Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-11396 State: PUBLISHED Published: 2018-05-23T13:00:00 Last Updated: 2024-08-05T08:10:14.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that triggers access to a NULL URL, as demonstrated by a crafted window.open call. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=795740 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00043.html
CVE ID: CVE-2018-11399 State: PUBLISHED Published: 2018-05-24T05:00:00 Last Updated: 2024-08-05T08:10:14.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur. Additional Analyst Notes: - CVE Program Container: References: - https://simplisafe.com/files/pdf/SimpliSafe_advisory_8-17-18.pdf - https://www.simpleorsecure.net/simplisafe-security-advisory/
CVE ID: CVE-2018-11400 State: PUBLISHED Published: 2018-05-24T05:00:00 Last Updated: 2024-08-05T08:10:13.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if a physically proximate attacker removes the battery and external power. Additional Analyst Notes: - CVE Program Container: References: - https://simplisafe.com/files/pdf/SimpliSafe_advisory_8-17-18.pdf - https://www.simpleorsecure.net/simplisafe-security-advisory/
CVE ID: CVE-2018-11401 State: PUBLISHED Published: 2018-05-24T05:00:00 Last Updated: 2024-08-05T08:10:13.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SimpliSafe Original, RF Interference (e.g., an extremely strong 433.92 MHz signal) by a physically proximate attacker does not cause a notification. Additional Analyst Notes: - CVE Program Container: References: - https://simplisafe.com/files/pdf/SimpliSafe_advisory_8-17-18.pdf - https://www.simpleorsecure.net/simplisafe-security-advisory/
CVE ID: CVE-2018-11402 State: PUBLISHED Published: 2018-05-24T05:00:00 Last Updated: 2024-08-05T08:10:13.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN. Additional Analyst Notes: - CVE Program Container: References: - https://simplisafe.com/files/pdf/SimpliSafe_advisory_8-17-18.pdf - https://www.simpleorsecure.net/simplisafe-security-advisory/
CVE ID: CVE-2018-11403 State: PUBLISHED Published: 2018-05-24T07:00:00 Last Updated: 2024-08-05T08:10:14.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/domainmod/domainmod/issues/63 - https://www.exploit-db.com/exploits/44782/
CVE ID: CVE-2018-11404 State: PUBLISHED Published: 2018-05-24T07:00:00 Last Updated: 2024-08-05T08:10:13.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/domainmod/domainmod/issues/63 - https://www.exploit-db.com/exploits/44783/
CVE ID: CVE-2018-11405 State: PUBLISHED Published: 2018-05-24T07:00:00 Last Updated: 2024-08-05T08:10:13.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kliqqi 2.0.2 has CSRF in admin/admin_users.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/256
CVE ID: CVE-2018-11406 State: PUBLISHED Published: 2018-06-13T16:00:00 Last Updated: 2024-08-05T08:10:14.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. By default, a user's session is invalidated when the user is logged out. This behavior can be disabled through the invalidate_session option. In this case, CSRF tokens were not erased during logout which allowed for CSRF token fixation. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-annou
tional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBQK7JDXIELADIPGZIOUCZKMAJM5LSBW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WU5N2TZFNGXDGMXMPP7LZCWTFLENF6WH/ - https://symfony.com/blog/cve-2018-11406-csrf-token-fixation - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G4XNBMFW33H47O5TZGA7JYCVLDBCXAJV/ - https://www.debian.org/security/2018/dsa-4262
CVE ID: CVE-2018-11407 State: PUBLISHED Published: 2018-06-13T16:00:00 Last Updated: 2024-08-05T08:10:13.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Ldap component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, and 4.0.x before 4.0.7. It allows remote attackers to bypass authentication by logging in with a "null" password and valid username, which triggers an unauthenticated bind. NOTE: this issue exists because of an incomplete fix for CVE-2016-2403. Additional Analyst Notes: - CVE Program Container: References: - https://symfony.com/blog/cve-2018-11407-unauthorized-access-on-a-misconfigured-ldap-server-when-using-
er: References: - https://symfony.com/blog/cve-2018-11407-unauthorized-access-on-a-misconfigured-ldap-server-when-using-an-empty-password
CVE ID: CVE-2018-11408 State: PUBLISHED Published: 2018-06-13T16:00:00 Last Updated: 2024-08-05T08:10:13.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: The security handlers in the Security component in Symfony in 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11 have an Open redirect vulnerability when security.http_utils is inlined by a container. NOTE: this issue exists because of an incomplete fix for CVE-2017-16652. Additional Analyst Notes: - CVE Program Container: References: - https://symfony.com/blog/cve-2018-11408-open-redirect-vulnerability-on-security-handlers - https://lists.fedoraproject.org/archives/lis
.com/blog/cve-2018-11408-open-redirect-vulnerability-on-security-handlers - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBQK7JDXIELADIPGZIOUCZKMAJM5LSBW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WU5N2TZFNGXDGMXMPP7LZCWTFLENF6WH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G4XNBMFW33H47O5TZGA7JYCVLDBCXAJV/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html
CVE ID: CVE-2018-11409 State: PUBLISHED Published: 2018-06-08T12:00:00 Last Updated: 2024-08-05T08:10:14.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kofa2002/splunk - http://www.securitytracker.com/id/1041148 - https://www.exploit-db.com/exploits/44865/
CVE ID: CVE-2018-11410 State: PUBLISHED Published: 2018-05-24T07:00:00 Last Updated: 2024-08-05T08:10:13.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in compileTranslationTable.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1582024 - https://usn.ubuntu.com/3669-1/ - http://www.securityfocus.com/bid/104324 - https://docs.google.com/document/d/1Uw3D6ECXZr8S2cWOTY81kg6ivv0WpR4kQqxVpUSyGUA/edit?usp=sharing - http://
/bid/104324 - https://docs.google.com/document/d/1Uw3D6ECXZr8S2cWOTY81kg6ivv0WpR4kQqxVpUSyGUA/edit?usp=sharing - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html
CVE ID: CVE-2018-11411 State: PUBLISHED Published: 2018-05-24T12:00:00 Last Updated: 2024-08-05T08:10:13.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: The transferFrom function of a smart contract implementation for DimonCoin (FUD), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer all victims' balances into their account) because certain computations involving _value are incorrect. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40jonghyk.song/dimoncoin-fud-erc20-token-allows-attackers-to-steal-all-victims-balances-cve-2018-11411-ba9a320604f9
CVE ID: CVE-2018-11412 State: PUBLISHED Published: 2018-05-24T18:00:00 Last Updated: 2024-08-05T08:10:13.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 4.13 through 4.16.11, ext4_read_inline_data() in fs/ext4/inline.c performs a memcpy with an untrusted length value in certain circumstances involving a crafted filesystem that stores the system.data extended attribute value in a dedicated inode. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3752-2/ - http://www.securityfocus.com/bid/104291 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1580 - https://usn.ubuntu.com/3752-3/ - https://bugzilla.kernel.org
://bugs.chromium.org/p/project-zero/issues/detail?id=1580 - https://usn.ubuntu.com/3752-3/ - https://bugzilla.kernel.org/show_bug.cgi?id=199803 - https://www.exploit-db.com/exploits/44832/ - https://access.redhat.com/errata/RHSA-2019:0525 - https://usn.ubuntu.com/3752-1/
CVE ID: CVE-2018-11413 State: PUBLISHED Published: 2018-05-24T18:00:00 Last Updated: 2024-08-05T08:10:14.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in BearAdmin 0.5. Remote attackers can download arbitrary files via /admin/databack/download.html?name= directory traversal sequences, as demonstrated by name=../application/database.php to read the MySQL credentials in the configuration. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yupoxiong/BearAdmin/issues/5
CVE ID: CVE-2018-11414 State: PUBLISHED Published: 2018-05-24T18:00:00 Last Updated: 2024-08-05T08:10:13.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in BearAdmin 0.5. There is admin/admin_log/index.html?user_id= SQL injection because admin\controller\AdminLog.php constructs a MySQL query improperly. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yupoxiong/BearAdmin/issues/5
CVE ID: CVE-2018-11415 State: PUBLISHED Published: 2018-05-24T19:00:00 Last Updated: 2024-08-05T08:10:14.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP Internet Transaction Server (ITS) 6200.X.X has Reflected Cross Site Scripting (XSS) via certain wgate URIs. NOTE: the vendor has reportedly indicated that there will not be any further releases of this product. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104311 - https://www.exploit-db.com/exploits/44755/ - https://github.com/0xd0m7/SAP
CVE ID: CVE-2018-11416 State: PUBLISHED Published: 2018-05-24T20:00:00 Last Updated: 2024-08-05T08:10:13.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: jpegoptim.c in jpegoptim 1.4.5 (fixed in 1.4.6) has an invalid use of realloc() and free(), which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tjko/jpegoptim/blob/master/README - https://github.com/tjko/jpegoptim/issues/57
CVE ID: CVE-2018-11418 State: PUBLISHED Published: 2018-05-24T20:00:00Z Last Updated: 2024-09-17T00:55:46.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_utf8 function via a RegExp("[\\u0020") payload, related to re_parse_char_class in parser/regexp/re-parser.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/issues/2237
CVE ID: CVE-2018-11419 State: PUBLISHED Published: 2018-05-24T20:00:00Z Last Updated: 2024-09-16T23:11:47.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_hex function via a RegExp("[\\u0") payload, related to re_parse_char_class in parser/regexp/re-parser.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/issues/2230
CVE ID: CVE-2018-11420 State: PUBLISHED Published: 2019-07-03T15:25:58 Last Updated: 2024-08-05T08:10:13.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is Memory corruption in the web interface of Moxa OnCell G3100-HSPA Series version 1.5 Build 17042015 and prio,r a different vulnerability than CVE-2018-11423. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/klsecservices/Advisories/blob/master/KL-MOXA-2018-101.md
CVE ID: CVE-2018-11421 State: PUBLISHED Published: 2019-07-03T15:24:45 Last Updated: 2024-08-05T08:10:14.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary monitoring protocol that does not provide confidentiality, integrity, and authenticity security controls. All information is sent in plain text, and can be intercepted and modified. The protocol is vulnerable to remote unauthenticated disclosure of sensitive information, including the administrator's password. Under certain conditions, it's also possible to retrieve additional information, such as content of HTTP requests to the device, or th
conditions, it's also possible to retrieve additional information, such as content of HTTP requests to the device, or the previously used password, due to memory leakages. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/klsecservices/Advisories/blob/master/KL-MOXA-2018-103.md
CVE ID: CVE-2018-11422 State: PUBLISHED Published: 2019-07-03T15:23:32 Last Updated: 2024-08-05T08:10:14.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary configuration protocol that does not provide confidentiality, integrity, and authenticity security controls. All information is sent in plain text, and can be intercepted and modified. Any commands (including device reboot, configuration download or upload, or firmware upgrade) are accepted and executed by the device without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/klsecservices/Advis
authentication. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/klsecservices/Advisories/blob/master/KL-MOXA-2018-104.md
CVE ID: CVE-2018-11423 State: PUBLISHED Published: 2019-07-03T15:22:03 Last Updated: 2024-08-05T08:10:14.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is Memory corruption in the web interface Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior, different vulnerability than CVE-2018-11420. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/klsecservices/Advisories/blob/master/KL-MOXA-2018-102.md
CVE ID: CVE-2018-11424 State: PUBLISHED Published: 2019-07-03T15:11:27 Last Updated: 2024-08-05T08:10:14.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is Memory corruption in the web interface of Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11425. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/klsecservices/Advisories/blob/master/KL-MOXA-2018-002.md
CVE ID: CVE-2018-11425 State: PUBLISHED Published: 2019-07-03T15:09:48 Last Updated: 2024-08-05T08:10:13.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory corruption issue was discovered in Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11424. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/klsecservices/Advisories/blob/master/KL-MOXA-2018-003.md
CVE ID: CVE-2018-11426 State: PUBLISHED Published: 2019-07-03T14:50:10 Last Updated: 2024-08-05T08:10:14.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: A weak Cookie parameter is used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker can brute force parameters required to bypass authentication and access the web interface to use all its functions except for password change. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/klsecservices/Advisories/blob/master/KL-MOXA-2018-105.md
CVE ID: CVE-2018-11427 State: PUBLISHED Published: 2019-07-03T14:46:54 Last Updated: 2024-08-05T08:10:14.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSRF tokens are not used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior, which makes it possible to perform CSRF attacks on the device administrator. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/klsecservices/Advisories/blob/master/KL-MOXA-2018-106.md
CVE ID: CVE-2018-11429 State: PUBLISHED Published: 2018-07-04T00:00:00 Last Updated: 2024-08-05T08:10:14.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: ATLANT (ATL) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dwfault/AirTokens/blob/master/SPXToken/mint%20interger%20overflow.md - https://github.com/dwfault/AirTokens/tree/master/ATLANT
CVE ID: CVE-2018-11430 State: PUBLISHED Published: 2018-05-28T16:00:00 Last Updated: 2024-08-05T08:10:14.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to save notes and display them in a list in the modCP. The XSS is located in the mod notes textarea. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44754/
CVE ID: CVE-2018-11432 State: PUBLISHED Published: 2018-05-30T13:00:00 Last Updated: 2024-08-05T08:10:14.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mobi_parse_mobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted mobi file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/48
CVE ID: CVE-2018-11433 State: PUBLISHED Published: 2018-05-30T13:00:00 Last Updated: 2024-08-05T08:10:14.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mobi_get_kf8boundary_seqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted mobi file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/48
CVE ID: CVE-2018-11434 State: PUBLISHED Published: 2018-05-30T13:00:00 Last Updated: 2024-08-05T08:10:14.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: The buffer_fill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted mobi file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/48
CVE ID: CVE-2018-11435 State: PUBLISHED Published: 2018-05-30T13:00:00 Last Updated: 2024-08-05T08:10:14.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mobi_decompress_huffman_internal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure (read access violation) via a crafted mobi file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/48
CVE ID: CVE-2018-11436 State: PUBLISHED Published: 2018-05-30T13:00:00 Last Updated: 2024-08-05T08:10:13.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: The buffer_addraw function in buffer.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted mobi file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/48
CVE ID: CVE-2018-11437 State: PUBLISHED Published: 2018-05-30T13:00:00 Last Updated: 2024-08-05T08:10:13.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mobi_reconstruct_parts function in parse_rawml.c in Libmobi 0.3 allows remote attackers to cause information disclosure (read access violation) via a crafted mobi file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/48
CVE ID: CVE-2018-11438 State: PUBLISHED Published: 2018-05-30T13:00:00 Last Updated: 2024-08-05T08:10:13.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mobi_decompress_lz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution (heap-based buffer overflow) via a crafted mobi file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/48
CVE ID: CVE-2018-11439 State: PUBLISHED Published: 2018-05-30T13:00:00 Last Updated: 2024-08-05T08:10:14.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/07/msg00022.html - http://seclists.org/fulldisclosure/2018/May/49 - https://lists.debian.org/debian-lts-announce/2021/09/msg00020.html
CVE ID: CVE-2018-11440 State: PUBLISHED Published: 2018-05-25T11:00:00 Last Updated: 2024-08-05T08:10:14.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3669-1/ - http://www.securityfocus.com/bid/104321 - https://github.com/liblouis/liblouis/issues/575 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html
CVE ID: CVE-2018-11442 State: PUBLISHED Published: 2018-05-25T12:00:00 Last Updated: 2024-08-05T08:10:14.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a quotation-new3-new2.php?add=true&id= URI, as demonstrated by adding a new quotation. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44763/ - https://gist.github.com/NinjaXshell/a5fae5e2d1031ca59160fbe29d94279c