Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1000517 State: PUBLISHED Published: 2018-06-26T16:00:00.000Z Last Updated: 2025-06-09T15:37:06.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability in Busybox wget that can result in heap buffer overflow. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in after commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.busybox.net/busybox/commit/?id=8e2174e9bd836e53c8b9c6e00d1bc6e2
iner: - CISA ADP Vulnrichment: References: - https://git.busybox.net/busybox/commit/?id=8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e - https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html - https://usn.ubuntu.com/3935-1/ - https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html
CVE ID: CVE-2018-1000518 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in 5. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aaugustin/websockets/pull/407
CVE ID: CVE-2018-1000519 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: aio-libs aiohttp-session contains a Session Fixation vulnerability in load_session function for RedisStorage (see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttp_session/redis_storage.py#L42) that can result in Session Hijacking. This attack appear to be exploitable via Any method that allows setting session cookies (?session=<>, or meta tags or script tags with Set-Cookie). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aio-libs/aiohttp-session/issues/272 - https://gith
lyst Notes: - CVE Program Container: References: - https://github.com/aio-libs/aiohttp-session/issues/272 - https://github.com/aio-libs/aiohttp-session/blob/master/aiohttp_session/redis_storage.py#L60
CVE ID: CVE-2018-1000520 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: ARM mbedTLS version 2.7.0 and earlier contains a Ciphersuite Allows Incorrectly Signed Certificates vulnerability in mbedtls_ssl_get_verify_result() that can result in ECDSA-signed certificates are accepted, when only RSA-signed ones should be.. This attack appear to be exploitable via Peers negotiate a TLS-ECDH-RSA-* ciphersuite. Any of the peers can then provide an ECDSA-signed certificate, when only an RSA-signed one should be accepted.. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/
RSA-signed one should be accepted.. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ARMmbed/mbedtls/issues/1561
CVE ID: CVE-2018-1000521 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: BigTree-CMS contains a Cross Site Scripting (XSS) vulnerability in /users/create that can result in The low-privileged users can use this vulnerability to attack high-privileged(Developer) users.. This attack appear to be exploitable via no. This vulnerability appears to have been fixed in after commit b652cfdc14d0670c81ac4401ad5a04376745c279. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigtreecms/BigTree-CMS/issues/328
CVE ID: CVE-2018-1000522 State: REJECTED Published: 2018-06-25T13:00:00 Last Updated: 2018-06-25T12:57:01 Description: No description available.
CVE ID: CVE-2018-1000523 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in Injection of arbitrary bytes to the terminal, including terminal escape code sequences. This attack appear to be exploitable via The victim must open a todo.txt with at least one specially crafted line.. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bram85/topydo/issues/240 - https://github.
onal Analyst Notes: - CVE Program Container: References: - https://github.com/bram85/topydo/issues/240 - https://github.com/bram85/topydo/blob/master/topydo/lib/ListFormat.py#L292
CVE ID: CVE-2018-1000524 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: miniSphere version 5.2.9 and earlier contains a Integer Overflow vulnerability in layer_resize() function in map_engine.c that can result in remote denial of service. This attack appear to be exploitable via the victim must load a specially-crafted map which calls SetLayerSize in its entry script. This vulnerability appears to have been fixed in 5.0.3, 5.1.5, 5.2.10 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fatcerberus/minisphere/pull/268 - https://github.com/fatcerberus/
VE Program Container: References: - https://github.com/fatcerberus/minisphere/pull/268 - https://github.com/fatcerberus/minisphere/commit/252c1ca184cb38e1acb917aa0e451c5f08519996
CVE ID: CVE-2018-1000525 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: openpsa contains a PHP Object Injection vulnerability in Form data passed as GET request variables that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Specially crafted GET request variable containing serialised PHP object. This vulnerability appears to have been fixed in after commit 097eae0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flack/openpsa/issues/191 - https://0dd.zone/2018/05/31/OpenPSA-Object-Injection/
CVE ID: CVE-2018-1000526 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Openpsa contains a XML Injection vulnerability in RSS file upload feature that can result in Remote denial of service. This attack appear to be exploitable via Specially crafted XML file. This vulnerability appears to have been fixed in after commit 4974a26. Additional Analyst Notes: - CVE Program Container: References: - https://0dd.zone/2018/05/31/OpenPSA-Object-Injection/ - https://github.com/flack/openpsa/issues/192
CVE ID: CVE-2018-1000527 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Froxlor version <= 0.9.39.5 contains a PHP Object Injection vulnerability in Domain name form that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Passing malicious PHP objection in $_POST['ssl_ipandport']. This vulnerability appears to have been fixed in after commit c1e62e6. Additional Analyst Notes: - CVE Program Container: References: - https://0dd.zone/2018/05/31/Froxlor-Object-Injection/ - https://github.com/Froxlor/Froxlor/issues/555
CVE ID: CVE-2018-1000528 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change password form (html/password.php, #308) that can result in injection of arbitrary web script or HTML. This attack appear to be exploitable via the victim must open a specially crafted web page. This vulnerability appears to have been fixed in after commit 56070d6289d47ba3f5918885954dcceb75606001. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/secur
3f5918885954dcceb75606001. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4239 - https://lists.debian.org/debian-lts-announce/2018/07/msg00028.html - https://github.com/gosa-project/gosa-core/issues/14 - https://github.com/gosa-project/gosa-core/commit/56070d6289d47ba3f5918885954dcceb75606001
CVE ID: CVE-2018-1000529 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/grails-fields-plugin/grails-fields/issues/278 - https://github.com/martinfrancois/CVE-2018-1000529
CVE ID: CVE-2018-1000530 State: REJECTED Published: 2018-06-25T13:00:00 Last Updated: 2018-06-25T12:57:01 Description: No description available.
CVE ID: CVE-2018-1000531 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: inversoft prime-jwt version prior to commit abb0d479389a2509f939452a6767dc424bb5e6ba contains a CWE-20 vulnerability in JWTDecoder.decode that can result in an incorrect signature validation of a JWT token. This attack can be exploitable when an attacker crafts a JWT token with a valid header using 'none' as algorithm and a body to requests it be validated. This vulnerability was fixed after commit abb0d479389a2509f939452a6767dc424bb5e6ba. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/i
9389a2509f939452a6767dc424bb5e6ba. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/inversoft/prime-jwt/issues/3
CVE ID: CVE-2018-1000532 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: beep version 1.3 and up contains a External Control of File Name or Path vulnerability in --device option that can result in Local unprivileged user can inhibit execution of arbitrary programs by other users, allowing DoS. This attack appear to be exploitable via The system must allow local users to run beep. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/johnath/beep/issues/11#issuecomment-379514298
CVE ID: CVE-2018-1000533 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: klaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized input to system function vulnerability in `searchTree` function that can result in Execute any code as PHP user. This attack appear to be exploitable via Send POST request using search form. This vulnerability appears to have been fixed in 0.7 after commit 87b8c26b023c3fc37f0796b14bb13710f397b322. Additional Analyst Notes: - CVE Program Container: References: - https://security.szurek.pl/exploit-bypass-php-escapeshellarg-escapeshellcmd.html - http
Program Container: References: - https://security.szurek.pl/exploit-bypass-php-escapeshellarg-escapeshellcmd.html - https://github.com/klaussilveira/gitlist/commit/87b8c26b023c3fc37f0796b14bb13710f397b322
CVE ID: CVE-2018-1000534 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joplin version prior to 1.0.90 contains a XSS evolving into code execution due to enabled nodeIntegration for that particular BrowserWindow instance where XSS was identified from vulnerability in Note content field - information on the fix can be found here https://github.com/laurent22/joplin/commit/494e235e18659574f836f84fcf9f4d4fcdcfcf89 that can result in executing unauthorized code within the rights in which the application is running. This attack appear to be exploitable via Victim synchronizing notes from the cloud se
which the application is running. This attack appear to be exploitable via Victim synchronizing notes from the cloud services or other note-keeping services which contain malicious code. This vulnerability appears to have been fixed in 1.0.90 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/laurent22/joplin/issues/500 - https://github.com/laurent22/joplin/commit/494e235e18659574f836f84fcf9f4d4fcdcfcf89
CVE ID: CVE-2018-1000535 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: lms version <= LMS_011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lmsgit/lms/issues/1271 - https://0dd.zone/2018/06/01/LMS-Local-File-Disclosure/
CVE ID: CVE-2018-1000536 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Medis version 0.6.1 and earlier contains a XSS vulnerability evolving into code execution due to enabled nodeIntegration for the renderer process vulnerability in Key name parameter on new key creation that can result in Unauthorized code execution in the victim's machine, within the rights of the running application. This attack appear to be exploitable via Victim is synchronizing data from the redis server which contains malicious key value. Additional Analyst Notes: - CVE Program Container: References: - https://github.c
er which contains malicious key value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/luin/medis/issues/109
CVE ID: CVE-2018-1000537 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Marlin Firmware Marlin version 1.1.x and earlier contains a Buffer Overflow vulnerability in cardreader.cpp (Depending on branch/version) that can result in Arbitrary code execution. This attack appear to be exploitable via Crafted G-Code instruction/file is sent to the printer. Additional Analyst Notes: - CVE Program Container: References: - http://forums.reprap.org/read.php?415%2C823246 - https://github.com/MarlinFirmware/Marlin/pull/10925
CVE ID: CVE-2018-1000538 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits or Throttling (similar to CWE-774) vulnerability in write-to-RAM that can result in Denial of Service. This attack appear to be exploitable via Sending V4-(pre)signed requests with large bodies . This vulnerability appears to have been fixed in after commit 9c8b7306f55f2c8c0a5c7cea9a8db9d34be8faa7. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/minio/minio/commit/9c8b73
34be8faa7. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/minio/minio/commit/9c8b7306f55f2c8c0a5c7cea9a8db9d34be8faa7#diff-e8c3bc9bc83b5516d0cc806cd461d08bL220 - https://github.com/minio/minio/pull/5957
CVE ID: CVE-2018-1000539 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nov json-jwt version >= 0.5.0 && < 1.9.4 contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability in Decryption of AES-GCM encrypted JSON Web Tokens that can result in Attacker can forge a authentication tag. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 1.9.4 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nov/json-jwt/pull/62 - https://www.debian.org/security/2018/dsa-4283
CVE ID: CVE-2018-1000540 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: LoboEvolution version < 9b75694cedfa4825d4a2330abf2719d470c654cd contains a XML External Entity (XXE) vulnerability in XML Parsing when viewing the XML file in the browser that can result in disclosure of confidential data, denial of service, server side request forgery. This attack appear to be exploitable via Specially crafted XML file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/oswetto/LoboEvolution/issues/38
CVE ID: CVE-2018-1000541 State: REJECTED Published: 2018-06-25T13:00:00 Last Updated: 2018-06-25T12:57:01 Description: No description available.
CVE ID: CVE-2018-1000542 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: netbeans-mmd-plugin version <= 1.4.3 contains a XML External Entity (XXE) vulnerability in MMD file import that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted MMD file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/raydac/netbeans-mmd-plugin/issues/45 - https://0dd.zone/2018/06/02/Netbeans-MMD-Plugin-XXE/
CVE ID: CVE-2018-1000543 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration vulnerability in "Details" of a task is not validated that can result in XSS leading to abritrary code execution. This attack appear to be exploitable via The attacker tricks the victim into opening a crafted markdown. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rockiger/akiee/issues/42
CVE ID: CVE-2018-1000544 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames "../" to write arbitrary files to the filesystem.. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubyzip/rubyzip/issues/369 - https://acc
tional Analyst Notes: - CVE Program Container: References: - https://github.com/rubyzip/rubyzip/issues/369 - https://access.redhat.com/errata/RHSA-2018:3466 - https://lists.debian.org/debian-lts-announce/2018/08/msg00013.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00002.html
CVE ID: CVE-2018-1000545 State: REJECTED Published: 2018-06-25T13:00:00 Last Updated: 2018-06-25T12:57:01 Description: No description available.
CVE ID: CVE-2018-1000546 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Triplea version <= 1.9.0.0.10291 contains a XML External Entity (XXE) vulnerability in Importing game data that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted game data file (XML). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/triplea-game/triplea/issues/3442 - https://0dd.zone/2018/05/31/TripleA-XXE/
CVE ID: CVE-2018-1000547 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: coreBOS version 7.0 and earlier contains a Incorrect Access Control vulnerability in Module: Contacts that can result in The error allows you to access records that you have no permissions to. . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tsolucio/corebos/blob/287780a61f98adca1fa631ae6e5de346947c7f81/modules/Contacts/EditView.php#L54
CVE ID: CVE-2018-1000548 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Umlet version < 14.3 contains a XML External Entity (XXE) vulnerability in File parsing that can result in disclosure of confidential data, denial of service, server side request forgery. This attack appear to be exploitable via Specially crafted UXF file. This vulnerability appears to have been fixed in 14.3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/umlet/umlet/issues/500 - http://0dd.zone/2018/04/23/UMLet-XXE/
CVE ID: CVE-2018-1000549 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wekan version 1.04.0 contains a Email / Username Enumeration vulnerability in Register' and 'Forgot your password?' pages that can result in A remote attacker could perform a brute force attack to obtain valid usernames and email addresses.. This attack appear to be exploitable via HTTP Request. Additional Analyst Notes: - CVE Program Container: References: - https://shadow-vault.com/wekan.html - https://raw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2018/1000xxx/CVE-2018-1000549.json - https://wekan.git
aw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2018/1000xxx/CVE-2018-1000549.json - https://wekan.github.io/hall-of-fame/brutebleed/
CVE ID: CVE-2018-1000550 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal vulnerability in wwsympa.fcgi template editing function that can result in Possibility to create or modify files on the server filesystem. This attack appear to be exploitable via HTTP GET/POST request. This vulnerability appears to have been fixed in 6.2.32. Additional Analyst Notes: - CVE Program Container: References: - https://sympa-community.github.io/security/2018-001.html - https://www.debian.org/security/2018/dsa-4285 - https://
s: - https://sympa-community.github.io/security/2018-001.html - https://www.debian.org/security/2018/dsa-4285 - https://lists.debian.org/debian-lts-announce/2018/07/msg00033.html - https://usn.ubuntu.com/4442-1/
CVE ID: CVE-2018-1000551 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trovebox version <= 4.0.0-rc6 contains a PHP Type juggling vulnerability in album view component that can result in Authentication bypass. This attack appear to be exploitable via HTTP Request. This vulnerability appears to have been fixed in after commit 742b8edbe. Additional Analyst Notes: - CVE Program Container: References: - https://telekomsecurity.github.io/2018/04/trovebox-vulnerabilities.html