Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-16764 State: PUBLISHED Published: 2018-09-10T04:00:00 Last Updated: 2024-08-05T10:32:54.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an IR::FunctionValidationContext::catch_all heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AndrewScheidecker/WAVM/issues/93
CVE ID: CVE-2018-16765 State: PUBLISHED Published: 2018-09-10T04:00:00 Last Updated: 2024-08-05T10:32:53.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in FunctionValidationContext::else_. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AndrewScheidecker/WAVM/issues/94
CVE ID: CVE-2018-16766 State: PUBLISHED Published: 2018-09-10T04:00:00 Last Updated: 2024-08-05T10:32:53.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because Errors::unreachable() is reached. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AndrewScheidecker/WAVM/issues/96
CVE ID: CVE-2018-16767 State: PUBLISHED Published: 2018-09-10T04:00:00 Last Updated: 2024-08-05T10:32:54.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in FunctionValidationContext::popAndValidateOperand. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AndrewScheidecker/WAVM/issues/97
CVE ID: CVE-2018-16768 State: PUBLISHED Published: 2018-09-10T04:00:00 Last Updated: 2024-08-05T10:32:53.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in IR::FunctionValidationContext::end. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AndrewScheidecker/WAVM/issues/98
CVE ID: CVE-2018-16769 State: PUBLISHED Published: 2018-09-10T04:00:00 Last Updated: 2024-08-05T10:32:53.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because libRuntime.so!llvm::InstructionCombiningPass::runOnFunction is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AndrewScheidecker/WAVM/issues/99
CVE ID: CVE-2018-16770 State: PUBLISHED Published: 2018-09-10T04:00:00 Last Updated: 2024-08-05T10:32:54.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because a certain new_allocator allocate call fails. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AndrewScheidecker/WAVM/issues/100
CVE ID: CVE-2018-16771 State: PUBLISHED Published: 2018-09-10T04:00:00 Last Updated: 2024-08-05T10:32:53.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hoosk v1.7.0 allows PHP code execution via a SiteUrl that is provided during installation and mishandled in config.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/havok89/Hoosk/issues/46
CVE ID: CVE-2018-16772 State: PUBLISHED Published: 2018-09-10T04:00:00 Last Updated: 2024-08-05T10:32:53.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/havok89/Hoosk/issues/47
CVE ID: CVE-2018-16773 State: PUBLISHED Published: 2018-09-10T04:00:00 Last Updated: 2024-08-05T10:32:53.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/teameasy/EasyCMS/issues/6
CVE ID: CVE-2018-16774 State: PUBLISHED Published: 2018-09-10T04:00:00 Last Updated: 2024-08-05T10:32:54.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Neeke/HongCMS/issues/6
CVE ID: CVE-2018-16775 State: PUBLISHED Published: 2018-09-10T04:00:00 Last Updated: 2024-08-05T10:32:54.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the site name in the "Categories" menu. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VictorAlagwu/CMSsite/issues/3
CVE ID: CVE-2018-16776 State: PUBLISHED Published: 2018-09-10T04:00:00 Last Updated: 2024-08-05T10:32:54.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Creatiwity/wityCMS/issues/154
CVE ID: CVE-2018-16778 State: PUBLISHED Published: 2018-12-21T22:00:00 Last Updated: 2024-08-05T10:32:54.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jenzabar v8.2.1 through 9.2.0 allows remote attackers to inject arbitrary web script or HTML via the query parameter (aka the Search Field). Additional Analyst Notes: - CVE Program Container: References: - https://metamorfosec.com/Files/Advisories/METS-2018-004-A_XSS_Vulnerability_in_Jenzabar_8.2.1_to_9.2.0.txt
CVE ID: CVE-2018-16779 State: PUBLISHED Published: 2018-09-10T04:00:00 Last Updated: 2024-08-05T10:32:53.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlogCMS through 2016-10-25 has XSS via a comment. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hukouhome/blogCMS/issues/1
CVE ID: CVE-2018-16780 State: PUBLISHED Published: 2018-09-10T04:00:00 Last Updated: 2024-08-05T10:32:54.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Complete Responsive CMS Blog through 2018-05-20 has XSS via a comment. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dusaurabh/PHP/issues/1
CVE ID: CVE-2018-16781 State: PUBLISHED Published: 2018-09-10T04:00:00 Last Updated: 2024-08-05T10:32:54.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE signal) via a progressive JPEG file that lacks an AC Huffman table. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rockcarry/ffjpeg/issues/6
CVE ID: CVE-2018-16782 State: PUBLISHED Published: 2018-09-10T04:00:00 Last Updated: 2024-08-05T10:32:54.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: libimageworsener.a in ImageWorsener 1.3.2 has a buffer overflow in the bmpr_read_rle_internal function in imagew-bmp.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jsummers/imageworsener/issues/35
CVE ID: CVE-2018-16784 State: PUBLISHED Published: 2018-09-21T15:00:00 Last Updated: 2024-08-05T10:32:53.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS 5.7 SP2 allows XML injection, and resultant remote code execution, via a "<file type='file' name='../" substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ky-j/dedecms/issues/3
CVE ID: CVE-2018-16785 State: PUBLISHED Published: 2018-09-19T15:00:00 Last Updated: 2024-08-05T10:32:53.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized by attackers to create script file to obtain webshell Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ky-j/dedecms/issues/4
CVE ID: CVE-2018-16786 State: PUBLISHED Published: 2018-09-21T15:00:00 Last Updated: 2024-08-05T10:32:53.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus/feedback_ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ky-j/dedecms/issues/2
CVE ID: CVE-2018-16789 State: PUBLISHED Published: 2019-03-17T18:36:51 Last Updated: 2024-08-05T10:32:53.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: libhttp/url.c in shellinabox through 2.20 has an implementation flaw in the HTTP request parsing logic. By sending a crafted multipart/form-data HTTP request, an attacker could exploit this to force shellinaboxd into an infinite loop, exhausting available CPU resources and taking the service down. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149978/Shell-In-A-Box-2.2.0-Denial-Of-Service.html - http://seclists.org/fulldisclosure/2018/Oct/50 - https://github.com/shellinab
ll-In-A-Box-2.2.0-Denial-Of-Service.html - http://seclists.org/fulldisclosure/2018/Oct/50 - https://github.com/shellinabox/shellinabox/commit/4f0ecc31ac6f985e0dd3f5a52cbfc0e9251f6361 - https://code.google.com/archive/p/shellinabox/issues
CVE ID: CVE-2018-16790 State: PUBLISHED Published: 2018-09-10T05:00:00.000Z Last Updated: 2025-11-03T19:25:21.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: _bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mongodb/mongo-c-driver/commit/0d9a4d98bfdf4acd2c0138d4aaeb4e2e0934bd84 - https://bugzilla.redhat.com/show_bug.cgi?id=1627923#c3 - https://jira.mongodb.org/browse/CDRIVER-2819
CVE ID: CVE-2018-16791 State: PUBLISHED Published: 2018-12-05T22:00:00 Last Updated: 2024-08-05T10:32:53.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SolarWinds SFTP/SCP Server through 2018-09-10, the configuration file is world readable and writable, and stores user passwords in an insecure manner, allowing an attacker to determine passwords for potentially privileged accounts. This also grants the attacker an ability to backdoor the server. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2018/Dec/0
CVE ID: CVE-2018-16792 State: PUBLISHED Published: 2018-12-05T22:00:00 Last Updated: 2024-08-05T10:32:53.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds SFTP/SCP server through 2018-09-10 is vulnerable to XXE via a world readable and writable configuration file that allows an attacker to exfiltrate data. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2018/Dec/0
CVE ID: CVE-2018-16793 State: PUBLISHED Published: 2018-09-21T16:00:00 Last Updated: 2024-08-05T10:32:54.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA (Outlook Web Access) login page. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149411/Rollup-18-For-Microsoft-Exchange-Server-2010-SP3-Server-Side-Request-Forgery.html - http://seclists.org/fulldisclosure/2018/Sep/20 - http://www.securityfocus.com/bid/105386 - https://seclists.org/bugtraq/2018/Sep/38
CVE ID: CVE-2018-16794 State: PUBLISHED Published: 2018-09-18T21:00:00 Last Updated: 2024-08-05T10:32:54.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft ADFS 4.0 Windows Server 2016 and previous (Active Directory Federation Services) has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105378 - http://seclists.org/fulldisclosure/2018/Sep/13 - http://packetstormsecurity.com/files/149376/Microsoft-ADFS-4.0-Windows-Server-2016-Server-Side-Request-Forgery.html - https://seclists.org/bugtraq/2018/Sep/26
CVE ID: CVE-2018-16795 State: PUBLISHED Published: 2020-12-31T02:32:43 Last Updated: 2024-08-05T10:32:53.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenEMR 5.0.1.3 allows Cross-Site Request Forgery (CSRF) via library/ajax and interface/super, as demonstrated by use of interface/super/manage_site_files.php to upload a .php file. Additional Analyst Notes: - CVE Program Container: References: - https://community.open-emr.org/t/openemr-security/10597 - https://www.open-emr.org/wiki/images/1/11/Openemr_insecurity.pdf
CVE ID: CVE-2018-16796 State: PUBLISHED Published: 2018-09-13T16:00:00 Last Updated: 2024-08-05T10:32:54.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: HiScout GRC Suite before 3.1.5 allows Unrestricted Upload of Files with Dangerous Types. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-015.txt - https://seclists.org/bugtraq/2018/Sep/27
CVE ID: CVE-2018-16797 State: PUBLISHED Published: 2018-09-10T12:00:00 Last Updated: 2024-08-05T10:32:53.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file with large BytesPerSec and SamplesPerSec values, and a small Data_Chunk_Size value. Additional Analyst Notes: - CVE Program Container: References: - https://nightohl.tistory.com/entry/PotPlayer-Audiowav-File-Vulnerabilitiy?category=780012
CVE ID: CVE-2018-16802 State: PUBLISHED Published: 2018-09-10T16:00:00 Last Updated: 2024-08-05T10:32:53.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege" checking when running out of stack during exception handling could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction. This is due to an incomplete fix for CVE-2018-16509. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/oss-sec/2018/q3/228 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=5812b1b78fc4d36fdc293b7859de69241140d590 -
/2018/q3/228 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=5812b1b78fc4d36fdc293b7859de69241140d590 - https://seclists.org/oss-sec/2018/q3/229 - https://security.gentoo.org/glsa/201811-12 - https://usn.ubuntu.com/3768-1/ - https://access.redhat.com/errata/RHSA-2018:3834 - https://www.debian.org/security/2018/dsa-4294 - https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=643b24dbd002fb9c131313253c307cf3951b3d47 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=3e5d316b72e3965b7968bb1d96baa137cd063ac6
CVE ID: CVE-2018-16803 State: PUBLISHED Published: 2019-01-10T18:00:00 Last Updated: 2024-08-05T10:32:53.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CIMTechniques CIMScan 6.x through 6.2, the SOAP WSDL parser allows attackers to execute SQL code. Additional Analyst Notes: - CVE Program Container: References: - https://www.linkedin.com/feed/update/urn:li:activity:6489145511902212096/ - https://twitter.com/DC3VDP/status/1083359509995753473 - https://www.websec.nl/news.php
CVE ID: CVE-2018-16804 State: PUBLISHED Published: 2019-03-07T22:00:00 Last Updated: 2024-08-05T10:32:53.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Stephen-Tech/UCMS/blob/master/README.md
CVE ID: CVE-2018-16805 State: PUBLISHED Published: 2018-09-10T23:00:00 Last Updated: 2024-08-05T10:32:54.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to inject arbitrary Web scripts or HTML via a crafted site name provided by an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/b3log/solo/issues/12501
CVE ID: CVE-2018-16806 State: PUBLISHED Published: 2018-09-10T23:00:00 Last Updated: 2024-08-05T10:32:54.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Pektron Passive Keyless Entry and Start (PKES) system, as used on the Tesla Model S and possibly other vehicles, relies on the DST40 cipher, which makes it easier for attackers to obtain access via an approach involving a 5.4 TB precomputation, followed by wake-frame reception and two challenge/response operations, to clone a key fob within a few seconds. Additional Analyst Notes: - CVE Program Container: References: - https://www.esat.kuleuven.be/cosic/fast-furious-and-insecure-passive-keyless-entry-and-start-in-modern-sup
References: - https://www.esat.kuleuven.be/cosic/fast-furious-and-insecure-passive-keyless-entry-and-start-in-modern-supercars/
CVE ID: CVE-2018-16807 State: PUBLISHED Published: 2018-09-11T02:00:00Z Last Updated: 2024-09-17T03:07:23.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Bro through 2.5.5, there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bro/bro/commit/34d0cf886ca16c665f673a299e295b2a2bc14533
CVE ID: CVE-2018-16808 State: PUBLISHED Published: 2019-03-07T22:00:00 Last Updated: 2024-08-05T10:32:53.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Dolibarr through 7.0.0. There is Stored XSS in expensereport/card.php in the expense reports plugin via the comments parameter, or a public or private note. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/issues/9449
CVE ID: CVE-2018-16809 State: PUBLISHED Published: 2019-03-07T22:00:00 Last Updated: 2024-08-05T10:32:54.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and value_unit. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/issues/9449
CVE ID: CVE-2018-16819 State: PUBLISHED Published: 2018-09-18T21:00:00 Last Updated: 2024-08-05T10:32:54.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/index.php in Monstra CMS 3.0.4 allows arbitrary file deletion via id=filesmanager&path=uploads/.......//./.......//./&delete_file= requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monstra-cms/monstra/issues/456 - http://blog.51cto.com/13770310/2173956
CVE ID: CVE-2018-16820 State: PUBLISHED Published: 2018-09-18T21:00:00 Last Updated: 2024-08-05T10:32:53.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/index.php in Monstra CMS 3.0.4 allows arbitrary directory listing via id=filesmanager&path=uploads/.......//./.......//./ requests. Additional Analyst Notes: - CVE Program Container: References: - http://blog.51cto.com/13770310/2173957 - https://github.com/monstra-cms/monstra/issues/457
CVE ID: CVE-2018-16821 State: PUBLISHED Published: 2018-09-21T17:00:00 Last Updated: 2024-08-05T10:32:54.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS 6.64 allows arbitrary directory listing via upload/admin/admin_template.php?path=../templets/../../ requests. Additional Analyst Notes: - CVE Program Container: References: - http://blog.51cto.com/13770310/2177212 - http://www.seacms.net/thread-6249-1-1.html
CVE ID: CVE-2018-16822 State: PUBLISHED Published: 2018-09-21T17:00:00 Last Updated: 2024-08-05T10:32:53.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS 6.64 allows SQL Injection via the upload/admin/admin_video.php order parameter. Additional Analyst Notes: - CVE Program Container: References: - http://blog.51cto.com/13770310/2177214 - http://www.seacms.net/thread-6251-1-1.html
CVE ID: CVE-2018-16831 State: PUBLISHED Published: 2018-09-11T13:00:00 Last Updated: 2024-08-05T10:32:54.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smarty before 3.1.33-dev-4 allows attackers to bypass the trusted_dir protection mechanism via a file:./../ substring in an include statement. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/smarty-php/smarty/issues/486
CVE ID: CVE-2018-16832 State: PUBLISHED Published: 2018-09-11T13:00:00 Last Updated: 2024-08-05T10:32:54.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite the request.host value with the content of the X-Forwarded-Host HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ysrc/xunfeng/issues/177
CVE ID: CVE-2018-16833 State: PUBLISHED Published: 2018-09-21T17:00:00 Last Updated: 2024-08-05T10:32:54.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149436/ManageEngine-Desktop-Central-10.0.271-Cross-Site-Scripting.html
CVE ID: CVE-2018-16836 State: PUBLISHED Published: 2018-09-11T16:00:00 Last Updated: 2024-08-05T10:32:54.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated attackers to read and execute arbitrary files outside of the service root path, as demonstrated by a /theme/default/img/%2e%2e/..//etc/passwd URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/maroueneboubakri/CVE/tree/master/rubedo-cms - https://www.exploit-db.com/exploits/45385/
CVE ID: CVE-2018-16837 State: PUBLISHED Published: 2018-10-23T15:00:00 Last Updated: 2024-08-05T10:32:54.010Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: [UNKNOWN] Products: Ansible Problem Types: CWE-214 Description: Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just to the process list. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3460 - http://www.sec