rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-7958 
There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to hijack the connection from a client when the user signs up to log in by TLS. Due to insufficient authentication, which may be exploited to intercept and tamper with the data information.
Problem types: description: anonymous TLS cipher suites supported
Affected products: vendor: Huawei Technologies Co., Ltd.
product: eSpace 7950
Published: 2018-11-27T22:00:00.000Z
CVE-2018-7959 
There is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept and decrypt the call information when the user enables SRTP to make a call. Successful exploitation may cause sensitive information leak.
Problem types: description: information leakage
Affected products: vendor: Huawei Technologies Co., Ltd.
product: eSpace 7950
Published: 2018-11-27T22:00:00.000Z
CVE-2018-7960 
There is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept the packets in non-secure transmission mode. Successful exploitation may intercept and tamper with the call information, eventually cause sensitive information leak.
Problem types: description: information leakage
Affected products: vendor: Huawei Technologies Co., Ltd.
product: eSpace 7950
Published: 2018-11-27T22:00:00.000Z
CVE-2018-7961 
There is a smart SMS verification code vulnerability in some Huawei smart phones. An attacker should trick a user to access malicious Website or malicious App and register. Due to incorrect processing of the smart SMS verification code, successful exploitation can cause sensitive information leak.
Problem types: description: information leakage
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Emily-AL00A
Published: 2018-11-27T22:00:00.000Z
CVE-2018-7976 
There is a stored cross-site scripting (XSS) vulnerability in Huawei eSpace Desktop V300R001C00 and V300R001C50 version. Due to the insufficient validation of the input, an authenticated, remote attacker could exploit this vulnerability to send abnormal messages to the system and perform a XSS attack. A successful exploit could cause the eSpace Desktop to hang up, and the function will restore to normal after restarting the eSpace Desktop.
Problem types: description: XSS
Affected products: vendor: Huawei Technologies Co., Ltd.
product: eSpace Desktop
Published: 2018-06-01T14:00:00.000Z
CVE-2018-7977 
There is an information leakage vulnerability on several Huawei products. Due to insufficient communication protection for specific services, a remote, unauthorized attacker can exploit this vulnerability to connect to specific services to obtain additional information. Successful exploitation of this vulnerability can lead to information leakage.
Problem types: description: information leakage
Affected products: vendor: Huawei Technologies Co., Ltd.
product: FusionSphere OpenStack
Published: 2018-11-27T22:00:00.000Z
CVE-2018-7987 
There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171(C00). The software does not handle the response message properly when the user doing certain inquiry operation, an attacker could send crafted message to the device, successful exploit could cause a denial of service condition.
Problem types: description: out-of-bounds write
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Huawei P20
Published: 2018-12-04T18:00:00.000Z
CVE-2018-7988 
There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could allow the attacker bypass the FRP protection.
Problem types: description: FRP bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Huawei nova 2 Plus, Huawei Mate9 Pro
Published: 2018-11-27T22:00:00.000Z
CVE-2018-7989 
Huawei Mate 10 pro smartphones with the versions before BLA-AL00B 8.1.0.326(C00) have an improper authentication vulnerability. App Lock is a function to prevent unauthorized use of apps on smartphones, an attacker could directly change the lock password after a series of operations. Successful exploit could allow the attacker to use the application which is locked.
Problem types: description: improper authentication
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Mate 10 pro
Published: 2018-10-17T15:00:00.000Z
CVE-2018-7990 
Mate10 Pro Huawei smart phones with the versions before 8.1.0.326(C00) have a FRP bypass vulnerability. During the mobile phone reseting process, an attacker could bypass "Find My Phone" protect after a series of voice and keyboard operations. Successful exploit could allow an attacker to bypass FRP.
Problem types: description: FRP bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Mate10 Pro
Published: 2018-09-04T16:00:00.000Z
CVE-2018-7991 
Huawei smartphones Mate10 with versions earlier before ALP-AL00B 8.0.0.110(C00) have a Factory Reset Protection (FRP) bypass vulnerability. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to the computer and then perform some specific operations. Successful exploit could allow the attacker bypass the FRP protection to access the system setting page.
Problem types: description: FRP bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Mate10
Published: 2018-09-18T13:00:00.000Z
CVE-2018-7992 
Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356(C00); P10 Plus versions earlier than 8.0.0.357(C00) has a buffer overflow vulnerability. The driver does not sufficiently validate the input, an attacker could trick the user to install a malicious application which would send crafted parameters to the driver. Successful exploit could cause a denial of service condition.
Problem types: description: n/a
Affected products: vendor: Huawei Technologies Co., Ltd.
product: MediaPad M3; Mate 9 Pro; P10 Plus
Published: 2018-07-31T14:00:00.000Z
CVE-2018-7993 
HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component. An attacker tricks the user install a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause execution of arbitrary code.
Problem types: description: use after free
Affected products: vendor: Huawei Technologies Co., Ltd.
product: HUAWEI Mate 10
Published: 2018-07-31T14:00:00.000Z
CVE-2018-7994 
Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The software does not release allocated memory properly when processing Protal questionnaire. A remote attacker could send a lot questionnaires to the device, successful exploit could cause the device to reboot since running out of memory.
Problem types: description: memory leak
Affected products: vendor: Huawei Technologies Co., Ltd.
product: NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6600; USG9500
Published: 2018-07-31T14:00:00.000Z
CVE-2018-7995 
Race condition in the store_int_with_restart() function in arch/x86/kernel/cpu/mcheck/mce.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (panic) by leveraging root access to write to the check_interval file in a /sys/devices/system/machinecheck/machinecheck<cpu number> directory. NOTE: a third party has indicated that this report is not security relevant
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-09T15:00:00.000Z
CVE-2018-7996 
Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes description parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-09T16:00:00.000Z
CVE-2018-7997 
Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion tab of the /importTool/preview URI, with a CSV file polluted with malicious JavaScript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-09T16:00:00.000Z
CVE-2018-7998 
In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in region.c, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted image file. This occurs because of a race condition involving a failed delayed load and other worker threads.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-09T19:00:00.000Z
CVE-2018-7999 
In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-09T19:00:00.000Z
CVE-2018-8000 
In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken() in PdfTokenizer.cpp, a related issue to CVE-2017-5886. Remote attackers could leverage this vulnerability to cause a denial-of-service or potentially execute arbitrary code via a crafted pdf file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-09T19:00:00.000Z
CVE-2018-8001 
In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName() in PdfName.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-09T19:00:00.000Z
CVE-2018-8002 
In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-09T19:00:00.000Z
CVE-2018-8003 
Apache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a directory traversal attack allowing an unauthenticated user to craft an HTTP request which provides read-only access to any file on the filesystem of the host the Ambari Server runs on that is accessible by the user the Ambari Server is running as. Direct network access to the Ambari Server is required to issue this request, and those Ambari Servers that are protected behind a firewall, or in a restricted network zone are at less risk of being affected by this issue.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Ambari
Published: 2018-05-03T23:00:00.000Z
CVE-2018-8004 
There are multiple HTTP smuggling and cache poisoning issues when clients making malicious requests interact with Apache Traffic Server (ATS). This affects versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions and 7.x users should upgrade to 7.1.4 or later versions.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Traffic Server
Published: 2018-08-29T13:00:00.000Z
CVE-2018-8005 
When there are multiple ranges in a range request, Apache Traffic Server (ATS) will read the entire object from cache. This can cause performance problems with large objects in cache. This affects versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x users should upgrade to 6.2.3 or later versions and 7.x users should upgrade to 7.1.4 or later versions.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Traffic Server
Published: 2018-08-29T13:00:00.000Z
CVE-2018-8006 
An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp page of Apache ActiveMQ versions 5.0.0 to 5.15.5. The root cause of this issue is improper data filtering of the QueueFilter parameter.
Problem types: description: Cross-Site Scripting
Affected products: vendor: Apache Software Foundation
product: Apache ActiveMQ
Published: 2018-10-10T14:00:00.000Z
CVE-2018-8007 
Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validation of administrator-supplied configuration settings via the HTTP API, it is possible for a CouchDB administrator user to escalate their privileges to that of the operating system's user that CouchDB runs under, by bypassing the blacklist of configuration settings that are not allowed to be modified via the HTTP API. This privilege escalation effectively allows an existing CouchDB admin user to gain arbitrary remote code execution, bypassing already disclosed CVE-2017-12636. Mitigation: All users should upgrade to CouchDB releases 1.7.2 or 2.1.2.
Problem types: description: Administrative Privilege Escalation
Affected products: vendor: Apache Software Foundation
product: Apache CouchDB
Published: 2018-07-11T13:00:00.000Z
CVE-2018-8008 
Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.
Problem types: description: Arbitrary File Write
Affected products: vendor: Apache Software Foundation
product: Apache Storm
Published: 2018-06-05T19:00:00.000Z
CVE-2018-8009 
Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11 is exploitable via the zip slip vulnerability in places that accept a zip file.
Problem types: description: Remote Command Execution
Affected products: vendor: Apache Software Foundation
product: Apache Hadoop
Published: 2018-11-13T21:00:00.000Z
CVE-2018-8010 
This vulnerability in Apache Solr 6.0.0 to 6.6.3, 7.0.0 to 7.3.0 relates to an XML external entity expansion (XXE) in Solr config files (solrconfig.xml, schema.xml, managed-schema). In addition, Xinclude functionality provided in these config files is also affected in a similar way. The vulnerability can be used as XXE using file/ftp/http protocols in order to read arbitrary local files from the Solr server or the internal network. Users are advised to upgrade to either Solr 6.6.4 or Solr 7.3.1 releases both of which address the vulnerability. Once upgrade is complete, no other steps are required. Those releases only allow external entities and Xincludes that refer to local files / zookeeper resources below the Solr instance directory (using Solr's ResourceLoader); usage of absolute URLs is denied. Keep in mind, that external entities and XInclude are explicitly supported to better structure config files in large installations. Before Solr 6 this was no problem, as config files were not accessible through the APIs.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Solr
Published: 2018-05-21T19:00:00.000Z
CVE-2018-8011 mod_md, DoS via Coredumps on specially crafted requests
By specially crafting HTTP requests, the mod_md challenge handler would dereference a NULL pointer and cause the child process to segfault. This could be used to DoS the server. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.33).
Problem types: description: (undefined)
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Credits: lang: en
value: The issue was discovered by Daniel Caminada <daniel.caminada@ergon.ch>.
Published: 2018-07-18T14:00:00.000Z
CVE-2018-8012 
No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader.
Problem types: description: Gain Privilege
Affected products: vendor: Apache Software Foundation
product: Apache ZooKeeper
Published: 2018-05-21T19:00:00.000Z
CVE-2018-8013 
In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Batik
Published: 2018-05-24T16:00:00.000Z
CVE-2018-8014 
The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable 'supportsCredentials' for all origins. It is expected that users of the CORS filter will have configured it appropriately for their environment rather than using it in the default configuration. Therefore, it is expected that most users will not be impacted by this issue.
Problem types: description: n/a
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2018-05-16T16:00:00.000Z
CVE-2018-8015 
In Apache ORC 1.0.0 to 1.4.3 a malformed ORC file can trigger an endlessly recursive function call in the C++ or Java parser. The impact of this bug is most likely denial-of-service against software that uses the ORC file parser. With the C++ parser, the stack overflow might possibly corrupt the stack.
Problem types: description: Denial of Service
Affected products: vendor: Apache Software Foundation
product: Apache ORC
Published: 2018-05-18T17:00:00.000Z
CVE-2018-8016 
The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request. This issue is a regression of CVE-2015-0225. The regression was introduced in https://issues.apache.org/jira/browse/CASSANDRA-12109. The fix for the regression is implemented in https://issues.apache.org/jira/browse/CASSANDRA-14173. This fix is contained in the 3.11.2 release of Apache Cassandra.
Problem types: description: Configuration
Affected products: vendor: Apache Software Foundation
product: Apache Cassandra
Published: 2018-06-28T16:00:00.000Z
CVE-2018-8017 
In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser.
Problem types: description: DoS Vulnerability -- Potential Infinite Loop in IptcAnpaParser
Affected products: vendor: Apache Software Foundation
product: Apache Tika
Published: 2018-09-19T14:00:00.000Z
CVE-2018-8018 
In Apache Ignite before 2.4.8 and 2.5.x before 2.5.3, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one sends a specially prepared form of a serialized object to GridClientJdkMarshaller deserialization endpoint.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Ignite
Published: 2018-07-19T18:00:00.000Z
CVE-2018-8019 
When using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 did not correctly handle invalid responses. This allowed for revoked client certificates to be incorrectly identified. It was therefore possible for users to authenticate with revoked certificates when using mutual TLS. Users not using OCSP checks are not affected by this vulnerability.
Problem types: description: Security Constraint Bypass
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat Native
Published: 2018-07-31T13:00:00.000Z
CVE-2018-8020 
Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 has a flaw that does not properly check OCSP pre-produced responses, which are lists (multiple entries) of certificate statuses. Subsequently, revoked client certificates may not be properly identified, allowing for users to authenticate with revoked certificates to connections that require mutual TLS. Users not using OCSP checks are not affected by this vulnerability.
Problem types: description: Security Constraint Bypass
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat Native
Published: 2018-07-31T13:00:00.000Z
CVE-2018-8021 
Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code execution. Note Superset 0.23 was released prior to any Superset release under the Apache Software Foundation.
Problem types: description: RCE
Affected products: vendor: unspecified
product: Superset
Published: 2018-11-07T14:00:00.000Z
CVE-2018-8022 
A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This affects version 6.2.2. To resolve this issue users running 6.2.2 should upgrade to 6.2.3 or later versions.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Traffic Server
Published: 2018-08-29T13:00:00.000Z
CVE-2018-8023 
Apache Mesos can be configured to require authentication to call the Executor HTTP API using JSON Web Token (JWT). In Apache Mesos versions pre-1.4.2, 1.5.0, 1.5.1, 1.6.0 the comparison of the generated HMAC value against the provided signature in the JWT implementation used is vulnerable to a timing attack because instead of a constant-time string comparison routine a standard `==` operator has been used. A malicious actor can therefore abuse the timing difference of when the JWT validation function returns to reveal the correct HMAC value.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Mesos
Published: 2018-09-21T13:00:00.000Z
CVE-2018-8024 
In Apache Spark 2.1.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, it's possible for a malicious user to construct a URL pointing to a Spark cluster's UI's job and stage info pages, and if a user can be tricked into accessing the URL, can be used to cause script to execute and expose information from the user's view of the Spark UI. While some browsers like recent versions of Chrome and Safari are able to block this type of attack, current versions of Firefox (and possibly others) do not.
Problem types: description: Cross-Site Scripting (XSS) Flaw
Affected products: vendor: Apache Software Foundation
product: Apache Spark
Published: 2018-07-12T13:00:00.000Z
CVE-2018-8025 
CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an unauthenticated user would be treated as an authenticated user. https://issues.apache.org/jira/browse/HBASE-20664 implements a fix for this issue. It has been fixed in versions: 1.2.6.1, 1.3.2.1, 1.4.5, 2.0.1.
Problem types: description: User Authentication
Affected products: vendor: Apache Software Foundation
product: Apache HBase
Published: 2018-06-27T15:00:00.000Z