Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-18317 State: PUBLISHED Published: 2018-10-15T04:00:00 Last Updated: 2024-08-05T11:08:21.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: DESHANG DSCMS 1.1 has CSRF via the public/index.php/admin/admin/add.html URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yanchongchong/swallow/issues/6
CVE ID: CVE-2018-18318 State: PUBLISHED Published: 2018-10-15T05:00:00Z Last Updated: 2024-09-16T23:06:50.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: The /dev/block/mmcblk0rpmb driver kernel module on Qiku 360 Phone N6 Pro 1801-A01 devices allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted 0xc0d8b300 ioctl call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/datadancer/HIAFuzz/blob/master/360%20Phone%20N6%20Pro%20Kernel%20Vuln.md
CVE ID: CVE-2018-18319 State: PUBLISHED Published: 2018-10-15T06:00:00Z Last Updated: 2024-09-16T16:28:44.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because api.php has an eval call, as demonstrated by the /6/api.php?function=command&class=remote&Cc='ls' URI. NOTE: the vendor indicates that Merlin.PHP is designed only for use on a trusted intranet network, and intentionally allows remote code execution Additional Analyst Notes: - CVE Program Container: References: - http://blog.51cto.com/010bjsoft/2298902 - https://github.com/qoli/Merlin.PHP/is
: - CVE Program Container: References: - http://blog.51cto.com/010bjsoft/2298902 - https://github.com/qoli/Merlin.PHP/issues/27
CVE ID: CVE-2018-18320 State: PUBLISHED Published: 2018-10-15T06:00:00Z Last Updated: 2024-09-16T22:41:30.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because exec.php has a popen call. NOTE: the vendor indicates that Merlin.PHP is designed only for use on a trusted intranet network, and intentionally allows remote code execution Additional Analyst Notes: - CVE Program Container: References: - https://github.com/qoli/Merlin.PHP/issues/26 - http://blog.51cto.com/010bjsoft/2298828
CVE ID: CVE-2018-18322 State: PUBLISHED Published: 2018-10-15T07:00:00 Last Updated: 2024-08-05T11:08:21.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/index.php service_start, service_restart, service_fullstatus, or service_stop parameter. Additional Analyst Notes: - CVE Program Container: References: - https://seccops.com/centos-web-panel-0-9-8-480-multiple-vulnerabilities/ - https://www.exploit-db.com/exploits/45610/ - https://0day.today/exploit/31304
CVE ID: CVE-2018-18323 State: PUBLISHED Published: 2018-10-15T07:00:00 Last Updated: 2024-08-05T11:08:21.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=file_editor&file=/../ URI. Additional Analyst Notes: - CVE Program Container: References: - https://seccops.com/centos-web-panel-0-9-8-480-multiple-vulnerabilities/ - https://www.exploit-db.com/exploits/45610/ - https://0day.today/exploit/31304
CVE ID: CVE-2018-18324 State: PUBLISHED Published: 2018-10-15T07:00:00 Last Updated: 2024-08-05T11:08:21.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fm_current_dir parameter, or the admin/index.php module, service_start, service_fullstatus, service_restart, service_stop, or file (within the file_editor) parameter. Additional Analyst Notes: - CVE Program Container: References: - https://seccops.com/centos-web-panel-0-9-8-480-multiple-vulnerabilities/ - https://www.exploit-db.com/exploits/45610/ - https://0day.today/exploit/31304
CVE ID: CVE-2018-18325 State: PUBLISHED Published: 2019-07-03T16:37:17.000Z Last Updated: 2025-10-21T23:45:34.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dnnsoftware/Dnn.Platform/releases - https://www.dnnsoftware.com/community/security/security-center - http://packetstormsecurity.com/files/157080/DotNetNuke-Cookie-Deserialization-Remote-Code-Execution.html
CVE ID: CVE-2018-18326 State: PUBLISHED Published: 2019-07-03T16:39:12 Last Updated: 2024-08-05T11:08:21.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dnnsoftware/Dnn.Platform/releases - https://www.dnnsoftware.com/community/security/security-center - http://packetstormsecurity.com/files/157080/DotNetNuke-Cookie-Deserialization-Remote-Code-Execution.html
CVE ID: CVE-2018-18327 State: PUBLISHED Published: 2018-10-23T14:00:00 Last Updated: 2024-08-05T11:08:21.378Z Vendors: Trend Micro Products: Trend Micro Antivirus for Mac (Consumer) Problem Types: Privilege Escalation Description: A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. The issue results from the lack of proper validation function on 0x6eDC offset user-supplied buffer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional
btain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/solution/ja-jp/1121350.aspx - http://www.securityfocus.com/bid/105757 - https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspx - https://www.zerodayinitiative.com/advisories/ZDI-18-1295/
CVE ID: CVE-2018-18328 State: PUBLISHED Published: 2018-10-23T14:00:00 Last Updated: 2024-08-05T11:08:21.416Z Vendors: Trend Micro Products: Trend Micro Antivirus for Mac (Consumer) Problem Types: Privilege Escalation Description: A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. The issue results from the lack of proper validation function on 0x6F6A offset user-supplied buffer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional
btain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/solution/ja-jp/1121350.aspx - https://www.zerodayinitiative.com/advisories/ZDI-18-1296/ - http://www.securityfocus.com/bid/105757 - https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspx
CVE ID: CVE-2018-18329 State: PUBLISHED Published: 2018-10-23T14:00:00 Last Updated: 2024-08-05T11:08:21.796Z Vendors: Trend Micro Products: Trend Micro Antivirus for Mac (Consumer) Problem Types: Privilege Escalation Description: A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. The issue results from the lack of proper validation function on 0x6F4E offset user-supplied buffer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional
btain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/solution/ja-jp/1121350.aspx - http://www.securityfocus.com/bid/105757 - https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspx - https://www.zerodayinitiative.com/advisories/ZDI-18-1297/
CVE ID: CVE-2018-18330 State: PUBLISHED Published: 2018-12-21T15:00:00 Last Updated: 2024-08-05T11:08:21.409Z Vendors: Trend Micro Products: Trend Micro Dr. Safety for Android (Consumer) Problem Types: Address Bar Spoofing Description: An Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android (Consumer) versions 3.0.1324 and below could allow an attacker to potentially trick a victim into visiting a malicious URL using address bar spoofing on the Private Browser of the app on vulnerable installations. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1121673.aspx
CVE ID: CVE-2018-18331 State: PUBLISHED Published: 2018-12-21T15:00:00 Last Updated: 2024-08-05T11:08:21.430Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: Weak File Permissions Description: A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alter the files, which could lead to other exploits on vulnerable installations. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1121674
CVE ID: CVE-2018-18332 State: PUBLISHED Published: 2018-12-21T15:00:00 Last Updated: 2024-08-05T11:08:21.697Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: Weak File Permissions Description: A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other files and folders on vulnerable installations. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1121674
CVE ID: CVE-2018-18333 State: PUBLISHED Published: 2019-02-05T22:00:00 Last Updated: 2024-08-05T11:08:21.241Z Vendors: Trend Micro Products: Trend Micro Security (Consumer) Problem Types: DLL Hijacking Description: A DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below could allow an attacker to manipulate a specific DLL and escalate privileges on vulnerable installations. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1121932.aspx - https://kaganisildak.com/2019/01/17/discovery-of-dll-hijack-on-trend-micro-antivirus-cve-2018-18333/ - https://gaissecurity.c
://kaganisildak.com/2019/01/17/discovery-of-dll-hijack-on-trend-micro-antivirus-cve-2018-18333/ - https://gaissecurity.com/yazi/discovery-of-dll-hijack-on-trend-micro-antivirusplus-cve-2018-18333
CVE ID: CVE-2018-18334 State: PUBLISHED Published: 2019-02-05T22:00:00 Last Updated: 2024-08-05T11:08:21.413Z Vendors: Trend Micro Products: Trend Micro Dr. Safety for Android (Consumer) Problem Types: SOP Bypass Description: A vulnerability in the Private Browser of Trend Micro Dr. Safety for Android (Consumer) versions below 3.0.1478 could allow an remote attacker to bypass the Same Origin Policy (SOP) and obtain sensitive information via crafted JavaScript code on vulnerable installations. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1121933.aspx
CVE ID: CVE-2018-18335 State: PUBLISHED Published: 2018-12-11T15:00:00 Last Updated: 2024-08-05T11:08:21.363Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://crbug.com/895362 - https://access.redhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gentoo.org/gls
ttps://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gentoo.org/glsa/201904-07 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html - https://security.gentoo.org/glsa/201908-18
CVE ID: CVE-2018-18336 State: PUBLISHED Published: 2018-12-11T15:00:00 Last Updated: 2024-08-05T11:08:21.358Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Incorrect object lifecycle in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://crbug.com/898531 - https://access.redhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gentoo.org/gl
https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gentoo.org/glsa/201908-18
CVE ID: CVE-2018-18337 State: PUBLISHED Published: 2018-12-11T15:00:00 Last Updated: 2024-08-05T11:08:21.313Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Incorrect handling of stylesheets leading to a use after free in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/886753 - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/1060
redhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gentoo.org/glsa/201908-18
CVE ID: CVE-2018-18338 State: PUBLISHED Published: 2018-12-11T15:00:00 Last Updated: 2024-08-05T11:08:21.460Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Incorrect, thread-unsafe use of SkImage in Canvas in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/890576 - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://se
ta/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gentoo.org/glsa/201908-18
CVE ID: CVE-2018-18339 State: PUBLISHED Published: 2018-12-11T15:00:00 Last Updated: 2024-08-05T11:08:21.627Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:3803 - https://crbug.com/891187 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gentoo.org
- https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gentoo.org/glsa/201908-18
CVE ID: CVE-2018-18340 State: PUBLISHED Published: 2018-12-11T15:00:00 Last Updated: 2024-08-05T11:08:21.482Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Incorrect object lifecycle in MediaRecorder in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/896736 - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gento
:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gentoo.org/glsa/201908-18
CVE ID: CVE-2018-18341 State: PUBLISHED Published: 2018-12-11T15:00:00 Last Updated: 2024-08-05T11:08:21.456Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: An integer overflow leading to a heap buffer overflow in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/901030 - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084
dhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gentoo.org/glsa/201908-18
CVE ID: CVE-2018-18342 State: PUBLISHED Published: 2018-12-11T15:00:00 Last Updated: 2024-08-05T11:08:21.361Z Vendors: Google Products: Chrome Problem Types: Out of bounds write Description: Execution of user supplied Javascript during object deserialization can update object length leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/906313 - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:3803 - https://www.de
og.com/2018/12/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gentoo.org/glsa/201908-18
CVE ID: CVE-2018-18343 State: PUBLISHED Published: 2018-12-11T15:00:00 Last Updated: 2024-08-05T11:08:21.824Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Incorrect handing of paths leading to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/882423 - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - htt
om/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gentoo.org/glsa/201908-18
CVE ID: CVE-2018-18344 State: PUBLISHED Published: 2018-12-11T15:00:00 Last Updated: 2024-08-05T11:08:21.579Z Vendors: n/a Products: n/a Problem Types: Inappropriate implementation Description: Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker with control of an installed extension to access files on the local file system via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/866426 - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:3803 - https://w
gleblog.com/2018/12/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gentoo.org/glsa/201908-18
CVE ID: CVE-2018-18345 State: PUBLISHED Published: 2018-12-11T15:00:00 Last Updated: 2024-08-05T11:08:21.446Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Incorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker who had compromised the renderer process to bypass site isolation protections via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://crbug.com/886976 - https://access.redhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http:
bug.com/886976 - https://access.redhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gentoo.org/glsa/201908-18
CVE ID: CVE-2018-18346 State: PUBLISHED Published: 2018-12-11T15:00:00 Last Updated: 2024-08-05T11:08:21.419Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to present confusing browser UI via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/606104 - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.
-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gentoo.org/glsa/201908-18
CVE ID: CVE-2018-18347 State: PUBLISHED Published: 2018-12-11T15:00:00 Last Updated: 2024-08-05T11:08:21.368Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Incorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to trick a user into executing javascript in an arbitrary origin via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/850824 - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-43
-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gentoo.org/glsa/201908-18
CVE ID: CVE-2018-18348 State: PUBLISHED Published: 2018-12-11T15:00:00 Last Updated: 2024-08-05T11:08:21.450Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Incorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bi