Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-19936 State: PUBLISHED Published: 2018-12-17T18:00:00 Last Updated: 2024-08-05T11:51:17.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrinterOn Enterprise 4.1.4 allows Arbitrary File Deletion. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150750/PrinterOn-Enterprise-4.1.4-Arbitrary-File-Deletion.html - https://www.exploit-db.com/exploits/45969
CVE ID: CVE-2018-19937 State: PUBLISHED Published: 2018-12-31T16:00:00.000Z Last Updated: 2025-05-06T16:53:08.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by opening a URL and turning the phone. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://itunes.apple.com/ms/app/vlc-for-mobile/id650377962?mt=8 - https://github.com/videolan/vlc-ios/pull/178/commits/d84d7c0a94eb7fba202d2c5fc3739276d2d3986f
CVE ID: CVE-2018-19939 State: PUBLISHED Published: 2018-12-07T09:00:00 Last Updated: 2024-08-05T11:51:17.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtp_read_Color in drivers/input/touchscreen/gt917d/gt9xx.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/972
CVE ID: CVE-2018-19941 State: PUBLISHED Published: 2020-12-31T16:33:27.622856Z Last Updated: 2024-09-16T23:50:48.219Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-315 Description: A vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows an attacker to access sensitive information stored in cleartext inside cookies via certain widely-available tools. QNAP have already fixed this vulnerability in the following versions: QTS 4.5.1.1456 build 20201015 (and later) QuTS hero h4.5.1.1472 build 20201031 (and later) QuTScloud c4.5.2.1379 build 20200730 (and later) Additional Analyst Notes: - CVE Program Container: References: -
later) QuTScloud c4.5.2.1379 build 20200730 (and later) Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/qsa-20-23
CVE ID: CVE-2018-19942 State: PUBLISHED Published: 2021-04-16T01:10:14.083307Z Last Updated: 2024-09-16T20:32:52.915Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-79, CWE-80 Description: A cross-site scripting (XSS) vulnerability has been reported to affect earlier versions of File Station. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 build 20210202 (and later) QTS 4.5.1.1456 build 20201015 (and later) QTS 4.3.6.1446 build 20200929 (and later) QTS 4.3.4.1463 build 20201006 (and later) QTS 4.3.3.1432 build 20201006 (and later) QTS 4.2.6
uild 20200929 (and later) QTS 4.3.4.1463 build 20201006 (and later) QTS 4.3.3.1432 build 20201006 (and later) QTS 4.2.6 build 20210327 (and later) QuTS hero h4.5.1.1472 build 20201031 (and later) QuTScloud c4.5.4.1601 build 20210309 (and later) QuTScloud c4.5.3.1454 build 20201013 (and later) Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/qsa-21-04
CVE ID: CVE-2018-19943 State: PUBLISHED Published: 2020-10-28T17:55:18.000Z Last Updated: 2025-10-21T23:35:34.195Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: QNAP Systems Inc. Products: QTS Problem Types: CWE-79, CWE-80 Description: If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these issues in the following QTS versions. QTS 4.4.2.1270 build 20200410 and later QTS 4.4.1.1261 build 20200330 and later QTS 4.3.6.1263 build 20200330 and later QTS 4.3.4.1282 build 20200408 and later QTS 4.3.3.1252 build 20200409 and later QTS 4.2.6 build 20200421 and later Additional Analyst No
uild 20200408 and later QTS 4.3.3.1252 build 20200409 and later QTS 4.2.6 build 20200421 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/zh-tw/security-advisory/qsa-20-01
CVE ID: CVE-2018-19944 State: PUBLISHED Published: 2020-12-31T16:33:27.820049Z Last Updated: 2024-09-17T02:11:00.534Z Vendors: QNAP Systems Inc. Products: QTS Problem Types: CWE-311, CWE-319 Description: A cleartext transmission of sensitive information vulnerability has been reported to affect certain QTS devices. If exploited, this vulnerability allows a remote attacker to gain access to sensitive information. QNAP have already fixed this vulnerability in the following versions: QTS 4.4.3.1354 build 20200702 (and later) Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/qsa-20-22
CVE ID: CVE-2018-19945 State: PUBLISHED Published: 2020-12-31T16:33:27.917070Z Last Updated: 2024-09-17T02:01:35.778Z Vendors: QNAP Systems Inc. Products: QTS Problem Types: CWE-20, CWE-22, CWE-73, CWE-284 Description: A vulnerability has been reported to affect earlier QNAP devices running QTS 4.3.4 to 4.3.6. Caused by improper limitations of a pathname to a restricted directory, this vulnerability allows for renaming arbitrary files on the target system, if exploited. QNAP have already fixed this vulnerability in the following versions: QTS 4.3.6.0895 build 20190328 (and later) QTS 4.3.4.0899 build 20190322 (and later) This issue does not affect QTS 4.4.x or QTS 4.5.x. Additional Analyst N
later) QTS 4.3.4.0899 build 20190322 (and later) This issue does not affect QTS 4.4.x or QTS 4.5.x. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/qsa-20-21
CVE ID: CVE-2018-19946 State: PUBLISHED Published: 2020-09-11T14:14:45 Last Updated: 2024-08-05T11:51:17.920Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: QNAP Systems Inc. Products: Helpdesk Problem Types: CWE-295, CWE-297 Description: The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in Helpdesk 3.0.3 and later. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-a
3.0.3 and later. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/qsa-20-05
CVE ID: CVE-2018-19947 State: PUBLISHED Published: 2020-09-11T14:14:21 Last Updated: 2024-08-05T11:51:17.675Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: QNAP Systems Inc. Products: Helpdesk Problem Types: CWE-200, CWE-209, CWE-210 Description: The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/qsa-20-05
CVE ID: CVE-2018-19948 State: PUBLISHED Published: 2020-09-11T14:12:56 Last Updated: 2024-08-05T11:51:17.945Z Severity: LOW (CVSS 2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: QNAP Systems Inc. Products: Helpdesk Problem Types: CWE-352 Description: The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this cross-site request forgery (CSRF) vulnerability could allow attackers to force NAS users to execute unintentional actions through a web application. QNAP has already fixed the issue in Helpdesk 3.0.3 and later. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/qsa-20-05
CVE ID: CVE-2018-19949 State: PUBLISHED Published: 2020-10-28T17:55:18.000Z Last Updated: 2025-10-21T23:35:34.057Z Vendors: QNAP Systems Inc. Products: QTS Problem Types: CWE-20, CWE-77, CWE-78 Description: If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on build 20200107; QTS 4.3.3.1161 on build 20200109; QTS 4.2.6 on build 20200109. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/zh-tw/securi
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/zh-tw/security-advisory/qsa-20-01
CVE ID: CVE-2018-19950 State: PUBLISHED Published: 2020-11-02T15:57:02.523502Z Last Updated: 2024-09-17T02:31:26.145Z Vendors: QNAP Systems Inc. Products: Music Station Problem Types: CWE-77, CWE-78 Description: If exploited, this command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions prior to 5.2.9; versions prior to 5.3.11. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-20-10
CVE ID: CVE-2018-19951 State: PUBLISHED Published: 2020-11-02T15:57:02.569370Z Last Updated: 2024-09-16T20:22:27.691Z Vendors: QNAP Systems Inc. Products: Music Station Problem Types: CWE-79, CWE-80 Description: If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions prior to 5.2.9; versions prior to 5.3.11. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-20-10
CVE ID: CVE-2018-19952 State: PUBLISHED Published: 2020-11-02T15:57:02.626740Z Last Updated: 2024-09-17T02:58:07.767Z Vendors: QNAP Systems Inc. Products: Music Station Problem Types: CWE-20, CWE-80, CWE-943 Description: If exploited, this SQL injection vulnerability could allow remote attackers to obtain application information. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions prior to 5.2.9; versions prior to 5.3.11. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-20-10
CVE ID: CVE-2018-19953 State: PUBLISHED Published: 2020-10-28T17:55:18.000Z Last Updated: 2025-10-21T23:35:33.900Z Vendors: QNAP Systems Inc. Products: QTS Problem Types: CWE-79, CWE-80 Description: If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on build 20200107; QTS 4.3.3.1161 on build 20200109; QTS 4.2.6 on build 20200109. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/zh-tw/security-adv
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/zh-tw/security-advisory/qsa-20-01
CVE ID: CVE-2018-19954 State: PUBLISHED Published: 2020-11-02T15:57:02.671002Z Last Updated: 2024-09-16T19:51:40.378Z Vendors: QNAP Systems Inc. Products: Photo Station Problem Types: CWE-79, CWE-80 Description: The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station. If exploited, the vulnerability could allow remote attackers to inject malicious code. This issue affects: QNAP Systems Inc. Photo Station versions prior to 5.7.11; versions prior to 6.0.10. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-20-11
CVE ID: CVE-2018-19955 State: PUBLISHED Published: 2020-11-02T15:57:02.727735Z Last Updated: 2024-09-16T20:52:17.922Z Vendors: QNAP Systems Inc. Products: Photo Station Problem Types: CWE-79, CWE-80 Description: The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station. If exploited, the vulnerability could allow remote attackers to inject malicious code. This issue affects: QNAP Systems Inc. Photo Station versions prior to 5.7.11; versions prior to 6.0.10. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-20-11
CVE ID: CVE-2018-19956 State: PUBLISHED Published: 2020-11-02T15:57:02.771087Z Last Updated: 2024-09-16T17:08:36.080Z Vendors: QNAP Systems Inc. Products: Photo Station Problem Types: CWE-79, CWE-80 Description: The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station. If exploited, the vulnerability could allow remote attackers to inject malicious code. This issue affects: QNAP Systems Inc. Photo Station versions prior to 5.7.11; versions prior to 6.0.10. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-20-11
CVE ID: CVE-2018-19957 State: PUBLISHED Published: 2021-09-10T04:00:18.472580Z Last Updated: 2024-09-17T02:57:44.608Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-1021 Description: A vulnerability involving insufficient HTTP security headers has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTScloud. This vulnerability allows remote attackers to launch privacy and security attacks. We have already fixed this vulnerability in the following versions: QTS 4.5.4.1715 build 20210630 and later QuTS hero h4.5.4.1771 build 20210825 and later QuTScloud c4.5.6.1755 build 20210809 and later Additional Analyst Notes: - CVE Program Container: Reference
25 and later QuTScloud c4.5.6.1755 build 20210809 and later Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-21-03
CVE ID: CVE-2018-19960 State: PUBLISHED Published: 2018-12-07T16:00:00Z Last Updated: 2024-09-16T18:44:08.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: The debug_mode function in web/web.py in OnionShare through 1.3.1, when --debug is enabled, uses the /tmp/onionshare_server.log pathname for logging, which might allow local users to overwrite files or obtain sensitive information by using this pathname. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/915859
CVE ID: CVE-2018-19961 State: PUBLISHED Published: 2018-12-08T04:00:00 Last Updated: 2024-08-05T11:51:17.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX239432 - https://www.debian.org/security/2019/dsa-4369 - http://www.securityfocus.com/bid/106182 - https://xenbits.xen.org/xsa/advisory-275.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject
its.xen.org/xsa/advisory-275.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html - https://lists.debian.org/debian-lts-announce/2019/10/msg00008.html
CVE ID: CVE-2018-19962 State: PUBLISHED Published: 2018-12-08T04:00:00 Last Updated: 2024-08-05T11:51:17.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX239432 - https://www.debian.org/security/2019/dsa-4369 - http://www.securityfocus.com/bid/106182 - https://xenbits.xen.org/xsa/advisory-275.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject
CVE ID: CVE-2018-19963 State: PUBLISHED Published: 2018-12-08T04:00:00 Last Updated: 2024-08-05T11:51:17.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen 4.11 allowing HVM guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because x86 IOREQ server resource accounting (for external emulators) was mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-276.html - http://www.securityfocus.com/bid/106182
CVE ID: CVE-2018-19964 State: PUBLISHED Published: 2018-12-08T04:00:00 Last Updated: 2024-08-05T11:51:17.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen 4.11.x allowing x86 guest OS users to cause a denial of service (host OS hang) because the p2m lock remains unavailable indefinitely in certain error conditions. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-277.html - http://www.securityfocus.com/bid/106182
CVE ID: CVE-2018-19965 State: PUBLISHED Published: 2018-12-08T04:00:00 Last Updated: 2024-08-05T11:51:17.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of an incorrect CVE-2017-5754 (aka Meltdown) mitigation. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX239432 - https://xenbits.xen.org/xsa/advisory-279.html - https://www.debian.org/security/2019/dsa-4369 - http://www.securit
432 - https://xenbits.xen.org/xsa/advisory-279.html - https://www.debian.org/security/2019/dsa-4369 - http://www.securityfocus.com/bid/106182 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html
CVE ID: CVE-2018-19966 State: PUBLISHED Published: 2018-12-08T04:00:00 Last Updated: 2024-08-05T11:51:17.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because of an interpretation conflict for a union data structure associated with shadow paging. NOTE: this issue exists because of an incorrect fix for CVE-2017-15595. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2019/dsa-4369 - https://xenbits.xen.org/xsa/advisory-280.html - http://www.securityfocus.com/bid/106182 - ht
rg/security/2019/dsa-4369 - https://xenbits.xen.org/xsa/advisory-280.html - http://www.securityfocus.com/bid/106182 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html - https://lists.debian.org/debian-lts-announce/2019/10/msg00008.html
CVE ID: CVE-2018-19967 State: PUBLISHED Published: 2018-12-08T04:00:00 Last Updated: 2024-08-05T11:51:17.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.11.x on Intel x86 platforms allowing guest OS users to cause a denial of service (host OS hang) because Xen does not work around Intel's mishandling of certain HLE transactions associated with the KACQUIRE instruction prefix. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-282.html - https://support.citrix.com/article/CTX239432 - https://www.debian.org/security/2019/dsa-4369 - http://www.securityfocus.com/bid/106182 - http://lists.o
cle/CTX239432 - https://www.debian.org/security/2019/dsa-4369 - http://www.securityfocus.com/bid/106182 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00057.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html
CVE ID: CVE-2018-19968 State: PUBLISHED Published: 2018-12-11T17:00:00 Last Updated: 2024-08-05T11:51:17.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: An attacker can exploit phpMyAdmin before 4.8.4 to leak the contents of a local file because of an error in the transformation feature. The attacker must have access to the phpMyAdmin Configuration Storage tables, although these can easily be created in any database to which the attacker has access. An attacker must have valid credentials to log in to phpMyAdmin; this vulnerability does not allow an attacker to circumvent the login system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfoc
to circumvent the login system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106178 - https://www.phpmyadmin.net/security/PMASA-2018-6/ - https://lists.debian.org/debian-lts-announce/2019/02/msg00003.html - https://security.gentoo.org/glsa/201904-16
CVE ID: CVE-2018-19969 State: PUBLISHED Published: 2018-12-11T17:00:00 Last Updated: 2024-08-05T11:51:17.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 4.7.x and 4.8.x versions prior to 4.8.4 are affected by a series of CSRF flaws. By deceiving a user into clicking on a crafted URL, it is possible to perform harmful SQL operations such as renaming databases, creating new tables/routines, deleting designer pages, adding/deleting users, updating user passwords, killing SQL processes, etc. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106175 - https://www.phpmyadmin.net/security/PMASA-2018-7/ - https://security.gent
s: - http://www.securityfocus.com/bid/106175 - https://www.phpmyadmin.net/security/PMASA-2018-7/ - https://security.gentoo.org/glsa/201904-16
CVE ID: CVE-2018-19970 State: PUBLISHED Published: 2018-12-11T17:00:00 Last Updated: 2024-08-05T11:51:17.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: In phpMyAdmin before 4.8.4, an XSS vulnerability was found in the navigation tree, where an attacker can deliver a payload to a user through a crafted database/table name. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2018-8/ - https://lists.debian.org/debian-lts-announce/2019/02/msg00003.html - http://www.securityfocus.com/bid/106181 - https://security.gentoo.org/glsa/201904-16
CVE ID: CVE-2018-19971 State: PUBLISHED Published: 2019-04-16T18:12:15 Last Updated: 2024-08-05T11:51:17.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFrog Artifactory Pro 6.5.9 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Mar/34 - http://packetstormsecurity.com/files/152137/JFrog-Artifactory-Pro-6.5.9-Signature-Validation.html - https://lists.openwall.net/full-disclosure/2019/03/19/3 - https://bintray.com/jfrog/artifactory-pro/jfrog-artifactory-pro-zip/6.5.13#release - http://www.securityfocus.com/bid/107518