Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-14528 State: PUBLISHED Published: 2019-07-05T19:48:51 Last Updated: 2024-08-05T09:29:51.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invoxia NVX220 devices allow TELNET access as admin with a default password. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/r3dlight/CVE-2018-14528
CVE ID: CVE-2018-14529 State: PUBLISHED Published: 2019-07-05T19:51:33 Last Updated: 2024-08-05T09:29:51.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invoxia NVX220 devices allow access to /bin/sh via escape from a restricted CLI, leading to disclosure of password hashes. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/r3dlight/CVE-2018-14529
CVE ID: CVE-2018-14531 State: PUBLISHED Published: 2018-07-23T08:00:00 Last Updated: 2024-08-05T09:29:51.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.5.1-624. There is an unspecified "heap-buffer-overflow" crash in the AP4_HvccAtom class in Core/Ap4HvccAtom.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/293
CVE ID: CVE-2018-14532 State: PUBLISHED Published: 2018-07-23T08:00:00 Last Updated: 2024-08-05T09:29:51.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.5.1-624. There is a heap-based buffer over-read in AP4_Mpeg2TsVideoSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp after a call from Mp42Hls.cpp, a related issue to CVE-2018-13846. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/294
CVE ID: CVE-2018-14533 State: PUBLISHED Published: 2018-07-31T14:00:00 Last Updated: 2024-08-05T09:29:51.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: read_tmp and write_tmp in Inteno IOPSYS allow attackers to gain privileges after writing to /tmp/etc/smb.conf because /var is a symlink to /tmp. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45089/ - https://neonsea.uk/blog/2018/07/21/tmp-to-rce.html
CVE ID: CVE-2018-14541 State: PUBLISHED Published: 2018-08-03T16:00:00 Last Updated: 2024-08-05T09:29:51.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45140/ - https://gkaim.com/cve-2018-14541-vikas-chaudhary/
CVE ID: CVE-2018-14543 State: PUBLISHED Published: 2018-07-23T08:00:00 Last Updated: 2024-08-05T09:29:51.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: There exists one NULL pointer dereference vulnerability in AP4_JsonInspector::AddField in Ap4Atom.cpp in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp4dump. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/292
CVE ID: CVE-2018-14544 State: PUBLISHED Published: 2018-07-23T08:00:00 Last Updated: 2024-08-05T09:29:51.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: There exists one invalid memory read bug in AP4_SampleDescription::GetFormat() in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/291
CVE ID: CVE-2018-14545 State: PUBLISHED Published: 2018-07-23T08:00:00 Last Updated: 2024-08-05T09:29:51.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: There exists one invalid memory read bug in AP4_SampleDescription::GetType() in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/291
CVE ID: CVE-2018-14549 State: PUBLISHED Published: 2018-07-23T08:00:00 Last Updated: 2024-08-05T09:29:51.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in libwav through 2017-04-20. It is a SEGV in the function wav_write in libwav.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fouzhe/security/tree/master/libwav#segv-in-function-wav_write-in-libwavc - https://github.com/marc-q/libwav/issues/23
CVE ID: CVE-2018-14550 State: PUBLISHED Published: 2019-07-10T00:00:00 Last Updated: 2024-08-05T09:29:51.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201908-02 - https://www.oracle.com/security-alerts/cpuApr2021.html - https://github.com/glennrp/libpng/issues/246 - https://github.com/fouzhe/security/tree/master/libpng#stack-buffer-overflow-in-png2pnm-in-function-get_token - https://www.oracle.com/security-aler
ecurity/tree/master/libpng#stack-buffer-overflow-in-png2pnm-in-function-get_token - https://www.oracle.com/security-alerts/cpuoct2021.html - https://security.netapp.com/advisory/ntap-20221028-0001/
CVE ID: CVE-2018-14551 State: PUBLISHED Published: 2018-07-23T08:00:00 Last Updated: 2024-08-05T09:29:51.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1221 - https://usn.ubuntu.com/3785-1/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html
CVE ID: CVE-2018-14553 State: PUBLISHED Published: 2020-02-11T00:00:00 Last Updated: 2024-08-05T09:29:51.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1599032 - https://github.com/libgd/libgd/pull/580 - https://github.com/libgd/libgd/commit/a93eac0e843148dc2d631c3ba80af17e9c8c860f - https://lists.debian.org/debian-lts-announce/2020/02/ms
om/libgd/libgd/commit/a93eac0e843148dc2d631c3ba80af17e9c8c860f - https://lists.debian.org/debian-lts-announce/2020/02/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00020.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/ - https://usn.ubuntu.com/4316-2/ - https://usn.ubuntu.com/4316-1/ - https://lists.debian.org/debian-lts-announce/2024/04/msg00003.html
CVE ID: CVE-2018-14557 State: PUBLISHED Published: 2019-04-25T19:42:41 Last Updated: 2024-08-05T09:29:51.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A buffer overflow vulnerability exists in the router's web server (httpd). When processing the page parameters for a post request, the value is directly written with sprintf to a local variable placed on the stack, which overrides the return address of the function, a causing buffer overflow. Additional Analyst Notes
ed on the stack, which overrides the return address of the function, a causing buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zsjevilhex/iot/blob/master/route/tenda/tenda-03/Tenda.md
CVE ID: CVE-2018-14558 State: PUBLISHED Published: 2018-10-30T18:00:00.000Z Last Updated: 2025-10-21T23:45:47.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted goform/setUsbUnload request. This occurs because the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refe
ystemCmd function with untrusted input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zsjevilhex/iot/blob/master/route/tenda/tenda-01/Tenda.md
CVE ID: CVE-2018-14559 State: PUBLISHED Published: 2019-04-25T19:44:46 Last Updated: 2024-08-05T09:29:51.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A buffer overflow vulnerability exists in the router's web server (httpd). When processing the list parameters for a post request, the value is directly written with sprintf to a local variable placed on the stack, which overrides the return address of the function, causing a buffer overflow. Additional Analyst Notes
ed on the stack, which overrides the return address of the function, causing a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zsjevilhex/iot/blob/master/route/tenda/tenda-02/Tenda.md
CVE ID: CVE-2018-14562 State: PUBLISHED Published: 2018-07-23T14:00:00 Last Updated: 2024-08-05T09:29:51.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libthulac.so in THULAC through 2018-02-25. A NULL pointer dereference can occur in the BasicModel class in include/cb_model.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thunlp/THULAC/issues/35#issue-342148638
CVE ID: CVE-2018-14563 State: PUBLISHED Published: 2018-07-23T14:00:00 Last Updated: 2024-08-05T09:29:51.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libthulac.so in THULAC through 2018-02-25. "operator delete" is used with "operator new[]" in the TaggingLearner class in include/cb_tagging_learner.h, possibly leading to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thunlp/THULAC/issues/37
CVE ID: CVE-2018-14564 State: PUBLISHED Published: 2018-07-23T14:00:00 Last Updated: 2024-08-05T09:29:51.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libthulac.so in THULAC through 2018-02-25. A SEGV can occur in NGramFeature::find_bases in include/cb_ngram_feature.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thunlp/THULAC/issues/35#issuecomment-405788715
CVE ID: CVE-2018-14565 State: PUBLISHED Published: 2018-07-23T14:00:00 Last Updated: 2024-08-05T09:29:51.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libthulac.so in THULAC through 2018-02-25. A heap-based buffer over-read can occur in NGramFeature::find_bases in include/cb_ngram_feature.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thunlp/THULAC/issues/36
CVE ID: CVE-2018-14567 State: PUBLISHED Published: 2018-08-16T20:00:00 Last Updated: 2024-08-05T09:29:51.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035 and CVE-2018-9251. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105198 - https://lists.debian.org/debian-lts-announce/2018/09/msg00035.html - https://usn.ubuntu.com/3739-1/ - https://gitlab.gnome.org/GNOME/libxml2/commit/2240fbf5912054af02
018/09/msg00035.html - https://usn.ubuntu.com/3739-1/ - https://gitlab.gnome.org/GNOME/libxml2/commit/2240fbf5912054af025fb6e01e26375100275e74 - https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html
CVE ID: CVE-2018-14568 State: PUBLISHED Published: 2018-07-23T20:00:00 Last Updated: 2024-08-05T09:29:51.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows detection bypass because Windows TCP clients proceed with normal processing of TCP data that arrives shortly after an RST (i.e., they act as if the RST had not yet been received). Additional Analyst Notes: - CVE Program Container: References: - https://suricata-ids.org/2018/07/18/suricata-4-0-5-available/ - https://github.com/OISF/suricata/pull/3428/commits/843d0b7a10bb45627f94764a6c5d468a24143345 - https://redmine.openinfosecfoundatio
thub.com/OISF/suricata/pull/3428/commits/843d0b7a10bb45627f94764a6c5d468a24143345 - https://redmine.openinfosecfoundation.org/issues/2501 - https://github.com/kirillwow/ids_bypass
CVE ID: CVE-2018-14570 State: PUBLISHED Published: 2018-07-23T20:00:00 Last Updated: 2024-08-05T09:29:51.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: A file upload vulnerability in application/shop/controller/member.php in Niushop B2B2C Multi-business basic version V1.11 allows any remote member to upload a .php file to the web server via a profile avatar field, by using an image Content-Type (e.g., image/jpeg) with a modified filename and file content. This results in arbitrary code execution by requesting that .php file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GitHaaH/issue/blob/master/Niushop.md
CVE ID: CVE-2018-14572 State: PUBLISHED Published: 2018-08-28T19:00:00 Last Updated: 2024-08-05T09:29:51.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: In conference-scheduler-cli, a pickle.load call on imported data allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PyconUK/ConferenceScheduler-cli/issues/19 - https://joel-malwarebenchmark.github.io/blog/2020/04/25/cve-2018-14572-conference-scheduler-cli/
CVE ID: CVE-2018-14573 State: PUBLISHED Published: 2018-07-23T23:00:00Z Last Updated: 2024-09-17T00:42:06.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Local File Inclusion (LFI) vulnerability exists in the Web Interface API of TightRope Media Carousel Digital Signage before 7.3.5. The RenderingFetch API allows for the downloading of arbitrary files through the use of directory traversal sequences, aka CSL-1683. Additional Analyst Notes: - CVE Program Container: References: - http://release-notes.trms.com/txt/448
CVE ID: CVE-2018-14574 State: PUBLISHED Published: 2018-08-03T17:00:00 Last Updated: 2024-08-05T09:29:51.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect. Additional Analyst Notes: - CVE Program Container: References: - https://www.djangoproject.com/weblog/2018/aug/01/security-releases/ - https://usn.ubuntu.com/3726-1/ - https://www.debian.org/security/2018/dsa-4264 - http://www.securitytracker.com/id/1041403 - https://access.redhat.com/errata/RHSA-2019:0265 - http://www.securityfocus.com/bid/104970
CVE ID: CVE-2018-14575 State: PUBLISHED Published: 2019-03-17T21:19:31 Last Updated: 2024-08-05T09:29:51.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trash Bin plugin 1.1.3 for MyBB has cross-site scripting (XSS) via a thread subject and a cross-site request forgery (CSRF) via a post subject. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151704/MyBB-Trash-Bin-1.1.3-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/46384/ - https://community.mybb.com/mods.php?action=view&pid=957
CVE ID: CVE-2018-14576 State: PUBLISHED Published: 2018-08-03T18:00:00 Last Updated: 2024-08-05T09:29:51.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow via the _amount variable. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Jul/93 - https://github.com/SunContract/SmartContracts/issues/1 - https://etherscan.io/address/0xF4134146AF2d511Dd5EA8cDB1C4AC88C57D60404#code
CVE ID: CVE-2018-14579 State: PUBLISHED Published: 2018-07-24T14:00:00Z Last Updated: 2024-09-16T17:23:49.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: GolemCMS through 2008-12-24, if the install/ directory remains active after an installation, allows remote attackers to execute arbitrary PHP code by inserting this code into the "Database Information" "Table prefix" form field, or obtain sensitive information via a direct request for install/install.sql. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/havysec/Useful_Code/blob/master/mycve/001.md
CVE ID: CVE-2018-14581 State: PUBLISHED Published: 2018-07-31T14:00:00 Last Updated: 2024-08-05T09:29:51.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redgate .NET Reflector before 10.0.7.774 and SmartAssembly before 6.12.5 allow attackers to execute code by decompiling a compiled .NET object (such as a DLL or EXE file) with a specific embedded resource file. Additional Analyst Notes: - CVE Program Container: References: - https://documentation.red-gate.com/sa6/release-notes-and-other-versions/smartassembly-6-12-release-notes - https://documentation.red-gate.com/ref10/release-notes-and-other-versions/net-reflector-10-0-release-notes - https://www.nccgroup.trust/us/our-resea
te.com/ref10/release-notes-and-other-versions/net-reflector-10-0-release-notes - https://www.nccgroup.trust/us/our-research/technical-advisory-code-execution-by-viewing-resource-files-in-.net-reflector/?research=Technical+advisories
CVE ID: CVE-2018-14582 State: PUBLISHED Published: 2018-07-24T16:00:00Z Last Updated: 2024-09-17T01:56:33.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bagesoft/bagecms/issues/2
CVE ID: CVE-2018-14583 State: PUBLISHED Published: 2018-07-24T16:00:00Z Last Updated: 2024-09-16T23:26:31.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: xyhai.php?s=/Auth/addUser in XYHCMS 3.5 allows CSRF to add a background administrator account. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/maoGod/xyhcms/issues/1
CVE ID: CVE-2018-14584 State: PUBLISHED Published: 2018-07-24T16:00:00 Last Updated: 2024-08-05T09:29:51.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been discovered in Bento4 1.5.1-624. AP4_AvccAtom::Create in Core/Ap4AvccAtom.cpp has a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/298 - https://github.com/axiomatic-systems/Bento4/issues/304
CVE ID: CVE-2018-14585 State: PUBLISHED Published: 2018-07-24T16:00:00 Last Updated: 2024-08-05T09:29:51.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been discovered in Bento4 1.5.1-624. AP4_BytesToUInt16BE in Core/Ap4Utils.h has a heap-based buffer over-read after a call from the AP4_Stz2Atom class. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/299
CVE ID: CVE-2018-14586 State: PUBLISHED Published: 2018-07-24T16:00:00 Last Updated: 2024-08-05T09:29:51.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4_Mpeg2TsAudioSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp, a different vulnerability than CVE-2018-14532. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/300
CVE ID: CVE-2018-14587 State: PUBLISHED Published: 2018-07-24T16:00:00 Last Updated: 2024-08-05T09:29:51.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been discovered in Bento4 1.5.1-624. AP4_MemoryByteStream::WritePartial in Core/Ap4ByteStream.cpp has a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/301
CVE ID: CVE-2018-14588 State: PUBLISHED Published: 2018-07-24T16:00:00 Last Updated: 2024-08-05T09:29:51.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been discovered in Bento4 1.5.1-624. A NULL pointer dereference can occur in AP4_DataBuffer::SetData in Core/Ap4DataBuffer.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/302
CVE ID: CVE-2018-14589 State: PUBLISHED Published: 2018-07-24T16:00:00 Last Updated: 2024-08-05T09:29:51.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been discovered in Bento4 1.5.1-624. AP4_Mp4AudioDsiParser::ReadBits in Codecs/Ap4Mp4AudioInfo.cpp has a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/303
CVE ID: CVE-2018-14590 State: PUBLISHED Published: 2018-07-24T16:00:00 Last Updated: 2024-08-05T09:29:51.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4_Processor::ProcessFragments in Core/Ap4Processor.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/305
CVE ID: CVE-2018-14592 State: PUBLISHED Published: 2018-09-20T20:00:00 Last Updated: 2024-08-05T09:29:51.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE extension before 1.0.6 for Joomla! allow SQL Injection within download.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.cwjoomla.com/download-cw-article-attachments - https://www.exploit-db.com/exploits/45447/
CVE ID: CVE-2018-14593 State: PUBLISHED Published: 2018-08-03T16:00:00 Last Updated: 2024-08-05T09:29:51.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.9, 5.0.x through 5.0.28, and 4.0.x through 4.0.30. An attacker who is logged into OTRS as an agent may escalate their privileges by accessing a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4317 - https://lists.debian.org/debian-lts-announce/2018/08/msg00021.html - https://community.otrs.com/security-advisory-2018-03-security-update-for-otrs-framework/?lang=de