rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-7160 
The Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform remote code execution. An attack is possible from malicious websites open in a web browser on the same computer, or another computer with network access to the computer running the Node.js process. A malicious website could use a DNS rebinding attack to trick the web browser to bypass same-origin-policy checks and to allow HTTP connections to localhost or to hosts on the local network. If a Node.js process with the debug port active is running on localhost or on a host on the local network, the malicious website could connect to it as a debugger, and get full code execution access.
Problem types: cwe_id: CWE-350
description: CWE-350: Reliance on Reverse DNS Resolution for a Security-Critical Action
Affected products: vendor: The Node.js Project
product: Node.js
Published: 2018-05-17T14:00:00.000Z
CVE-2018-7161 
All versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node server providing an http2 server to crash. This can be accomplished by interacting with the http2 server in a manner that triggers a cleanup bug where objects are used in native code after they are no longer available. This has been addressed by updating the http2 implementation.
Problem types: description: Denial of Service
Affected products: vendor: The Node.js Project
product: Node.js
Published: 2018-06-13T16:00:00.000Z
CVE-2018-7162 
All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node process which provides an http server supporting TLS server to crash. This can be accomplished by sending duplicate/unexpected messages during the handshake. This vulnerability has been addressed by updating the TLS implementation.
Problem types: description: Denial of Service
Affected products: vendor: The Node.js Project
product: Node.js
Published: 2018-06-13T16:00:00.000Z
CVE-2018-7164 
Node.js versions 9.7.0 and later and 10.x are vulnerable and the severity is MEDIUM. A bug introduced in 9.7.0 increases the memory consumed when reading from the network into JavaScript using the net.Socket object directly as a stream. An attacker could use this cause a denial of service by sending tiny chunks of data in short succession. This vulnerability was restored by reverting to the prior behaviour.
Problem types: description: Denial of Service
Affected products: vendor: The Node.js Project
product: Node.js
Published: 2018-06-13T16:00:00.000Z
CVE-2018-7166 
In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer.alloc()` to return uninitialized memory. This method is intended to be safe and only return initialized, or cleared, memory. The third argument specifying `encoding` can be passed as a number, this is misinterpreted by `Buffer's` internal "fill" method as the `start` to a fill operation. This flaw may be abused where `Buffer.alloc()` arguments are derived from user input to return uncleared memory blocks that may contain sensitive information.
Problem types: cwe_id: CWE-226
description: CWE-226: Sensitive Information Uncleared Before Release
Affected products: vendor: The Node.js Project
product: Node.js
Published: 2018-08-21T13:00:00.000Z
CVE-2018-7167 
Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability, the implementations of Buffer.alloc() and Buffer.fill() were updated so that they zero fill instead of hanging in these cases. All versions of Node.js 6.x (LTS "Boron"), 8.x (LTS "Carbon"), and 9.x are vulnerable. All versions of Node.js 10.x (Current) are NOT vulnerable.
Problem types: description: Denial of Service
Affected products: vendor: The Node.js Project
product: Node.js
Published: 2018-06-13T16:00:00.000Z
CVE-2018-7169 
An issue was discovered in shadow 4.5. newgidmap (in shadow-utils) is setuid and allows an unprivileged user to be placed in a user namespace where setgroups(2) is permitted. This allows an attacker to remove themselves from a supplementary group, which may allow access to certain filesystem paths if the administrator has used "group blacklisting" (e.g., chmod g-rwx) to restrict access to paths. This flaw effectively reverts a security feature in the kernel (in particular, the /proc/self/setgroups knob) to prevent this sort of privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-15T19:00:00.000Z
CVE-2018-7170 
ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T20:00:00.000Z
CVE-2018-7171 
Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a .. (dot dot) in the contentbase parameter to rpc/set_all.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-30T21:00:00.000Z
CVE-2018-7172 
In index.php in WonderCMS before 2.4.1, remote attackers can delete arbitrary files via directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-27T15:00:00.000Z
CVE-2018-7173 
A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-15T21:00:00.000Z
CVE-2018-7174 
An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause denial of service because loop detection exists only for tables, not streams.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-15T21:00:00.000Z
CVE-2018-7175 
An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of service via a JPX image with zero components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-15T21:00:00.000Z
CVE-2018-7176 
FrontAccounting 2.4.3 suffers from a CSRF flaw, which leads to adding a user account via admin/users.php (aka the "add user" feature of the User Permissions page).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-16T04:00:00.000Z
CVE-2018-7177 
SQL Injection exists in the Saxum Numerology 3.0.4 component for Joomla! via the publicid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-17T07:00:00.000Z
CVE-2018-7178 
SQL Injection exists in the Saxum Picker 3.2.10 component for Joomla! via the publicid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-17T07:00:00.000Z
CVE-2018-7179 
SQL Injection exists in the SquadManagement 1.0.3 component for Joomla! via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-17T07:00:00.000Z
CVE-2018-7180 
SQL Injection exists in the Saxum Astro 4.0.14 component for Joomla! via the publicid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-17T07:00:00.000Z
CVE-2018-7182 
The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd instance from 4.2.8p6 through 4.2.8p10.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T20:00:00.000Z
CVE-2018-7183 
Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a response with a crafted array.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-08T20:00:00.000Z
CVE-2018-7184 
ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T20:00:00.000Z
CVE-2018-7185 
The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T20:00:00.000Z
CVE-2018-7186 
Leptonica before 1.75.3 does not limit the number of characters in a %s format argument to fscanf or sscanf, which allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a long string, as demonstrated by the gplotRead and ptaReadStream functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-16T00:00:00.000Z
CVE-2018-7187 
The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used, does not validate the import path (get/vcs.go only checks for "://" anywhere in the string), which allows remote attackers to execute arbitrary OS commands via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-16T17:00:00.000Z
CVE-2018-7188 
An XSS vulnerability (via an SVG image) in Tiki before 18 allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with a malicious SVG image, related to lib/filegals/filegallib.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-16T18:00:00.000Z
CVE-2018-7191 
In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. This allows local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. This is similar to CVE-2013-4343.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-17T04:27:00.000Z
CVE-2018-7192 
Cross-site scripting (XSS) vulnerability in /ajax.php/form/help-topic in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "message" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T17:00:00.000Z
CVE-2018-7193 
Cross-site scripting (XSS) vulnerability in /scp/directory.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "order" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T17:00:00.000Z
CVE-2018-7194 
Integer format vulnerability in the ticket number generator in Enhancesoft osTicket before 1.10.2 allows remote attackers to cause a denial-of-service (preventing the creation of new tickets) via a large number of digits in the ticket number format setting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T17:00:00.000Z
CVE-2018-7195 
Enhancesoft osTicket before 1.10.2 allows remote attackers to reset arbitrary passwords (when an associated e-mail address is known) by leveraging guest access and guessing a 6-digit number.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T17:00:00.000Z
CVE-2018-7196 
Cross-site scripting (XSS) vulnerability in /scp/index.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "sort" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T17:00:00.000Z
CVE-2018-7197 
An issue was discovered in Pluck through 4.7.4. A stored cross-site scripting (XSS) vulnerability allows remote unauthenticated users to inject arbitrary web script or HTML into admin/blog Reaction Comments via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-18T03:00:00.000Z
CVE-2018-7198 
October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-18T03:00:00.000Z
CVE-2018-7201 
CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-22T20:03:12.000Z
CVE-2018-7202 
An issue was discovered in ProjectSend before r1053. XSS exists in the "Name" field on the My Account page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-22T17:31:50.000Z
CVE-2018-7203 
Cross-site scripting (XSS) vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to inject arbitrary web script or HTML via the friendlyname parameter to rpc/set_all.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-30T21:00:00.000Z
CVE-2018-7204 
inc/logger.php in the Giribaz File Manager plugin before 5.0.2 for WordPress logged activity related to the plugin in /wp-content/uploads/file-manager/log.txt. If a user edits the wp-config.php file using this plugin, the wp-config.php contents get added to log.txt, which is not protected and contains database credentials, salts, etc. These files have been indexed by Google and a simple dork will find affected sites.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-07T20:00:00.000Z
CVE-2018-7205 
Reflected Cross-Site Scripting vulnerability in "Design" on "Edit device layout" in Kentico 9 through 11 allows remote attackers to execute malicious JavaScript via a malicious devicename parameter in a link that is entered via the "Pages -> Edit template properties -> Device Layouts -> Create device layout (and edit created device layout) -> Design" screens.  NOTE: the vendor has responded that there is intended functionality for authorized users to edit and update ascx code layout
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-20T15:00:00.000Z
CVE-2018-7206 
An issue was discovered in Project Jupyter JupyterHub OAuthenticator 0.6.x before 0.6.2 and 0.7.x before 0.7.3. When using JupyterHub with GitLab group whitelisting for access control, group membership was not checked correctly, allowing members not in the whitelisted groups to create accounts on the Hub. (Users were not allowed to access other users' accounts, but could create their own accounts on the Hub linked to their GitLab account. GitLab authentication not using gitlab_group_whitelist is unaffected. No other Authenticators are affected.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-18T03:00:00.000Z
CVE-2018-7208 
In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted file, as demonstrated by objcopy of a COFF object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-18T04:00:00.000Z
CVE-2018-7209 
An issue was discovered in iDashboards 9.6b. It allows remote attackers to obtain sensitive information via a direct request for the idashboards/config.xml URI, as demonstrated by intranet URLs for reports.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-18T04:00:00.000Z
CVE-2018-7210 
An issue was discovered in iDashboards 9.6b. It allows remote attackers to obtain sensitive information via a direct request for the idb/config?CMD=installLicense URI, as demonstrated by intranet IP addresses and names of guest accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-18T04:00:00.000Z
CVE-2018-7211 
An issue was discovered in iDashboards 9.6b. The SSO implementation is affected by a weak obfuscation library, allowing man-in-the-middle attackers to discover credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-18T04:00:00.000Z
CVE-2018-7212 
An issue was discovered in rack-protection/lib/rack/protection/path_traversal.rb in Sinatra 2.x before 2.0.1 on Windows. Path traversal is possible via backslash characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-18T06:00:00.000Z
CVE-2018-7213 
The Password Manager Extension in Abine Blur 7.8.242* before 7.8.2428 allows attackers to bypass the Multi-Factor Authentication and macOS disk-encryption protection mechanisms, and consequently exfiltrate secured data, because the right-click context menu is not secured.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-11T05:00:00.000Z
CVE-2018-7216 
Cross-site request forgery (CSRF) vulnerability in esop/toolkit/profile/regData.do in Bravo Tejari Procurement Portal allows remote authenticated users to hijack the authentication of application users for requests that modify their personal data by leveraging lack of anti-CSRF tokens.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-18T06:00:00.000Z
CVE-2018-7217 
In Bravo Tejari Procurement Portal, uploaded files are not properly validated by the application either on the client or the server side. An attacker can take advantage of this vulnerability and upload malicious executable files to compromise the application, as demonstrated by an esop/evm/OPPreliminaryForms.do?formId=857 request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-18T06:00:00.000Z
CVE-2018-7218 
The AppFirewall functionality in Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5 before Build 68.7, 11.0 before Build 71.24, 11.1 before Build 58.13, and 12.0 before Build 57.24 allows remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T19:00:00.000Z
CVE-2018-7219 
application/admin/controller/Admin.php in NoneCms 1.3.0 has CSRF, as demonstrated by changing an admin password or adding an account via a public/index.php/admin/admin/edit.html request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-19T14:00:00.000Z
CVE-2018-7225 
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-19T15:00:00.000Z
CVE-2018-7226 
An issue was discovered in vcSetXCutTextProc() in VNConsole.c in LinuxVNC and VNCommand from the LibVNC/vncterm distribution through 0.9.10. Missing sanitization of the client-specified message length may cause integer overflow or possibly have unspecified other impact via a specially crafted VNC packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-19T17:00:00.000Z
CVE-2018-7227 
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow retrieving of specially crafted URLs without authentication that can reveal sensitive information to an attacker.
Problem types: description: Information Disclosure
Affected products: vendor: Schneider Electric SE
product: Pelco Sarix Professional
Published: 2018-03-09T23:00:00.000Z
CVE-2018-7228 
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and get the administrator privileges.
Problem types: description: Authentication Bypass
Affected products: vendor: Schneider Electric SE
product: Pelco Sarix Professional
Published: 2018-03-09T23:00:00.000Z
CVE-2018-7229 
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and gain administrator privileges because the use of hardcoded credentials.
Problem types: description: Authentication Bypass
Affected products: vendor: Schneider Electric SE
product: Pelco Sarix Professional
Published: 2018-03-09T23:00:00.000Z
CVE-2018-7230 
A XML external entity (XXE) vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67.
Problem types: description: XML External Entity Processing
Affected products: vendor: Schneider Electric SE
product: Pelco Sarix Professional
Published: 2018-03-09T23:00:00.000Z
CVE-2018-7231 
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'system.opkg.remove'.
Problem types: description: Command Execution
Affected products: vendor: Schneider Electric SE
product: Pelco Sarix Professional
Published: 2018-03-09T23:00:00.000Z
CVE-2018-7232 
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'network.ieee8021x.delete_certs'.
Problem types: description: Command Execution
Affected products: vendor: Schneider Electric SE
product: Pelco Sarix Professional
Published: 2018-03-09T23:00:00.000Z
CVE-2018-7233 
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'model_name' or 'mac_address'.
Problem types: description: Command Execution
Affected products: vendor: Schneider Electric SE
product: Pelco Sarix Professional
Published: 2018-03-09T23:00:00.000Z
CVE-2018-7234 
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of SSL certificate.
Problem types: description: Arbitrary File Download
Affected products: vendor: Schneider Electric SE
product: Pelco Sarix Professional
Published: 2018-03-09T23:00:00.000Z
CVE-2018-7235 
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of 'system.download.sd_file'
Problem types: description: Command Execution
Affected products: vendor: Schneider Electric SE
product: Pelco Sarix Professional
Published: 2018-03-09T23:00:00.000Z