 
A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may modify deserialized data to send custom requests that crash the server.
Problem types: cwe_id: CWE-502
description: CWE-502
Affected products: vendor: n/a
product: OSIsoft PI Data Archive
Published: 2018-03-14T18:00:00.000Z
CVE-2018-7530 
Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may allow the pointer to call an incorrect object resulting in an access of resource using incompatible type condition.
Problem types: cwe_id: CWE-843
description: ACCESS OF RESOURCE USING INCOMPATIBLE TYPE (TYPE CONFUSION) CWE-843
Affected products: vendor: ICS-CERT
product: Omron CX-One
Published: 2018-04-17T19:00:00.000Z
CVE-2018-7531 
An Improper Input Validation issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may use unvalidated custom requests to crash the server.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: n/a
product: OSIsoft PI Data Archive
Published: 2018-03-14T18:00:00.000Z
CVE-2018-7532 
Unauthentication vulnerabilities have been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow remote code execution.
Problem types: cwe_id: CWE-287
description: IMPROPER AUTHENTICATION CWE-287
Affected products: vendor: Geutebr&#195;&#188;ck
product: Geutebr&#195;&#188;ck G-Cam/EFD-2250 (part n&#194;&#176; 5.02024) firmware and Topline TopFD-2125 (part n&#194;&#176; 5.02820) firmware
Published: 2018-03-22T18:00:00.000Z
CVE-2018-7533 
An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system.
Problem types: cwe_id: CWE-276
description: CWE-276
Affected products: vendor: n/a
product: OSIsoft PI Data Archive
Published: 2018-03-14T18:00:00.000Z
CVE-2018-7534 
In Stealth Authorization Server before 3.3.017.0 in Unisys Stealth Solution, an encryption key may be left in memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-30T21:00:00.000Z
CVE-2018-7535 
An issue was discovered in TotalAV v4.1.7. An unprivileged user could modify or overwrite all of the product's files because of weak permissions (Everyone:F) under %PROGRAMFILES%, which allows local users to gain privileges or obtain maximum control over the product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-13T17:00:00.000Z
CVE-2018-7536 
An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. The django.utils.html.urlize() function was extremely slow to evaluate certain inputs due to catastrophic backtracking vulnerabilities in two regular expressions (only one regular expression for Django 1.8.x). The urlize() function is used to implement the urlize and urlizetrunc template filters, which were thus vulnerable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-09T00:00:00.000Z
CVE-2018-7537 
An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. If django.utils.text.Truncator's chars() and words() methods were passed the html=True argument, they were extremely slow to evaluate certain inputs due to a catastrophic backtracking vulnerability in a regular expression. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which were thus vulnerable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-09T20:00:00.000Z
CVE-2018-7538 
A SQL injection vulnerability in the tracker functionality of Enalean Tuleap software engineering platform before 9.18 allows attackers to execute arbitrary SQL commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-12T21:00:00.000Z
CVE-2018-7539 
On Appear TV XC5000 and XC5100 devices with firmware 3.26.217, it is possible to read OS files with a specially crafted HTTP request (such as GET /../../../../../../../../../../../../etc/passwd) to the web server (fuzzd/0.1.1) running the Maintenance Center on port TCP/8088. This can lead to full compromise of the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-17T20:00:00.000Z
CVE-2018-7540 
An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (host OS CPU hang) via non-preemptable L3/L4 pagetable freeing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-27T19:00:00.000Z
CVE-2018-7541 
An issue was discovered in Xen through 4.10.x allowing guest OS users to cause a denial of service (hypervisor crash) or gain privileges by triggering a grant-table transition from v2 to v1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-27T19:00:00.000Z
CVE-2018-7542 
An issue was discovered in Xen 4.8.x through 4.10.x allowing x86 PVH guest OS users to cause a denial of service (NULL pointer dereference and hypervisor crash) by leveraging the mishandling of configurations that lack a Local APIC.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-27T19:00:00.000Z
CVE-2018-7543 
Cross-site scripting (XSS) vulnerability in installer/build/view.step4.php of the SnapCreek Duplicator plugin 1.2.32 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the json parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-26T18:00:00.000Z
CVE-2018-7544 
A cross-protocol scripting issue was discovered in the management interface in OpenVPN through 2.4.5. When this interface is enabled over TCP without a password, and when no other clients are connected to this interface, attackers can execute arbitrary management commands, obtain sensitive information, or cause a denial of service (SIGTERM) by triggering XMLHttpRequest actions in a web browser. This is demonstrated by a multipart/form-data POST to http://localhost:23000 with a "signal SIGTERM" command in a TEXTAREA element. NOTE: The vendor disputes that this is a vulnerability. They state that this is the result of improper configuration of the OpenVPN instance rather than an intrinsic vulnerability, and now more explicitly warn against such configurations in both the management-interface documentation, and with a runtime warning
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T15:00:00.000Z
CVE-2018-7546 
wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621 allows remote attackers to cause a denial of service via a crafted pdf file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-18T16:00:00.000Z
CVE-2018-7547 
lyadmin 1.x has XSS via the config[WEB_SITE_TITLE] parameter to the /admin.php?s=/admin/config/groupsave.html URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-27T21:00:00.000Z
CVE-2018-7548 
In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an empty array result.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-27T22:00:00.000Z
CVE-2018-7549 
In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-27T22:00:00.000Z
CVE-2018-7550 
The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on the QEMU host via a mh_load_end_addr value greater than mh_bss_end_addr, which triggers an out-of-bounds read or write memory access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-01T00:00:00.000Z
CVE-2018-7551 
There is an invalid free in MiniPS::delete0 in minips.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-28T06:00:00.000Z
CVE-2018-7552 
There is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-28T06:00:00.000Z
CVE-2018-7553 
There is a heap-based buffer overflow in the pcxLoadRaster function of in_pcx.cpp in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-28T06:00:00.000Z
CVE-2018-7554 
There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-28T06:00:00.000Z
CVE-2018-7556 
LimeSurvey 2.6.x before 2.6.7, 2.7x.x before 2.73.1, and 3.x before 3.4.2 mishandles application/controller/InstallerController.php after installation, which allows remote attackers to access the configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-28T07:00:00.000Z
CVE-2018-7557 
The decode_init function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service (Out of array read) via an AVI file with crafted dimensions within chroma subsampling data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-28T07:00:00.000Z
CVE-2018-7559 
An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determine a Server's private key by sending carefully constructed bad UserIdentityTokens as part of an oracle attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-13T18:00:00.000Z
CVE-2018-7560 
index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service (ReDoS) issue via a crafted multipart/form-data boundary string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-04T20:00:00.000Z
CVE-2018-7561 
Stack-based Buffer Overflow in httpd on Tenda AC9 devices V15.03.05.14_EN allows remote attackers to cause a denial of service or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-01T15:00:00.000Z
CVE-2018-7562 
A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition that allows temporary access to an uploaded executable file that will be disallowed. The application allows an authenticated user to upload a file when he/she creates a new ticket via front/fileupload.php. This feature is protected using different types of security features like the check on the file's extension. However, the application uploads and creates a file, though this file is not allowed, and then deletes the file in the uploadFiles method in inc/glpiuploaderhandler.class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-12T21:00:00.000Z
CVE-2018-7563 
An issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query string to front/preference.php. An attacker is able to create a malicious URL that, if opened by an authenticated user with debug privilege, will execute JavaScript code supplied by the attacker. The attacker-supplied code can perform a wide variety of actions, such as stealing the victim's session token or login credentials, performing arbitrary actions on the victim's behalf, and logging their keystrokes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-12T21:00:00.000Z
CVE-2018-7564 
Stored XSS exists on Polycom QDX 6000 devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-07T20:00:00.000Z
CVE-2018-7565 
CSRF exists on Polycom QDX 6000 devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-07T20:00:00.000Z
CVE-2018-7566 
The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-30T21:00:00.000Z
CVE-2018-7567 
In the Admin Package Manager in Open Ticket Request System (OTRS) 5.0.0 through 5.0.24 and 6.0.0 through 6.0.1, authenticated admins are able to exploit a Blind Remote Code Execution vulnerability by loading a crafted opm file with an embedded CodeInstall element to execute a command on the server during package installation.  NOTE: the vendor disputes this issue stating "the behaviour is as designed and needed for different packages to be installed", "there is a security warning if the package is not verified by OTRS Group", and "there is the possibility and responsibility of an admin to check packages before installation which is possible as they are not binary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-04T20:00:00.000Z
CVE-2018-7568 
The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer overflow and application crash) via an ELF file with corrupt dwarf1 debug information, as demonstrated by nm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-28T21:00:00.000Z
CVE-2018-7569 
dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer underflow or overflow, and application crash) via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-28T21:00:00.000Z
CVE-2018-7570 
The assign_file_positions_for_non_load_sections function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an ELF file with a RELRO segment that lacks a matching LOAD segment, as demonstrated by objcopy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-28T21:00:00.000Z
CVE-2018-7572 
Pulse Secure Client 9.0R1 and 5.3RX before 5.3R5, when configured to authenticate VPN users during Windows Logon, can allow attackers to bypass Windows authentication and execute commands on the system with the privileges of Pulse Secure Client. The attacker must interrupt the client's network connectivity, and trigger a connection to a crafted proxy server with an invalid SSL certificate that allows certification-manager access, leading to the ability to browse local files and execute local programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-12T16:00:00.000Z
CVE-2018-7573 
An issue was discovered in FTPShell Client 6.7. A remote FTP server can send 400 characters of 'F' in conjunction with the FTP 220 response code to crash the application; after this overflow, one can run arbitrary code on the victim machine. This is similar to CVE-2009-3364 and CVE-2017-6465.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-01T17:00:00.000Z
CVE-2018-7575 
Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T20:44:16.000Z
CVE-2018-7576 
Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of exploitation is: context-dependent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-23T20:44:46.000Z
CVE-2018-7577 
Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T16:03:02.000Z
CVE-2018-7579 
\application\admin\controller\update_urls.class.php in YzmCMS 3.6 has SQL Injection via the catids array parameter to admin/update_urls/update_category_url.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-01T18:00:00.000Z
CVE-2018-7580 
Philips Hue is vulnerable to a Denial of Service attack. Sending a SYN flood on port tcp/80 will freeze Philips Hue's hub and it will stop responding. The "hub" will stop operating and be frozen until the flood stops. During the flood, the user won't be able to turn on/off the lights, and all of the hub's functionality will be unresponsive. The cloud service also won't work with the hub.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-21T20:33:06.000Z
CVE-2018-7581 
\ProgramData\WebLog Expert\WebServer\WebServer.cfg in WebLog Expert Web Server Enterprise 9.4 has weak permissions (BUILTIN\Users:(ID)C), which allows local users to set a cleartext password and login as admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-09T20:00:00.000Z
CVE-2018-7582 
WebLog Expert Web Server Enterprise 9.4 allows Remote Denial Of Service (daemon crash) via a long HTTP Accept Header to TCP port 9991.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-09T20:00:00.000Z
CVE-2018-7583 
Proxy.exe in DualDesk 20 allows Remote Denial Of Service (daemon crash) via a long string to TCP port 5500.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-04T01:00:00.000Z
CVE-2018-7584 
In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standard/http_fopen_wrapper.c. This subsequently results in copying a large string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-01T18:00:00.000Z
CVE-2018-7586 
In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-01T21:00:00.000Z
CVE-2018-7587 
An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in load_bmp in CImg.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-01T21:00:00.000Z
CVE-2018-7588 
An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-01T21:00:00.000Z
CVE-2018-7589 
An issue was discovered in CImg v.220. A double free in load_bmp in CImg.h occurs when loading a crafted bmp image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-01T21:00:00.000Z
CVE-2018-7590 
CSRF exists in Hoosk 1.7.0 via /admin/users/new/add, resulting in account creation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-01T21:00:00.000Z
CVE-2018-7600 
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1
Published: 2018-03-29T07:00:00.000Z