Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-16216 State: PUBLISHED Published: 2019-04-25T19:52:20 Last Updated: 2024-08-05T10:17:38.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection (missing input validation, escaping) in the monitoring or memory status web interface in AudioCodes 405HD (firmware 2.2.12) VoIP phone allows an authenticated remote attacker in the same network as the device to trigger OS commands (like starting telnetd or opening a reverse shell) via a POST request to the web server. In combination with another attack (unauthenticated password change), the attacker can circumvent the authentication requirement. Additional Analyst Notes: - CVE Program Container: Reference
the attacker can circumvent the authentication requirement. Additional Analyst Notes: - CVE Program Container: References: - https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_AudioCodes_405HD.pdf
CVE ID: CVE-2018-16217 State: PUBLISHED Published: 2019-05-29T17:52:30 Last Updated: 2024-08-05T10:17:38.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The network diagnostic function (ping) in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) allows a remote authenticated attacker to trigger OS commands or open a reverse shell via command injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.sit.fraunhofer.de/de/securitytestlab/ - https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Yealink_Ultra-elegantIPPhone_SIPT41P.pdf?_=1549375271
CVE ID: CVE-2018-16218 State: PUBLISHED Published: 2019-05-29T17:56:20 Last Updated: 2024-08-05T10:17:38.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF (Cross Site Request Forgery) in the web interface of the Yeahlink Ultra-elegant IP Phone SIP-T41P firmware version 66.83.0.35 allows a remote attacker to trigger code execution or settings modification on the device by providing a crafted link to the victim. Additional Analyst Notes: - CVE Program Container: References: - https://www.sit.fraunhofer.de/de/securitytestlab/ - https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Yealink_Ultra-elegantIPPhone_SIPT41P.pdf?_=1549375271
CVE ID: CVE-2018-16219 State: PUBLISHED Published: 2019-04-25T19:56:44 Last Updated: 2024-08-05T10:17:38.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: A missing password verification in the web interface in AudioCodes 405HD VoIP phone with firmware 2.2.12 allows an remote attacker (in the same network as the device) to change the admin password without authentication via a POST request. Additional Analyst Notes: - CVE Program Container: References: - https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_AudioCodes_405HD.pdf
CVE ID: CVE-2018-16220 State: PUBLISHED Published: 2019-04-25T19:57:37 Last Updated: 2024-08-05T10:17:38.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting in different input fields (domain field and personal settings) in AudioCodes 405HD VoIP phone with firmware 2.2.12 allows an attacker (local or remote) to inject JavaScript into the web interface of the device by manipulating the phone book entries or manipulating the domain name sent to the device from the domain controller. Additional Analyst Notes: - CVE Program Container: References: - https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_AudioCodes_405HD.pdf
CVE ID: CVE-2018-16221 State: PUBLISHED Published: 2019-05-29T17:59:34 Last Updated: 2024-08-05T10:17:38.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: The diagnostics web interface in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) does not validate (escape) the path information (path traversal), which allows an authenticated remote attacker to get access to privileged information (e.g., /etc/passwd) via path traversal (relative path information in the file parameter of the corresponding POST request). Additional Analyst Notes: - CVE Program Container: References: - https://www.sit.fraunhofer.de/de/securitytestlab/ - https://www.sit.fraunhofer.de/fileadmi
gram Container: References: - https://www.sit.fraunhofer.de/de/securitytestlab/ - https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Yealink_Ultra-elegantIPPhone_SIPT41P.pdf?_=1549375271
CVE ID: CVE-2018-16222 State: PUBLISHED Published: 2018-11-20T19:00:00 Last Updated: 2024-08-05T10:17:38.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm application through 2.0.8 for Android allows an attacker to retrieve the username and password. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Nov/2 - http://packetstormsecurity.com/files/150165/QBee-Camera-iSmartAlarm-Credential-Disclosure.html
CVE ID: CVE-2018-16223 State: PUBLISHED Published: 2018-11-20T19:00:00 Last Updated: 2024-08-05T10:17:38.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Cryptographic Storage of credentials in com.vestiacom.qbeecamera_preferences.xml in the QBee Cam application through 1.0.5 for Android allows an attacker to retrieve the username and password. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Nov/2 - http://packetstormsecurity.com/files/150165/QBee-Camera-iSmartAlarm-Credential-Disclosure.html
CVE ID: CVE-2018-16224 State: PUBLISHED Published: 2018-11-20T19:00:00 Last Updated: 2024-08-05T10:17:38.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Nov/2 - http://packetstormsecurity.com/files/150165/QBee-Camera-iSmartAlarm-Credential-Disclosure.html
CVE ID: CVE-2018-16225 State: PUBLISHED Published: 2018-09-18T21:00:00 Last Updated: 2024-08-05T10:17:38.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: The QBee MultiSensor Camera through 4.16.4 accepts unencrypted network traffic from clients (such as the QBee Cam application through 1.0.5 for Android and the Swisscom Home application up to 10.7.2 for Android), which results in an attacker being able to reuse cookies to bypass authentication and disable the camera. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2018/Sep/21 - https://blog.francescoservida.ch/2018/09/16/cve-2018-16225-public-disclosure-qbee-camera-vulnerab
sclosure/2018/Sep/21 - https://blog.francescoservida.ch/2018/09/16/cve-2018-16225-public-disclosure-qbee-camera-vulnerability/
CVE ID: CVE-2018-16226 State: PUBLISHED Published: 2018-10-23T21:00:00 Last Updated: 2024-08-05T10:17:38.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the web admin component of Mitel MiVoice Office 400, versions R5.0 HF3 (v8839a1) and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack, due to insufficient validation for the start.asp page. A successful exploit could allow the attacker to execute arbitrary scripts to access sensitive browser-based information. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security
s: - CVE Program Container: References: - https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0008
CVE ID: CVE-2018-16227 State: PUBLISHED Published: 2019-10-03T15:44:35 Last Updated: 2024-08-05T10:17:38.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES - https://github.com/the-tcpdump-group/tcpdump/commit/4846b3c5d0a850e860baf4f07340495d29837d09 - https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-s
html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html - https://seclists.org/bugtraq/2019/Oct/28 - https://www.debian.org/security/2019/dsa-4547 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://support.apple.com/kb/HT210788 - https://s
%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://support.apple.com/kb/HT210788 - https://seclists.org/bugtraq/2019/Dec/23 - http://seclists.org/fulldisclosure/2019/Dec/26 - https://security.netapp.com/advisory/ntap-20200120-0001/ - https://usn.ubuntu.com/4252-2/ - https://usn.ubuntu.com/4252-1/
CVE ID: CVE-2018-16228 State: PUBLISHED Published: 2019-10-03T15:46:38 Last Updated: 2024-08-05T10:17:38.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix(). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES - https://github.com/the-tcpdump-group/tcpdump/commit/83a412a5275cac973c5841eca3511c766bed778d - https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2019-
ensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html - https://seclists.org/bugtraq/2019/Oct/28 - https://www.debian.org/security/2019/dsa-4547 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://support.apple.com/kb/HT210788 - https://seclists.org/bugtraq/20
.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://support.apple.com/kb/HT210788 - https://seclists.org/bugtraq/2019/Dec/23 - http://seclists.org/fulldisclosure/2019/Dec/26 - https://security.netapp.com/advisory/ntap-20200120-0001/ - https://usn.ubuntu.com/4252-2/ - https://usn.ubuntu.com/4252-1/
CVE ID: CVE-2018-16229 State: PUBLISHED Published: 2019-10-03T15:48:05 Last Updated: 2024-08-05T10:17:38.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option(). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES - https://github.com/the-tcpdump-group/tcpdump/commit/211124b972e74f0da66bc8b16f181f78793e2f66 - https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/
ts.opensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html - https://seclists.org/bugtraq/2019/Oct/28 - https://www.debian.org/security/2019/dsa-4547 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://support.apple.com/kb/HT210788 - https://seclists.org/bugtr
oject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://support.apple.com/kb/HT210788 - https://seclists.org/bugtraq/2019/Dec/23 - http://seclists.org/fulldisclosure/2019/Dec/26 - https://security.netapp.com/advisory/ntap-20200120-0001/ - https://usn.ubuntu.com/4252-2/ - https://usn.ubuntu.com/4252-1/
CVE ID: CVE-2018-16230 State: PUBLISHED Published: 2019-10-03T15:49:01 Last Updated: 2024-08-05T10:17:38.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES - https://github.com/the-tcpdump-group/tcpdump/commit/13d52e9c0e7caf7e6325b0051bc90a49968be67f - https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-securit
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html - https://seclists.org/bugtraq/2019/Oct/28 - https://www.debian.org/security/2019/dsa-4547 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://support.apple.com/kb/HT210788 - https://seclist
ts.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://support.apple.com/kb/HT210788 - https://seclists.org/bugtraq/2019/Dec/23 - http://seclists.org/fulldisclosure/2019/Dec/26 - https://security.netapp.com/advisory/ntap-20200120-0001/ - https://usn.ubuntu.com/4252-2/ - https://usn.ubuntu.com/4252-1/
CVE ID: CVE-2018-16231 State: PUBLISHED Published: 2018-08-30T22:00:00 Last Updated: 2024-08-05T10:17:38.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Michael Roth Software Personal FTP Server (PFTP) through 8.4f allows remote attackers to cause a denial of service (daemon crash) via an unspecified sequence of FTP commands. Additional Analyst Notes: - CVE Program Container: References: - https://hansesecure.de/vulnerability-remote-dos-in-personal-ftp-server/
CVE ID: CVE-2018-16232 State: PUBLISHED Published: 2018-10-17T14:00:00 Last Updated: 2024-08-05T10:17:38.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authenticated command injection vulnerability exists in IPFire Firewall before 2.21 Core Update 124 in backup.cgi. This allows an authenticated user with privileges for the affected page to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://doddsecurity.com/213/command-injection-on-ipfire-firewalls/ - https://www.ipfire.org/news/ipfire-2-21-core-update-124-released
CVE ID: CVE-2018-16233 State: PUBLISHED Published: 2018-08-30T22:00:00 Last Updated: 2024-08-05T10:17:38.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bg5sbk/MiniCMS/issues/22
CVE ID: CVE-2018-16234 State: PUBLISHED Published: 2018-08-30T22:00:00 Last Updated: 2024-08-05T10:17:38.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: MorningStar WhatWeb 0.4.9 has XSS via JSON report files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/urbanadventurer/WhatWeb/issues/261
CVE ID: CVE-2018-16235 State: PUBLISHED Published: 2018-10-23T21:00:00 Last Updated: 2024-08-05T10:17:38.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telligent Community 6.x, 7.x, 8.x, 9.x before 9.2.10.11796, 10.1.x before 10.1.10.11792, and 10.2.x before 10.2.3.4725 has XSS via the Feed RSS widget. Additional Analyst Notes: - CVE Program Container: References: - https://community.telligent.com/community/10/w/user-documentation/61996/release-notes - https://community.telligent.com/community/9/w/user-documentation/52752/release-notes - https://www.horizonsecurity.it/lang_EN/advisories/?a=10
CVE ID: CVE-2018-16236 State: PUBLISHED Published: 2018-08-30T22:00:00 Last Updated: 2024-08-05T10:17:38.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel through 74 allows XSS via a crafted filename in the logs subdirectory of a user account, because the filename is mishandled during frontend/THEME/raw/index.html rendering. Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2018080093
CVE ID: CVE-2018-16237 State: PUBLISHED Published: 2018-08-30T22:00:00 Last Updated: 2024-08-05T10:17:38.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in damiCMS V6.0.1. There is Directory Traversal via '|' characters in the s parameter to admin.php, as demonstrated by an admin.php?s=Tpl/Add/id/c:|windows|win.ini URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/howchen/howchen/issues/2
CVE ID: CVE-2018-16238 State: PUBLISHED Published: 2018-08-30T22:00:00 Last Updated: 2024-08-05T10:17:38.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in damiCMS V6.0.1. Remote code execution can occur via PHP code in a multipart/form-data POST to the admin.php?s=/Tpl/Update.html URI. For example, this can update the Web/Tpl/default/head.html file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/howchen/howchen/issues/2
CVE ID: CVE-2018-16239 State: PUBLISHED Published: 2018-08-30T22:00:00 Last Updated: 2024-08-05T10:17:38.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in damiCMS V6.0.1. It relies on the PHP time() function for cookies, which makes it possible to determine the cookie for an existing admin session via 10800 guesses. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/howchen/howchen/issues/2
CVE ID: CVE-2018-16242 State: PUBLISHED Published: 2018-09-14T21:00:00 Last Updated: 2024-08-05T10:17:38.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to replay ciphertext based on a predictable nonce used in the locking protocol. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2018/Sep/30
CVE ID: CVE-2018-16243 State: PUBLISHED Published: 2020-12-15T22:31:23 Last Updated: 2024-08-05T10:17:38.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds Database Performance Analyzer (DPA) 11.1.468 and 12.0.3074 have several persistent XSS vulnerabilities, related to logViewer.iwc, centralManage.cen, userAdministration.iwc, database.iwc, alertManagement.iwc, eventAnnotations.iwc, and central.cen. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/james-otten/d3ee2f0fccc3b87aafe1616a6c2c2d4e
CVE ID: CVE-2018-16247 State: PUBLISHED Published: 2019-06-20T15:48:54 Last Updated: 2024-08-05T10:17:38.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: YzmCMS 5.1 has XSS via the admin/system_manage/user_config_add.html title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yzmcms/yzmcms/issues/3
CVE ID: CVE-2018-16248 State: PUBLISHED Published: 2019-06-20T15:46:52 Last Updated: 2024-08-05T10:17:38.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: b3log Solo 2.9.3 has XSS in the Input page under the "Publish Articles" menu with an ID of "articleTags" stored in the "tag" JSON field, which allows remote attackers to inject arbitrary Web scripts or HTML via a carefully crafted site name in an admin-authenticated HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/b3log/solo/issues/12489
CVE ID: CVE-2018-16249 State: PUBLISHED Published: 2019-06-20T13:54:12 Last Updated: 2024-08-05T10:17:38.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Symphony before 3.3.0, there is XSS in the Title under Post. The ID "articleTitle" of this is stored in the "articleTitle" JSON field, and executes a payload when accessing the /member/test/points URI, allowing remote attacks. Any Web script or HTML can be inserted by an admin-authenticated user via a crafted web site name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/b3log/symphony/issues/729
CVE ID: CVE-2018-16250 State: PUBLISHED Published: 2019-06-20T13:42:10 Last Updated: 2024-08-05T10:17:38.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "utilisateur" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the "first name" and "last name" parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Creatiwity/wityCMS/issues/156
CVE ID: CVE-2018-16251 State: PUBLISHED Published: 2019-06-20T13:23:46 Last Updated: 2024-08-05T10:17:38.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: A "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the "Utilisateur" menu. No input parameters are filtered, e.g., the /admin/user/users Nickname, email, firstname, lastname, and groupe parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Creatiwity/wityCMS/issues/157
CVE ID: CVE-2018-16252 State: PUBLISHED Published: 2018-09-05T21:00:00 Last Updated: 2024-08-05T10:17:38.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: FsPro Labs Event Log Explorer 4.6.1.2115 has ".elx" FileType XML External Entity Injection. Additional Analyst Notes: - CVE Program Container: References: - http://hyp3rlinx.altervista.org/advisories/FSPRO-LABS-EVENT-LOG-EXPLORER-XML-INJECTION-INFO-DISCLOSURE.txt - https://www.exploit-db.com/exploits/45319/ - http://packetstormsecurity.com/files/149195/FsPro-Labs-Event-Log-Explorer-4.6.1.2115-XML-Injection.html
CVE ID: CVE-2018-16253 State: PUBLISHED Published: 2018-11-07T20:00:00 Last Updated: 2024-08-05T10:17:38.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification does not properly verify the ASN.1 metadata. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation through fake X.509 certificates. This is an even more permissive variant of CVE-2006-4790 and CVE-2014-1568. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/igrr/axtls-8266/commit/5efe2947ab45e81d84b5f707c51d1c64be52f36
- CVE Program Container: References: - https://github.com/igrr/axtls-8266/commit/5efe2947ab45e81d84b5f707c51d1c64be52f36c - https://sourceforge.net/p/axtls/mailman/message/36459928/