Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-12034 State: PUBLISHED Published: 2018-06-15T16:00:00 Last Updated: 2024-08-05T08:24:03.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in yr_execute_code in libyara/exec.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VirusTotal/yara/issues/891 - https://bnbdr.github.io/posts/swisscheese/ - https://github.com/bnbdr/swisscheese
CVE ID: CVE-2018-12035 State: PUBLISHED Published: 2018-06-15T16:00:00 Last Updated: 2024-08-05T08:24:03.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds write vulnerability in yr_execute_code in libyara/exec.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VirusTotal/yara/issues/891 - https://bnbdr.github.io/posts/swisscheese/ - https://github.com/bnbdr/swisscheese
CVE ID: CVE-2018-12036 State: PUBLISHED Published: 2018-06-07T18:00:00Z Last Updated: 2024-09-17T03:17:49.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jeremylong/DependencyCheck/blob/master/RELEASE_NOTES.md#version-320-2018-05-21 - https://github.com/snyk/zip-slip-vulnerability
CVE ID: CVE-2018-12037 State: PUBLISHED Published: 2018-11-20T19:00:00 Last Updated: 2024-08-05T08:24:03.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung 840 EVO and 850 EVO devices (only in "ATA high" mode, not vulnerable in "TCG" or "ATA max" mode), Samsung T3 and T5 portable drives, and Crucial MX100, MX200 and MX300 devices. Absence of a cryptographic link between the password and the Disk Encryption Key allows attackers with privileged access to SSD firmware full access to encrypted data. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20181112-0001/ - http://www.securityfocus.co
Program Container: References: - https://security.netapp.com/advisory/ntap-20181112-0001/ - http://www.securityfocus.com/bid/105840 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180028
CVE ID: CVE-2018-12038 State: PUBLISHED Published: 2018-11-20T19:00:00 Last Updated: 2024-08-05T08:24:03.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung 840 EVO devices. Vendor-specific commands may allow access to the disk-encryption key. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20181112-0001/ - http://www.kb.cert.org/vuls/id/395981 - http://www.securityfocus.com/bid/105841 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180028
CVE ID: CVE-2018-12039 State: PUBLISHED Published: 2018-06-07T19:00:00Z Last Updated: 2024-09-17T00:06:03.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary SQL command execution issue in manager/index.php involving use of a "/!select/" substring in place of a select substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/joyplus/joyplus-cms/issues/425
CVE ID: CVE-2018-12040 State: PUBLISHED Published: 2018-06-13T22:00:00 Last Updated: 2024-08-05T08:24:03.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross-site scripting (XSS) vulnerability in the web profiler in SensioLabs Symfony 3.3.6 allows remote attackers to inject arbitrary web script or HTML via the "file" parameter, aka an _profiler/open?file= URI. NOTE: The vendor states "The XSS ... is in the web profiler, a tool that should never be deployed in production (so, we don't handle those issues as security issues). Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/148125/SensioLabs-Symfony-3.3.6-Cross-Sit
s: - CVE Program Container: References: - http://packetstormsecurity.com/files/148125/SensioLabs-Symfony-3.3.6-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/542071/100/0/threaded
CVE ID: CVE-2018-12041 State: PUBLISHED Published: 2018-06-08T01:00:00 Last Updated: 2024-08-05T08:24:03.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the MediaTek AWUS036NH wireless USB adapter through 5.1.25.0. Attackers can remotely deny service by sending specially constructed 802.11 frames. Additional Analyst Notes: - CVE Program Container: References: - http://wiattack.net/Testprocess.pdf - http://wiattack.net/IcECo1OR/fuzzdot.py
CVE ID: CVE-2018-12042 State: PUBLISHED Published: 2018-06-07T20:00:00Z Last Updated: 2024-09-17T03:38:34.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter. Additional Analyst Notes: - CVE Program Container: References: - https://xkklq.coding.me/2018/06/07/roxyfileman-download/
CVE ID: CVE-2018-12043 State: PUBLISHED Published: 2018-06-07T20:00:00Z Last Updated: 2024-09-17T03:14:09.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: content/content.blueprintspages.php in Symphony 2.7.6 has XSS via the pages content page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/symphonycms/symphony-2/commit/1ace6b31867cc83267b3550686271c9c65ac3ec0
CVE ID: CVE-2018-12045 State: PUBLISHED Published: 2018-06-08T01:00:00 Last Updated: 2024-08-05T08:24:03.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS through V5.7SP2 allows arbitrary file upload in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=upload request with an upfile1 parameter, as demonstrated by uploading a .php file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SukaraLin/php_code_audit_project/blob/master/dedecms/dedecms%20v5.7%20sp2%20%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md
CVE ID: CVE-2018-12046 State: PUBLISHED Published: 2018-06-08T01:00:00 Last Updated: 2024-08-05T08:24:03.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS through 5.7SP2 allows arbitrary file write in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=newfile request with name and str parameters, as demonstrated by writing to a new .php file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SukaraLin/php_code_audit_project/blob/master/dedecms/dedecms%20v5.7%20sp2%20%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md
CVE ID: CVE-2018-12047 State: PUBLISHED Published: 2018-06-08T01:00:00 Last Updated: 2024-08-05T08:24:03.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: xfind/search in Ximdex 4.0 has XSS via the filter[n][value] parameters for non-negative values of n, as demonstrated by n equal to 0 through 12. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/XIMDEX/ximdex/issues/147
CVE ID: CVE-2018-12048 State: PUBLISHED Published: 2018-06-08T01:00:00 Last Updated: 2024-08-05T08:24:03.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote attacker can bypass the Management Mode on the Canon LBP7110Cw web interface without a PIN for /checkLogin.cgi via vectors involving /portal_top.html to get full access to the device. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the default settings without using the countermeasures and best practices shown in the documentation Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44885/ - https://gist.github.com/huykha/455e7d3b86eb6
ogram Container: References: - https://www.exploit-db.com/exploits/44885/ - https://gist.github.com/huykha/455e7d3b86eb6629066d921f46bfcee3
CVE ID: CVE-2018-12049 State: PUBLISHED Published: 2018-06-08T01:00:00 Last Updated: 2024-08-05T08:24:03.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote attacker can bypass the System Manager Mode on the Canon LBP6030w web interface without a PIN for /checkLogin.cgi via vectors involving /portal_top.html to get full access to the device. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the default settings without using the countermeasures and best practices shown in the documentation Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44886/ - https://gist.github.com/huykha/0381acb2dc
Program Container: References: - https://www.exploit-db.com/exploits/44886/ - https://gist.github.com/huykha/0381acb2dc580c728a79452b60fa082c
CVE ID: CVE-2018-12051 State: PUBLISHED Published: 2018-06-08T11:00:00Z Last Updated: 2024-09-17T03:14:38.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $_FILE in /webmasterst/general.php, as demonstrated by a .php file with the image/jpeg content type. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/unh3x/just4cve/issues/5
CVE ID: CVE-2018-12052 State: PUBLISHED Published: 2018-06-08T11:00:00 Last Updated: 2024-08-05T08:24:03.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in get_sec.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44873/ - https://github.com/unh3x/just4cve/issues/3
CVE ID: CVE-2018-12053 State: PUBLISHED Published: 2018-06-08T11:00:00 Last Updated: 2024-08-05T08:24:03.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in delete_img.php by using directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44870/ - https://github.com/unh3x/just4cve/issues/6
CVE ID: CVE-2018-12054 State: PUBLISHED Published: 2018-06-08T11:00:00 Last Updated: 2024-08-05T08:24:03.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f parameter in img.php, aka absolute path traversal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/unh3x/just4cve/issues/4 - https://www.exploit-db.com/exploits/44874/
CVE ID: CVE-2018-12055 State: PUBLISHED Published: 2018-06-08T11:00:00 Last Updated: 2024-08-05T08:24:03.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contact_us.php, faq.php, about.php, photo_gallery.php, privacy.php, and so on. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/unh3x/just4cve/issues/2 - https://www.exploit-db.com/exploits/44866/
CVE ID: CVE-2018-12056 State: PUBLISHED Published: 2018-08-15T17:00:00 Last Updated: 2024-08-05T08:24:03.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: The maxRandom function of a smart contract implementation for All For One, an Ethereum gambling game, generates a random value with publicly readable variables because the _seed value can be retrieved with a getStorageAt call. Therefore, it allows attackers to always win and get rewards. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40jonghyk.song/to-be-a-winner-of-ethereum-gambling-game-all-for-one-by-breaking-prng-1ab011163d40 - https://lists.apache.org/thread.html/a62aa2706105d68f1c02
reum-gambling-game-all-for-one-by-breaking-prng-1ab011163d40 - https://lists.apache.org/thread.html/a62aa2706105d68f1c02023fe24aaa3c13b4d8a1826181fed07d9682%40%3Cnotifications.zookeeper.apache.org%3E
CVE ID: CVE-2018-12062 State: PUBLISHED Published: 2018-06-25T11:00:00 Last Updated: 2024-08-05T08:24:03.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sell function of a smart contract implementation for SwftCoin (SWFTC), a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the "tradeTrap" issue. Additional Analyst Notes: - CVE Program Container: References: - https://peckshield.com/2018/06/11/tradeTrap/
CVE ID: CVE-2018-12063 State: PUBLISHED Published: 2018-06-25T11:00:00 Last Updated: 2024-08-05T08:24:03.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sell function of a smart contract implementation for Internet Node Token (INT), a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the "tradeTrap" issue. Additional Analyst Notes: - CVE Program Container: References: - https://peckshield.com/2018/06/11/tradeTrap/
CVE ID: CVE-2018-12064 State: PUBLISHED Published: 2018-06-08T12:00:00Z Last Updated: 2024-09-16T19:26:04.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ChijinZ/security_advisories/tree/master/tinyexr_7953aea
CVE ID: CVE-2018-12065 State: PUBLISHED Published: 2018-06-08T12:00:00Z Last Updated: 2024-09-16T18:24:57.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Local File Inclusion vulnerability in /system/WCore/WHelper.php in Creatiwity wityCMS 0.6.2 allows remote attackers to include local PHP files (execute PHP code) or read non-PHP files by replacing a helper.json file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Creatiwity/wityCMS/issues/152 - https://xkklq.coding.me/2018/06/07/wityCMS-LFI/
CVE ID: CVE-2018-12066 State: PUBLISHED Published: 2018-06-08T14:00:00Z Last Updated: 2024-09-16T17:53:41.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service (stack consumption and daemon crash) via BGP mask expressions in birdc. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.labs.nic.cz/labs/bird/blob/v1.6.4/NEWS#L11 - https://gitlab.labs.nic.cz/labs/bird/commit/e8bc64e308586b6502090da2775af84cd760ed0d - http://bird.network.cz - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900967
CVE ID: CVE-2018-12067 State: PUBLISHED Published: 2018-06-25T11:00:00 Last Updated: 2024-08-05T08:24:03.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sell function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the "tradeTrap" issue. Additional Analyst Notes: - CVE Program Container: References: - https://peckshield.com/2018/06/11/tradeTrap/
CVE ID: CVE-2018-12068 State: PUBLISHED Published: 2018-06-25T11:00:00 Last Updated: 2024-08-05T08:24:03.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sell function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the "tradeTrap" issue. Additional Analyst Notes: - CVE Program Container: References: - https://peckshield.com/2018/06/11/tradeTrap/
CVE ID: CVE-2018-12070 State: PUBLISHED Published: 2018-06-25T11:00:00 Last Updated: 2024-08-05T08:24:03.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sell function of a smart contract implementation for SEC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the "tradeTrap" issue. Additional Analyst Notes: - CVE Program Container: References: - https://peckshield.com/2018/06/11/tradeTrap/
CVE ID: CVE-2018-12071 State: PUBLISHED Published: 2018-06-17T20:00:00.000Z Last Updated: 2025-06-09T05:46:40.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.use_strict_mode in the Session Library was mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeigniter.com/user_guide/changelog.html - https://github.com/bcit-ci/CodeIgniter/commit/800a20d6c4662d99ae0988b2f8f2238bb8bb29db
CVE ID: CVE-2018-12072 State: PUBLISHED Published: 2018-06-17T20:00:00 Last Updated: 2024-08-05T08:24:03.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Cloud Media Popcorn A-200 03-05-130708-21-POP-411-000 firmware. It is configured to provide TELNET remote access (without a password) that pops a shell as root. If an attacker can connect to port 23 on the device, he can completely compromise it. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/freetom/2a446a226d0e98807c8b0c1111ef2def
CVE ID: CVE-2018-12073 State: PUBLISHED Published: 2018-06-17T20:00:00 Last Updated: 2024-08-05T08:24:03.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Eminent EM4544 9.10 devices. The device does not require the user's current password to set a new one within the web interface. Therefore, it is possible to exploit this issue (e.g., in combination with a successful XSS, or at an unattended workstation) to change the admin password to an attacker-chosen value without knowing the current password. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/freetom/2a446a226d0e98807c8b0c1111ef2def
CVE ID: CVE-2018-12076 State: PUBLISHED Published: 2018-12-13T19:00:00 Last Updated: 2024-08-05T08:24:03.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the UPC bar code of the Avanti Markets MarketCard could allow an unauthenticated, local attacker to access funds within the customer's MarketCard balance, and also could lead to Customer Information Disclosure. The vulnerability is due to lack of proper validation of the UPC bar code present on the MarketCard. An attacker could exploit this vulnerability by generating a copy of a customer's bar code. An exploit could allow the attacker to access all funds located within the MarketCard or allow unauthenticat
s bar code. An exploit could allow the attacker to access all funds located within the MarketCard or allow unauthenticated disclosure of information. Additional Analyst Notes: - CVE Program Container: References: - https://sorsnce.com/2018/11/13/announcing-cve-2018-12076/
CVE ID: CVE-2018-12078 State: PUBLISHED Published: 2018-06-25T11:00:00 Last Updated: 2024-08-05T08:24:03.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for PolyAI (AI), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue. Additional Analyst Notes: - CVE Program Container: References: - https://peckshield.com/2018/06/11/tradeTrap/
CVE ID: CVE-2018-12079 State: PUBLISHED Published: 2018-06-25T11:00:00 Last Updated: 2024-08-05T08:24:03.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue. Additional Analyst Notes: - CVE Program Container: References: - https://peckshield.com/2018/06/11/tradeTrap/
CVE ID: CVE-2018-12080 State: PUBLISHED Published: 2018-06-25T11:00:00 Last Updated: 2024-08-05T08:24:03.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for Internet Node Token (INT), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue. Additional Analyst Notes: - CVE Program Container: References: - https://peckshield.com/2018/06/11/tradeTrap/
CVE ID: CVE-2018-12081 State: PUBLISHED Published: 2018-06-25T11:00:00 Last Updated: 2024-08-05T08:24:03.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue. Additional Analyst Notes: - CVE Program Container: References: - https://peckshield.com/2018/06/11/tradeTrap/
CVE ID: CVE-2018-12082 State: PUBLISHED Published: 2018-06-25T11:00:00 Last Updated: 2024-08-05T08:24:03.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for Fujinto (NTO), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue. Additional Analyst Notes: - CVE Program Container: References: - https://peckshield.com/2018/06/11/tradeTrap/
CVE ID: CVE-2018-12083 State: PUBLISHED Published: 2018-06-25T11:00:00 Last Updated: 2024-08-05T08:24:03.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for GOAL Bonanza (GOAL), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue. Additional Analyst Notes: - CVE Program Container: References: - https://peckshield.com/2018/06/11/tradeTrap/
CVE ID: CVE-2018-12084 State: PUBLISHED Published: 2018-06-25T11:00:00 Last Updated: 2024-08-05T08:24:03.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for BitAsean (BAS), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue. Additional Analyst Notes: - CVE Program Container: References: - https://peckshield.com/2018/06/11/tradeTrap/
CVE ID: CVE-2018-12085 State: PUBLISHED Published: 2018-06-09T11:00:00 Last Updated: 2024-08-05T08:24:03.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3782-1/ - https://github.com/liblouis/liblouis/issues/595 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html