Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
odes from operation. Description: The administrative daemon (tibdgadmind) of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, and TIBCO ActiveSpaces - Enterprise Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition: 3.3.0; 3.4.0; 3.5.0, TIBCO ActiveSpaces - Developer Edition: 3.0.0; 3.1.0; 3.3.0; 3.4.0; 3.5.0, and TIBCO ActiveSpaces - Enterprise Edition: 3.0.0; 3.1.0; 3.2.0; 3.3.0; 3.4.0; 3.5.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/support/advisori
0; 3.4.0; 3.5.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-6-2018-tibco-activespaces - http://www.tibco.com/services/support/advisories - http://www.securityfocus.com/bid/105869
CVE ID: CVE-2018-12412 State: PUBLISHED Published: 2018-11-07T00:00:00Z Last Updated: 2024-09-17T02:06:27.359Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition Problem Types: The impact of this vulnerability includes the theoretical possibility that an attacker could gain full access to realm configuration. With such access, the attacker might also be able to gain access to all data sent to endpoints controlled by the realm server. Description: The realm server (tibrealmserver) component of TIBCO Software Inc. TIBCO FTL - Community Edition,
m server. Description: The realm server (tibrealmserver) component of TIBCO Software Inc. TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc. TIBCO FTL - Community Edition: versions up to and including 5.4.0, TIBCO FTL - Developer Edition: versions up to and including 5.4.0, TIBCO FTL - Enterprise Edition: versions up to and including 5.4.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2018/
ntainer: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-6-2018-tibco-ftl - http://www.securityfocus.com/bid/105861
CVE ID: CVE-2018-12413 State: PUBLISHED Published: 2018-11-07T00:00:00Z Last Updated: 2024-09-17T00:11:42.949Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Community Edition, TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Enterprise Edition Problem Types: The impact of this vulnerability includes the theoretical possibility that an attacker could gain full access to the configuration of message schemas used with an Apache Kafka deployment. With such access, the attacker could also configure Apache Kafka communications to fail. Description: The
a deployment. With such access, the attacker could also configure Apache Kafka communications to fail. Description: The Schema repository server (tibschemad) component of TIBCO Software Inc.'s TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Community Edition, and TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Enterprise Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc. TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Community Edition: 1.0.0, and TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Enterprise Edition: 1.
- Community Edition: 1.0.0, and TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Enterprise Edition: 1.0.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - http://www.securityfocus.com/bid/105874 - https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-6-2018-tibco-messaging-apache-kafka-distribution-schema-repository
CVE ID: CVE-2018-12414 State: PUBLISHED Published: 2018-11-07T00:00:00Z Last Updated: 2024-09-16T21:04:22.688Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Rendezvous, TIBCO Rendezvous Developer Edition, TIBCO Rendezvous for z/Linux, TIBCO Rendezvous for z/OS, TIBCO Rendezvous Network Server, TIBCO Substation ES Problem Types: The impact of these vulnerabilities includes the theoretical possibility of reconfiguring all messaging handled by TIBCO Rendezvous (RV). With such access, the attacker might also be able to gain access to all data sent via RV. Description: The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Rou
be able to gain access to all data sent via RV. Description: The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), and Rendezvous Daemon Manager (rvdm) components of TIBCO Software Inc.'s TIBCO Rendezvous, TIBCO Rendezvous Developer Edition, TIBCO Rendezvous for z/Linux, TIBCO Rendezvous for z/OS, TIBCO Rendezvous Network Server, TIBCO Substation ES contain vulnerabilities which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Rendezvous: versions up to and including 8.4.5, TIBCO Rendezvous Developer Edition: versions up to and in
e Inc.'s TIBCO Rendezvous: versions up to and including 8.4.5, TIBCO Rendezvous Developer Edition: versions up to and including 8.4.5, TIBCO Rendezvous for z/Linux: versions up to and including 8.4.5, TIBCO Rendezvous for z/OS: versions up to and including 8.4.5, TIBCO Rendezvous Network Server: versions up to and including 1.1.2, and TIBCO Substation ES: versions up to and including 2.12.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105871 - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-6-2018-tibco-rendezvous
CVE ID: CVE-2018-12415 State: PUBLISHED Published: 2018-11-07T00:00:00Z Last Updated: 2024-09-16T20:22:46.057Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, TIBCO Enterprise Message Service - Developer Edition Problem Types: In deployments of TIBCO Enterprise Message Service (EMS) that use the Central Administration server, the impact of this vulnerability includes the theoretical possibility of reconfiguring all EMS servers administered by the affected component. With such access, the attacker might also be able to gain access to all data se
administered by the affected component. With such access, the attacker might also be able to gain access to all data sent via EMS. Description: The Central Administration server (emsca) component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Enterprise Message Service: versions 8.4.0 and below, TIBCO Enterprise Message Service - Community Edition: versions 8.4.0 and below, and TIBCO Enterprise Message Service - Dev
BCO Enterprise Message Service - Community Edition: versions 8.4.0 and below, and TIBCO Enterprise Message Service - Developer Edition: versions 8.4.0 and below. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-6-2018-tibco-enterprise-messaging-service - http://www.securityfocus.com/bid/105850
CVE ID: CVE-2018-12416 State: PUBLISHED Published: 2018-11-13T19:00:00Z Last Updated: 2024-09-16T20:51:58.488Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO DataSynapse GridServer Manager Problem Types: The impact of this vulnerability includes the theoretical possibility that a malicious actor could gain full access to the web interface of the affected components. Description: The GridServer Broker and GridServer Director components of TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager contain vulnerabilities which may allow an unauthenticated user to perform cross-site request forgery (CSRF). Affected releases ar
lnerabilities which may allow an unauthenticated user to perform cross-site request forgery (CSRF). Affected releases are TIBCO Software Inc. TIBCO DataSynapse GridServer Manager: versions up to and including 5.2.0; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; 6.2.0; 6.3.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105913 - https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-13-2018-tibco-datasynapse-gridserver-manager
CVE ID: CVE-2018-12417 State: REJECTED Published: 2020-01-15T15:05:15 Last Updated: 2020-01-15T15:05:15 Description: No description available.
CVE ID: CVE-2018-12418 State: PUBLISHED Published: 2018-06-14T16:00:00Z Last Updated: 2024-09-17T04:25:31.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/junrar/junrar/pull/8 - https://github.com/junrar/junrar/commit/ad8d0ba8e155630da8a1215cee3f253e0af45817
CVE ID: CVE-2018-12420 State: PUBLISHED Published: 2018-06-14T21:00:00 Last Updated: 2024-08-05T08:38:05.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceHrm before 23.0.1.OS has a risky usage of a hashed password in a request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gamonoid/icehrm/commit/025a8283ab5d679ff99a6b82398e4c8efed1ad9d - https://github.com/gamonoid/icehrm/releases/tag/v23.0.1.OS
CVE ID: CVE-2018-12421 State: PUBLISHED Published: 2018-06-14T19:00:00Z Last Updated: 2024-09-17T03:03:34.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: LTB (aka LDAP Tool Box) Self Service Password before 1.3 allows a change to a user password (without knowing the old password) via a crafted POST request, because the ldap_bind return value is mishandled and the PHP data type is not constrained to be a string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ltb-project/self-service-password/issues/211 - https://lists.ltb-project.org/pipermail/ltb-announce/2018-June/000023.html - https://github.com/ltb-project/self-service-password/issues/2
project.org/pipermail/ltb-announce/2018-June/000023.html - https://github.com/ltb-project/self-service-password/issues/209
CVE ID: CVE-2018-12422 State: PUBLISHED Published: 2018-06-15T16:00:00 Last Updated: 2024-08-05T08:38:05.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger a Buffer Overflow via a long query that is processed by the strcat function. NOTE: the software maintainer disputes this because "the code had computed the required string length first, and then allocated a large-enough buffer on the heap. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=796174 - https://gitlab.gnome.org/GNOME/evo
Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=796174 - https://gitlab.gnome.org/GNOME/evolution-data-server/commit/34bad6173
CVE ID: CVE-2018-12423 State: PUBLISHED Published: 2018-06-14T21:00:00Z Last Updated: 2024-09-16T18:24:30.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force. Additional Analyst Notes: - CVE Program Container: References: - https://matrix.org/blog/2018/06/14/security-update-synapse-0-31-2/ - https://github.com/matrix-org/matrix-doc/issues/1304 - https://bugs.debian.org/901549
CVE ID: CVE-2018-12426 State: PUBLISHED Published: 2018-07-02T17:00:00 Last Updated: 2024-08-05T08:38:05.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WP Live Chat Support Pro plugin before 8.0.07 for WordPress is vulnerable to unauthenticated Remote Code Execution due to client-side validation of allowed file types, as demonstrated by a v1/remote_upload request with a .php filename and the image/jpeg content type. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RiieCco/write-ups/tree/master/CVE-2018-12426 - https://github.com/CodeCabin/wp-live-chat-support/blob/master/readme.txt - https://wpvulndb.com/vulnerabilities/9697
CVE ID: CVE-2018-12429 State: PUBLISHED Published: 2018-07-18T16:00:00 Last Updated: 2024-08-05T08:38:06.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: JEESNS through 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to capture an administrator cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.03sec.com/3218.shtml
CVE ID: CVE-2018-12430 State: REJECTED Published: 2018-06-22T13:00:00 Last Updated: 2018-06-22T12:57:01 Description: No description available.
CVE ID: CVE-2018-12431 State: PUBLISHED Published: 2018-06-14T23:00:00 Last Updated: 2024-08-05T08:38:06.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS V6.61 has XSS via the site name parameter on an adm1n/admin_config.php page (aka a system management page). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MichaelWayneLIU/seacms/blob/master/seacms.md
CVE ID: CVE-2018-12432 State: PUBLISHED Published: 2018-06-14T23:00:00 Last Updated: 2024-08-05T08:38:05.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: JavaMelody through 1.60.0 has XSS via the counter parameter in a clear_counter action to the /monitoring URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Hurdano/JavaMelody-XSS/wiki/Attack-Vector---JavaMelody
CVE ID: CVE-2018-12433 State: PUBLISHED Published: 2018-06-15T02:00:00Z Last Updated: 2024-09-16T19:35:11.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: cryptlib through 3.4.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a key, the attacker needs access to either the local machine or a different virtual machine on the same physical host. NOTE: the vendor does not include side-channel attacks within its threat model Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/
CVE ID: CVE-2018-12434 State: PUBLISHED Published: 2018-06-15T02:00:00Z Last Updated: 2024-09-16T22:52:15.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a key, the attacker needs access to either the local machine or a different virtual machine on the same physical host. Additional Analyst Notes: - CVE Program Container: References: - https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.7.4-relnotes.txt - https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number
/libressl-2.7.4-relnotes.txt - https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/ - https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.6.5-relnotes.txt
CVE ID: CVE-2018-12435 State: PUBLISHED Published: 2018-06-15T02:00:00 Last Updated: 2024-08-05T08:38:04.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP, related to dsa/dsa.cpp, ec_group/ec_group.cpp, and ecdsa/ecdsa.cpp. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/ - htt
: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/ - https://botan.randombit.net/security.html - https://github.com/randombit/botan/commit/48fc8df51d99f9d8ba251219367b3d629cc848e3
CVE ID: CVE-2018-12436 State: PUBLISHED Published: 2018-06-15T02:00:00Z Last Updated: 2024-09-17T00:51:14.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: wolfcrypt/src/ecc.c in wolfSSL before 3.15.1.patch allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/ - https://www.wolfssl.com/wolfssh-and-rohnp/ - https://githu
rch/technical-advisory-return-of-the-hidden-number-problem/ - https://www.wolfssl.com/wolfssh-and-rohnp/ - https://github.com/wolfSSL/wolfssl/commit/9b9568d500f31f964af26ba8d01e542e1f27e5ca
CVE ID: CVE-2018-12437 State: PUBLISHED Published: 2018-06-15T02:00:00 Last Updated: 2024-08-05T08:38:06.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/ - https://security.gentoo.org/glsa/202007-53
CVE ID: CVE-2018-12438 State: PUBLISHED Published: 2018-06-15T02:00:00Z Last Updated: 2024-09-16T19:56:34.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Elliptic Curve Cryptography library (aka sunec or libsunec) allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/
CVE ID: CVE-2018-12439 State: PUBLISHED Published: 2018-06-15T02:00:00Z Last Updated: 2024-09-16T17:33:27.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: MatrixSSL through 3.9.5 Open allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/
CVE ID: CVE-2018-12440 State: PUBLISHED Published: 2018-06-15T02:00:00Z Last Updated: 2024-09-16T20:37:40.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: BoringSSL through 2018-06-14 allows a memory-cache side-channel attack on DSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a DSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/
CVE ID: CVE-2018-12441 State: PUBLISHED Published: 2018-10-11T21:00:00 Last Updated: 2024-08-05T08:38:06.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CorsairService Service in Corsair Utility Engine is installed with insecure default permissions, which allows unprivileged local users to execute arbitrary commands via modification of the CorsairService BINARY_PATH_NAME, leading to complete control of the affected system. The issue exists due to the Windows "Everyone" group being granted SERVICE_ALL_ACCESS permissions to the CorsairService Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TheRealJoeDoran/CVE/blob/master/CVE-2018
tional Analyst Notes: - CVE Program Container: References: - https://github.com/TheRealJoeDoran/CVE/blob/master/CVE-2018-12441/CVE-2018-12441.txt
CVE ID: CVE-2018-12445 State: PUBLISHED Published: 2018-06-20T12:00:00 Last Updated: 2024-11-14T20:43:56.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The FingerprintManager class for Biometric validation allows authentication bypass through the callback method from onAuthenticationFailed to onAuthenticationSucceeded with null, because the fingerprint API in conjunction with the Android keyGenerator class is not implemented. In other words, an attacker could authenticate with an arbitrary fingerprint. NOTE: the vendor indicates that this is not an attack of interest within the context of thei
h an arbitrary fingerprint. NOTE: the vendor indicates that this is not an attack of interest within the context of their threat model, which excludes Android devices on which rooting has occurred Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/tanprathan/0b63b1868307c732190c2ad3bd1791c7
CVE ID: CVE-2018-12446 State: PUBLISHED Published: 2018-06-20T12:00:00 Last Updated: 2024-08-05T08:38:06.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return value to true. In other words, an attacker could authenticate with an arbitrary passcode. NOTE: the vendor indicates that this is not an attack of interest within the context of their threat model, which excludes Android devices on which rooting has occurred Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container:
droid devices on which rooting has occurred Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/tanprathan/97b4c04ec6af4da62929e73214fddd1b
CVE ID: CVE-2018-12447 State: PUBLISHED Published: 2018-06-15T13:00:00 Last Updated: 2024-08-05T08:38:05.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.8 and other products, has an integer overflow that leads to a heap-based buffer overflow and remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1J3hTt8XHz7u7QDSNYxEuwFZTO6Baggl0 - https://github.com/ebel34/bpg-web-encoder/issues/2