Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-20063 State: PUBLISHED Published: 2019-02-25T23:00:00 Last Updated: 2024-08-05T11:51:18.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Gurock TestRail 5.6.0.3853. An "Unrestricted Upload of File" vulnerability exists in the image-upload form (available in the description editor), allowing remote authenticated users to execute arbitrary code by uploading an image file with an executable extension but a safe Content-Type value, and then accessing it via a direct request to the file in the file-upload directory (if it's accessible according to the server configuration). Additional Analyst Notes: - CVE Program Container: References: -
t's accessible according to the server configuration). Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40vrico315/unrestricted-upload-of-file-with-dangerous-type-in-gurocks-testrail-11d9f4d13688
CVE ID: CVE-2018-20064 State: PUBLISHED Published: 2018-12-11T20:00:00 Last Updated: 2024-08-05T11:51:18.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 allows remote attackers to write to arbitrary files via directory traversal, as demonstrated by a dg-user/?controller=theme&action=edit&name=doorgets&file=../../1.txt%00 URI with content in the theme_content_nofi parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/doorgets/CMS/issues/12
CVE ID: CVE-2018-20065 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T11:51:18.976Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Handling of URI action in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to initiate potentially unsafe navigations without a user gesture via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/851821 - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html
CVE ID: CVE-2018-20066 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T11:51:18.979Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Incorrect object lifecycle in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://crbug.com/856135
CVE ID: CVE-2018-20067 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T11:51:18.990Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: A renderer initiated back navigation was incorrectly allowed to cancel a browser initiated one in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://crbug.com/879965
CVE ID: CVE-2018-20068 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T11:51:18.942Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Incorrect handling of 304 status codes in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/882270 - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html
CVE ID: CVE-2018-20069 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T11:51:18.964Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Failure to prevent navigation to top frame to data URLs in Navigation in Google Chrome on iOS prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/890558 - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html
CVE ID: CVE-2018-20070 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T11:51:18.976Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://crbug.com/895885
CVE ID: CVE-2018-20071 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T11:51:19.071Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficiently strict origin checks during JIT payment app installation in Payments in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to install a service worker for a domain that can host attacker controled files via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/853937 - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html
CVE ID: CVE-2018-20072 State: PUBLISHED Published: 2024-09-23T21:56:31.434Z Last Updated: 2025-03-25T16:20:45.495Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in PDF in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform out of bounds memory access via a crafted PDF file. (Chromium security severity: Low) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://issues.chromium.org/issues/40093560
CVE ID: CVE-2018-20073 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T11:51:18.976Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/733943 - https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00057.html
CVE ID: CVE-2018-20090 State: PUBLISHED Published: 2019-11-26T15:18:48 Last Updated: 2024-08-05T11:51:18.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. Authenticated users can bypass project permission checks and gain read-write access to any project folder. Additional Analyst Notes: - CVE Program Container: References: - https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#TSB-351
CVE ID: CVE-2018-20091 State: PUBLISHED Published: 2019-06-07T15:50:36 Last Updated: 2024-08-05T11:51:19.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. This would allow any authenticated user to run arbitrary queries against CDSW's internal database. The database contains user contact information, encrypted CDSW passwords (in the case of local authentication), API keys, and stored Kerberos keytabs. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudera.com/products/data-science-and-engineering/data-science-workbench.html - https://www.clouder
nces: - https://www.cloudera.com/products/data-science-and-engineering/data-science-workbench.html - https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html
CVE ID: CVE-2018-20092 State: PUBLISHED Published: 2018-12-17T18:00:00 Last Updated: 2024-08-05T11:51:18.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request. Additional Analyst Notes: - CVE Program Container: References: - https://www.ptc.com/en/documents/security/coordinated-vulnerability-disclosure/security-vulnerabilities - https://www.doyler.net/security-not-included/ptc-thingworx-vulnerability
CVE ID: CVE-2018-20094 State: PUBLISHED Published: 2018-12-12T08:00:00Z Last Updated: 2024-09-16T17:54:39.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in XXL-CONF 1.6.0. There is a path traversal vulnerability via ../ in the keys parameter that can download any configuration file, related to ConfController.java and PropUtil.java. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xuxueli/xxl-conf/issues/61
CVE ID: CVE-2018-20095 State: PUBLISHED Published: 2018-12-12T08:00:00Z Last Updated: 2024-09-17T01:16:32.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/341
CVE ID: CVE-2018-20096 State: PUBLISHED Published: 2018-12-12T08:00:00 Last Updated: 2024-08-05T11:51:18.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/590 - https://github.com/TeamSeri0us/pocs/tree/master/exiv2/20181206 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZXCEKTYF7HLM6VH2WCWO2HXTJH37MBLA/ - https://access.redhat.com/errata/RHSA-2019:2101
CVE ID: CVE-2018-20097 State: PUBLISHED Published: 2018-12-12T00:00:00 Last Updated: 2024-08-05T11:51:18.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/02/msg00038.html - https://github.com/Exiv2/exiv2/issues/590 - https://github.com/TeamSeri0us/pocs/tree/master/exiv2/20181206 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZXCEKTYF7HLM6VH
81206 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZXCEKTYF7HLM6VH2WCWO2HXTJH37MBLA/ - https://access.redhat.com/errata/RHSA-2019:2101 - https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
CVE ID: CVE-2018-20098 State: PUBLISHED Published: 2018-12-12T08:00:00 Last Updated: 2024-08-05T11:51:19.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/590 - https://github.com/TeamSeri0us/pocs/tree/master/exiv2/20181206 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZXCEKTYF7HLM6VH2WCWO2HXTJH37MBLA/ - https://access.redhat.com/errata/RHSA-2019:2101
CVE ID: CVE-2018-20099 State: PUBLISHED Published: 2018-12-12T08:00:00 Last Updated: 2024-08-05T11:51:19.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/590 - https://github.com/TeamSeri0us/pocs/tree/master/exiv2/20181206 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZXCEKTYF7HLM6VH2WCWO2HXTJH37MBLA/ - https://access.redhat.com/errata/RHSA-2019:2101
CVE ID: CVE-2018-20100 State: PUBLISHED Published: 2019-01-02T18:00:00 Last Updated: 2024-08-05T11:51:19.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on August Connect devices. Insecure data transfer between the August app and August Connect during configuration allows attackers to discover home Wi-Fi credentials. This data transfer uses an unencrypted access point for these credentials, and passes them in an HTTP POST, using the AugustWifiDevice class, with data encrypted with a fixed key found obfuscated in the app. Additional Analyst Notes: - CVE Program Container: References: - https://dojo.bullguard.com/dojo-by-bullguard/blog/august-connect/
CVE ID: CVE-2018-20101 State: PUBLISHED Published: 2018-12-12T16:00:00 Last Updated: 2024-08-05T11:51:19.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: The codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via the value of a cell. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/import-users-from-csv-with-meta/#developers - https://wpvulndb.com/vulnerabilities/9176
CVE ID: CVE-2018-20102 State: PUBLISHED Published: 2018-12-12T17:00:00 Last Updated: 2024-08-05T11:51:19.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8.14. Due to a missing check when validating DNS responses, remote attackers might be able read the 16 bytes corresponding to an AAAA record from the non-initialized part of the buffer, possibly accessing anything that was left on the stack, or even past the end of the 8193-byte buffer, depending on the value of accepted_payload_size. Additional Analyst Notes: - CVE Program Container: References: - http://git.haproxy.org/?p=haproxy
ccepted_payload_size. Additional Analyst Notes: - CVE Program Container: References: - http://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=efbbdf72992cd20458259962346044cafd9331c0 - https://usn.ubuntu.com/3858-1/ - https://access.redhat.com/errata/RHBA-2019:0326 - http://www.securityfocus.com/bid/106223 - https://access.redhat.com/errata/RHBA-2019:0327 - https://access.redhat.com/errata/RHSA-2019:1436 - https://lists.debian.org/debian-lts-announce/2022/05/msg00045.html
CVE ID: CVE-2018-20103 State: PUBLISHED Published: 2018-12-12T17:00:00 Last Updated: 2024-08-05T11:51:18.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106280 - https://usn.ubuntu.com/3858-1/ - https://access.redhat.com/errata/RHBA-2019:0326 - http://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=58df5aea0a0c926b2238f65908f5e9f8
redhat.com/errata/RHBA-2019:0326 - http://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=58df5aea0a0c926b2238f65908f5e9f83d1cca25 - https://access.redhat.com/errata/RHBA-2019:0327 - https://access.redhat.com/errata/RHSA-2019:1436 - https://lists.debian.org/debian-lts-announce/2022/05/msg00045.html
CVE ID: CVE-2018-20104 State: REJECTED Published: N/A Last Updated: 2023-01-23T00:00:00 Description: No description available.
CVE ID: CVE-2018-20105 State: PUBLISHED Published: 2020-01-27T08:50:13.036411Z Last Updated: 2024-09-16T23:40:59.234Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SUSE, openSUSE Products: SUSE Linux Enterprise Server 15, Leap Problem Types: CWE-532 Description: A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions prior to 1.2.2. openSUSE Leap yast2-rmt versions prior to 1.2.2. Additional Analyst Notes: - CVE Program Container: References:
o 1.2.2. openSUSE Leap yast2-rmt versions prior to 1.2.2. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1119835 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00035.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00015.html
CVE ID: CVE-2018-20106 State: PUBLISHED Published: 2019-03-15T20:00:00Z Last Updated: 2024-09-16T17:23:19.129Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: SUSE Products: yast2-printer Problem Types: CWE-78 Description: In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or simliar characters is supplied this allows for executing code as root. This requires tricking root to enter such a password in yast. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1114853
CVE ID: CVE-2018-20107 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2021-01-06T16:15:40 Description: No description available.
CVE ID: CVE-2018-20108 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2021-01-06T16:15:26 Description: No description available.
CVE ID: CVE-2018-20109 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2021-01-06T16:16:04 Description: No description available.
CVE ID: CVE-2018-20110 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2021-01-06T16:16:04 Description: No description available.
CVE ID: CVE-2018-20111 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2021-01-06T16:15:29 Description: No description available.
CVE ID: CVE-2018-20112 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2021-01-06T16:16:06 Description: No description available.
CVE ID: CVE-2018-20113 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2021-01-06T16:15:51 Description: No description available.
CVE ID: CVE-2018-20114 State: PUBLISHED Published: 2019-01-02T18:00:00 Last Updated: 2024-08-05T11:51:19.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: On D-Link DIR-818LW Rev.A 2.05.B03 and DIR-860L Rev.B 2.03.B03 devices, unauthenticated remote OS command execution can occur in the soap.cgi service of the cgibin binary via an "&&" substring in the service parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-6530. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pr0v3rbs/CVE/tree/master/CVE-2018-20114
CVE ID: CVE-2018-20121 State: PUBLISHED Published: 2019-03-17T19:53:52 Last Updated: 2024-08-05T11:51:19.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Podcast Generator 2.7 has stored cross-site scripting (XSS) via the URL addcategory parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151333/Podcast-Generator-2.7-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2019/Jan/63 - https://github.com/albertobeta/PodcastGenerator/commits/master - https://www.netsparker.com/web-applications-advisories/ns-18-051-stored-cross-site-scripting-in-podcastgenerator/
CVE ID: CVE-2018-20122 State: PUBLISHED Published: 2019-02-21T14:00:00 Last Updated: 2024-08-05T11:51:19.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface on FASTGate Fastweb devices with firmware through 0.00.47_FW_200_Askey 2017-05-17 (software through 1.0.1b) exposed a CGI binary that is vulnerable to a command injection vulnerability that can be exploited to achieve remote code execution with root privileges. No authentication is required in order to trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.horizonsecurity.it/advisories/?a=12&title=Fastweb+FastGate+router+101b+Remote+code+execution++CVE201820122
CVE ID: CVE-2018-20123 State: PUBLISHED Published: 2018-12-17T18:00:00 Last Updated: 2024-08-05T11:51:19.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: pvrdma_realize in hw/rdma/vmw/pvrdma_main.c in QEMU has a Memory leak after an initialisation error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106219 - http://www.openwall.com/lists/oss-security/2018/12/13/4 - https://lists.gnu.org/archive/html/qemu-devel/2018-12/msg02817.html - https://usn.ubuntu.com/3923-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJMTVGDLA654HNCDGLCUEIP36SNJEKK7/
CVE ID: CVE-2018-20124 State: PUBLISHED Published: 2018-12-20T22:00:00 Last Updated: 2024-08-05T11:51:19.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: hw/rdma/rdma_backend.c in QEMU allows guest OS users to trigger out-of-bounds access via a PvrdmaSqWqe ring element with a large num_sge value. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2018-12/msg02822.html - http://www.openwall.com/lists/oss-security/2018/12/18/2 - http://www.securityfocus.com/bid/106290 - https://usn.ubuntu.com/3923-1/
CVE ID: CVE-2018-20125 State: PUBLISHED Published: 2018-12-20T21:00:00 Last Updated: 2024-08-05T11:51:19.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: hw/rdma/vmw/pvrdma_cmd.c in QEMU allows attackers to cause a denial of service (NULL pointer dereference or excessive memory allocation) in create_cq_ring or create_qp_rings. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2018/12/19/3 - http://www.securityfocus.com/bid/106298 - https://lists.gnu.org/archive/html/qemu-devel/2018-12/msg02823.html - https://usn.ubuntu.com/3923-1/
CVE ID: CVE-2018-20126 State: PUBLISHED Published: 2018-12-20T21:00:00 Last Updated: 2024-08-05T11:51:19.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: hw/rdma/vmw/pvrdma_cmd.c in QEMU allows create_cq and create_qp memory leaks because errors are mishandled. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2018/12/19/4 - https://lists.gnu.org/archive/html/qemu-devel/2018-12/msg02824.html - http://www.securityfocus.com/bid/106298 - https://usn.ubuntu.com/3923-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00038.html
CVE ID: CVE-2018-20127 State: PUBLISHED Published: 2018-12-13T08:00:00 Last Updated: 2024-08-05T11:51:19.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in zzzphp cms 1.5.8. del_file in /admin/save.php allows remote attackers to delete arbitrary files via a mixed-case extension and an extra '.' character, because (for example) "php" is blocked but path=F:/1.phP. succeeds. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/89/
CVE ID: CVE-2018-20128 State: PUBLISHED Published: 2018-12-13T08:00:00 Last Updated: 2024-08-05T11:51:19.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in UsualToolCMS v8.0. cmsadmin\a_sqlback.php allows remote attackers to delete arbitrary files via a backname[] directory-traversal pathname followed by a crafted substring. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/90/