Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-14712 State: PUBLISHED Published: 2019-05-13T12:21:11 Last Updated: 2024-08-05T09:38:13.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to inject system commands via the "hook" URL parameter. Additional Analyst Notes: - CVE Program Container: References: - https://blog.securityevaluators.com/asus-routers-overflow-with-vulnerabilities-b111bc1c8eb8
CVE ID: CVE-2018-14713 State: PUBLISHED Published: 2019-05-13T12:22:09 Last Updated: 2024-08-05T09:38:13.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to read arbitrary sections of memory and CPU registers via the "hook" URL parameter. Additional Analyst Notes: - CVE Program Container: References: - https://blog.securityevaluators.com/asus-routers-overflow-with-vulnerabilities-b111bc1c8eb8
CVE ID: CVE-2018-14714 State: PUBLISHED Published: 2019-05-13T12:24:24 Last Updated: 2024-08-05T09:38:13.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load_script" URL parameter. Additional Analyst Notes: - CVE Program Container: References: - https://blog.securityevaluators.com/asus-routers-overflow-with-vulnerabilities-b111bc1c8eb8
CVE ID: CVE-2018-14715 State: PUBLISHED Published: 2018-08-03T18:00:00 Last Updated: 2024-08-05T09:38:13.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: The endCoinFlip function and throwSlammer function of the smart contract implementations for Cryptogs, an Ethereum game, generate random numbers with an old block's hash. Therefore, attackers can predict the random number and always win the game. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40jonghyk.song/attack-on-pseudo-random-number-generator-prng-used-in-cryptogs-an-ethereum-cve-2018-14715-f63a51ac2eb9
CVE ID: CVE-2018-14716 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T09:38:13.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorrectly generate the canonicalUrl, and can lead to execution of Twig code. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45108/ - https://github.com/nystudio107/craft-seomatic/releases/tag/3.1.4 - https://twitter.com/nystudio107/status/1021855169515057152 - http://ha.cker.info/exploitation-of-server-side-template-inje
tps://twitter.com/nystudio107/status/1021855169515057152 - http://ha.cker.info/exploitation-of-server-side-template-injection-with-craft-cms-plguin-seomatic/ - https://twitter.com/nystudio107/status/1021847835418009605 - https://github.com/nystudio107/craft-seomatic/commit/1e7d1d084ac3a89e7ec70620f2749110508d1ce1
CVE ID: CVE-2018-14718 State: PUBLISHED Published: 2019-01-02T18:00:00 Last Updated: 2024-08-05T09:38:13.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html - https://lists.apache.org/thread.html/6a78f88716c3c57aa74ec05764a37ab3874769a347805903b393b286%40%3Cdev.lucene.apache.org%3E - https://lists.apache.org/thread.html/82b01bfb6787097427ce97cec6a7127e93718bc05d1efd5eaf
%40%3Cdev.lucene.apache.org%3E - https://lists.apache.org/thread.html/82b01bfb6787097427ce97cec6a7127e93718bc05d1efd5eaffc228f%40%3Cdev.lucene.apache.org%3E - https://lists.apache.org/thread.html/ba973114605d936be276ee6ce09dfbdbf78aa56f6cdc6e79bfa7b8df%40%3Cdev.lucene.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:0782 - http://www.securityfocus.com/bid/106601 - https://access.redhat.com/errata/RHSA-2019:0877 - https://access.redhat.com/errata/RHBA-2019:0959 - https://www.debian.org/security/2019/dsa-4452 - https://seclists.org/bugtraq/2019/May/68 - https://access.redhat.com/errata/RHSA-2019:1782 - https://access.redhat.com/errata/RHSA-2019:1797 - https://access.redhat.com/errata
ss.redhat.com/errata/RHSA-2019:1782 - https://access.redhat.com/errata/RHSA-2019:1797 - https://access.redhat.com/errata/RHSA-2019:1822 - https://access.redhat.com/errata/RHSA-2019:1823 - https://access.redhat.com/errata/RHSA-2019:2804 - https://access.redhat.com/errata/RHSA-2019:2858 - https://access.redhat.com/errata/RHSA-2019:3002 - https://access.redhat.com/errata/RHSA-2019:3140 - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3149 - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://list
che.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3892 - https://access.redhat.com/errata/RHSA-2019:4037 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://secur
twork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://security.netapp.com/advisory/ntap-20190530-0003/ - https://www.oracle.com/security-alerts/cpuoct2020.html - https://github.com/FasterXML/jackson-databind/commit/87d29af25e82a249ea15858e2d4ecbf64091db44 - https://github.com/FasterXML/jackson-databind/issues/2097 - https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.7 - https://lists.apache.org/thread.html/r1d4a247329a8478073163567bbc8c8cb6b49c6bfc2bf58153a857af1%40%3Ccommits.druid.apache.org%3E
CVE ID: CVE-2018-14719 State: PUBLISHED Published: 2019-01-02T18:00:00 Last Updated: 2024-08-05T09:38:13.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FasterXML/jackson-databind/commit/87d29af25e82a249ea15858e2d4ecbf64091db44 - https://github.com/FasterXML/jackson-databind/issues/2097 - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://github.com/Faste
nd/issues/2097 - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.7 - https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html - https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://access.redhat.com/errata/RHSA-2019:0782 - https://access.redhat.com/errata/RHSA-2019:0877 - https://access.redhat.com/errata/RHBA-2019:0959 - https://www.debian.org/security/2019/dsa-4452 - https://seclists.org/bugtraq/2019/May/68 - https://security.ne
19:0959 - https://www.debian.org/security/2019/dsa-4452 - https://seclists.org/bugtraq/2019/May/68 - https://security.netapp.com/advisory/ntap-20190530-0003/ - https://access.redhat.com/errata/RHSA-2019:1782 - https://access.redhat.com/errata/RHSA-2019:1797 - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://access.redhat.com/errata/RHSA-2019:1822 - https://access.redhat.com/errata/RHSA-2019:1823 - https://access.redhat.com/errata/RHSA-2019:2804 - https://access.redhat.com/errata/RHSA-2019:2858 - https://access.redhat.com/errata/RHSA-2019:3002 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://access.redhat.com/errata
9:3002 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://access.redhat.com/errata/RHSA-2019:3140 - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3149 - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3892 - https://access.redhat.com/errata/RHSA-2019:4037 - https://www.oracle.com/security-al
.redhat.com/errata/RHSA-2019:3892 - https://access.redhat.com/errata/RHSA-2019:4037 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E
CVE ID: CVE-2018-14720 State: PUBLISHED Published: 2019-01-02T18:00:00 Last Updated: 2024-08-05T09:38:13.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FasterXML/jackson-databind/commit/87d29af25e82a249ea15858e2d4ecbf64091db44 - https://github.com/FasterXML/jackson-databind/issues/2097 - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://github.com/FasterXML/ja
es/2097 - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.7 - https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html - https://lists.apache.org/thread.html/6a78f88716c3c57aa74ec05764a37ab3874769a347805903b393b286%40%3Cdev.lucene.apache.org%3E - https://lists.apache.org/thread.html/82b01bfb6787097427ce97cec6a7127e93718bc05d1efd5eaffc228f%40%3Cdev.lucene.apache.org%3E - https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://lists.a
ts.pulsar.apache.org%3E - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://lists.apache.org/thread.html/ba973114605d936be276ee6ce09dfbdbf78aa56f6cdc6e79bfa7b8df%40%3Cdev.lucene.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:0782 - https://access.redhat.com/errata/RHBA-2019:0959 - https://access.redhat.com/errata/RHSA-2019:1107 - https://access.redhat.com/errata/RHSA-2019:1108 - https://access.redhat.com/errata/RHSA-2019:1106 - https://access.redhat.com/errata/RHSA-2019:1140 - https://www.debian.org/security/2019/dsa-4452 - https://seclists.org/bugtraq/2019/May/68 - https://security.netapp.com/advisory/ntap-20190530-0003/ - https://www.oracle.
ttps://seclists.org/bugtraq/2019/May/68 - https://security.netapp.com/advisory/ntap-20190530-0003/ - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://access.redhat.com/errata/RHSA-2019:1822 - https://access.redhat.com/errata/RHSA-2019:1823 - https://access.redhat.com/errata/RHSA-2019:2858 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3149 - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.
9 - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3892 - https://access.redhat.com/errata/RHSA-2019:4037 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E
CVE ID: CVE-2018-14721 State: PUBLISHED Published: 2019-01-02T18:00:00 Last Updated: 2024-08-05T09:38:13.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FasterXML/jackson-databind/commit/87d29af25e82a249ea15858e2d4ecbf64091db44 - https://github.com/FasterXML/jackson-databind/issues/2097 - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://github.co
-databind/issues/2097 - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.7 - https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html - https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://access.redhat.com/errata/RHSA-2019:0782 - https://access.redhat.com/errata/RHBA-2019:0959 - https://access.redhat.com/errata/RHSA-2019:1107 - https://access.redhat.com/errata/RHSA-2019:1108 - https://access.redhat.com/errata/RHSA-2019:1106 - htt
RHSA-2019:1107 - https://access.redhat.com/errata/RHSA-2019:1108 - https://access.redhat.com/errata/RHSA-2019:1106 - https://access.redhat.com/errata/RHSA-2019:1140 - https://www.debian.org/security/2019/dsa-4452 - https://seclists.org/bugtraq/2019/May/68 - https://security.netapp.com/advisory/ntap-20190530-0003/ - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://access.redhat.com/errata/RHSA-2019:1822 - https://access.redhat.com/errata/RHSA-2019:1823 - https://access.redhat.com/errata/RHSA-2019:2858 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a
/security-advisory/cpuoct2019-5072832.html - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3149 - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3892 - https://access.redhat.com/errata/RHSA-2019:4037 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d2
/www.oracle.com/security-alerts/cpuapr2020.html - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E
CVE ID: CVE-2018-14722 State: PUBLISHED Published: 2018-08-15T18:00:00 Last Updated: 2024-08-05T09:38:13.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1102721 - http://www.openwall.com/lists/oss-security/2018/08/14/7 - http://www.openwall.com/lists/oss-security/2019/0
id=1102721 - http://www.openwall.com/lists/oss-security/2018/08/14/7 - http://www.openwall.com/lists/oss-security/2019/06/27/7 - http://www.openwall.com/lists/oss-security/2019/06/28/1 - http://www.openwall.com/lists/oss-security/2019/06/28/2
CVE ID: CVE-2018-14724 State: PUBLISHED Published: 2019-03-18T19:30:29 Last Updated: 2024-08-05T09:38:13.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Ban List plugin 1.0 for MyBB, any forum user with mod privileges can ban users and input an XSS payload into the ban reason, which is executed on the bans.php page. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46347
CVE ID: CVE-2018-14728 State: PUBLISHED Published: 2018-08-03T18:00:00 Last Updated: 2024-08-05T09:38:13.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45103/ - http://packetstormsecurity.com/files/148742/Responsive-Filemanager-9.13.1-Server-Side-Request-Forgery.html
CVE ID: CVE-2018-14729 State: PUBLISHED Published: 2019-05-22T17:54:38 Last Updated: 2024-08-05T09:38:13.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: References: - http://tencent.com - http://discuz.com - https://github.com/FoolMitAh/CVE-2018-14729/blob/master/Discuz_backend_getshell.md - http://www.cnvd.org.cn/flaw/show/CNVD-2018-17059
CVE ID: CVE-2018-14730 State: PUBLISHED Published: 2018-09-21T17:00:00 Last Updated: 2024-08-05T09:38:13.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Browserify-HMR. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1:3123/ connection from any origin. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AgentME/browserify-hmr/issues/41 - https://blog.cal1.cn/post/Sniffing%20Codes%20in%20Hot%20Module%20Reloading%20Messages
CVE ID: CVE-2018-14731 State: PUBLISHED Published: 2018-09-21T17:00:00 Last Updated: 2024-08-05T09:38:13.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in HMRServer.js in Parcel parcel-bundler. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1 connection (with a random TCP port number) from any origin. The random port number can be found by connecting to http://127.0.0.1 and reading the "new WebSocket" line in the source code. Additional Analyst Notes: - C
by connecting to http://127.0.0.1 and reading the "new WebSocket" line in the source code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/parcel-bundler/parcel/issues/1783 - https://blog.cal1.cn/post/Sniffing%20Codes%20in%20Hot%20Module%20Reloading%20Messages - https://github.com/parcel-bundler/parcel/pull/1794
CVE ID: CVE-2018-14732 State: PUBLISHED Published: 2018-09-21T17:00:00 Last Updated: 2024-08-05T09:38:13.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in lib/Server.js in webpack-dev-server before 3.1.6. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1:8080/ connection from any origin. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/webpack/webpack-dev-server/issues/1445 - https://blog.cal1.cn/post/Sniffing%20Codes%20i
References: - https://github.com/webpack/webpack-dev-server/issues/1445 - https://blog.cal1.cn/post/Sniffing%20Codes%20in%20Hot%20Module%20Reloading%20Messages - https://github.com/webpack/webpack-dev-server/commit/f18e5adf123221a1015be63e1ca2491ca45b8d10
CVE ID: CVE-2018-14733 State: PUBLISHED Published: 2019-07-05T19:54:55 Last Updated: 2024-08-05T09:38:13.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression denial of service) under certain circumstances. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OCA/server-tools/tree/8.0/dbfilter_from_header - https://github.com/OCA/server-tools/tree/9.0/dbfilter_from_header - https://github.com/OCA/server-tools/tree/10.0/dbfilter_from_header - https://github.com/OCA/server-tools/tree/11.0/dbfilter_from_header - htt
A/server-tools/tree/10.0/dbfilter_from_header - https://github.com/OCA/server-tools/tree/11.0/dbfilter_from_header - https://github.com/OCA/server-tools/issues/1335
CVE ID: CVE-2018-14734 State: PUBLISHED Published: 2018-07-29T16:00:00 Last Updated: 2024-08-05T09:38:13.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial of service (use-after-free). Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cb2595c1393b4a5211534e6f0a0fbad369e21ad8 - https://usn.ubuntu.com/3797-2/ - https://usn.ubuntu.com/3847-1/ - https://usn.ubuntu.com/3797-1/ - https:/
ad369e21ad8 - https://usn.ubuntu.com/3797-2/ - https://usn.ubuntu.com/3847-1/ - https://usn.ubuntu.com/3797-1/ - https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html - https://usn.ubuntu.com/3847-2/ - https://usn.ubuntu.com/3849-1/ - https://usn.ubuntu.com/3849-2/ - https://www.debian.org/security/2018/dsa-4308 - https://github.com/torvalds/linux/commit/cb2595c1393b4a5211534e6f0a0fbad369e21ad8 - https://usn.ubuntu.com/3847-3/ - https://access.redhat.com/errata/RHSA-2019:0831 - https://access.redhat.com/errata/RHSA-2019:2043 - https://access.redhat.com/errata/RHSA-2019:2029
CVE ID: CVE-2018-14735 State: PUBLISHED Published: 2018-08-09T20:00:00 Last Updated: 2024-08-05T09:38:13.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Information Exposure issue was discovered in Hitachi Command Suite 8.5.3. A remote attacker may be able to exploit a flaw in the permission of messaging that may allow for information exposure via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2018-123/
CVE ID: CVE-2018-14736 State: PUBLISHED Published: 2018-07-29T18:00:00 Last Updated: 2024-08-05T09:38:13.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A buffer over-read can occur in pbc_wmessage_string in wmessage.c for PTYPE_ENUM. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudwu/pbc/issues/123#issue-343906084