Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-19755 State: PUBLISHED Published: 2018-11-30T03:00:00Z Last Updated: 2024-09-16T22:30:53.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal address access at asm/preproc.c (function: is_mmacro) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service (out-of-bounds array access) because a certain conversion can result in a negative integer. Additional Analyst Notes: - CVE Program Container: References: - https://repo.or.cz/nasm.git/commit/3079f7966dbed4497e36d5067cbfd896a90358cb - https://bugzilla.nasm.us/show_bug.cgi?id=3392528
CVE ID: CVE-2018-19756 State: PUBLISHED Published: 2018-11-30T03:00:00Z Last Updated: 2024-09-16T22:45:34.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer over-read at stb_image.h (function: stbi__tga_load) in libsixel 1.8.2 that will cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1649198
CVE ID: CVE-2018-19757 State: PUBLISHED Published: 2018-11-30T03:00:00Z Last Updated: 2024-09-17T03:13:53.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a NULL pointer dereference at function sixel_helper_set_additional_message (status.c) in libsixel 1.8.2 that will cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1649197
CVE ID: CVE-2018-19758 State: PUBLISHED Published: 2018-11-30T03:00:00 Last Updated: 2024-08-05T11:44:20.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1643812 - https://lists.debian.org/debian-lts-announce/2019/01/msg00008.html - https://usn.ubuntu.com/4013-1/ - https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html
CVE ID: CVE-2018-19759 State: PUBLISHED Published: 2018-11-30T03:00:00Z Last Updated: 2024-09-16T18:13:12.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer over-read at stb_image_write.h (function: stbi_write_png_to_mem) in libsixel 1.8.2 that will cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1649202
CVE ID: CVE-2018-19760 State: PUBLISHED Published: 2018-11-30T03:00:00Z Last Updated: 2024-09-16T23:06:05.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: cfg_init in confuse.c in libConfuse 3.2.2 has a memory leak. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1649152
CVE ID: CVE-2018-19761 State: PUBLISHED Published: 2018-11-30T03:00:00Z Last Updated: 2024-09-17T00:30:51.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal address access at fromsixel.c (function: sixel_decode_raw_impl) in libsixel 1.8.2 that will cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1649200
CVE ID: CVE-2018-19762 State: PUBLISHED Published: 2018-11-30T03:00:00Z Last Updated: 2024-09-16T19:52:17.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer overflow at fromsixel.c (function: image_buffer_resize) in libsixel 1.8.2 that will cause a denial of service or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1649199
CVE ID: CVE-2018-19763 State: PUBLISHED Published: 2018-11-30T03:00:00Z Last Updated: 2024-09-16T16:33:17.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer over-read at writer.c (function: write_png_to_file) in libsixel 1.8.2 that will cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1649201
CVE ID: CVE-2018-19764 State: REJECTED Published: 2018-11-30T03:00:00 Last Updated: 2018-11-30T21:57:01 Description: No description available.
CVE ID: CVE-2018-19765 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:44:20.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPresentSpace.jsp" has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Dec/20
CVE ID: CVE-2018-19766 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:44:20.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "GroupRessourceAdmin.jsp" has reflected XSS via the ConnPoolName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Dec/20
CVE ID: CVE-2018-19767 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:44:20.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has reflected XSS via the ConnPoolName and GroupId parameters. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Dec/20
CVE ID: CVE-2018-19768 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:44:20.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "SubPagePackages.jsp" has reflected XSS via the ConnPoolName and GroupId parameters. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Dec/20
CVE ID: CVE-2018-19769 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:44:20.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "UserProperties.jsp" has reflected XSS via the ConnPoolName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Dec/20
CVE ID: CVE-2018-19770 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:44:20.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "Users.jsp" has reflected XSS via the ConnPoolName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Dec/20
CVE ID: CVE-2018-19771 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:44:20.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPool.jsp" has reflected XSS via the PropName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Dec/20
CVE ID: CVE-2018-19772 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:44:20.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPresentSpace.jsp" has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Dec/20
CVE ID: CVE-2018-19773 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:44:20.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentUser.jsp" has reflected XSS via the GroupId and ConnPoolName parameters. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Dec/20
CVE ID: CVE-2018-19774 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:44:20.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has reflected XSS via the GroupId and ConnPoolName parameters. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Dec/20
CVE ID: CVE-2018-19775 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:44:20.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "Variables.jsp" has reflected XSS via the ConnPoolName and GroupId parameters. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Dec/20
CVE ID: CVE-2018-19777 State: PUBLISHED Published: 2018-11-30T09:00:00 Last Updated: 2024-09-12T16:40:14.133869 Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex MuPDF 1.14.0, there is an infinite loop in the function svg_dev_end_tile in fitz/svg-device.c, as demonstrated by mutool. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=700301 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUXKCY35PKC32IFHN4RBUCZ75OWEYVJH/ - http://www.ghostscript.com/cgi-bin/findgit.cgi?754ac68f119e0c25cd33c5d652d8aabd533a9fb3
CVE ID: CVE-2018-19782 State: PUBLISHED Published: 2019-01-29T23:00:00 Last Updated: 2024-08-05T11:44:20.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GET requests in FreshRSS 1.11.1 allow remote attackers to inject arbitrary web script or HTML via the (1) c parameter or (2) a parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Dec/3 - https://www.exploit-db.com/exploits/45954/ - http://packetstormsecurity.com/files/150608/FreshRSS-1.11.1-Cross-Site-Scripting.html - https://www.netsparker.com/web-applications-advisories/ns-18-024-multiple-cross-site-scripti
Cross-Site-Scripting.html - https://www.netsparker.com/web-applications-advisories/ns-18-024-multiple-cross-site-scripting-vulnerabilities-in-freshrss/
CVE ID: CVE-2018-19783 State: PUBLISHED Published: 2019-03-17T19:09:27 Last Updated: 2024-08-05T11:44:20.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kentix MultiSensor-LAN 5.63.00 devices and previous allow Authentication Bypass via an Alternate Path or Channel. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151237/Kentix-MultiSensor-LAN-5.63.00-Authentication-Bypass.html - https://seclists.org/bugtraq/2019/Jan/21
CVE ID: CVE-2018-19784 State: PUBLISHED Published: 2018-12-01T00:00:00 Last Updated: 2024-08-05T11:44:20.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eddietcc/CVE-Bins/blob/master/PHP-Proxy/readme.md - https://github.com/Athlon1600/php-proxy-app/issues/139
CVE ID: CVE-2018-19785 State: PUBLISHED Published: 2018-12-01T00:00:00 Last Updated: 2024-08-05T11:44:20.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Proxy through 5.1.0 has Cross-Site Scripting (XSS) via the URL field in index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eddietcc/CVEnotes/blob/master/PHP-Proxy/RADME.md - https://github.com/Athlon1600/php-proxy-app/issues/140
CVE ID: CVE-2018-19786 State: PUBLISHED Published: 2018-12-05T09:00:00 Last Updated: 2024-08-05T11:44:20.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: HashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or misconfigured scenarios in which incorrect data comes from the autoseal mechanism without an error being reported. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#100-december-3rd-2018
CVE ID: CVE-2018-19787 State: PUBLISHED Published: 2018-12-02T10:00:00 Last Updated: 2024-08-05T11:44:20.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3841-1/ - https://lists.debian.org/debian-lts-announce/2018/12/msg00001.html - https://usn.ubuntu.com/3841-2/ - https://github.com/lxml/lxm
ists.debian.org/debian-lts-announce/2018/12/msg00001.html - https://usn.ubuntu.com/3841-2/ - https://github.com/lxml/lxml/commit/6be1d081b49c97cfd7b3fbd934a193b668629109 - https://lists.debian.org/debian-lts-announce/2020/11/msg00044.html
CVE ID: CVE-2018-19788 State: PUBLISHED Published: 2018-12-03T06:00:00 Last Updated: 2024-08-29T15:55:31.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://usn.ubuntu.com/3861-1/ - https://lists.debian.org/debian-lts-announce/2019/01/msg00021.html - https://usn.ubuntu.com/3861-2/ - https://bugs.debian.org/915332 - https://gitlab.freedesktop.org/polkit/polkit/issues/74 - https://www.debian.org/security/2018/dsa-4350 - https://access.redhat
//gitlab.freedesktop.org/polkit/polkit/issues/74 - https://www.debian.org/security/2018/dsa-4350 - https://access.redhat.com/errata/RHSA-2019:2046 - https://security.gentoo.org/glsa/201908-14 - https://access.redhat.com/errata/RHSA-2019:3232
CVE ID: CVE-2018-19789 State: PUBLISHED Published: 2018-12-18T22:00:00 Last Updated: 2024-08-05T11:44:20.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9, and 4.2.x before 4.2.1. When using the scalar type hint `string` in a setter method (e.g. `setName(string $name)`) of a class that's the `data_class` of a form, and when a file upload is submitted to the corresponding field instead of a normal text input, then `UploadedFile::__toString()` is called which will then return and disclose the path of the uploaded file. If combined with a local fi
::__toString()` is called which will then return and disclose the path of the uploaded file. If combined with a local file inclusion issue in certain circumstances this could escalate it to a Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OA4WVFN5FYPIXAPLWZI6N425JHHDSWAZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TD3E7FZIXLVFG3SMFJPDEKPZ26TJOW7/ - http://www.securityfocus.com/bid/106249 - https://symfony.com/blog/cve-2018-19789-disclosure-of-uploaded-files-full-path - https://lists.debian.org/debian
06249 - https://symfony.com/blog/cve-2018-19789-disclosure-of-uploaded-files-full-path - https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZMRJ7VTHCY5AZK24G4QGX36RLUDTDKE/ - https://www.debian.org/security/2019/dsa-4441 - https://seclists.org/bugtraq/2019/May/21
CVE ID: CVE-2018-19790 State: PUBLISHED Published: 2018-12-18T22:00:00 Last Updated: 2024-08-05T11:44:20.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9 and 4.2.x before 4.2.1. By using backslashes in the `_failure_path` input field of login forms, an attacker can work around the redirection target restrictions and effectively redirect the user to any domain after login. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OA4W
ner: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OA4WVFN5FYPIXAPLWZI6N425JHHDSWAZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TD3E7FZIXLVFG3SMFJPDEKPZ26TJOW7/ - http://www.securityfocus.com/bid/106249 - https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZMRJ7VTHCY5AZK24G4QGX36RLUDTDKE/ - https://symfony.com/blog/cve-2018-19790-open-redirect-vulnerability-when-using-security-http - https://www.debian.org/security/2019/dsa-4441 - https://seclists.org/bugtraq
ct-vulnerability-when-using-security-http - https://www.debian.org/security/2019/dsa-4441 - https://seclists.org/bugtraq/2019/May/21
CVE ID: CVE-2018-19791 State: PUBLISHED Published: 2018-12-03T06:00:00 Last Updated: 2024-08-05T11:44:20.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 does not correctly handle requests for byte sequences, allowing an attacker to amplify the response size by requesting the entire response body repeatedly, as demonstrated by an HTTP Range header value beginning with the "bytes=0-,0-" substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/litespeedtech/openlitespeed/issues/117
CVE ID: CVE-2018-19792 State: PUBLISHED Published: 2018-12-03T06:00:00 Last Updated: 2024-08-05T11:44:20.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 allows local users to cause a denial of service (buffer overflow) or possibly have unspecified other impact by creating a symlink through which the openlitespeed program can be invoked with a long command name (involving ../ characters), which is mishandled in the LshttpdMain::getServerRootFromExecutablePath function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/litespeedtech/openlitespeed/issues/117
CVE ID: CVE-2018-19793 State: PUBLISHED Published: 2018-12-03T06:00:00 Last Updated: 2024-08-05T11:44:20.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: jiacrontab 1.4.5 allows remote attackers to execute arbitrary commands via the crontab/task/edit?addr=localhost%3a20001 command and args parameters, as demonstrated by command=cat&args=/etc/passwd in the POST data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/iwannay/jiacrontab/issues/28
CVE ID: CVE-2018-19794 State: PUBLISHED Published: 2018-12-03T06:00:00 Last Updated: 2024-08-05T11:44:20.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.internet2.edu/jira/browse/GRP-1838 - https://spaces.at.internet2.edu/display/Grouper/v2.4+issues - https://lists.internet2.edu/sympa/arc/grouper-dev/2018-07/msg00005.html
CVE ID: CVE-2018-19795 State: PUBLISHED Published: 2018-12-03T06:00:00 Last Updated: 2024-08-05T11:44:20.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: ChipsBank UMPTool saves the password to the NAND with a simple substitution cipher, which allows attackers to get full access when having physical access to the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.thalpius.com/files/ChipsBank%20UMPTool%20Password%20Retrieval%20v0.1.pdf
CVE ID: CVE-2018-19796 State: PUBLISHED Published: 2018-12-03T06:00:00 Last Updated: 2024-08-05T11:44:20.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: An open redirect in the Ninja Forms plugin before 3.3.19.1 for WordPress allows Remote Attackers to redirect a user via the lib/StepProcessing/step-processing.php (aka submissions download page) redirect parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ninja-forms/#developers - https://plugins.trac.wordpress.org/changeset/1982808/ninja-forms/trunk/lib/StepProcessing/step-processing.php - https://wpvulndb.com/vulnerabilities/9154
CVE ID: CVE-2018-19797 State: PUBLISHED Published: 2018-12-03T06:00:00 Last Updated: 2024-08-05T11:44:20.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Selector_List::populate_extends in SharedPtr.hpp (used by ast.cpp and ast_selectors.cpp) may cause a Denial of Service (application crash) via a crafted sass input file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sass/libsass/issues/2779 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html - http://lists.opensuse.org/ope
g00047.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html
CVE ID: CVE-2018-19798 State: PUBLISHED Published: 2020-03-02T20:37:57 Last Updated: 2024-08-05T11:44:20.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fleetco Fleet Maintenance Management (FMM) 1.2 and earlier allows uploading an arbitrary ".php" file with the application/x-php Content-Type to the accidents_add.php?submit=1 URI, as demonstrated by the value_Images_1 field, which leads to remote command execution on the remote server. Any authenticated user can exploit this. Additional Analyst Notes: - CVE Program Container: References: - https://exploit-db.com/exploits/45927