Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-8037 State: PUBLISHED Published: 2018-08-02T14:00:00Z Last Updated: 2024-09-16T17:07:40.261Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: Information Disclosure Description: If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NIO and NIO2 connectors that did not correctly track the closure of the connection when an async request was completed by the application and timed out by the container at the same time. This could also result in a user se
st was completed by the application and timed out by the container at the same time. This could also result in a user seeing a response intended for another user. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.9 and 8.5.5 to 8.5.31. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/%3C20180722090623.GA92700%40minotaur.apache.org%3E - http://www.securitytracker.com/id/1041376 - http://www.securityfocus.com/bid/104894 - https://www.debian.org/security/2018/dsa-4281 - https://security.netapp.com/advisory/ntap-20180817-0001/ - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - http://
com/advisory/ntap-20180817-0001/ - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - http://mail-archives.us.apache.org/mod_mbox/www-announce/201808.mbox/%3C0c616b4d-4e81-e7f8-b81d-1bb4c575aa33%40apache.org%3E - https://access.redhat.com/errata/RHSA-2018:2867 - https://access.redhat.com/errata/RHSA-2018:2868 - https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomca
he.org%3E - https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/6af47120905aa7d8fe12f
5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:1529 - https://lists.apache.org/thread.html/2ee3af8a43cb019e7898c9330cc8e73306553a27f2e4735dfb522d39%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org/thread.html/5d15316dfb4adf75d96d394745f8037533fa3bcc1ac8f619bf5c044c%40%3Cusers.tomcat.apache.org%3E - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E -
/lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2018-8038 State: PUBLISHED Published: 2018-07-05T13:00:00Z Last Updated: 2024-09-16T22:15:38.445Z Vendors: Apache Software Foundation Products: Apache CXF Fediz Problem Types: Remote Execution Description: Versions of Apache CXF Fediz prior to 1.4.4 do not fully disable Document Type Declarations (DTDs) when either parsing the Identity Provider response in the application plugins, or in the Identity Provider itself when parsing certain XML-based parameters. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/f0a6a05ec3b3a00458da43712b0ff3a2f573175d9bfb39fb0de21424%40%3Cdev.cxf.apache.org%3E - http://www.securitytracker.com/id/1041
a05ec3b3a00458da43712b0ff3a2f573175d9bfb39fb0de21424%40%3Cdev.cxf.apache.org%3E - http://www.securitytracker.com/id/1041220 - https://github.com/apache/cxf-fediz/commit/b6ed9865d0614332fa419fe4b6d0fe81bc2e660d - http://cxf.apache.org/security-advisories.data/CVE-2018-8038.txt.asc - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.h
2cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE ID: CVE-2018-8039 State: PUBLISHED Published: 2018-07-02T13:00:00Z Last Updated: 2024-09-17T04:04:46.184Z Vendors: Apache Software Foundation Products: Apache CXF Problem Types: Improper Validation of Certificate with Host Mismatch Description: It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via 'System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");'. When this system property is set, CXF uses some reflection to try to make the HostnameVerifier work with the old com.sun.net.ssl.HostnameVerifier interface. However, the default HostnameVerifier implementation in CXF does not implement the method in this interface, and an
ace. However, the default HostnameVerifier implementation in CXF does not implement the method in this interface, and an exception is thrown. However, in Apache CXF prior to 3.2.5 and 3.1.16 the exception is caught in the reflection code and not properly propagated. What this means is that if you are using the com.sun.net.ssl stack with CXF, an error with TLS hostname verification will not be thrown, leaving a CXF client subject to man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apache/cxf/commit/fae6fabf9bd7647f5e9cb68897a7d72b545b741b - https://access.redhat.com/errata/RHSA-2018:2428 - https://access.redhat.com/errata/RHSA-2018
f5e9cb68897a7d72b545b741b - https://access.redhat.com/errata/RHSA-2018:2428 - https://access.redhat.com/errata/RHSA-2018:3817 - https://access.redhat.com/errata/RHSA-2018:2643 - https://lists.apache.org/thread.html/1f8ff31df204ad0374ab26ad333169e0387a5e7ec92422f337431866%40%3Cdev.cxf.apache.org%3E - http://www.securityfocus.com/bid/106357 - https://access.redhat.com/errata/RHSA-2018:2279 - https://access.redhat.com/errata/RHSA-2018:2424 - https://access.redhat.com/errata/RHSA-2018:2276 - https://access.redhat.com/errata/RHSA-2018:2423 - https://access.redhat.com/errata/RHSA-2018:2425 - https://access.redhat.com/errata/RHSA-2018:2277 - http://cxf.apache.org/security-advisories.data/CVE-2018-8
-2018:2425 - https://access.redhat.com/errata/RHSA-2018:2277 - http://cxf.apache.org/security-advisories.data/CVE-2018-8039.txt.asc?version=1&modificationDate=1530184663000&api=v2 - http://www.securitytracker.com/id/1041199 - https://access.redhat.com/errata/RHSA-2018:3768 - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.
e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE ID: CVE-2018-8040 State: PUBLISHED Published: 2018-08-29T13:00:00Z Last Updated: 2024-09-17T02:21:14.011Z Vendors: Apache Software Foundation Products: Apache Traffic Server Problem Types: Information Disclosure Description: Pages that are rendered using the ESI plugin can have access to the cookie header when the plugin is configured not to allow access. This affects Apache Traffic Server (ATS) versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions and 7.x users should upgrade to 7.1.4 or later versions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apache/trafficserver/pull/3926
ions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apache/trafficserver/pull/3926 - https://lists.apache.org/thread.html/cc7aa2ce1c6f4fe0c6bfef517763cdaad30ec7bcb0115b73f73f3c01%40%3Cusers.trafficserver.apache.org%3E - https://lists.apache.org/thread.html/36b3df68fe7311965f6bc4630ca413d2aa99d8f1d53affda85ea70d7%40%3Cusers.trafficserver.apache.org%3E - https://www.debian.org/security/2018/dsa-4282 - http://www.securityfocus.com/bid/105181
CVE ID: CVE-2018-8041 State: PUBLISHED Published: 2018-09-17T14:00:00Z Last Updated: 2024-09-17T04:29:13.153Z Vendors: Apache Software Foundation Products: Apache Camel Problem Types: Path traversal Description: Apache Camel's Mail 2.20.0 through 2.20.3, 2.21.0 through 2.21.1 and 2.22.0 is vulnerable to path traversal. Additional Analyst Notes: - CVE Program Container: References: - http://camel.apache.org/security-advisories.data/CVE-2018-8041.txt.asc?version=1&modificationDate=1536746339000&api=v2 - http://www.securityfocus.com/bid/105352 - https://issues.apache.org/jira/browse/CAMEL-12630 - https://access.redhat.com/errata/RHSA-2018:3768 - https://lists.apache.org/thread.html/b4014ea7c583
browse/CAMEL-12630 - https://access.redhat.com/errata/RHSA-2018:3768 - https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E - https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E
CVE ID: CVE-2018-8042 State: PUBLISHED Published: 2018-07-18T15:00:00Z Last Updated: 2024-09-17T01:26:55.110Z Vendors: Apache Software Foundation Products: Apache Ambari Problem Types: Information Disclosure Description: Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational log messages when the credential store feature is enabled for eligible services. For example, Hive and Oozie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104869 - https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-CVE-2018-8042
CVE ID: CVE-2018-8043 State: PUBLISHED Published: 2018-03-10T22:00:00 Last Updated: 2024-08-05T06:46:12.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unimac_mdio_probe function in drivers/net/phy/mdio-bcm-unimac.c in the Linux kernel through 4.15.8 does not validate certain resource availability, which allows local users to cause a denial of service (NULL pointer dereference). Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3619-2/ - https://usn.ubuntu.com/3630-2/ - https://usn.ubuntu.com/3632-1/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=297a6961ffb8ff4dc66c9fbf53b924bd1dda05d5 - https://github.co
nel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=297a6961ffb8ff4dc66c9fbf53b924bd1dda05d5 - https://github.com/torvalds/linux/commit/297a6961ffb8ff4dc66c9fbf53b924bd1dda05d5 - https://usn.ubuntu.com/3630-1/ - https://usn.ubuntu.com/3619-1/ - http://www.securitytracker.com/id/1040749
CVE ID: CVE-2018-8044 State: PUBLISHED Published: 2021-01-11T15:36:36 Last Updated: 2024-08-05T06:46:11.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: K7Computing Pvt Ltd K7Antivirus Premium 15.1.0.53 is affected by: Incorrect Access Control. The impact is: Local Process Execution (local). The component is: K7Sentry.sys. Additional Analyst Notes: - CVE Program Container: References: - http://k7computing.com - http://k7antivirus.com - https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-January-2021
CVE ID: CVE-2018-8045 State: PUBLISHED Published: 2018-03-14T20:00:00 Last Updated: 2024-08-05T06:46:13.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Joomla! 3.5.0 through 3.8.5, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the User Notes list view. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/723-20180301-core-sqli-vulnerability.html - http://www.securitytracker.com/id/1040540 - http://www.securityfocus.com/bid/103402
CVE ID: CVE-2018-8046 State: PUBLISHED Published: 2018-07-05T20:00:00 Last Updated: 2024-08-05T06:46:12.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. This framework brings no built-in XSS protection, so the developer has to ensure that data is correctly sanitized. However, the getTip() method of Action Columns takes HTML-escaped data and un-escapes it. If the tooltip contains user-controlled data, an attacker could exploit this to create a cross-site scripting attack, even when developers took precautions and escaped data. Additional A
ploit this to create a cross-site scripting attack, even when developers took precautions and escaped data. Additional Analyst Notes: - CVE Program Container: References: - http://examples.sencha.com/extjs/6.6.0/release-notes.html - http://seclists.org/fulldisclosure/2018/Jul/8
CVE ID: CVE-2018-8047 State: PUBLISHED Published: 2019-06-06T18:21:40 Last Updated: 2024-08-05T06:46:12.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: vtiger CRM 7.0.1 is affected by one reflected Cross-Site Scripting (XSS) vulnerability affecting version 7.0.1 and probably prior versions. This vulnerability could allow remote unauthenticated attackers to inject arbitrary web script or HTML via index.php?module=Contacts&view=List (app parameter). Additional Analyst Notes: - CVE Program Container: References: - https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2018-001
CVE ID: CVE-2018-8048 State: PUBLISHED Published: 2018-03-27T17:00:00 Last Updated: 2024-08-05T06:46:13.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flavorjones/loofah/issues/144 - http://www.openwall.com/lists/oss-security/2018/03/19/5 - https://www.debian.org/security/2018/dsa-4171 - https://security.netapp.com/advisory/ntap-20191122-0003/
CVE ID: CVE-2018-8049 State: PUBLISHED Published: 2018-04-03T22:00:00 Last Updated: 2024-08-05T06:46:12.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Stealth endpoint in Unisys Stealth SVG 2.8.x, 3.0.x before 3.0.1999, 3.1.x, 3.2.x before 3.2.030, and 3.3.x before 3.3.016, when running on Linux and AIX, allows remote attackers to cause a denial of service (crash) via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=48
CVE ID: CVE-2018-8050 State: PUBLISHED Published: 2018-03-11T06:00:00Z Last Updated: 2024-09-17T04:13:44.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to cause a denial of service (segmentation fault) via a corrupt AFF image that triggers an unexpected pagesize value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sshock/AFFLIBv3/commit/435a2ca802358a3debb6d164d2c33049131df81c
CVE ID: CVE-2018-8056 State: PUBLISHED Published: 2018-03-11T18:00:00 Last Updated: 2024-08-05T06:46:12.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via an invalid channel_name parameter to /index.php?/manage/channel/addchannel or a direct request to /export.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Kyhvedn/CVE_Description/blob/master/Cobub_Razor_0.8.0_physical_path_leakage.md - https://github.com/cobub/razor/issues/162 - https://www.exploit-db.com/exploits/44495/
CVE ID: CVE-2018-8057 State: PUBLISHED Published: 2018-03-11T18:00:00 Last Updated: 2024-08-05T06:46:12.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability exists in Western Bridge Cobub Razor 0.8.0 via the channel_name or platform parameter in a /index.php?/manage/channel/addchannel request, related to /application/controllers/manage/channel.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Kyhvedn/CVE_Description/blob/master/Cobub_Razor_0.8.0_SQL_injection_description.md - https://www.exploit-db.com/exploits/44454/ - https://github.com/cobub/razor/issues/162
CVE ID: CVE-2018-8058 State: PUBLISHED Published: 2018-03-12T03:00:00 Last Updated: 2024-08-05T06:46:12.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple (CMSMS) 2.2.6 has XSS in admin/moduleinterface.php via the pagedata parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ibey0nd/CVE/blob/master/CMS%20Made%20Simple%20Stored%20XSS%202.md
CVE ID: CVE-2018-8059 State: PUBLISHED Published: 2018-03-11T19:00:00Z Last Updated: 2024-09-16T20:36:57.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Djelibeybi configuration examples for use of NGINX in SUSE Portus 2.3, when applied to certain configurations involving Docker Compose, have a Missing SSL Certificate Validation issue because no proxy_ssl_* directives are used. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2018/03/07/4
CVE ID: CVE-2018-8060 State: PUBLISHED Published: 2018-05-10T03:00:00 Last Updated: 2024-08-05T06:46:12.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send an IOCTL to the device driver. If input and/or output buffer pointers are NULL or if these buffers' data are invalid, a NULL/invalid pointer access occurs, resulting in a Windows kernel panic aka Blue Screen. This affects IOCTLs higher than 0x85FE2600 with the HWiNFO32 symbolic device name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/otavioarj/SIOCtl
CVE ID: CVE-2018-8061 State: PUBLISHED Published: 2018-05-10T03:00:00 Last Updated: 2024-08-05T06:46:13.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send IOCTL 0x85FE2608 to the device driver with the HWiNFO32 symbolic device name, resulting in direct physical memory read or write. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/otavioarj/SIOCtl
CVE ID: CVE-2018-8062 State: PUBLISHED Published: 2020-10-23T04:27:15 Last Updated: 2024-08-05T06:46:12.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability on Comtrend AR-5387un devices with A731-410JAZ-C04_R02.A2pD035g.d23i firmware allows remote attackers to inject arbitrary web script or HTML via the Service Description parameter while creating a WAN service. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/159618/Comtrend-AR-5387un-Cross-Site-Scripting.html
CVE ID: CVE-2018-8065 State: PUBLISHED Published: 2018-03-12T00:00:00 Last Updated: 2024-08-05T06:46:12.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly sending a variety of HTTP requests with long HTTP header values or long URIs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rapid7/metasploit-framework/pull/9701 - https://github.com/EgeBalci/Sync_Breeze_Enterprise_10_6_24_-DOS - http://packetstormsecurity.com/files/172676/Flexense-HTTP-Server-10.6
com/EgeBalci/Sync_Breeze_Enterprise_10_6_24_-DOS - http://packetstormsecurity.com/files/172676/Flexense-HTTP-Server-10.6.24-Buffer-Overflow-Denial-Of-Service.html
CVE ID: CVE-2018-8069 State: PUBLISHED Published: 2018-03-12T05:00:00Z Last Updated: 2024-09-17T04:29:30.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: QCMS version 3.0 has XSS via the webname parameter to the /backend/system.html URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/imsebao/404team/blob/master/qcms/qcms.md
CVE ID: CVE-2018-8070 State: PUBLISHED Published: 2018-03-12T05:00:00Z Last Updated: 2024-09-16T18:02:50.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/imsebao/404team/blob/master/qcms_xss/qcms_xss.md
CVE ID: CVE-2018-8071 State: PUBLISHED Published: 2018-04-18T08:00:00 Last Updated: 2024-08-05T06:46:12.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mautic before v2.13.0 has stored XSS via a theme config file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mautic/mautic/releases/tag/2.13.0
CVE ID: CVE-2018-8072 State: PUBLISHED Published: 2018-04-26T15:00:00 Last Updated: 2024-08-05T06:46:12.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and IC-6220DC through 3.06 devices. The ipcam_cgi binary contains a stack-based buffer overflow that is possible to trigger from a remote unauthenticated /camera-cgi/public/getsysyeminfo.cgi?action=VALUE_HERE HTTP request: if the VALUE_HERE length is more than 0x400 (1024), it is possible to overwrite other values located on the stack due to an incorrect use of the strcpy() function. Additional Analyst Notes: - CVE Program Container: References: -