rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-3861 
A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution.
Problem types: description: Out of bounds write
Affected products: vendor: Talos
product: Computerinsel Photoline
Published: 2018-04-12T19:00:00.000Z
CVE-2018-3862 
A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting
Problem types: description: Out of bounds write
Affected products: vendor: Talos
product: Computerinsel Photoline
Published: 2018-04-12T19:00:00.000Z
CVE-2018-3863 
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. A strcpy overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long "user" value in order to exploit this vulnerability.
Problem types: description: Buffer copy without checking size
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-08-23T15:00:00.000Z
CVE-2018-3864 
An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long "password" value in order to exploit this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-09-20T15:00:00.000Z
CVE-2018-3865 
An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long "cameraIp" value in order to exploit this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-09-20T15:00:00.000Z
CVE-2018-3866 
An exploitable buffer overflow vulnerability exists in the samsungWifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. The strcpy at [8] overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long 'callbackUrl' value in order to exploit this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: Samsung
Published: 2018-08-23T22:00:00.000Z
CVE-2018-3867 
An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly handles the answer received from a smart camera, leading to a buffer overflow on the stack. An attacker can send a series of HTTP requests to trigger this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-08-23T15:00:00.000Z
CVE-2018-3868 
A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution.
Problem types: description: Out of bounds write
Affected products: vendor: Talos
product: Computerinsel Photoline
Published: 2018-04-12T19:00:00.000Z
CVE-2018-3870 
An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3871.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: ACD Systems
product: Canvas Draw
Published: 2018-07-19T19:00:00.000Z
CVE-2018-3871 
An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3870.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: ACD Systems
product: Canvas Draw
Published: 2018-07-19T19:00:00.000Z
CVE-2018-3872 
An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly extracts the videoHostUrl field from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: Samsung
Published: 2018-08-23T22:00:00.000Z
CVE-2018-3873 
An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the destination buffer, which has a size of 128 bytes. An attacker can send an arbitrarily long "secretKey" value in order to exploit this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-09-21T14:00:00.000Z
CVE-2018-3874 
An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the destination buffer, which has a size of 32 bytes. An attacker can send an arbitrarily long "accessKey" value in order to exploit this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-09-21T14:00:00.000Z
CVE-2018-3875 
An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. The strncpy overflows the destination buffer, which has a size of 2,000 bytes. An attacker can send an arbitrarily long "sessionToken" value in order to exploit this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-09-10T20:00:00.000Z
CVE-2018-3876 
An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the destination buffer, which has a size of 64 bytes. An attacker can send an arbitrarily long "bucket" value in order to exploit this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-09-21T14:00:00.000Z
CVE-2018-3877 
An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the destination buffer, which has a size of 160 bytes. An attacker can send an arbitrarily long "directory" value in order to exploit this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-09-21T14:00:00.000Z
CVE-2018-3878 
Multiple exploitable buffer overflow vulnerabilities exist in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. A strncpy overflows the destination buffer, which has a size of 16 bytes. An attacker can send an arbitrarily long "region" value in order to exploit this vulnerability.
Problem types: description: Buffer copy without checking size
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-08-23T15:00:00.000Z
CVE-2018-3879 
An exploitable JSON injection vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly parses the user-controlled JSON payload, leading to a JSON injection which in turn leads to a SQL injection in the video-core database. An attacker can send a series of HTTP requests to trigger this vulnerability.
Problem types: description: Parsing SQL Injection
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-08-23T15:00:00.000Z
CVE-2018-3880 
An exploitable stack-based buffer overflow vulnerability exists in the database 'find-by-cameraId' functionality of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly handles existing records inside its SQLite database, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: Samsung
Published: 2018-08-23T22:00:00.000Z
CVE-2018-3881 
An exploitable unauthenticated XML external injection vulnerability was identified in FocalScope v2416. A unauthenticated attacker could submit a specially crafted web request to FocalScope's server that could cause an XXE, and potentially result in data compromise.
Problem types: description: Improper Restriction of XML External Entity Reference
Affected products: vendor: FocalScope
product: Focalscope
Published: 2018-08-01T20:00:00.000Z
CVE-2018-3882 
An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections resulting in data compromise. The searchfield parameter can be used to perform an SQL injection attack. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-12T14:00:00.000Z
CVE-2018-3883 
An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections resulting in data compromise. The employee and sort_order parameter can be used to perform an SQL injection attack. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required.
Problem types: description: SQL injection
Affected products: vendor: Talos
product: ERPNext
Published: 2018-09-12T14:00:00.000Z
CVE-2018-3884 
An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections resulting in data compromise. The sort_by and start parameter can be used to perform an SQL injection attack. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required.
Problem types: description: SQL injection
Affected products: vendor: Talos
product: ERPNext
Published: 2018-09-12T14:00:00.000Z
CVE-2018-3885 
An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections resulting in data compromise. The order_by parameter can be used to perform an SQL injection attack. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required.
Problem types: description: SQL injection
Affected products: vendor: Talos
product: ERPNext
Published: 2018-09-12T14:00:00.000Z
CVE-2018-3886 
A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.
Problem types: description: Out of bounds Write
Affected products: vendor: Talos
product: Computerinsel Photoline
Published: 2018-04-11T20:00:00.000Z
CVE-2018-3887 
A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.
Problem types: description: Out-of-bounds write
Affected products: vendor: Talos
product: Computerinsel Photoline
Published: 2018-04-11T20:00:00.000Z
CVE-2018-3888 
A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.
Problem types: description: Out of bounds write
Affected products: vendor: Talos
product: Computerinsel Photoline
Published: 2018-04-11T20:00:00.000Z
CVE-2018-3889 
A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.
Problem types: description: Out of bounds write
Affected products: vendor: Talos
product: Computerinsel Photoline
Published: 2018-04-12T19:00:00.000Z
CVE-2018-3890 
An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted file can cause a logic flaw and command injection, resulting in code execution. An attacker can insert an SD card to trigger this vulnerability.
Problem types: description: command injection
Affected products: vendor: unknown
product: Yi Technology
Published: 2018-11-02T17:00:00.000Z
CVE-2018-3891 
An exploitable firmware downgrade vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted file can cause a logic flaw, resulting in a firmware downgrade. An attacker can insert an SD card to trigger this vulnerability.
Problem types: description: Stack-based Buffer Overflow
Affected products: vendor: unknown
product: Yi Technology
Published: 2018-11-02T17:00:00.000Z
CVE-2018-3892 
An exploitable firmware downgrade vulnerability exists in the time syncing functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted packet can cause a buffer overflow, resulting in code execution. An attacker can intercept and alter network traffic to trigger this vulnerability.
Problem types: description: Stack-based Buffer Overflow
Affected products: vendor: unknown
product: Yi Technology
Published: 2018-11-02T17:00:00.000Z
CVE-2018-3893 
An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-27T15:00:00.000Z
CVE-2018-3894 
An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long "startTime" value in order to exploit this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-09-21T15:00:00.000Z
CVE-2018-3895 
An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 Firmware version 0.20.17. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long 'endTime' value in order to exploit this vulnerability. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: Buffer Overflow
Affected products: vendor: Samsung
product: Samsung
Published: 2018-08-28T19:00:00.000Z
CVE-2018-3896 
An exploitable buffer overflow vulnerabilities exist in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub with Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long "correlationId" value in order to exploit this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-09-10T15:00:00.000Z
CVE-2018-3897 
An exploitable buffer overflow vulnerabilities exist in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub with Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long "callbackUrl" value in order to exploit this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-09-10T15:00:00.000Z
CVE-2018-3898 
An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause a buffer overflow, resulting in code execution. The trans_info call can overwrite a buffer of size 0x104, which is more than enough to overflow the return address from the ssid_dst field.
Problem types: description: Stack-based Buffer Overflow
Affected products: vendor: unknown
product: Yi Technology
Published: 2018-11-02T17:00:00.000Z
CVE-2018-3899 
An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause a buffer overflow, resulting in code execution. The trans_info call can overwrite a buffer of size 0x104, which is more than enough to overflow the return address from the password_dst field
Problem types: description: Stack-based Buffer Overflow
Affected products: vendor: unknown
product: Yi Technology
Published: 2018-11-02T17:00:00.000Z
CVE-2018-3900 
An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause a buffer overflow, resulting in code execution. An attacker can make the camera scan a QR code to trigger this vulnerability. Alternatively, a user could be convinced to display a QR code from the internet to their camera, which could exploit this vulnerability.
Problem types: description: Stack-based Buffer Overflow
Affected products: vendor: Yi
product: Yi Technology
Published: 2018-11-01T15:00:00.000Z
CVE-2018-3902 
An exploitable buffer overflow vulnerability exists in the camera "replace" feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly extracts the URL field from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-08-23T15:00:00.000Z
CVE-2018-3903 
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. The memcpy call overflows the destination buffer, which has a size of 512 bytes. An attacker can send an arbitrarily long "url" value in order to overwrite the saved-PC with 0x42424242.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Talos
product: Samsung
Published: 2018-08-23T15:00:00.000Z
CVE-2018-3904 
An exploitable buffer overflow vulnerability exists in the camera 'update' feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: Samsung
Published: 2018-08-27T15:00:00.000Z
CVE-2018-3905 
An exploitable buffer overflow vulnerability exists in the camera "create" feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly extracts the "state" field from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-08-23T15:00:00.000Z
CVE-2018-3906 
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database field in video-core's HTTP server of Samsung SmartThings Hub. The video-core process insecurely extracts the shard.videoHostURL field from its SQLite database, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: Classic Buffer Overflow
Affected products: vendor: Samsung
product: SmartThings Hub STH-ETH-250
Published: 2018-09-21T15:00:00.000Z
CVE-2018-3907 
An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly handles pipelined HTTP requests, which allows successive requests to overwrite the previously parsed HTTP method, 'on_url' callback. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: HTTP Request Smuggling
Affected products: vendor: Talos
product: Samsung
Published: 2018-08-24T00:00:00.000Z
CVE-2018-3908 
An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The video-core process incorrectly handles pipelined HTTP requests, which allows successive requests to overwrite the previously parsed HTTP method, URL and body. With the implementation of the on_body callback, defined by sub_41734, an attacker can send an HTTP request to trigger this vulnerability.
Problem types: description: HTTP request Smuggling
Affected products: vendor: Samsung
product: Samsung
Published: 2018-08-28T19:00:00.000Z