rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-11642 
Incorrect Permission Assignment on the /var/www/xms/cleanzip.sh shell script run periodically in Dialogic PowerMedia XMS through 3.5 allows local users to execute code as the root user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-03T17:00:00.000Z
CVE-2018-11643 
SQL injection vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote authenticated users to execute arbitrary SQL commands via the filterPattern parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-03T17:00:00.000Z
CVE-2018-11645 
psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T12:00:00.000Z
CVE-2018-11646 
webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T13:00:00.000Z
CVE-2018-11647 
index.js in oauth2orize-fprm before 0.2.1 has XSS via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-17T16:00:00.000Z
CVE-2018-11649 
Hue 3.12 has XSS via the /pig/save/ name and script parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T14:00:00.000Z
CVE-2018-11650 
Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T14:00:00.000Z
CVE-2018-11651 
Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T14:00:00.000Z
CVE-2018-11652 
CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV report.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T15:00:00.000Z
CVE-2018-11653 
Information disclosure in Netwave IP camera at //etc/RT2870STA.dat (via HTTP on port 8000) allows an unauthenticated attacker to exfiltrate sensitive information about the network configuration like the network SSID and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-24T21:00:00.000Z
CVE-2018-11654 
Information disclosure in Netwave IP camera at get_status.cgi (via HTTP on port 8000) allows an unauthenticated attacker to exfiltrate sensitive information from the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-24T21:00:00.000Z
CVE-2018-11655 
In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function GetImagePixelCache in MagickCore/cache.c, which allows attackers to cause a denial of service via a crafted CALS image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T15:00:00.000Z
CVE-2018-11656 
In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c, which allows attackers to cause a denial of service via a crafted DCM image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T15:00:00.000Z
CVE-2018-11657 
ngiflib.c in MiniUPnP ngiflib 0.4 has an infinite loop in DecodeGifImg and LoadGif.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T15:00:00.000Z
CVE-2018-11670 
An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that allows attackers to execute arbitrary PHP code via the content parameter to index.php?m=admin&c=media&a=fileconnect.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T17:00:00.000Z
CVE-2018-11671 
An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that can add an admin account via index.php?m=admin&c=access&a=adduserhandle.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T17:00:00.000Z
CVE-2018-11678 
plugins/box/users/users.plugin.php in Monstra CMS 3.0.4 allows Login Rate Limiting Bypass via manipulation of the login_attempts cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T11:00:00.000Z
CVE-2018-11679 
An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability that can add an article via /index.php?case=table&act=add&table=archive&admin_dir=admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-02T12:00:00.000Z
CVE-2018-11680 
An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability in the rich text editor that can add an IFRAME element. This might be used in a DoS attack if a referenced remote URL is refreshed at a rapid rate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-02T12:00:00.000Z
CVE-2018-11681 
Default and unremovable support credentials (user:nwk password:nwk2) allow attackers to gain total super user control of an IoT device through a TELNET session to products using the RadioRA 2 Lutron integration protocol Revision M to Revision Y. NOTE: The vendor disputes this id as not being a vulnerability because what can be done through the ports revolve around controlling lighting, not code execution. A certain set of commands are listed, which bear some similarity to code, but they are not arbitrary and do not allow admin-level control of a machine
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-02T13:00:00.000Z
CVE-2018-11682 
Default and unremovable support credentials allow attackers to gain total super user control of an IoT device through a TELNET session to products using the Stanza Lutron integration protocol Revision M to Revision Y. NOTE: The vendor disputes this id as not being a vulnerability because what can be done through the ports revolve around controlling lighting, not code execution. A certain set of commands are listed, which bear some similarity to code, but they are not arbitrary and do not allow admin-level control of a machine
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-02T13:00:00.000Z
CVE-2018-11683 
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T06:00:00.000Z
CVE-2018-11684 
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T06:00:00.000Z
CVE-2018-11685 
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T06:00:00.000Z
CVE-2018-11686 
The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T16:32:27.000Z
CVE-2018-11687 
An integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin Red (BTCR), an Ethereum ERC20 token, allows the owner to accomplish an unauthorized increase of digital assets by providing a large address[] array, as exploited in the wild in May 2018, aka the "ownerUnderflow" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-15T17:00:00.000Z
CVE-2018-11688 
Ignite Realtime Openfire before 3.9.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-13T16:00:00.000Z
CVE-2018-11689 
Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewer_login_page data3 parameter. (The same Web Viewer codebase was transitioned from Samsung to Hanwha.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-14T20:00:00.000Z
CVE-2018-11690 
The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-14T20:00:00.000Z
CVE-2018-11691 
Emerson DeltaV Smart Switch Command Center application, available in versions 11.3.x and 12.3.1, was unable to change the DeltaV Smart Switches’ management password upon commissioning. Emerson released patches for DeltaV workstations to address this issue, and the patches can be downloaded from Emerson’s Guardian Support Portal. Please refer to the DeltaV Security Notification DSN19003 (KBA NK-1900-0808) for more information about this issue. DeltaV versions 13.3 and higher use the Network Device Command Center application to manage DeltaV Smart Switches, and this newer application is not impacted by this issue. After patching the Smart Switch Command Center, users are required to either commission the DeltaV Smart Switches or change password using the tool.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-14T15:09:34.000Z
CVE-2018-11692 
An issue was discovered on Canon LBP6650, LBP3370, LBP3460, and LBP7750C devices. It is possible to bypass the Administrator Mode authentication for /tlogin.cgi via vectors involving frame.cgi?page=DevStatus. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the default settings without using the countermeasures and best practices shown in the documentation
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T06:00:00.000Z
CVE-2018-11693 
An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::skip_over_scopes which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T06:00:00.000Z
CVE-2018-11694 
An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selector_append which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T06:00:00.000Z
CVE-2018-11695 
An issue was discovered in LibSass <3.5.3. A NULL pointer dereference was found in the function Sass::Expand::operator which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T06:00:00.000Z
CVE-2018-11696 
An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Inspect::operator which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T06:00:00.000Z
CVE-2018-11697 
An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::exactly() which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T06:00:00.000Z
CVE-2018-11698 
An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::handle_error which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T06:00:00.000Z
CVE-2018-11701 
FastStone Image Viewer 6.2 has a User Mode Write AV at 0x005cb509, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T13:00:00.000Z
CVE-2018-11702 
FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cb3, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T13:00:00.000Z
CVE-2018-11703 
FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d6a, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T13:00:00.000Z
CVE-2018-11704 
FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d7d, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T13:00:00.000Z
CVE-2018-11705 
FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cc4, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T13:00:00.000Z
CVE-2018-11706 
FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578dd8, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T13:00:00.000Z
CVE-2018-11707 
FastStone Image Viewer 6.2 has a User Mode Read and Execute AV at 0x0057898e, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T13:00:00.000Z
CVE-2018-11709 
wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site Scripting (XSS) via the URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T13:00:00.000Z
CVE-2018-11710 
soundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted AMS file because of an invalid write near address 0 in an out-of-memory situation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T13:00:00.000Z
CVE-2018-11711 
A remote attacker can bypass the System Manager Mode on the Canon MF210 and MF220 web interface without knowing the PIN for /login.html via vectors involving /portal_top.html to get full access to the device. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the default settings without using the countermeasures and best practices shown in the documentation
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T13:00:00.000Z
CVE-2018-11712 
WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T14:00:00.000Z
CVE-2018-11713 
WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by crafted web sites via a WebSocket connection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T14:00:00.000Z
CVE-2018-11714 
An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of "Referer: http://192.168.0.1/mainFrame.htm" then no authentication is required for any action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T14:00:00.000Z
CVE-2018-11715 
The Recent Threads plugin before 1.1 for MyBB allows XSS via a thread subject.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T17:00:00.000Z
CVE-2018-11716 
An issue was discovered in Zoho ManageEngine Desktop Central before 100230. There is unauthenticated remote access to all log files of a Desktop Central instance containing critical information (private information such as location of enrolled devices, cleartext passwords, patching level, etc.) via a GET request on port 8022, 8443, or 8444.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-16T14:00:00.000Z
CVE-2018-11717 
An issue was discovered in Zoho ManageEngine Desktop Central before 100251. By leveraging access to a log file, a context-dependent attacker can obtain (depending on the modules configured) the Base64 encoded Password/Username of AD accounts, the cleartext Password/Username and mail settings of the EAS account (an AD account used to send mail), the cleartext password of recovery_password of Android devices, the cleartext password of account "set", the location of devices enrolled in the platform (with UUID and information related to the name of the person at the location), critical information about all enrolled devices such as Serial Number, UUID, Model, Name, and auth_session_token (usable to spoof a terminal identity on the platform), etc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-16T14:00:00.000Z
CVE-2018-11718 
Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-30T16:00:00.000Z
CVE-2018-11719 
Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow XXE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-30T16:00:00.000Z
CVE-2018-11720 
Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-30T16:00:00.000Z
CVE-2018-11722 
WUZHI CMS 4.1.0 has a SQL Injection in api/uc.php via the 'code' parameter, because 'UC_KEY' is hard coded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-05T12:00:00.000Z
CVE-2018-11723 
The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T21:00:00.000Z
CVE-2018-11724 
The mobi_pk1_decrypt function in encryption.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted mobi file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T21:00:00.000Z
CVE-2018-11725 
The mobi_parse_index_entry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted mobi file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T21:00:00.000Z
CVE-2018-11726 
The mobi_decode_font_resource function in util.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted mobi file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T21:00:00.000Z
CVE-2018-11727 
The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T21:00:00.000Z
CVE-2018-11728 
The libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T21:00:00.000Z
CVE-2018-11729 
The libfsntfs_mft_entry_read_header function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-19T21:00:00.000Z