Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-0552 State: PUBLISHED Published: 2018-03-22T13:00:00 Last Updated: 2024-08-05T03:28:11.166Z Vendors: SecureBrain Corporation Products: The installer of PhishWall Client Firefox and Chrome edition for Windows Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in The installer of PhishWall Client Firefox and Chrome edition for Windows Ver. 5.1.26 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.securebrain.co.jp/about/news/2018/03/180314.html - https://jvn.jp/en/jp/JVN39896275/index.html
CVE ID: CVE-2018-0553 State: PUBLISHED Published: 2018-04-09T13:00:00 Last Updated: 2024-08-05T03:28:11.125Z Vendors: Glamo Inc. Products: iRemoconWiFi App for Android Problem Types: Fails to verify SSL certificates Description: The iRemoconWiFi App for Android version 4.1.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN43382653/index.html - https://play.google.com/store/apps/details?id=jp.co.glamo.iremoconwifi
CVE ID: CVE-2018-0554 State: PUBLISHED Published: 2018-04-09T13:00:00 Last Updated: 2024-08-05T03:28:11.097Z Vendors: BUFFALO INC. Products: WZR-1750DHP2 Problem Types: Authentication bypass Description: Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN93397125/index.html - http://buffalo.jp/support_s/s20180328.html
CVE ID: CVE-2018-0555 State: PUBLISHED Published: 2018-04-09T13:00:00 Last Updated: 2024-08-05T03:28:11.103Z Vendors: BUFFALO INC. Products: WZR-1750DHP2 Problem Types: Buffer Overflow Description: Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN93397125/index.html - http://buffalo.jp/support_s/s20180328.html
CVE ID: CVE-2018-0556 State: PUBLISHED Published: 2018-04-09T13:00:00 Last Updated: 2024-08-05T03:28:11.139Z Vendors: BUFFALO INC. Products: WZR-1750DHP2 Problem Types: OS Command Injection Description: Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN93397125/index.html - http://buffalo.jp/support_s/s20180328.html
CVE ID: CVE-2018-0557 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.218Z Vendors: Cybozu, Inc. Products: Cybozu Mailwise Problem Types: Cross-site scripting Description: Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN52319657/index.html - https://support.cybozu.com/ja-jp/article/10194
CVE ID: CVE-2018-0558 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.266Z Vendors: Cybozu, Inc. Products: Cybozu Mailwise Problem Types: Cross-site scripting Description: Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'System settings' via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN52319657/index.html - https://support.cybozu.com/ja-jp/article/10193
CVE ID: CVE-2018-0559 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.207Z Vendors: Cybozu, Inc. Products: Cybozu Mailwise Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN52319657/index.html - https://support.cybozu.com/ja-jp/article/10196
CVE ID: CVE-2018-0560 State: PUBLISHED Published: 2018-04-16T13:00:00 Last Updated: 2024-08-05T03:28:11.121Z Vendors: Hatena co.,ltd. Products: Hatena Bookmark App for iOS Problem Types: Address bar spoofing Description: Hatena Bookmark App for iOS Version 3.0 to 3.70 allows remote attackers to spoof the address bar via vectors related to URL display. Additional Analyst Notes: - CVE Program Container: References: - http://bookmark.hatenastaff.com/entry/2018/04/09/170000 - http://jvn.jp/en/jp/JVN77753476/index.html
CVE ID: CVE-2018-0561 State: PUBLISHED Published: 2018-04-16T13:00:00 Last Updated: 2024-08-05T03:28:11.190Z Vendors: SecureBrain Corporation Products: The installer of PhishWall Client Internet Explorer edition Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in The installer of PhishWall Client Internet Explorer edition Ver. 3.7.15 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.securebrain.co.jp/about/news/2018/04/180411.html - http://jvn.jp/en/jp/JVN92220486/index.html
CVE ID: CVE-2018-0562 State: PUBLISHED Published: 2018-04-16T13:00:00 Last Updated: 2024-08-05T03:28:11.122Z Vendors: Coderium Products: Installer of SoundEngine Free Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer of SoundEngine Free ver.5.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN85056623/index.html - https://soundengine.jp/wordpress/penguin_press/press_release/4187/
CVE ID: CVE-2018-0563 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.135Z Vendors: NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION Products: the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse
v6 Easy Setup & Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://flets.com/customer/next/sec/setup/esat_install.html - https://flets.com/customer/tec/fvc/setup/esat_install.html - http://jvn.jp/en/jp/JVN20040004/index.html
CVE ID: CVE-2018-0564 State: PUBLISHED Published: 2018-04-20T13:00:00 Last Updated: 2024-08-05T03:28:11.120Z Vendors: LOCKON CO.,LTD. Products: EC-CUBE Problem Types: Session fixation Description: Session fixation vulnerability in EC-CUBE (EC-CUBE 3.0.0, EC-CUBE 3.0.1, EC-CUBE 3.0.2, EC-CUBE 3.0.3, EC-CUBE 3..4, EC-CUBE 3.0.5, EC-CUBE 3.0.6, EC-CUBE 3.0.7, EC-CUBE 3.0.8, EC-CUBE 3.0.9, EC-CUBE 3.0.10, EC-CUBE 3.0.11, EC-CUBE 3.0.12, EC-CUBE 3.0.12-p1, EC-CUBE 3.0.13, EC-CUBE 3.0.14, EC-CUBE 3.0.15) allows remote attackers to perform arbitrary operations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.ec-cube.net/info/weakness/20180416/ -
ors. Additional Analyst Notes: - CVE Program Container: References: - https://www.ec-cube.net/info/weakness/20180416/ - http://jvn.jp/en/jp/JVN52695336/index.html
CVE ID: CVE-2018-0565 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.189Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN51737843/index.html - https://support.cybozu.com/ja-jp/article/10200
CVE ID: CVE-2018-0566 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.216Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Authentication bypass Description: Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass authentication to obtain the schedules without access privilege via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/10195 - http://jvn.jp/en/jp/JVN51737843/index.html
CVE ID: CVE-2018-0567 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.084Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Fails to restrict access Description: Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass access restriction to access and write non-public data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN51737843/index.html - https://support.cybozu.com/ja-jp/article/10198
CVE ID: CVE-2018-0568 State: PUBLISHED Published: 2018-05-14T13:00:00 Last Updated: 2024-08-05T03:28:11.187Z Vendors: SiteBridge Inc. Products: Joruri Gw Problem Types: Unrestricted file upload vulnerability Description: Unrestricted file upload vulnerability in SiteBridge Inc. Joruri Gw Ver 3.2.0 and earlier allows remote authenticated users to execute arbitrary PHP code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/joruri/joruri-gw/blob/master/doc/INSTALL.txt - http://jvn.jp/en/jp/JVN95589314/index.html
CVE ID: CVE-2018-0569 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.186Z Vendors: baserCMS Users Community Products: baserCMS Problem Types: OS Command Injection Description: baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://basercms.net/security/JVN67881316 - http://jvn.jp/en/jp/JVN67881316/index.html
CVE ID: CVE-2018-0570 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.123Z Vendors: baserCMS Users Community Products: baserCMS Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://basercms.net/security/JVN67881316 - http://jvn.jp/en/jp/JVN67881316/index.html
CVE ID: CVE-2018-0571 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.168Z Vendors: baserCMS Users Community Products: baserCMS Problem Types: Unrestricted Upload of File with Dangerous Type Description: baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://basercms.net/security/JVN67881316 - http://jvn.jp/en/jp/JVN67881316/index.html
CVE ID: CVE-2018-0572 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.141Z Vendors: baserCMS Users Community Products: baserCMS Problem Types: Fails to restrict access Description: baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to bypass access restriction to view or alter a restricted content via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://basercms.net/security/JVN67881316 - http://jvn.jp/en/jp/JVN67881316/index.html
CVE ID: CVE-2018-0573 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.145Z Vendors: baserCMS Users Community Products: baserCMS Problem Types: Fails to restrict access Description: baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction for a content to view a file which is uploaded by a site user via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://basercms.net/security/JVN67881316 - http://jvn.jp/en/jp/JVN67881316/index.html
CVE ID: CVE-2018-0574 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.127Z Vendors: baserCMS Users Community Products: baserCMS Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://basercms.net/security/JVN67881316 - http://jvn.jp/en/jp/JVN67881316/index.html
CVE ID: CVE-2018-0575 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.082Z Vendors: baserCMS Users Community Products: baserCMS Problem Types: Fails to restrict access Description: baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction in mail form to view a file which is uploaded by a site user via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://basercms.net/security/JVN67881316 - http://jvn.jp/en/jp/JVN67881316/index.html
CVE ID: CVE-2018-0576 State: PUBLISHED Published: 2018-05-14T13:00:00 Last Updated: 2024-08-05T03:28:11.133Z Vendors: NetWebLogic Products: Events Manager Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/events-manager/#developers - http://jvn.jp/en/jp/JVN85531148/index.html - https://wpvulndb.com/vulnerabilities/9609
CVE ID: CVE-2018-0577 State: PUBLISHED Published: 2018-05-14T13:00:00 Last Updated: 2024-08-05T03:28:11.170Z Vendors: Flipper Code Products: WP Google Map Plugin Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WP Google Map Plugin prior to version 4.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-google-map-plugin/#developers - http://jvn.jp/en/jp/JVN01040170/index.html - https://wpvulndb.com/vulnerabilities/9610
CVE ID: CVE-2018-0578 State: PUBLISHED Published: 2018-05-14T13:00:00 Last Updated: 2024-08-05T03:28:11.128Z Vendors: Minimal Work SRL Products: PixelYourSite Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in PixelYourSite plugin prior to version 5.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/pixelyoursite/#developers - http://jvn.jp/en/jp/JVN61081552/index.html
CVE ID: CVE-2018-0579 State: PUBLISHED Published: 2018-05-14T13:00:00 Last Updated: 2024-08-05T03:28:11.129Z Vendors: Webdados Products: Open Graph for Facebook, Google+ and Twitter Card Tags Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Open Graph for Facebook, Google+ and Twitter Card Tags plugin prior to version 2.2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN08386386/index.html - https://wordpress.org/plugins/wonderm00ns-simple-facebook-open-graph-tags/#developers
CVE ID: CVE-2018-0580 State: PUBLISHED Published: 2018-05-14T13:00:00 Last Updated: 2024-08-05T03:28:11.132Z Vendors: CELSYS, Inc. Products: CLIP STUDIO series Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in CELSYS, Inc CLIP STUDIO series (CLIP STUDIO PAINT (for Windows) EX/PRO/DEBUT Ver.1.7.3 and earlier, CLIP STUDIO ACTION (for Windows) Ver.1.5.5 and earlier, with its timestamp prior to April 25, 2018, 12:11:31, and CLIP STUDIO MODELER (for Windows) Ver.1.6.3 and earlier, with its timestamp prior to April 25, 2018, 17:02:49) allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analys
:02:49) allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.clip-studio.com/clip_site/download/clipstudioaction/csaupdater/index_win - http://www.clipstudio.net/en/dl - https://jvn.jp/en/jp/JVN68345747/
CVE ID: CVE-2018-0581 State: PUBLISHED Published: 2018-05-14T13:00:00 Last Updated: 2024-08-05T03:28:11.190Z Vendors: ASUS Japan Inc. Products: RT-AC87U Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in ASUS RT-AC87U Firmware version prior to 3.0.0.4.378.9383 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN33901663/index.html - https://www.asus.com/Networking/RTAC87U/HelpDesk_BIOS/
CVE ID: CVE-2018-0582 State: PUBLISHED Published: 2018-05-14T13:00:00 Last Updated: 2024-08-05T03:28:11.172Z Vendors: ASUS Japan Inc. Products: RT-AC68U Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in ASUS RT-AC68U Firmware version prior to 3.0.0.4.380.1031 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN73742314/index.html - https://www.asus.com/Networking/RTAC68U/HelpDesk_BIOS/
CVE ID: CVE-2018-0583 State: PUBLISHED Published: 2018-05-14T13:00:00 Last Updated: 2024-08-05T03:28:11.233Z Vendors: ASUS Japan Inc. Products: RT-AC1200HP Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in ASUS RT-AC1200HP Firmware version prior to 3.0.0.4.380.4180 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/Networking/RTAC1200HP/HelpDesk_BIOS/ - http://jvn.jp/en/jp/JVN34562916/index.html
CVE ID: CVE-2018-0584 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.147Z Vendors: Internet Initiative Japan Inc. Products: IIJ SmartKey App for Android Problem Types: Authentication bypass Description: IIJ SmartKey App for Android version 2.1.0 and earlier allows remote attackers to bypass authentication [effect_of_bypassing_authentication] via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN27137002/index.html
CVE ID: CVE-2018-0585 State: PUBLISHED Published: 2018-05-14T13:00:00 Last Updated: 2024-08-05T03:28:11.441Z Vendors: Ultimate Member Products: Ultimate Member Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN28804532/index.html - https://wordpress.org/plugins/ultimate-member/#developers - https://wpvulndb.com/vulnerabilities/9608
CVE ID: CVE-2018-0586 State: PUBLISHED Published: 2018-05-14T13:00:00 Last Updated: 2024-08-05T03:28:11.235Z Vendors: Ultimate Member Products: Ultimate Member Problem Types: Directory traversal Description: Directory traversal vulnerability in the shortcodes function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN28804532/index.html - https://wordpress.org/plugins/ultimate-member/#developers - https://wpvulndb.com/vulnerabilities/9608
CVE ID: CVE-2018-0587 State: PUBLISHED Published: 2018-05-14T13:00:00 Last Updated: 2024-08-05T03:28:11.175Z Vendors: Ultimate Member Products: Ultimate Member Problem Types: Unrestricted file upload vulnerability Description: Unrestricted file upload vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated users to upload arbitrary image files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN28804532/index.html - https://wordpress.org/plugins/ultimate-member/#developers - https://wpvulndb.com/vulnerabilities/9608
CVE ID: CVE-2018-0588 State: PUBLISHED Published: 2018-05-14T13:00:00 Last Updated: 2024-08-05T03:28:11.133Z Vendors: Ultimate Member Products: Ultimate Member Problem Types: Directory traversal Description: Directory traversal vulnerability in the AJAX function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN28804532/index.html - https://wordpress.org/plugins/ultimate-member/#developers - https://wpvulndb.com/vulnerabilities/9608
CVE ID: CVE-2018-0589 State: PUBLISHED Published: 2018-05-14T13:00:00 Last Updated: 2024-08-05T03:28:11.163Z Vendors: Ultimate Member Products: Ultimate Member Problem Types: Fails to restrict access Description: Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to add a new form in the 'Forms' page via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN28804532/index.html - https://wordpress.org/plugins/ultimate-member/#developers - https://wpvulndb.com/vulnerabilities/9608
CVE ID: CVE-2018-0590 State: PUBLISHED Published: 2018-05-14T13:00:00 Last Updated: 2024-08-05T03:28:11.126Z Vendors: Ultimate Member Products: Ultimate Member Problem Types: Fails to restrict access Description: Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to modify the other users profiles via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN28804532/index.html - https://wordpress.org/plugins/ultimate-member/#developers - https://wpvulndb.com/vulnerabilities/9608
CVE ID: CVE-2018-0591 State: PUBLISHED Published: 2018-05-14T13:00:00 Last Updated: 2024-08-05T03:28:11.166Z Vendors: T-JOY CO.,LTD. Products: KINEPASS App Problem Types: Fails to verify SSL certificates Description: The KINEPASS App for Android Ver 3.1.1 and earlier, and for iOS Ver 3.1.2 and earlier do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://play.google.com/store/apps/details?id=jp.tjoy.kinepass&hl=en - https://jvn.jp/en/jp/JVN83671755/ - https://itunes.apple.com/us/app/kinepasu-apuridekantan-b