Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-18939 State: PUBLISHED Published: 2018-11-05T08:00:00 Last Updated: 2024-08-05T11:23:08.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via a seventh input field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/159
CVE ID: CVE-2018-18940 State: PUBLISHED Published: 2019-01-31T19:00:00 Last Updated: 2024-08-05T11:23:08.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: servlet/SnoopServlet (a servlet installed by default) in Netscape Enterprise 3.63 has reflected XSS via an arbitrary parameter=[XSS] in the query string. A remote unauthenticated attacker could potentially exploit this vulnerability to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser. NOTE: this product is discontinued. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150262/
continued. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150262/Netscape-Enterprise-3.63-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Nov/31
CVE ID: CVE-2018-18941 State: PUBLISHED Published: 2019-01-31T19:00:00 Last Updated: 2024-08-05T11:23:08.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Vignette Content Management version 6, it is possible to gain remote access to administrator privileges by discovering the admin password in the vgn/ccb/user/mgmt/user/edit/0,1628,0,00.html?uid=admin HTML source code, and then creating a privileged user account. NOTE: this product is discontinued. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150263/Vignette-Content-Management-6-Security-Bypass.html - http://seclists.org/fulldisclosure/2018/Nov/32
CVE ID: CVE-2018-18942 State: PUBLISHED Published: 2018-11-05T08:00:00 Last Updated: 2024-08-05T11:23:08.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/theme_configs/form data[ThemeConfig][logo] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/baserproject/basercms/issues/959 - http://sunu11.com/2018/10/31/baserCMS/ - https://basercms.net/release/4_1_4
CVE ID: CVE-2018-18943 State: PUBLISHED Published: 2018-11-05T08:00:00 Last Updated: 2024-08-05T11:23:08.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in baserCMS before 4.1.4. In the Register New Category feature of the Upload menu, the category name can be used for XSS via the data[UploaderCategory][name] parameter to an admin/uploader/uploader_categories/edit URI. Additional Analyst Notes: - CVE Program Container: References: - http://sunu11.com/2018/10/31/baserCMS/ - https://basercms.net/release/4_1_4
CVE ID: CVE-2018-18944 State: PUBLISHED Published: 2019-06-18T13:04:25 Last Updated: 2024-08-05T11:23:08.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artha ~ The Open Thesaurus 1.0.3.0 has a Buffer Overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/author/?a=8844 - https://www.exploit-db.com/exploits/45760
CVE ID: CVE-2018-18949 State: PUBLISHED Published: 2018-11-05T09:00:00Z Last Updated: 2024-09-16T17:09:10.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/network-monitoring/help/read-me.html
CVE ID: CVE-2018-18950 State: PUBLISHED Published: 2018-11-05T09:00:00Z Last Updated: 2024-09-16T17:18:49.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: KindEditor through 4.1.11 has a path traversal vulnerability in php/upload_json.php. Anyone can browse a file or directory in the kindeditor/attached/ folder via the path parameter without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kindsoft/kindeditor/issues/289
CVE ID: CVE-2018-18952 State: PUBLISHED Published: 2018-11-05T09:00:00Z Last Updated: 2024-09-16T16:44:06.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: JEECMS 9.3 has XSS via an index.do#/content/update?type=update URI. Additional Analyst Notes: - CVE Program Container: References: - https://blog.csdn.net/libieme/article/details/83588929
CVE ID: CVE-2018-18954 State: PUBLISHED Published: 2018-11-15T20:00:00 Last Updated: 2024-08-05T11:23:08.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pnv_lpc_do_eccb function in hw/ppc/pnv_lpc.c in Qemu before 3.1 allows out-of-bounds write or read access to PowerNV memory. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3826-1/ - http://www.openwall.com/lists/oss-security/2018/11/06/6 - http://www.securityfocus.com/bid/105920 - https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg00446.html - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html - https://www.debian.org/security/2019/dsa-4454 - https://s
pensuse.org/opensuse-security-announce/2019-03/msg00042.html - https://www.debian.org/security/2019/dsa-4454 - https://seclists.org/bugtraq/2019/May/76
CVE ID: CVE-2018-18955 State: PUBLISHED Published: 2018-11-16T20:00:00 Last Updated: 2024-08-05T11:23:08.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it mishandles nested user namespaces with more than 5 UID or GID ranges. A user who has CAP_SYS_ADMIN in an affected user namespace can bypass access controls on resources outside the namespace, as demonstrated by reading /etc/shadow. This occurs because an ID transformation takes place properly for the namespaced-to-kernel direction but not for the kernel-to-namespaced direction. Additional Anal
es place properly for the namespaced-to-kernel direction but not for the kernel-to-namespaced direction. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/d2f007dbe7e4c9583eea6eb04d60001e85c6f1bd - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.19 - https://usn.ubuntu.com/3836-2/ - https://usn.ubuntu.com/3835-1/ - https://bugs.chromium.org/p/project-zero/issues/detail?id=1712 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d2f007dbe7e4c9583eea6eb04d60001e85c6f1bd - https://usn.ubuntu.com/3833-1/ - https://usn.ubuntu.com/3832-1/ - https://www.exploit-db.com/exploits/45915/ - https://cdn.kernel.org
buntu.com/3833-1/ - https://usn.ubuntu.com/3832-1/ - https://www.exploit-db.com/exploits/45915/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.2 - https://www.exploit-db.com/exploits/45886/ - https://usn.ubuntu.com/3836-1/ - http://www.securityfocus.com/bid/105941 - https://support.f5.com/csp/article/K39103040 - https://security.netapp.com/advisory/ntap-20190416-0003/
CVE ID: CVE-2018-18956 State: PUBLISHED Published: 2018-11-05T21:00:00 Last Updated: 2024-08-05T11:23:08.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segfault and daemon crash) via crafted input to the SMTP parser, as exploited in the wild in November 2018. Additional Analyst Notes: - CVE Program Container: References: - https://lists.openinfosecfoundation.org/pipermail/oisf-users/2018-October/016227.html - https://redmine.openinfosecfoundation.org/issues/2658#change-10374 - https://lists.openinfosecfoundation.org/pipermail/oisf-users/2018
e.openinfosecfoundation.org/issues/2658#change-10374 - https://lists.openinfosecfoundation.org/pipermail/oisf-users/2018-November/016316.html
CVE ID: CVE-2018-18957 State: PUBLISHED Published: 2018-11-05T22:00:00 Last Updated: 2024-08-05T11:23:08.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in libIEC61850 v1.3. It is a stack-based buffer overflow in prepareGooseBuffer in goose/goose_publisher.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45798/ - https://github.com/mz-automation/libiec61850/issues/83
CVE ID: CVE-2018-18958 State: PUBLISHED Published: 2019-06-17T20:01:30 Last Updated: 2024-08-05T11:23:08.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: OPNsense 18.7.x before 18.7.7 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://forum.opnsense.org/index.php?board=11.0 - https://forum.opnsense.org/index.php?topic=10181.0
CVE ID: CVE-2018-18959 State: PUBLISHED Published: 2018-12-24T17:00:00 Last Updated: 2024-08-05T11:23:08.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. On the 'Air Print Setting' web page, if the data for 'Bonjour Service Location' at /PRESENTATION/BONJOUR is more than 251 bytes when sending data for Air Print Setting, then the device no longer functions until a reboot. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-18959/poc-cve-2018-18959.py
CVE ID: CVE-2018-18960 State: PUBLISHED Published: 2018-12-24T17:00:00 Last Updated: 2024-08-05T11:23:08.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. They use SNMP to find certain devices on the network, but the default version is v2c, allowing an amplification attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-18960/poc-cve-2018-18960.py
CVE ID: CVE-2018-18963 State: PUBLISHED Published: 2018-11-06T05:00:00 Last Updated: 2024-08-05T11:23:08.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Busca.aspx.cs in Degrau Publicidade e Internet Plataforma de E-commerce allows SQL Injection via the busca/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://lab.insightsecurity.com.br/e-commerce-degrau-publicidade/
CVE ID: CVE-2018-18964 State: PUBLISHED Published: 2018-11-06T04:00:00 Last Updated: 2024-08-05T11:23:08.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans the html extension, but there are several extensions in which contained HTML can be executed, such as the svg extension. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osCommerce/oscommerce2/issues/631
CVE ID: CVE-2018-18965 State: PUBLISHED Published: 2018-11-06T04:00:00 Last Updated: 2024-08-05T11:23:08.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans the html extension, but there are several alternative cases in which HTML can be executed, such as a file with no extension or an unrecognized extension (e.g., the test or test.asdf filename). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osCommerce/oscommerce2/issues/631
CVE ID: CVE-2018-18966 State: PUBLISHED Published: 2018-11-06T04:00:00 Last Updated: 2024-08-05T11:23:08.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans the html extension, but Internet Explorer render HTML elements in a .eml file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osCommerce/oscommerce2/issues/631
CVE ID: CVE-2018-18975 State: PUBLISHED Published: 2019-05-06T19:09:02 Last Updated: 2024-08-05T11:23:08.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Ascensia Contour NEXT ONE app for iOS before 2019-01-15. An attacker may proxy communications between the app and Ascensia backend servers because of a weak certificate-pinning implementation, leading to disclosure of medical information. Additional Analyst Notes: - CVE Program Container: References: - https://depthsecurity.com/blog/medical-exploitation-you-are-now-diabetic
CVE ID: CVE-2018-18976 State: PUBLISHED Published: 2019-05-06T19:12:22 Last Updated: 2024-08-05T11:23:08.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Ascensia Contour NEXT ONE application for iOS and Android before 2019-01-15. An attacker may retrieve encrypted medical information of any user of the Ascensia cloud platform by performing Direct Object References with a series of user ID values. (This information can be decrypted through a different vulnerability.) Additional Analyst Notes: - CVE Program Container: References: - https://depthsecurity.com/blog/medical-exploitation-you-are-now-diabetic
CVE ID: CVE-2018-18977 State: PUBLISHED Published: 2019-05-06T19:14:58 Last Updated: 2024-08-05T11:23:08.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. An attacker may reverse engineer the codebase to extract sensitive data that contributes to the disclosure of medical information of patients utilizing the Ascensia platform. This occurs because of weak obfuscation. Additional Analyst Notes: - CVE Program Container: References: - https://depthsecurity.com/blog/medical-exploitation-you-are-now-diabetic
CVE ID: CVE-2018-18978 State: PUBLISHED Published: 2019-05-06T19:18:26 Last Updated: 2024-08-05T11:23:08.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. It has a statically coded encryption key. Extraction of the encryption key is necessary for deciphering communications between this application and the backend server. This, in combination with retrieving any user's encrypted data from the Ascensia cloud through another vulnerability, allows an attacker to obtain and modify any patient's medical information. Additional Analyst Notes: - CVE Program Container: References: - https
ain and modify any patient's medical information. Additional Analyst Notes: - CVE Program Container: References: - https://depthsecurity.com/blog/medical-exploitation-you-are-now-diabetic
CVE ID: CVE-2018-18979 State: PUBLISHED Published: 2019-05-06T19:19:20 Last Updated: 2024-08-05T11:23:08.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. It has a statically coded initialization vector. Extraction of the initialization vector is necessary for deciphering communications between this application and the backend server. This, in combination with retrieving any user's encrypted data from the Ascensia cloud through another vulnerability, allows an attacker to obtain and modify any patient's medical information. Additional Analyst Notes: - CVE Program Container: Refer
ttacker to obtain and modify any patient's medical information. Additional Analyst Notes: - CVE Program Container: References: - https://depthsecurity.com/blog/medical-exploitation-you-are-now-diabetic
CVE ID: CVE-2018-18980 State: PUBLISHED Published: 2018-11-06T04:00:00Z Last Updated: 2024-09-16T17:54:36.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML External Entity injection (XXE) vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML parameter in a /devices/ProcessRequest.do GET request. For example, the attacker can trigger the transmission of local files to an arbitrary remote FTP server. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/network-monitoring/help/read-me.html - https://github.com/x-f1v3/ForCve/issues/5
CVE ID: CVE-2018-18981 State: PUBLISHED Published: 2019-01-24T21:00:00Z Last Updated: 2024-09-16T17:28:24.060Z Vendors: Rockwell Products: Rockwell Automation FactoryTalk Services Platform v2.90 and earlier Problem Types: CWE-122 Description: In Rockwell Automation FactoryTalk Services Platform 2.90 and earlier, a remote unauthenticated attacker could send numerous crafted packets to service ports resulting in memory consumption that could lead to a partial or complete denial-of-service condition to the affected services. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106279 - https://ics-cert.us-cert.gov/advisories/ICSA-18-331-02
CVE ID: CVE-2018-18982 State: PUBLISHED Published: 2018-11-27T21:00:00 Last Updated: 2024-08-05T11:23:08.904Z Vendors: n/a Products: NUUO CMS Problem Types: CWE-89 Description: NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing statement and allow arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46449/ - https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02
CVE ID: CVE-2018-18983 State: PUBLISHED Published: 2018-11-30T18:00:00 Last Updated: 2024-08-05T11:23:08.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: VT-Designer Version 2.1.7.31 is vulnerable by the program reading the contents of a file (which is already in memory) into another heap-based buffer, which may cause the program to crash or allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106071 - https://ics-cert.us-cert.gov/advisories/ICSA-18-333-01
CVE ID: CVE-2018-18984 State: PUBLISHED Published: 2018-12-14T15:00:00 Last Updated: 2025-05-22T16:40:53.366Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Medtronic Products: CareLink 9790 Programmer, CareLink 2090 Programmer, 29901 Encore Programmer Problem Types: CWE-311 Description: Medtronic CareLink and Encore Programmers do not encrypt or do not sufficiently encrypt sensitive PII and PHI information while at rest . Additional Analyst Notes: - CVE Program Container: References: - https://global.medtronic.com/xg-en/product-security/security-bulletins/carelink-9790-2090-29901.html - https://ics-cert.us-cert.gov/advisories/ICSMA-18-347-01 - http://www.s
ecurity-bulletins/carelink-9790-2090-29901.html - https://ics-cert.us-cert.gov/advisories/ICSMA-18-347-01 - http://www.securityfocus.com/bid/106215
CVE ID: CVE-2018-18985 State: PUBLISHED Published: 2019-01-29T16:00:00Z Last Updated: 2024-09-16T17:54:09.008Z Vendors: Tridium Products: Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and Niagara 4.6, all versions prior to 4.6.96.28.4 Problem Types: CWE-79 Description: Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and Niagara 4.6, all versions prior to 4.6.96.28.4 a cross-site scripting vulnerability has been identified that may allow
d Niagara 4.6, all versions prior to 4.6.96.28.4 a cross-site scripting vulnerability has been identified that may allow a remote attacker to inject code to some web pages affecting confidentiality. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106530 - https://ics-cert.us-cert.gov/advisories/ICSA-18-333-02
CVE ID: CVE-2018-18986 State: PUBLISHED Published: 2019-02-05T18:00:00Z Last Updated: 2024-09-17T00:17:11.349Z Vendors: LCDS Products: LCDS Laquis SCADA Problem Types: CWE-787 Description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows the opening of a specially crafted report format file that may cause an out of bounds read, which may cause a system crash, allow data exfiltration, or remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01 - http://www.securityfocus.com/bid/106634
CVE ID: CVE-2018-18987 State: PUBLISHED Published: 2018-11-30T18:00:00 Last Updated: 2024-08-05T11:23:08.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file without first checking for validity, allowing attacker supplied input to be written to known memory locations. This may cause the program to crash or allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106071 - https://ics-cert.us-cert.gov/advisories/ICSA-18-333-01
CVE ID: CVE-2018-18988 State: PUBLISHED Published: 2019-02-01T17:00:00Z Last Updated: 2024-09-16T17:14:06.193Z Vendors: ICS-CERT Products: LCDS Laquis SCADA Problem Types: CWE-125 Description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file. This may allow remote code execution, data exfiltration, or cause a system crash. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01 - http://www.securityfocus.com/bid/106634
CVE ID: CVE-2018-18989 State: PUBLISHED Published: 2018-12-04T22:00:00 Last Updated: 2024-08-05T11:23:08.511Z Vendors: n/a Products: CX-One (CX-Programmer and CX-Server) Problem Types: CWE-416 Description: In CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior), when processing project files, the application fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-338-01 - http://www.securityfocus.com/bid/106
m Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-338-01 - http://www.securityfocus.com/bid/106106
CVE ID: CVE-2018-18990 State: PUBLISHED Published: 2019-02-05T18:00:00Z Last Updated: 2024-09-17T01:21:51.337Z Vendors: ICS-CERT Products: LCDS Laquis SCADA Problem Types: CWE-23 Description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation. An attacker can leverage this vulnerability to disclose sensitive information under the context of the web server process. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01 - http://www.securityfocus.com/bid/106634
CVE ID: CVE-2018-18991 State: PUBLISHED Published: 2018-12-04T21:00:00 Last Updated: 2024-08-05T11:23:08.950Z Vendors: n/a Products: SCADA WebServer Problem Types: CWE-79 Description: Reflected cross-site scripting (non-persistent) in SCADA WebServer (Versions prior to 2.03.0001) could allow an attacker to send a crafted URL that contains JavaScript, which can be reflected off the web application to the victim's browser. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106105 - https://ics-cert.us-cert.gov/advisories/ICSA-18-338-02