rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-17469 
Incorrect handling of PDF filter chains in PDFium in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
Problem types: description: Heap buffer overflow
Affected products: vendor: Google
product: Chrome
Published: 2018-11-14T15:00:00.000Z
CVE-2018-17470 
A heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Problem types: description: Heap buffer overflow
Affected products: vendor: Google
product: Chrome
Published: 2019-01-09T19:00:00.000Z
CVE-2018-17471 
Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.
Problem types: description: Incorrect security UI
Affected products: vendor: Google
product: Chrome
Published: 2018-11-14T15:00:00.000Z
CVE-2018-17472 
Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the <iframe> sandbox via a crafted HTML page.
Problem types: description: Insufficient policy enforcement
Affected products: vendor: Google
product: Chrome
Published: 2018-11-14T15:00:00.000Z
CVE-2018-17473 
Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
Problem types: description: Insufficient policy enforcement
Affected products: vendor: Google
product: Chrome
Published: 2018-11-14T15:00:00.000Z
CVE-2018-17474 
Use after free in HTMLImportsController in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2018-11-14T15:00:00.000Z
CVE-2018-17475 
Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
Problem types: description: Incorrect security UI
Affected products: vendor: Google
product: Chrome
Published: 2018-11-14T15:00:00.000Z
CVE-2018-17476 
Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.
Problem types: description: Incorrect security UI
Affected products: vendor: Google
product: Chrome
Published: 2018-11-14T15:00:00.000Z
CVE-2018-17477 
Incorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of extension popups via a crafted HTML page.
Problem types: description: Incorrect security UI
Affected products: vendor: Google
product: Chrome
Published: 2018-11-14T15:00:00.000Z
CVE-2018-17478 
Incorrect array position calculations in V8 in Google Chrome prior to 70.0.3538.102 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
Problem types: description: Out of bounds write
Affected products: vendor: Google
product: Chrome
Published: 2019-06-27T16:13:41.000Z
CVE-2018-17479 
Incorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2019-06-27T16:13:41.000Z
CVE-2018-17480 
Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Problem types: description: Out of bounds write
Affected products: vendor: Google
product: Chrome
Published: 2018-12-11T15:00:00.000Z
CVE-2018-17481 
Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2018-12-11T15:00:00.000Z
CVE-2018-17482 
Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and clicking on reports, an attacker could exploit this vulnerability to gain access to all visitor records and obtain sensitive information.
Problem types: description: Obtain Information
Affected products: vendor: Jolly Technologies
product: Lobby Track Desktop
Published: 2019-03-19T19:47:40.993Z
CVE-2018-17483 
Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and viewing the driver's license column, an attacker could exploit this vulnerability to view the driver's license number and other personal information.
Problem types: description: Obtain Information
Affected products: vendor: Jolly Technologies
product: Lobby Track Desktop
Published: 2019-03-19T19:47:41.043Z
CVE-2018-17484 
Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Sample Database.mdb database while in kiosk mode. By using attack vectors outlined in kiosk breakout, an attacker could exploit this vulnerability to view and edit the database.
Problem types: description: Obtain Information
Affected products: vendor: Jolly Technologies
product: Lobby Track Desktop
Published: 2019-03-19T19:47:41.089Z
CVE-2018-17485 
Lobby Track Desktop contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application.
Problem types: description: Gain Access
Affected products: vendor: Jolly Technologies
product: Lobby Track Desktop
Published: 2019-03-19T19:47:41.139Z
CVE-2018-17486 
Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor function while in kiosk mode. By visiting the kiosk and selecting find visitor, an attacker could exploit this vulnerability to delete visitor records or remove a host.
Problem types: description: Bypass Security
Affected products: vendor: Jolly Technologies
product: Lobby Track Desktop
Published: 2019-03-19T19:47:41.184Z
CVE-2018-17487 
Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog. By visiting the kiosk and signing in as a visitor, an attacker could exploit this vulnerability using the command line to break out of kiosk mode.
Problem types: description: Gain Privileges
Affected products: vendor: Jolly Technologies
product: Lobby Track Desktop
Published: 2019-03-19T19:47:41.225Z
CVE-2018-17488 
Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog. By visiting the kiosk and accessing the print badge screen, an attacker could exploit this vulnerability using the command line to break out of kiosk mode.
Problem types: description: Gain Privileges
Affected products: vendor: Jolly Technologies
product: Lobby Track Desktop
Published: 2019-03-19T19:47:41.265Z
CVE-2018-17489 
EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social security number in plaintext. By visiting the kiosk and viewing the Visitor table of the database, an attacker could exploit this vulnerability to view stored social security numbers.
Problem types: description: Obtain Information
Affected products: vendor: HID Global
product: EasyLobby Solo
Published: 2019-03-19T19:47:41.299Z
CVE-2018-17490 
EasyLobby Solo is vulnerable to a denial of service. By visiting the kiosk and accessing the task manager, a local attacker could exploit this vulnerability to kill the process or launch new processes at will.
Problem types: description: Denial of Service
Affected products: vendor: HID Global
product: EasyLobby Solo
Published: 2019-03-19T19:47:41.336Z
CVE-2018-17491 
EasyLobby Solo could allow a local attacker to gain elevated privileges on the system. By visiting the kiosk and typing "esc" to exit the program, an attacker could exploit this vulnerability to perform unauthorized actions on the computer.
Problem types: description: Gain Privileges
Affected products: vendor: HID Global
product: EasyLobby Solo
Published: 2019-03-19T19:47:41.374Z
CVE-2018-17492 
EasyLobby Solo contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application.
Problem types: description: Gain Access
Affected products: vendor: HID Global
product: EasyLobby Solo
Published: 2019-03-19T19:47:41.411Z
CVE-2018-17493 
eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Fullscreen button. By visiting the kiosk and clicking the full screen button in the bottom right, an attacker could exploit this vulnerability to close the program and launch other processes on the system.
Problem types: description: Gain Privileges
Affected products: vendor: VisitorPass
product: eVisitorPass
Published: 2019-03-19T19:47:41.452Z
CVE-2018-17494 
eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Start Menu. By visiting the kiosk and pressing windows key twice, an attacker could exploit this vulnerability to close the program and launch other processes on the system.
Problem types: description: Gain Privileges
Affected products: vendor: VisitorPass
product: eVisitorPass
Published: 2019-03-19T19:47:41.490Z
CVE-2018-17495 
eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Help Dialog. By visiting the kiosk and removing the program from fullscreen, an attacker could exploit this vulnerability using the terminal to launch the command prompt.
Problem types: description: Gain Privileges
Affected products: vendor: VisitorPass
product: eVisitorPass
Published: 2019-03-19T19:47:41.531Z
CVE-2018-17496 
eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error while in kiosk mode. By visiting the kiosk and typing ctrl+shift+esc, an attacker could exploit this vulnerability to open the task manager to kill the process or launch new processes on the system.
Problem types: description: Gain Privileges
Affected products: vendor: VisitorPass
product: eVisitorPass
Published: 2019-03-19T19:47:41.569Z
CVE-2018-17497 
eVisitorPass contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application.
Problem types: description: Gain Access
Affected products: vendor: VisitorPass
product: eVisitorPass
Published: 2019-03-19T19:47:41.609Z
CVE-2018-17499 
Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storing of unencrypted data in logs. An attacker could exploit this vulnerability to obtain two API keys, a token and other sensitive information.
Problem types: description: Obtain Information
Affected products: vendor: Envoy
product: Envoy Passport for iPhone
vendor: Envoy
product: Envoy Passport for Android
Published: 2019-03-19T19:47:41.650Z
CVE-2018-17500 
Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storing of hardcoded OAuth Creds in plaintext. An attacker could exploit this vulnerability to obtain sensitive information.
Problem types: description: Obtain Information
Affected products: vendor: Envoy
product: Envoy Passport for iPhone
vendor: Envoy
product: Envoy Passport for Android
Published: 2019-03-19T19:47:41.688Z
CVE-2018-17502 
The Receptionist for iPad could allow a local attacker to obtain sensitive information, caused by an error in the contact.json file. An attacker could exploit this vulnerability to obtain the contact names, phone numbers and emails.
Problem types: description: Obtain Information
Affected products: vendor: Los Trigos, Inc
product: The Receptionist for iPad
Published: 2019-03-19T19:47:41.729Z
CVE-2018-17532 
Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. This allows remote attackers to execute arbitrary commands with root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T19:00:00.000Z
CVE-2018-17533 
Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T19:00:00.000Z
CVE-2018-17534 
Teltonika RUT9XX routers with firmware before 00.04.233 provide a root terminal on a serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T19:00:00.000Z
CVE-2018-17536 
An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is stored XSS on the merge request page via project import.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-15T00:00:00.000Z
CVE-2018-17537 
An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. blog-viewer has stored XSS during repository browsing, if package.json exists. .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-15T00:00:00.000Z
CVE-2018-17538 
Axon (formerly TASER International) Evidence Sync 3.15.89 is vulnerable to process injection. NOTE: the vendor's position is that this CVE is not associated with information that supports any finding of any type of vulnerability
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-26T08:00:00.000Z
CVE-2018-17539 
The BGP daemon (bgpd) in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attack via an autonomous system (AS) path containing 8 or more autonomous system number (ASN) elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T15:00:00.000Z
CVE-2018-17540 
The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-03T20:00:00.000Z
CVE-2018-17542 SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds
SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds allows an unauthenticated user to extract the subjects of the emails of other users within the enterprise via the select_mid parameter in an letgo.cgi request.
Problem types: description: SQL Injection
Affected products: vendor: OAKlouds
product: MailSherlock
Credits: lang: en
value: Researcher from a Technology enterprise
Published: 2019-02-11T20:00:00.000Z
CVE-2018-17552 
SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-03T20:00:00.000Z
CVE-2018-17553 
An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs Navigate CMS 2.8 allows authenticated attackers to achieve remote code execution via a POST request with engine=picnik and id=../../../navigate_info.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-03T20:00:00.000Z
CVE-2018-17555 
The web component on ARRIS TG2492LG-NA 061213 devices allows remote attackers to obtain sensitive information via the /snmpGet oids parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-26T20:00:00.000Z
CVE-2018-17556 
MODX Revolution v2.6.5-pl allows stored XSS via a Create New Media Source action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-26T20:00:00.000Z
CVE-2018-17558 
Hardcoded manufacturer credentials and an OS command injection vulnerability in the /cgi-bin/mft/ directory on ABUS TVIP TVIP20050 LM.1.6.18, TVIP10051 LM.1.6.18, TVIP11050 MG.1.6.03.05, TVIP20550 LM.1.6.18, TVIP10050 LM.1.6.18, TVIP11550 MG.1.6.03, TVIP21050 MG.1.6.03, and TVIP51550 MG.1.6.03 cameras allow remote attackers to execute code as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-10-26T00:00:00.000Z
CVE-2018-17559 
Due to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video stream of certain ABUS TVIP cameras.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-10-26T00:00:00.000Z
CVE-2018-17560 
The admin interface of the Grouptime Teamwire Client 1.5.1 prior to 1.9.0 on-premises messenger server allows stored XSS. All backend versions prior to prod-2018-11-13-15-00-42 are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-28T17:46:02.000Z
CVE-2018-17562 
Multi-Tech FaxFinder before 5.1.6 has SQL Injection via a status/call_details?oid= URI, allowing an attacker to extract the underlying database schema to further disclose other fax server information through different injection points.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-03T20:00:00.000Z
CVE-2018-17563 
A Malformed Input String to /cgi-bin/api-get_line_status on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to dump the device's configuration in cleartext.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-01T20:49:10.000Z
CVE-2018-17564 
A Malformed Input String to /cgi-bin/delete_CA on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to delete configuration parameters and gain admin access to the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-01T20:50:11.000Z
CVE-2018-17565 
Shell Metacharacter Injection in the SSH configuration interface on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to execute arbitrary system commands and gain a root shell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-01T20:51:32.000Z
CVE-2018-17566 
In ThinkPHP 5.1.24, the inner function delete can be used for SQL injection when its WHERE condition's value can be controlled by a user's request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-26T21:00:00.000Z
CVE-2018-17567 
Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows attackers to access arbitrary files by specifying a symlink in the "include" key in the "_config.yml" file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-28T00:00:00.000Z
CVE-2018-17568 
utils/ut_rpc.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-26T22:00:00.000Z
CVE-2018-17569 
network/nw_buf.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-26T22:00:00.000Z
CVE-2018-17570 
utils/ut_ws_svr.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-26T22:00:00.000Z
CVE-2018-17571 
Vanilla before 2.6.1 allows XSS via the email field of a profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-28T05:00:00.000Z
CVE-2018-17572 
InfluxDB 0.9.5 has Reflected XSS in the Write Data module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T19:31:54.000Z
CVE-2018-17573 
The Wp-Insert plugin through 2.4.2 for WordPress allows upload of arbitrary PHP code because of the exposure and configuration of FCKeditor under fckeditor/editor/filemanager/browser/default/browser.html, fckeditor/editor/filemanager/connectors/test.html, and fckeditor/editor/filemanager/connectors/uploadtest.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-28T05:00:00.000Z
CVE-2018-17574 
An issue was discovered in YMFE YApi 1.3.23. There is stored XSS in the name field of a project.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-28T09:00:00.000Z
CVE-2018-17575 
SWA SWA.JACAD 3.1.37 Build 024 has SQL Injection via the /academico/aluno/esqueci-minha-senha/ studentId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-28T09:00:00.000Z
CVE-2018-17580 
A heap-based buffer over-read exists in the function fast_edit_packet() in the file send_packets.c of Tcpreplay v4.3.0 beta1. This can lead to Denial of Service (DoS) and potentially Information Exposure when the application attempts to process a crafted pcap file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-28T09:00:00.000Z
CVE-2018-17581 
CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-28T00:00:00.000Z
CVE-2018-17582 
Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The get_next_packet() function in the send_packets.c file uses the memcpy() function unsafely to copy sequences from the source buffer pktdata to the destination (*prev_packet)->pktdata. This will result in a Denial of Service (DoS) and potentially Information Exposure when the application attempts to process a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-28T09:00:00.000Z
CVE-2018-17583 
The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_exclude_pages action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-15T19:38:22.000Z
CVE-2018-17584 
The WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF via the wp-admin/admin.php wpfastestcacheoptions page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-15T19:41:21.000Z
CVE-2018-17585 
The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions wpFastestCachePreload_number or wpFastestCacheLanguage parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-15T19:43:52.000Z
CVE-2018-17586 
The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_timeout_pages action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-15T19:45:15.000Z
CVE-2018-17587 
AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-02T18:00:00.000Z