Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-19581 State: PUBLISHED Published: 2019-07-10T16:48:03 Last Updated: 2024-08-05T11:37:11.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure object reference vulnerability that allows a Guest user to set the weight of an issue they create. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ee/issues/7696 - https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/
CVE ID: CVE-2018-19582 State: PUBLISHED Published: 2019-07-10T16:45:43 Last Updated: 2024-08-05T11:37:11.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab EE, versions 11.4 before 11.4.8 and 11.5 before 11.5.1, is affected by an insecure direct object reference vulnerability that permits an unauthorized user to publish the draft merge request comments of another user. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ee/issues/8180 - https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/
CVE ID: CVE-2018-19583 State: PUBLISHED Published: 2019-07-10T16:43:45 Last Updated: 2024-08-05T11:37:11.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, permitting administrators with access to the logs to see another user's token. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-workhorse/issues/182 - https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/ - http://www.securityfocus.com/bid/109166
CVE ID: CVE-2018-19584 State: PUBLISHED Published: 2019-07-10T16:50:06 Last Updated: 2024-08-05T11:37:11.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure direct object reference vulnerability that allows authenticated, but unauthorized, users to view members and milestone details of private groups. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ce/issues/52522 - https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/
CVE ID: CVE-2018-19585 State: PUBLISHED Published: 2019-05-17T15:09:53 Last Updated: 2024-08-05T11:37:11.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1 have CRLF Injection in Project Mirroring when using the Git protocol. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/ - http://packetstormsecurity.com/files/160516/GitLab-11.4.7-Remote-Code-Execution.html - http://packetstormsecurity.com/files/160699/GitLab-11.4.7-Remote-Cod
s/160516/GitLab-11.4.7-Remote-Code-Execution.html - http://packetstormsecurity.com/files/160699/GitLab-11.4.7-Remote-Code-Execution.html
CVE ID: CVE-2018-19586 State: PUBLISHED Published: 2019-04-09T17:38:30 Last Updated: 2024-08-05T11:37:11.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silverpeas 5.15 through 6.0.2 is affected by an authenticated Directory Traversal vulnerability that can be triggered during file uploads because core/webapi/upload/FileUploadData.java mishandles a StringUtil.java call. This vulnerability enables regular users to write arbitrary files on the underlying system with privileges of the user running the application. Especially, an attacker may leverage the vulnerability to write an executable JSP file in an exposed web directory to execute commands on the underlying system. Additi
ability to write an executable JSP file in an exposed web directory to execute commands on the underlying system. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Silverpeas/Silverpeas-Core/blob/d8c3bbb0695a4907db013401bd16c6527e2b4f41/core-web/src/main/java/org/silverpeas/core/webapi/upload/FileUploadData.java#L89 - https://www.bishopfox.com/news/2019/01/silverpeas-5-15-to-6-0-2-path-traversal/
CVE ID: CVE-2018-19587 State: PUBLISHED Published: 2018-11-27T07:00:00 Last Updated: 2024-08-05T11:37:11.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Cesanta Mongoose 6.13, a SIGSEGV exists in the mongoose.c mg_mqtt_add_session() function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/insi2304/mongoose-fuzz
CVE ID: CVE-2018-19588 State: PUBLISHED Published: 2019-07-11T18:50:46 Last Updated: 2024-08-05T11:37:11.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://www.vfxcomputing.com/?CVE-2018-19588
CVE ID: CVE-2018-19589 State: PUBLISHED Published: 2019-04-09T16:50:58 Last Updated: 2024-08-05T11:37:11.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Controls of Security Officer (SO) in PKCS11 R2 provider that ships with the Utimaco CryptoServer HSM product package allows an SO authenticated to a slot to retrieve attributes of keys marked as private keys in external key storage, and also delete keys marked as private keys in external key storage. This compromises the availability of all keys configured with external key storage and may result in an economic attack in which the attacker denies legitimate users access to keys while maintaining possession of
esult in an economic attack in which the attacker denies legitimate users access to keys while maintaining possession of an encrypted copy (blob) of the external key store for ransom. This attack has been dubbed reverse ransomware attack and may be executed via a physical connection to the CryptoServer or remote connection if SSH or remote access to LAN CryptoServer has been compromised. The Confidentiality and Integrity of the affected keys, however, remain untarnished. Additional Analyst Notes: - CVE Program Container: References: - https://support.hsm.utimaco.com/support/security-advisories/-/blogs/cve-2018-19589 - https://www.linkedin.com/pulse/does-hsm-guarantee-cryptographic-key-securi
/security-advisories/-/blogs/cve-2018-19589 - https://www.linkedin.com/pulse/does-hsm-guarantee-cryptographic-key-security-kwadjo-nyante/
CVE ID: CVE-2018-19591 State: PUBLISHED Published: 2018-12-04T16:00:00 Last Updated: 2024-08-05T11:37:11.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the if_nametoindex() function. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/?p=glibc.git%3Ba=blob_plain%3Bf=NEWS%3Bhb=HEAD - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BO7WHN52GFMC5F2I2232GFIPSSXWFV7G/ - http://www.securityfocus.
es/list/package-announce%40lists.fedoraproject.org/message/BO7WHN52GFMC5F2I2232GFIPSSXWFV7G/ - http://www.securityfocus.com/bid/106037 - https://sourceware.org/bugzilla/show_bug.cgi?id=23927 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M52KE4YR3GNMHQUOS3DKAGZD5TQ5D5UH/ - https://security.gentoo.org/glsa/201903-09 - http://www.securitytracker.com/id/1042174 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commitdiff%3Bh=d527c860f5a3f0ed687bd03f0cb464612dc23408 - https://security.netapp.com/advisory/ntap-20190321-0003/ - https://security.gentoo.org/glsa/201908-06 - https://usn.ubuntu.com/4416-1/
CVE ID: CVE-2018-19592 State: PUBLISHED Published: 2019-09-27T15:04:17 Last Updated: 2024-08-05T11:37:11.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "CLink4Service" service is installed with Corsair Link 4.9.7.35 with insecure permissions by default. This allows unprivileged users to take control of the service and execute commands in the context of NT AUTHORITY\SYSTEM, leading to total system takeover, a similar issue to CVE-2018-12441. Additional Analyst Notes: - CVE Program Container: References: - http://forum.corsair.com/v3/showthread.php?t=155646 - https://github.com/BradyDonovan/CVE-2018-19592/blob/master/CLink4Service
CVE ID: CVE-2018-19595 State: PUBLISHED Published: 2018-11-27T07:00:00 Last Updated: 2024-08-05T11:37:11.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: PbootCMS V1.3.1 build 2018-11-14 allows remote attackers to execute arbitrary code via use of "eval" with mixed case, as demonstrated by an index.php/list/5/?current={pboot:if(evAl($_GET[a]))}1{/pboot:if}&a=phpinfo(); URI, because of an incorrect apps\home\controller\ParserController.php parserIfLabel protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://www.pbootcms.com/changelog.html - http://www.ttk7.cn/post-107.html - https://www.pbootcms.com/content/139.html
CVE ID: CVE-2018-19596 State: PUBLISHED Published: 2018-12-19T19:00:00 Last Updated: 2024-08-05T11:37:11.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-2018-19506. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/security-breachlock/CVE-2018-19596/blob/master/Zurmo_PS%20%281%29.pdf
CVE ID: CVE-2018-19597 State: PUBLISHED Published: 2018-12-19T19:00:00 Last Updated: 2024-08-05T11:37:11.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple 2.2.8 allows XSS via an uploaded SVG document, a related issue to CVE-2017-16798. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/security-breachlock/CVE-2018-19597/blob/master/cmssms.pdf
CVE ID: CVE-2018-19598 State: PUBLISHED Published: 2018-12-19T19:00:00 Last Updated: 2024-08-05T11:37:11.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Statamic 2.10.3 allows XSS via First Name or Last Name to the /users URI in an 'Add new user' request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/security-breachlock/CVE-2018-19598/blob/master/Static%20cms.pdf
CVE ID: CVE-2018-19599 State: PUBLISHED Published: 2020-03-02T19:45:40 Last Updated: 2024-08-05T11:37:11.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monstra CMS 1.6 allows XSS via an uploaded SVG document to the admin/index.php?id=filesmanager&path=uploads/ URI. NOTE: this is a discontinued product. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/security-provensec/CVE-2018-19599/blob/master/monstra-dev_svg.pdf - https://github.com/monstra-cms/monstra/issues/467 - https://anh.im/image/lG1
CVE ID: CVE-2018-19600 State: PUBLISHED Published: 2019-01-03T20:00:00 Last Updated: 2024-08-05T11:37:11.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rhymix CMS 1.9.8.1 allows XSS via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/security-breachlock/CVE-2018-19600/blob/master/XSS.pdf - https://github.com/rhymix/rhymix/issues/1088
CVE ID: CVE-2018-19601 State: PUBLISHED Published: 2019-01-03T20:00:00 Last Updated: 2024-08-05T11:37:11.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rhymix CMS 1.9.8.1 allows SSRF via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/security-breachlock/CVE-2018-19601/blob/master/SSRF.pdf - https://github.com/rhymix/rhymix/issues/1089
CVE ID: CVE-2018-19607 State: PUBLISHED Published: 2018-11-27T07:00:00 Last Updated: 2024-08-05T11:37:11.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/561 - https://access.redhat.com/errata/RHSA-2019:2101 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html
CVE ID: CVE-2018-19608 State: PUBLISHED Published: 2018-12-05T22:00:00 Last Updated: 2024-08-05T11:44:19.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites. Additional Analyst Notes: - CVE Program Container: References: - https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-03 - http://cat.eyalro.net/ - https://tls.mbed.org/tech-updates/releases/mbedtls-2.14.1-2.7.8-and-2.1.17-released
CVE ID: CVE-2018-19609 State: PUBLISHED Published: 2018-11-27T16:00:00 Last Updated: 2024-08-05T11:44:19.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: ShowDoc 2.4.1 allows remote attackers to obtain sensitive information by navigating with a modified page_id, as demonstrated by reading note content, or discovering a username in the JSON data at a diff URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CCCCCrash/POCs/tree/master/Web/showdoc/IncorrectAccessControl
CVE ID: CVE-2018-19612 State: PUBLISHED Published: 2019-05-24T16:44:34 Last Updated: 2024-08-05T11:44:19.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code. Additional Analyst Notes: - CVE Program Container: References: - https://www.westermo.us/ - https://github.com/TheWickerMan/CVE-Disclosures/blob/master/CVE-2018-19612.md
CVE ID: CVE-2018-19613 State: PUBLISHED Published: 2019-05-24T16:42:19 Last Updated: 2024-08-05T11:44:19.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://www.westermo.us/ - https://github.com/TheWickerMan/CVE-Disclosures/blob/master/CVE-2018-19613.md
CVE ID: CVE-2018-19614 State: PUBLISHED Published: 2019-05-23T19:16:12 Last Updated: 2024-08-05T11:44:19.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers. Additional Analyst Notes: - CVE Program Container: References: - https://www.westermo.us/ - https://github.com/TheWickerMan/CVE-Disclosures/blob/master/CVE-2018-19614.md
CVE ID: CVE-2018-19615 State: PUBLISHED Published: 2018-12-26T20:00:00 Last Updated: 2024-08-05T11:44:19.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rockwell Automation Allen-Bradley PowerMonitor 1000 all versions. A remote attacker could inject arbitrary code into a targeted userâs web browser to gain access to the affected device. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-050-04 - https://www.exploit-db.com/exploits/45928/ - http://packetstormsecurity.com/files/150600/Rockwell-Automation-Allen-Bradley-PowerMonitor-1000-XSS.html - http://www.securityfocus.com/bid/106333 - http://www.securityfocus.co
omation-Allen-Bradley-PowerMonitor-1000-XSS.html - http://www.securityfocus.com/bid/106333 - http://www.securityfocus.com/bid/108538
CVE ID: CVE-2018-19616 State: PUBLISHED Published: 2018-12-26T20:00:00 Last Updated: 2024-08-05T11:44:19.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000. An unauthenticated user can add/edit/remove administrators because access control is implemented on the client side via a disabled attribute for a BUTTON element. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-050-04 - http://packetstormsecurity.com/files/150619/Rockwell-Automation-Allen-Bradley-PowerMonitor-1000-Authentication-Bypass.html - http://www.securityfocus.com/bid/106333 -
ckwell-Automation-Allen-Bradley-PowerMonitor-1000-Authentication-Bypass.html - http://www.securityfocus.com/bid/106333 - https://www.exploit-db.com/exploits/45937/ - http://www.securityfocus.com/bid/108538
CVE ID: CVE-2018-19620 State: PUBLISHED Published: 2018-11-28T08:00:00Z Last Updated: 2024-09-16T17:19:05.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified page_id. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CCCCCrash/POCs/tree/master/Web/showdoc/IncorrectAccessControl#0x02-modify - https://github.com/star7th/showdoc/issues/397 - https://github.com/star7th/showdoc/commit/bcdb5e3519285bdf81e618b3c9b90d22bc49e13c
CVE ID: CVE-2018-19621 State: PUBLISHED Published: 2018-11-28T08:00:00Z Last Updated: 2024-09-17T03:33:34.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CCCCCrash/POCs/tree/master/Web/showdoc/csrf
CVE ID: CVE-2018-19622 State: PUBLISHED Published: 2018-11-29T04:00:00 Last Updated: 2024-08-05T11:44:19.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-mmse.c by preventing length overflows. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2018-54.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b7555d32d11862f0e500ec466ad6bfe54190076 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15250 - https://lists.debian.org/debian-lts-announce/201
e54190076 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15250 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - http://www.securityfocus.com/bid/106051 - https://www.debian.org/security/2018/dsa-4359 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2018-19623 State: PUBLISHED Published: 2018-11-29T04:00:00 Last Updated: 2024-08-05T11:44:19.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash. In addition, a remote attacker could write arbitrary data to any memory locations before the packet-scoped memory. This was addressed in epan/dissectors/packet-lbmpdm.c by disallowing certain negative values. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2018-53.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9c8645ec7b28e4d7193962ecd2a418613bf6a84f -
ml - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9c8645ec7b28e4d7193962ecd2a418613bf6a84f - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15132 - http://www.securityfocus.com/bid/106051 - https://www.debian.org/security/2018/dsa-4359 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2018-19624 State: PUBLISHED Published: 2018-11-29T04:00:00 Last Updated: 2024-08-05T11:44:19.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash. This was addressed in epan/dissectors/packet-pvfs2.c by preventing a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2018-56.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15280 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - http://www.securityfocus.com/bid/106051 - https://www.debian.org/security/2018/dsa-4359 - https://code
1/msg00010.html - http://www.securityfocus.com/bid/106051 - https://www.debian.org/security/2018/dsa-4359 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3e319db1107b08fc3be804b6d449143ec9aa0dec - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2018-19625 State: PUBLISHED Published: 2018-11-29T04:00:00 Last Updated: 2024-08-05T11:44:19.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuff_composite.c by preventing a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14466 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=dc4d209f39132a4ae05675a11609176ae9705cfc - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://www.wireshark.org/security/wnpa-sec-201
c - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://www.wireshark.org/security/wnpa-sec-2018-51.html - http://www.securityfocus.com/bid/106051 - https://www.debian.org/security/2018/dsa-4359 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2018-19626 State: PUBLISHED Published: 2018-11-29T04:00:00 Last Updated: 2024-08-05T11:44:19.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2018-52.html - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15130 - http://www.securityfocus.com/bid/106051 - https://www.debian.org/security/2018/dsa-4359 - https://code.wireshark.org/
- http://www.securityfocus.com/bid/106051 - https://www.debian.org/security/2018/dsa-4359 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c5a65115ebab55cfd5ce0a855c2256e01cab6449 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2018-19627 State: PUBLISHED Published: 2018-11-29T04:00:00 Last Updated: 2024-08-05T11:44:19.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bdc33cfaecb1b4cf2c114ed9015713ddf8569a60 - https://www.exploit-db.com/exploits/45951/ - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15279 - http://www.securityfocus.com/bid/106051 - https://www.debian.org/security/2018/dsa-4359 -
gzilla/show_bug.cgi?id=15279 - http://www.securityfocus.com/bid/106051 - https://www.debian.org/security/2018/dsa-4359 - https://www.wireshark.org/security/wnpa-sec-2018-55.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html - https://www.oracle.com/security-alerts/cpuapr2020.html