Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-6689 State: PUBLISHED Published: 2018-10-03T12:00:00 Last Updated: 2024-08-05T06:10:11.222Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: McAfee Products: Data Loss Prevention Endpoint (DLPe) Problem Types: Authentication Bypass vulnerability Description: Authentication Bypass vulnerability in McAfee Data Loss Prevention Endpoint (DLPe) 10.0.x earlier than 10.0.510, and 11.0.x earlier than 11.0.600 allows attackers to bypass local security protection via specific conditions. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10252 - http://www.securitytracker.com/id/1041908
CVE ID: CVE-2018-6690 State: PUBLISHED Published: 2018-09-18T22:00:00 Last Updated: 2024-08-05T06:10:11.285Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N) Vendors: McAfee Products: McAfee Application Control (MAC) Problem Types: Whitelist bypass Description: Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control (MACC) 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-674165.pdf - https://kc.mcafee.com/
Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-674165.pdf - https://kc.mcafee.com/corporate/index?page=content&id=SB10250
CVE ID: CVE-2018-6692 State: PUBLISHED Published: 2018-08-21T14:00:00 Last Updated: 2024-08-05T06:10:11.342Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Belkin Products: Wemo Insight Smart Plug Problem Types: Stack-based Buffer Overflow vulnerability Description: Stack-based Buffer Overflow vulnerability in libUPnPHndlr.so in Belkin Wemo Insight Smart Plug allows remote attackers to bypass local security protection via a crafted HTTP post packet. Additional Analyst Notes: - CVE Program Container: References: - https://securingtomorrow.mcafee.com/mcafee-labs/insight-into-home-automation-reveals-vulnerability-in-simple-iot-product
CVE ID: CVE-2018-6693 State: PUBLISHED Published: 2018-09-18T22:00:00 Last Updated: 2024-08-05T06:10:11.241Z Severity: MEDIUM (CVSS 5.6 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L) Vendors: McAfee Products: Endpoint Security for Linux Threat Prevention (ENSLTP) Problem Types: CWE-363, CWE-274 Description: An unprivileged user can delete arbitrary files on a Linux system running ENSLTP 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. By exploiting a time of check to time of use (TOCTOU) race condition during a specific scanning sequence, the unprivileged user is able to perform a privilege escalation to delete arbitrary files. Additional Analyst Notes: - CVE Program Container: Referenc
to perform a privilege escalation to delete arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10248
CVE ID: CVE-2018-6695 State: PUBLISHED Published: 2018-10-03T21:00:00 Last Updated: 2024-08-05T06:10:11.461Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: McAfee Products: Threat Intelligence Exchange Server (TIE Server) Problem Types: SSH host keys generation vulnerability Description: SSH host keys generation vulnerability in the server in McAfee Threat Intelligence Exchange Server (TIE Server) 1.3.0, 2.0.x, 2.1.x, 2.2.0 allows man-in-the-middle attackers to spoof servers via acquiring keys from another environment. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10253
CVE ID: CVE-2018-6700 State: PUBLISHED Published: 2018-09-24T13:00:00 Last Updated: 2024-08-05T06:10:11.361Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: McAfee Products: True Key (TK) Problem Types: DLL Search Order Hijacking vulnerability Description: DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key (TK) before 5.1.165 allows local users to execute arbitrary code via specially crafted malware. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102846
CVE ID: CVE-2018-6703 State: PUBLISHED Published: 2018-12-11T23:00:00 Last Updated: 2024-08-05T06:10:11.293Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: McAfee, LLC Products: McAfee Agent Problem Types: Use After Free Description: Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause a Denial of Service and potentially a remote code execution via a specially crafted HTTP header sent to the logging service. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10258
CVE ID: CVE-2018-6704 State: PUBLISHED Published: 2018-12-12T20:00:00 Last Updated: 2024-08-05T06:10:11.255Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: McAfee Products: McAfee Agent (MA) for Linux Problem Types: CWE-377 Description: Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10259
CVE ID: CVE-2018-6705 State: PUBLISHED Published: 2018-12-12T20:00:00 Last Updated: 2024-08-05T06:10:11.359Z Severity: LOW (CVSS 2.3 CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:N/A:L) Vendors: McAfee Products: McAfee Agent (MA) for Linux Problem Types: CWE-377 Description: Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106328 - https://kc.mcafee.com/corporate/index?page=content&id=SB10260
CVE ID: CVE-2018-6706 State: PUBLISHED Published: 2018-12-12T23:00:00 Last Updated: 2024-08-05T06:10:11.248Z Severity: LOW (CVSS 2.3 CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:N) Vendors: McAfee Products: McAfee Agent (MA) for Linux Problem Types: CWE-377 Description: Insecure handling of temporary files in non-Windows McAfee Agent 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows an Unprivileged User to introduce custom paths during agent installation in Linux via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106328 - https://kc.mcafee.com/corporate/index?page=content&id=SB10260
CVE ID: CVE-2018-6707 State: PUBLISHED Published: 2018-12-13T23:00:00 Last Updated: 2024-08-05T06:10:11.379Z Severity: LOW (CVSS 3.7 CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:L) Vendors: McAfee Products: McAfee Agent (MA) non-Windows non-Windows versions Problem Types: Denial of Service Description: Denial of Service through Resource Depletion vulnerability in the agent in non-Windows McAfee Agent (MA) 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to cause DoS, unexpected behavior, or potentially unauthorized code execution via knowledge of the internal trust mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106307 - http
chanism. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106307 - https://kc.mcafee.com/corporate/index?page=content&id=SB10260
CVE ID: CVE-2018-6755 State: PUBLISHED Published: 2018-12-06T23:00:00 Last Updated: 2024-08-05T06:10:11.371Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: McAfee Products: True Key Problem Types: Weak Directory Permission Vulnerability Description: Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45961/ - http://service.mcafee.com/FAQDocument.aspx?&id=TS102872
CVE ID: CVE-2018-6756 State: PUBLISHED Published: 2018-12-06T23:00:00 Last Updated: 2024-08-05T06:10:11.276Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee Products: True Key Problem Types: Authentication Abuse vulnerability Description: Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45961/ - http://service.mcafee.com/FAQDocument.aspx?&id=TS102872
CVE ID: CVE-2018-6757 State: PUBLISHED Published: 2018-12-06T23:00:00 Last Updated: 2024-08-05T06:10:11.374Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: McAfee Products: True Key Problem Types: Privilege Escalation vulnerability Description: Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45961/ - http://service.mcafee.com/FAQDocument.aspx?&id=TS102872
CVE ID: CVE-2018-6758 State: PUBLISHED Published: 2018-02-06T18:00:00 Last Updated: 2024-08-05T06:10:11.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The uwsgi_expand_path function in core/utils.c in Unbit uWSGI through 2.0.15 has a stack-based buffer overflow via a large directory length. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/02/msg00010.html - http://lists.unbit.it/pipermail/uwsgi/2018-February/008835.html - https://github.com/unbit/uwsgi/commit/cb4636f7c0af2e97a4eef7a3cdcbd85a71247bfe
CVE ID: CVE-2018-6759 State: PUBLISHED Published: 2018-02-06T20:00:00 Last Updated: 2024-08-05T06:10:11.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bfd_get_debug_link_info_1 function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, has an unchecked strnlen operation. Remote attackers could leverage this vulnerability to cause a denial of service (segmentation fault) via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-17 - https://sourceware.org/bugzilla/show_bug.cgi?id=22794 - http://www.securityfocus.com/bid/103030 - http://lists.open
17 - https://sourceware.org/bugzilla/show_bug.cgi?id=22794 - http://www.securityfocus.com/bid/103030 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html
CVE ID: CVE-2018-6764 State: PUBLISHED Published: 2018-02-23T17:00:00 Last Updated: 2024-08-05T06:10:11.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4137 - https://access.redhat.com/errata/RHSA-2018:3113 - https://www.redhat.com/archives/libvir-list/2018-February/msg00239.html - http://www.ubuntu.com/usn/USN-3576-1
CVE ID: CVE-2018-6765 State: PUBLISHED Published: 2018-03-27T17:00:00 Last Updated: 2024-08-05T06:10:11.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Swisscom MySwisscomAssistant 2.17.1.1065 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code without the user's knowledge. The specific flaw exists within the handling of several DLLs (dwmapi.dll, IPHLPAPI.DLL, WindowsCodecs.dll, RpcRtRemote.dll, CRYPTSP.dll, rasadhlp.dll, DNSAPI.dll, ntmarta.
eral DLLs (dwmapi.dll, IPHLPAPI.DLL, WindowsCodecs.dll, RpcRtRemote.dll, CRYPTSP.dll, rasadhlp.dll, DNSAPI.dll, ntmarta.dll, netbios.dll, olepro32.dll, security.dll, winhttp.dll, WINSTA.dll) loaded by the MySwisscomAssistant_Setup.exe process. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2018-6765_myswisscomassistant.txt
CVE ID: CVE-2018-6766 State: PUBLISHED Published: 2018-03-27T17:00:00 Last Updated: 2024-08-05T06:10:11.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Swisscom TVMediaHelper 1.1.0.50 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code without the user's knowledge. The specific flaw exists within the handling of several DLLs (dwmapi.dll, PROPSYS.dll, cscapi.dll, SAMLIB.dll, netbios.dll, winhttp.dll, security.dll, ntmarta.dll, WindowsCodecs.dl
(dwmapi.dll, PROPSYS.dll, cscapi.dll, SAMLIB.dll, netbios.dll, winhttp.dll, security.dll, ntmarta.dll, WindowsCodecs.dll, apphelp.dll) loaded by the SwisscomTVMediaHelper.exe process. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2018-6766_tvmediahelper.txt
CVE ID: CVE-2018-6767 State: PUBLISHED Published: 2018-02-06T22:00:00 Last Updated: 2024-08-05T06:10:11.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service attack or possibly have unspecified other impact via a maliciously crafted RF64 file. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4125 - https://github.com/dbry/WavPack/commit/d5bf76b5a88d044a1be1d5656698e3ba737167e5 - https://github.com/dbry/WavPack/issues/27 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bu
a1be1d5656698e3ba737167e5 - https://github.com/dbry/WavPack/issues/27 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=889276 - https://usn.ubuntu.com/3568-1/ - https://seclists.org/bugtraq/2019/Dec/37 - http://packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html
CVE ID: CVE-2018-6768 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-17T01:45:52.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008090. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KSysCall_9A008090
CVE ID: CVE-2018-6769 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-17T01:06:12.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KrnlCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x99008020. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KrnlCall_99008020
CVE ID: CVE-2018-6770 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-16T22:30:36.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KrnlCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x99008210. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KrnlCall_99008210
CVE ID: CVE-2018-6771 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-16T18:48:36.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KrnlCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x99008224. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KrnlCall_99008224
CVE ID: CVE-2018-6772 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-17T00:55:47.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KrnlCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x99008208. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KrnlCall_99008208
CVE ID: CVE-2018-6773 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-16T18:04:20.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008084. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KSysCall_9A008084
CVE ID: CVE-2018-6774 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-17T00:56:03.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008088. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KSysCall_9A008088
CVE ID: CVE-2018-6775 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-16T18:33:49.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KrnlCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x990081C8. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KrnlCall_990081C8
CVE ID: CVE-2018-6776 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-16T16:32:36.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A00813C. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KSysCall_9A00813C
CVE ID: CVE-2018-6777 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-17T03:54:16.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220400. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KVFG_220400
CVE ID: CVE-2018-6778 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-16T16:32:45.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008268. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KSysCall_9A008268
CVE ID: CVE-2018-6779 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-17T03:43:00.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008240. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KSysCall_9A008240
CVE ID: CVE-2018-6780 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-16T20:26:36.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A0081E4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KSysCall_9A0081E4
CVE ID: CVE-2018-6781 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-16T23:11:50.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008264. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KSysCall_9A008264
CVE ID: CVE-2018-6782 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-16T16:32:50.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A0081DC. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KSysCall_9A0081DC
CVE ID: CVE-2018-6783 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-16T20:43:18.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A00825C. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KSysCall_9A00825C