Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e key and decrypt locally stored cipher text. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/SLN316104
CVE ID: CVE-2018-15782 State: PUBLISHED Published: 2019-01-16T20:00:00Z Last Updated: 2024-09-17T03:38:58.943Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Dell Products: RSA Authentication Manager Problem Types: relative path traversal vulnerability Description: The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup deployment of the initial RSA Authentication Manager system, could allow the attacker unauthorized access to that system. Additional Analyst Notes
RSA Authentication Manager system, could allow the attacker unauthorized access to that system. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2019/Jan/18
CVE ID: CVE-2018-15783 State: REJECTED Published: 2018-12-28T22:00:00 Last Updated: 2018-12-28T21:57:01 Description: No description available.
CVE ID: CVE-2018-15784 State: PUBLISHED Published: 2019-01-18T22:00:00Z Last Updated: 2024-09-16T22:51:06.674Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Dell Products: Dell Networking OS10 Problem Types: Improper Certificate Validation Description: Dell Networking OS10 versions prior to 10.4.3.0 contain a vulnerability in the Phone Home feature which does not properly validate the server's certificate authority during TLS handshake. Use of an invalid or malicious certificate could potentially allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - https://www
by using a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/us/en/04/sln315899/dsa-2019-001-dell-networking-os10-improper-certificate-validation-vulnerability?lang=en
CVE ID: CVE-2018-15785 State: REJECTED Published: 2018-12-28T22:00:00 Last Updated: 2018-12-28T21:57:01 Description: No description available.
CVE ID: CVE-2018-15786 State: REJECTED Published: 2018-12-28T22:00:00 Last Updated: 2018-12-28T21:57:01 Description: No description available.
CVE ID: CVE-2018-15787 State: REJECTED Published: 2018-12-28T22:00:00 Last Updated: 2018-12-28T21:57:01 Description: No description available.
CVE ID: CVE-2018-15788 State: REJECTED Published: 2018-12-28T22:00:00 Last Updated: 2018-12-28T21:57:01 Description: No description available.
CVE ID: CVE-2018-15789 State: REJECTED Published: 2018-12-28T22:00:00 Last Updated: 2018-12-28T21:57:01 Description: No description available.
CVE ID: CVE-2018-15790 State: REJECTED Published: 2018-12-28T22:00:00 Last Updated: 2018-12-28T21:57:01 Description: No description available.
CVE ID: CVE-2018-15791 State: REJECTED Published: 2018-12-28T22:00:00 Last Updated: 2018-12-28T21:57:01 Description: No description available.
CVE ID: CVE-2018-15792 State: REJECTED Published: 2018-12-28T22:00:00 Last Updated: 2018-12-28T21:57:01 Description: No description available.
CVE ID: CVE-2018-15793 State: REJECTED Published: 2018-12-28T22:00:00 Last Updated: 2018-12-28T21:57:01 Description: No description available.
CVE ID: CVE-2018-15794 State: REJECTED Published: 2018-12-28T22:00:00 Last Updated: 2018-12-28T21:57:01 Description: No description available.
CVE ID: CVE-2018-15795 State: PUBLISHED Published: 2018-11-13T14:00:00Z Last Updated: 2024-09-16T16:47:36.058Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: Pivotal Cloud Foundry Products: CredHub Service Broker Problem Types: Predictability problems Description: Pivotal CredHub Service Broker, versions prior to 1.1.0, uses a guessable form of random number generation in creating service broker's UAA client. A remote malicious user may guess the client secret and obtain or modify credentials for users of the CredHub Service. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2018-15795 - http://www.securityfocus.
yst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2018-15795 - http://www.securityfocus.com/bid/105915
CVE ID: CVE-2018-15796 State: PUBLISHED Published: 2018-11-09T22:00:00Z Last Updated: 2024-09-16T19:09:08.154Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Cloud Foundry Products: bits-service-release Problem Types: Weak Cryptography Description: Cloud Foundry Bits Service Release, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs. A remote malicious user may obtain a signed URL and extract the signing key, allowing them complete read and write access to the the Bits Service storage. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/blog/cve-2018-15796
CVE ID: CVE-2018-15797 State: PUBLISHED Published: 2018-12-05T18:00:00Z Last Updated: 2024-09-16T18:24:31.452Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Cloud Foundry Products: NFS Volume Release Problem Types: Information Exposure Through Debug Information Description: Cloud Foundry NFS volume release, 1.2.x prior to 1.2.5, 1.5.x prior to 1.5.4, 1.7.x prior to 1.7.3, logs the cf admin username and password when running the nfsbrokerpush BOSH deploy errand. A remote authenticated user with access to BOSH can obtain the admin credentials for the Cloud Foundry Platform through the logs of the NFS volume deploy errand. Additional Analyst Notes: - CVE Progra
for the Cloud Foundry Platform through the logs of the NFS volume deploy errand. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/blog/cve-2018-15797
CVE ID: CVE-2018-15798 State: PUBLISHED Published: 2018-12-19T22:00:00Z Last Updated: 2024-09-17T03:18:08.124Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H) Vendors: Pivotal Products: Concourse Problem Types: Open Redirect Description: Pivotal Concourse Release, versions 4.x prior to 4.2.2, login flow allows redirects to untrusted websites. A remote unauthenticated attacker could convince a user to click on a link using the oAuth redirect link with an untrusted website and gain access to that user's access token in Concourse. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2018-15798
CVE ID: CVE-2018-15799 State: REJECTED Published: 2019-01-02T14:00:00 Last Updated: 2019-01-02T13:57:01 Description: No description available.
CVE ID: CVE-2018-15800 State: PUBLISHED Published: 2018-12-10T19:00:00Z Last Updated: 2024-09-17T03:34:23.465Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Cloud Foundry Products: Bits Service Release Problem Types: Brute Force Description: Cloud Foundry Bits Service, versions prior to 2.18.0, includes an information disclosure vulnerability. A remote malicious user may execute a timing attack to brute-force the signing key, allowing them complete read and write access to the the Bits Service storage. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/blog/cve-2018-15800
CVE ID: CVE-2018-15801 State: PUBLISHED Published: 2018-12-19T22:00:00Z Last Updated: 2024-09-16T18:43:45.437Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: Spring by Pivotal Products: Spring Security Problem Types: Business Logic Errors Description: Spring Security versions 5.1.x prior to 5.1.2 contain an authorization bypass vulnerability during JWT issuer validation. In order to be impacted, the same private key for an honest issuer and a malicious user must be used when signing JWTs. In that case, a malicious user could fashion signed JWTs with the malicious issuer URL that may be granted for the honest issuer. Additional Analyst Notes: - CVE Program Cont
Ts with the malicious issuer URL that may be granted for the honest issuer. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2018-15801
CVE ID: CVE-2018-15802 State: REJECTED Published: 2019-01-02T14:00:00 Last Updated: 2019-01-02T13:57:01 Description: No description available.
CVE ID: CVE-2018-15803 State: REJECTED Published: 2019-01-02T14:00:00 Last Updated: 2019-01-02T13:57:01 Description: No description available.
CVE ID: CVE-2018-15804 State: PUBLISHED Published: 2018-08-23T18:00:00Z Last Updated: 2024-09-17T03:03:40.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the MapR File System in MapR Converged Data Platform and MapR-XD 6.x and earlier. Under certain conditions, it is possible for MapR ticket credentials to become compromised, allowing a user to escalate their privileges to act as (aka impersonate) any other user, including cluster administrators, aka bug# 31935. This affects all users who have enabled security on the MapR platform and is fixed in mapr-patch-5.2.1.42646.GA-20180731093831, mapr-patch-5.2.2.44680.GA-20180802011430, mapr-patch-6.0.0.201
and is fixed in mapr-patch-5.2.1.42646.GA-20180731093831, mapr-patch-5.2.2.44680.GA-20180802011430, mapr-patch-6.0.0.20171109191718.GA-20180802011420, and mapr-patch-6.0.1.20180404222005.GA-20180806214919. Additional Analyst Notes: - CVE Program Container: References: - https://mapr.com/support/s/article/MapR-Ticket-Credentials-can-become-compromised
CVE ID: CVE-2018-15805 State: PUBLISHED Published: 2018-12-10T18:00:00 Last Updated: 2024-08-05T10:01:54.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE) vulnerability, allowing an attacker to read arbitrary files or cause a denial of service (resource consumption). Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40mrnikhilsri/oob-xxe-in-prizmdoc-cve-2018-15805-dfb1e474345c - https://help.accusoft.com/PrizmDoc/v13.5/HTML/webframe.html#Release_v13_5.html
CVE ID: CVE-2018-15807 State: PUBLISHED Published: 2018-08-23T20:00:00Z Last Updated: 2024-09-16T19:09:04.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: POSIM EVO 15.13 for Windows includes an "Emergency Override" administrative account that may be accessed through POSIM's "override" feature. This Override prompt expects a code that is computed locally using a deterministic algorithm. This code may be generated by an attacker and used to bypass any POSIM EVO login prompt. Additional Analyst Notes: - CVE Program Container: References: - https://versprite.com/advisories/posim-evo-for-windows/
CVE ID: CVE-2018-15808 State: PUBLISHED Published: 2018-08-23T20:00:00Z Last Updated: 2024-09-16T19:15:24.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: POSIM EVO 15.13 for Windows includes hardcoded database credentials for the "root" database user. "root" access to POSIM EVO's database may result in a breach of confidentiality, integrity, or availability or allow for attackers to remotely execute code on associated POSIM EVO clients. Additional Analyst Notes: - CVE Program Container: References: - https://versprite.com/advisories/posim-evo-for-windows-2/
CVE ID: CVE-2018-15809 State: PUBLISHED Published: 2018-08-23T20:00:00Z Last Updated: 2024-09-16T16:38:30.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: AccuPOS 2017.8 is installed with the insecure "Authenticated Users: Modify" permission for files within the installation path. This may allow local attackers to compromise the integrity of critical resource and executable files. Additional Analyst Notes: - CVE Program Container: References: - https://versprite.com/advisories/accupos/
CVE ID: CVE-2018-15810 State: PUBLISHED Published: 2018-08-27T15:00:00 Last Updated: 2024-08-05T10:01:54.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Visiology Flipbox Software Suite before 2.7.0 allows directory traversal via %5c%2e%2e%2f because it does not sanitize filename parameters. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/nenf/7ed2d800ca8d1538cf6bb0a771dc7dae - http://flipbox.net/news/620/
CVE ID: CVE-2018-15811 State: PUBLISHED Published: 2019-07-03T16:23:27.000Z Last Updated: 2025-10-21T23:45:34.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dnnsoftware/Dnn.Platform/releases - https://www.dnnsoftware.com/community/security/security-center - http://packetstormsecurity.com/files/157080/DotNetNuke-Cookie-Deserialization-Remote-Code-Execution.html
CVE ID: CVE-2018-15812 State: PUBLISHED Published: 2019-07-03T16:35:30 Last Updated: 2024-08-05T10:01:54.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dnnsoftware/Dnn.Platform/releases - https://www.dnnsoftware.com/community/security/security-center - http://packetstormsecurity.com/files/157080/DotNetNuke-Cookie-Deserialization-Remote-Code-Execution.html
CVE ID: CVE-2018-15813 State: PUBLISHED Published: 2019-03-26T19:02:25 Last Updated: 2024-08-05T10:01:54.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000000e1237 via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://0x00crashes.blogspot.com/2018/08/faststone-image-viewer-65-few-crashes.html
CVE ID: CVE-2018-15814 State: PUBLISHED Published: 2019-03-26T19:02:34 Last Updated: 2024-08-05T10:01:54.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000001cb509 via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://0x00crashes.blogspot.com/2018/08/faststone-image-viewer-65-few-crashes.html
CVE ID: CVE-2018-15815 State: PUBLISHED Published: 2019-03-26T19:03:13 Last Updated: 2024-08-05T10:01:54.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: FastStone Image Viewer 6.5 has an Exception Handler Chain Corrupted issue starting at image00400000+0x00000000003ef68a via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://0x00crashes.blogspot.com/2018/08/faststone-image-viewer-65-few-crashes.html
CVE ID: CVE-2018-15816 State: PUBLISHED Published: 2019-03-26T19:03:24 Last Updated: 2024-08-05T10:01:54.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d7d via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://0x00crashes.blogspot.com/2018/08/faststone-image-viewer-65-few-crashes.html
CVE ID: CVE-2018-15817 State: PUBLISHED Published: 2019-03-26T19:03:35 Last Updated: 2024-08-05T10:01:54.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d63 via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://0x00crashes.blogspot.com/2018/08/faststone-image-viewer-65-few-crashes.html
CVE ID: CVE-2018-15818 State: PUBLISHED Published: 2019-03-17T21:30:40 Last Updated: 2024-08-05T10:01:54.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Repute ARForms 3.5.1 and prior. An attacker is able to delete any file on the server with web server privileges by sending a malicious request to admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149981/WordPress-Arforms-3.5.1-Arbitrary-File-Delete.html - https://wpvulndb.com/vulnerabilities/9139
CVE ID: CVE-2018-15819 State: PUBLISHED Published: 2020-03-02T18:07:39 Last Updated: 2024-08-05T10:01:54.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: EasyIO EasyIO-30P devices before 2.0.5.27 have Incorrect Access Control, related to webuser.js. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/152454/EasyIO-30P-Authentication-Bypass-Cross-Site-Scripting.html - https://seclists.org/fulldisclosure/2019/Apr/13
CVE ID: CVE-2018-15820 State: PUBLISHED Published: 2020-03-02T18:09:09 Last Updated: 2024-08-05T10:01:54.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/152454/EasyIO-30P-Authentication-Bypass-Cross-Site-Scripting.html - https://seclists.org/fulldisclosure/2019/Apr/13
CVE ID: CVE-2018-15822 State: PUBLISHED Published: 2018-08-23T22:00:00 Last Updated: 2024-08-05T10:01:54.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: The flv_write_packet function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an empty audio packet, leading to an assertion failure. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/6b67d7f05918f7a1ee8fc6ff21355d7e8736aa10 - https://usn.ubuntu.com/3967-1/ - https://seclists.org/bugtraq/2019/May/60 - https://www.debian.org/security/2019/dsa-4449 - https://lists.debian.org/debian-lts-announce/2019/05/msg00043.html - https://usn.ubuntu.com/4431-1/ - https:
/dsa-4449 - https://lists.debian.org/debian-lts-announce/2019/05/msg00043.html - https://usn.ubuntu.com/4431-1/ - https://github.com/FFmpeg/FFmpeg/commit/d8ecb335fe4852bbc172c7b79e66944d158b4d92
CVE ID: CVE-2018-15832 State: PUBLISHED Published: 2018-09-20T20:00:00 Last Updated: 2024-08-05T10:01:54.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: upc.exe in Ubisoft Uplay Desktop Client versions 63.0.5699.0 allows remote attackers to execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of URI handlers. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process.
te a system call. An attacker can leverage this vulnerability to execute code under the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45429/
CVE ID: CVE-2018-15833 State: PUBLISHED Published: 2018-08-26T17:00:00 Last Updated: 2024-08-05T10:01:54.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Vanilla before 2.6.1, the polling functionality allows Insecure Direct Object Reference (IDOR) via the Poll ID, leading to the ability of a single user to select multiple Poll Options (e.g., vote for multiple items). Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/viperbluff/status/1033067882941304832 - https://open.vanillaforums.com/discussion/36559 - https://hackerone.com/reports/326434 - https://twitter.com/viperbluff/status/1033640333890834433
CVE ID: CVE-2018-15834 State: PUBLISHED Published: 2018-09-12T16:00:00 Last Updated: 2024-08-05T10:01:54.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: In radare2 before 2.9.0, a heap overflow vulnerability exists in the read_module_referenced_functions function in libr/anal/flirt.c via a crafted flirt signature file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/pull/11300 - https://github.com/radare/radare2/issues/11274
CVE ID: CVE-2018-15835 State: PUBLISHED Published: 2018-11-30T18:00:00 Last Updated: 2024-08-05T10:01:54.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Android 1.0 through 9.0 has Insecure Permissions. The Android bug ID is 77286983. Additional Analyst Notes: - CVE Program Container: References: - https://wwws.nightwatchcybersecurity.com/2018/11/11/cve-2018-15835/ - http://packetstormsecurity.com/files/150284/Android-5.0-Battery-Information-Broadcast-Information-Disclosure.html - http://seclists.org/fulldisclosure/2018/Nov/35
CVE ID: CVE-2018-15836 State: PUBLISHED Published: 2018-09-26T21:00:00 Last Updated: 2024-08-05T10:01:54.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: In verify_signed_hash() in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation does not verify the value of padding string during PKCS#1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used. IKEv2 signature verification is affected when RAW RSA keys are used. Additional Analyst Notes: - CVE Program Container: References: - https://lists.openswan.org/pipermail/users/2018-August/023761.html - https://github.com/xelerance/Openswan
References: - https://lists.openswan.org/pipermail/users/2018-August/023761.html - https://github.com/xelerance/Openswan/commit/9eaa6c2a823c1d2b58913506a15f9474bf857a3d - https://github.com/xelerance/Openswan/commit/0b460be9e287fd335c8ce58129c67bf06065ef51
CVE ID: CVE-2018-15839 State: PUBLISHED Published: 2018-08-28T17:00:00 Last Updated: 2024-08-05T10:01:54.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://hackingvila.wordpress.com/2018/08/24/d-link-dir-615-buffer-overflow-via-a-long-authorization-http-header-click-here/ - https://www.exploit-db.com/exploits/45317/
CVE ID: CVE-2018-15840 State: PUBLISHED Published: 2019-03-29T17:09:43 Last Updated: 2024-08-05T10:01:54.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR840N devices allow remote attackers to cause a denial of service (networking outage) via fragmented packets, as demonstrated by an "nmap -f" command. Additional Analyst Notes: - CVE Program Container: References: - https://hackingvila.wordpress.com/2019/02/17/tp-link-wireless-n-router-wr840n-buffer-overflow-cve-2018-15840/
CVE ID: CVE-2018-15842 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:01:54.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: WolfCMS 0.8.3.1 has XSS via the /?/admin/page/add slug parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfcms/wolfcms/issues/679
CVE ID: CVE-2018-15843 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:01:54.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1293
CVE ID: CVE-2018-15844 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:01:54.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DamiCMS 6.0.0. There is an CSRF vulnerability that can revise the administrator account's password via /admin.php?s=/Admin/doedit. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Vict00r/poc/issues/1 - https://www.exploit-db.com/exploits/45314/