Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1002003 State: PUBLISHED Published: 2018-12-03T16:00:00 Last Updated: 2024-08-05T12:47:57.464Z Vendors: Kiboko Labs https://calendarscripts.info/ Products: Arigato Autoresponder and Newsletter Problem Types: reflected XSS vulnerability in Wordpress Plugin Arigato Autoresponder and Newsletter v2.5.1.8 Description: There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45434/ - https://wordpress.org/plugins/bft-autoresponder/ - http://www.vapidlabs.com/advisory.php?v=20
CVE ID: CVE-2018-1002004 State: PUBLISHED Published: 2018-12-03T16:00:00 Last Updated: 2024-08-05T12:47:56.996Z Vendors: Kiboko Labs https://calendarscripts.info/ Products: Arigato Autoresponder and Newsletter Problem Types: reflected XSS vulnerability in Wordpress Plugin Arigato Autoresponder and Newsletter v2.5.1.8 Description: There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45434/ - https://wordpress.org/plugins/bft-autoresponder/ - http://www.vapidlabs.com/advisory.php?v=20
CVE ID: CVE-2018-1002005 State: PUBLISHED Published: 2018-12-03T16:00:00 Last Updated: 2024-08-05T12:47:57.518Z Vendors: Kiboko Labs https://calendarscripts.info/ Products: Arigato Autoresponder and Newsletter Problem Types: Blind SQL injection and multiple reflected XSS vulnerabilities in Wordpress Plugin Arigato Autoresponder and Newsletter v2.5.1.8 Description: These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in bft_list.html.php:43: via the filter_signup_date parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45434/ - https://wordpress.org/plugins/bft-autoresponder/ - http://www.
eferences: - https://www.exploit-db.com/exploits/45434/ - https://wordpress.org/plugins/bft-autoresponder/ - http://www.vapidlabs.com/advisory.php?v=203
CVE ID: CVE-2018-1002006 State: PUBLISHED Published: 2018-12-03T16:00:00 Last Updated: 2024-08-05T12:47:57.494Z Vendors: Kiboko Labs https://calendarscripts.info/ Products: Arigato Autoresponder and Newsletter Problem Types: Blind SQL injection and multiple reflected XSS vulnerabilities in Wordpress Plugin Arigato Autoresponder and Newsletter v2.5.1.8 Description: These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in integration-contact-form.html.php:14: via POST request variable classes Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45434/ - https://wordpress.org/plugins/bft-autoresponder/ -
Container: References: - https://www.exploit-db.com/exploits/45434/ - https://wordpress.org/plugins/bft-autoresponder/ - http://www.vapidlabs.com/advisory.php?v=203
CVE ID: CVE-2018-1002007 State: PUBLISHED Published: 2018-12-03T16:00:00 Last Updated: 2024-08-05T12:47:57.528Z Vendors: Kiboko Labs https://calendarscripts.info/ Products: Arigato Autoresponder and Newsletter Problem Types: reflected XSS vulnerability in Wordpress Plugin Arigato Autoresponder and Newsletter v2.5.1.8 Description: There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in integration-contact-form.html.php:15: via POST request variable html_id. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/explo
uest variable html_id. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45434/ - https://wordpress.org/plugins/bft-autoresponder/ - http://www.vapidlabs.com/advisory.php?v=203
CVE ID: CVE-2018-1002008 State: PUBLISHED Published: 2018-12-03T16:00:00 Last Updated: 2024-08-05T12:47:57.097Z Vendors: Kiboko Labs https://calendarscripts.info/ Products: Arigato Autoresponder and Newsletter Problem Types: reflected XSS vulnerability in Wordpress Plugin Arigato Autoresponder and Newsletter v2.5.1.8 Description: There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in list-user.html.php:4: via GET request offset variable. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45434/ - https
ble. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45434/ - https://wordpress.org/plugins/bft-autoresponder/ - http://www.vapidlabs.com/advisory.php?v=203
CVE ID: CVE-2018-1002009 State: PUBLISHED Published: 2018-12-03T16:00:00 Last Updated: 2024-08-05T12:47:57.451Z Vendors: Kiboko Labs https://calendarscripts.info/ Products: Arigato Autoresponder and Newsletter Problem Types: reflected XSS vulnerability in Wordpress Plugin Arigato Autoresponder and Newsletter v2.5.1.8 Description: There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in unsubscribe.html.php:3: via GET reuqest to the email variable. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45434/
il variable. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45434/ - https://wordpress.org/plugins/bft-autoresponder/ - http://www.vapidlabs.com/advisory.php?v=203
CVE ID: CVE-2018-1002100 State: PUBLISHED Published: 2018-06-01T21:00:00Z Last Updated: 2024-09-16T16:17:37.665Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N) Vendors: Kubernetes Products: Kubernetes Problem Types: directory traversal vulnerability Description: In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, and can be caused to overwrite arbitrary local files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/issues/61297 - https://hansmi.ch/articles/2018-04-openshift-s2i-security - https://bugzilla.
b.com/kubernetes/kubernetes/issues/61297 - https://hansmi.ch/articles/2018-04-openshift-s2i-security - https://bugzilla.redhat.com/show_bug.cgi?id=1564305
CVE ID: CVE-2018-1002101 State: PUBLISHED Published: 2018-12-05T21:00:00 Last Updated: 2024-08-05T12:47:57.266Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Kubernetes Products: Kubernetes Problem Types: argument injection Description: In Kubernetes versions 1.9.0-1.9.9, 1.10.0-1.10.5, and 1.11.0-1.11.1, user input was handled insecurely while setting up volume mounts on Windows nodes, which could lead to command line argument injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/issues/65750 - http://www.securityfocus.com/bid/106238 - https://security.netapp.com/advisory/ntap-20190416-0008/
CVE ID: CVE-2018-1002102 State: PUBLISHED Published: 2019-12-05T16:05:18.042235Z Last Updated: 2024-09-17T00:56:37.681Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:N) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-601 Description: Improper validation of URL redirection in the Kubernetes API server in versions prior to v1.14.0 allows an attacker-controlled Kubelet to redirect API server requests from streaming endpoints to arbitrary hosts. Impacted API servers will follow the redirect as a GET request with client-certificate credentials for authenticating to the Kubelet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kub
r authenticating to the Kubelet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/issues/85867 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q56CULSH7F7BC4NPS67ZS23ZCLL5TIVK/
CVE ID: CVE-2018-1002103 State: PUBLISHED Published: 2018-12-05T21:00:00Z Last Updated: 2024-09-16T22:35:01.118Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Kubernetes Products: Minikube Problem Types: Improper Input Validation Description: In Minikube versions 0.3.0-0.29.0, minikube exposes the Kubernetes Dashboard listening on the VM IP at port 30000. In VM environments where the IP is easy to predict, the attacker can use DNS rebinding to indirectly make requests to the Kubernetes Dashboard, create a new Kubernetes Deployment running arbitrary code. If minikube mount is in use, the attacker could also directly access the host filesystem. Additional Anal
rbitrary code. If minikube mount is in use, the attacker could also directly access the host filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/minikube/issues/3208
CVE ID: CVE-2018-1002104 State: PUBLISHED Published: 2020-01-14T20:15:17.491462Z Last Updated: 2024-09-16T21:07:22.919Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Kubernetes Products: k8s.gcr.io/defaultbackend Problem Types: CWE-215 Description: Versions < 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/ingress-nginx/pull/3125
CVE ID: CVE-2018-1002105 State: PUBLISHED Published: 2018-12-05T21:00:00 Last Updated: 2024-08-05T12:47:57.159Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kubernetes Products: Kubernetes Problem Types: Unchecked Error Condition Description: In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used
s over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21topic/kubernetes-announce/GVllWCg6L88 - https://www.exploit-db.com/exploits/46053/ - https://access.redhat.com/errata/RHSA-2018:3549 - https://access.redhat.com/errata/RHSA-2018:3752 - https://www.exploit-db.com/exploits/46052/ - https://access.redhat.com/errata/RHSA-2018:3624 - https://www.coalfire.com/The-Coalfire-Blog/December-2018/Kubernetes-Vulnerability-What-You-Can-Should-Do - https://github.com/kubernetes/kubernetes/issues/71411 -
/December-2018/Kubernetes-Vulnerability-What-You-Can-Should-Do - https://github.com/kubernetes/kubernetes/issues/71411 - https://access.redhat.com/errata/RHSA-2018:3742 - https://access.redhat.com/errata/RHSA-2018:3754 - https://access.redhat.com/errata/RHSA-2018:3537 - https://github.com/evict/poc_CVE-2018-1002105 - https://access.redhat.com/errata/RHSA-2018:3598 - https://access.redhat.com/errata/RHSA-2018:3551 - http://www.securityfocus.com/bid/106068 - https://security.netapp.com/advisory/ntap-20190416-0001/ - http://www.openwall.com/lists/oss-security/2019/06/28/2 - http://www.openwall.com/lists/oss-security/2019/07/06/3 - http://www.openwall.com/lists/oss-security/2019/07/06/4 - http:/
tp://www.openwall.com/lists/oss-security/2019/07/06/3 - http://www.openwall.com/lists/oss-security/2019/07/06/4 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html
CVE ID: CVE-2018-1002150 State: PUBLISHED Published: 2018-04-04T20:00:00Z Last Updated: 2024-09-16T20:37:35.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesystem read/write access. This vulnerability has been fixed in versions 1.12.1, 1.13.1, 1.14.1 and 1.15.1. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pagure.org/koji/CVE-2018-1002150/ - https://pagure.io/koji/issue/850
CVE ID: CVE-2018-1002200 State: PUBLISHED Published: 2018-07-25T17:00:00 Last Updated: 2024-08-05T12:47:57.447Z Vendors: Codehaus Products: plexus-archiver Problem Types: CWE-22 Description: plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/research/zip-slip-vulnerability - https://github.com/codehaus-plexus/plexus-archiver/commit/f8f4233508193b70df33759ae9dc6154d69c2ea8 - https://www.debian.org/security/2018/dsa-4227 -
plexus/plexus-archiver/commit/f8f4233508193b70df33759ae9dc6154d69c2ea8 - https://www.debian.org/security/2018/dsa-4227 - https://github.com/snyk/zip-slip-vulnerability - https://snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSPLEXUS-31680 - https://access.redhat.com/errata/RHSA-2018:1837 - https://github.com/codehaus-plexus/plexus-archiver/pull/87 - https://access.redhat.com/errata/RHSA-2018:1836
CVE ID: CVE-2018-1002201 State: PUBLISHED Published: 2018-07-25T17:00:00Z Last Updated: 2024-09-16T19:14:30.301Z Vendors: zeroturnaround Products: zt-zip Problem Types: CWE-22 Description: zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/research/zip-slip-vulnerability - https://github.com/snyk/zip-slip-vulnerability - https://snyk.io/vuln/SNYK-JAVA-ORGZEROTURNAROUND-31681 - https://github.com/zeroturnaround/zt-zip/blob/zt-zi
erability - https://snyk.io/vuln/SNYK-JAVA-ORGZEROTURNAROUND-31681 - https://github.com/zeroturnaround/zt-zip/blob/zt-zip-1.13/Changelog.txt - https://github.com/zeroturnaround/zt-zip/commit/759b72f33bc8f4d69f84f09fcb7f010ad45d6fff
CVE ID: CVE-2018-1002202 State: PUBLISHED Published: 2018-07-25T17:00:00 Last Updated: 2024-08-05T12:47:57.478Z Vendors: zip4j Products: zip4j Problem Types: CWE-22 Description: zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/research/zip-slip-vulnerability - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03895en_us - https://github.com/snyk/zip-slip-vulnerability - https://snyk.io/vuln/S
docLocale=en_US&docId=emr_na-hpesbmu03895en_us - https://github.com/snyk/zip-slip-vulnerability - https://snyk.io/vuln/SNYK-JAVA-NETLINGALAZIP4J-31679
CVE ID: CVE-2018-1002203 State: PUBLISHED Published: 2018-07-25T17:00:00Z Last Updated: 2024-09-16T20:27:06.223Z Vendors: node.js Products: unzipper Problem Types: CWE-22 Description: unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/research/zip-slip-vulnerability - https://github.com/ZJONSSON/node-unzipper/commit/2220ddd5b58f6252069a4f99f9475441ad0b50cd - https://snyk.io/vuln/npm:unzipper:20180415 - https://g
N/node-unzipper/commit/2220ddd5b58f6252069a4f99f9475441ad0b50cd - https://snyk.io/vuln/npm:unzipper:20180415 - https://github.com/snyk/zip-slip-vulnerability - https://github.com/ZJONSSON/node-unzipper/pull/59
CVE ID: CVE-2018-1002204 State: PUBLISHED Published: 2018-07-25T17:00:00 Last Updated: 2024-08-05T12:47:57.468Z Vendors: node.js Products: adm-zip Problem Types: CWE-22 Description: adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/research/zip-slip-vulnerability - https://github.com/cthackers/adm-zip/pull/212 - http://www.securityfocus.com/bid/107001 - https://github.com/cthackers/adm-zip/commit/62f64004fefb894c
dm-zip/pull/212 - http://www.securityfocus.com/bid/107001 - https://github.com/cthackers/adm-zip/commit/62f64004fefb894c523a7143e8a88ebe6c84df25 - https://github.com/snyk/zip-slip-vulnerability - https://snyk.io/vuln/npm:adm-zip:20180415
CVE ID: CVE-2018-1002205 State: PUBLISHED Published: 2018-07-25T17:00:00.000Z Last Updated: 2025-05-06T14:48:52.591Z Vendors: DotNetZip Products: DotNetZip.Semvered Problem Types: CWE-22 Description: DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://snyk.io/research/zip-slip-vulnerability - https://github.com/haf/DotNetZip.Semverd/commit/55d2c13c0cc64654e18fcdd0038fdb3d7458e366 - https://github.c
nerability - https://github.com/haf/DotNetZip.Semverd/commit/55d2c13c0cc64654e18fcdd0038fdb3d7458e366 - https://github.com/snyk/zip-slip-vulnerability - https://snyk.io/vuln/SNYK-DOTNET-DOTNETZIP-60245 - https://github.com/haf/DotNetZip.Semverd/pull/121
CVE ID: CVE-2018-1002206 State: PUBLISHED Published: 2018-07-25T17:00:00Z Last Updated: 2024-09-17T03:29:09.493Z Vendors: SharpCompress Products: SharpCompress Problem Types: CWE-22 Description: SharpCompress before 0.21.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/research/zip-slip-vulnerability - https://snyk.io/vuln/SNYK-DOTNET-SHARPCOMPRESS-60246 - https://github.com/snyk/zip-slip-vulnerability - https://github.com/adamhathcock/sharpc
NYK-DOTNET-SHARPCOMPRESS-60246 - https://github.com/snyk/zip-slip-vulnerability - https://github.com/adamhathcock/sharpcompress/pull/374 - https://github.com/adamhathcock/sharpcompress/commit/42b1205fb435de523e6ef8ac5b7bafbe712997f6
CVE ID: CVE-2018-1002207 State: PUBLISHED Published: 2018-07-25T17:00:00Z Last Updated: 2024-09-16T23:35:55.371Z Vendors: golang Products: archiver Problem Types: CWE-22 Description: mholt/archiver golang package before e4ef56d48eb029648b0e895bb0b6a393ef0829c3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/research/zip-slip-vulnerability - https://github.com/snyk/zip-slip-vulnerability - https://github.com/mholt/archiver/pull/65 - https://github
nerability - https://github.com/snyk/zip-slip-vulnerability - https://github.com/mholt/archiver/pull/65 - https://github.com/mholt/archiver/commit/e4ef56d48eb029648b0e895bb0b6a393ef0829c3 - https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMMHOLTARCHIVERCMDARCHIVER-50071
CVE ID: CVE-2018-1002208 State: PUBLISHED Published: 2018-07-25T17:00:00 Last Updated: 2024-08-05T12:47:57.500Z Vendors: SharpZipLib Products: SharpZipLib Problem Types: CWE-22 Description: SharpZipLib before 1.0 RC1 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/research/zip-slip-vulnerability - https://github.com/icsharpcode/SharpZipLib/issues/232 - https://github.com/icsharpcode/SharpZipLib/wiki/Release-1.0 - https://snyk.io/vuln/SNYK-DOTN
de/SharpZipLib/issues/232 - https://github.com/icsharpcode/SharpZipLib/wiki/Release-1.0 - https://snyk.io/vuln/SNYK-DOTNET-SHARPZIPLIB-60247 - https://github.com/snyk/zip-slip-vulnerability
CVE ID: CVE-2018-1002209 State: PUBLISHED Published: 2018-07-25T17:00:00Z Last Updated: 2024-09-16T19:25:10.760Z Vendors: quazip Products: quazip Problem Types: CWE-22 Description: QuaZIP before 0.7.6 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/research/zip-slip-vulnerability - https://github.com/snyk/zip-slip-vulnerability - https://github.com/stachenov/quazip/blob/0.7.6/NEWS.txt - https://github.com/stachenov/quazip/commit/5d2fc16a1976e5
ty - https://github.com/stachenov/quazip/blob/0.7.6/NEWS.txt - https://github.com/stachenov/quazip/commit/5d2fc16a1976e5bf78d2927b012f67a2ae047a98
CVE ID: CVE-2018-10000 State: PUBLISHED Published: 2018-04-11T03:00:00 Last Updated: 2024-08-05T07:32:00.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Video Downloader professional extension before 2018-04-05 for Chrome has Universal XSS (UXSS) via vectors related to a link64_msgAddLinks event. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=1555
CVE ID: CVE-2018-10001 State: PUBLISHED Published: 2018-04-11T03:00:00 Last Updated: 2024-08-05T07:32:01.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_init function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out of array read) via an AVI file. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=47b7c68ae54560e2308bdb6be4fb076c73b93081 - https://www.debian.org/security/2018/dsa-4249 - http://www.securityfocus.com/bid/103732 - https://security.gentoo.org/glsa/202003-65
CVE ID: CVE-2018-10016 State: PUBLISHED Published: 2018-04-11T05:00:00 Last Updated: 2024-08-05T07:32:01.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netwide Assembler (NASM) 2.14rc0 has a division-by-zero vulnerability in the expr5 function in asm/eval.c via a malformed input file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392473 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html
CVE ID: CVE-2018-10017 State: PUBLISHED Published: 2018-04-11T05:00:00 Last Updated: 2024-08-05T07:32:01.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service (out-of-bounds read) via an IT or MO3 file with many nested pattern loops. Additional Analyst Notes: - CVE Program Container: References: - https://openmpt.org/openmpt-1-27-07-00-released - https://lib.openmpt.org/libopenmpt/2018/04/08/security-updates-0.3.8-0.2-beta31-0.2.7561-beta20.5-p8-0.2.7386-beta20.3-p11/ - https://github.com/OpenMPT/openmpt/commit/7ebf02af2e90f03e0dbd0e18b8b3164f372fb97c