Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-16076 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:17:37.032Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Missing bounds check in PDFium in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105215 - https://access.redhat.com/errata/RHSA-2018:2666 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201811-10 - https://crbug.com/867501
CVE ID: CVE-2018-16077 State: PUBLISHED Published: 2019-06-27T16:13:41 Last Updated: 2024-08-05T10:17:37.641Z Vendors: Google Products: Chrome Problem Types: Object lifecycle issue Description: Object lifecycle issue in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass content security policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://crbug.com/377995
CVE ID: CVE-2018-16078 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:17:36.934Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Unsafe handling of credit card details in Autofill in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105215 - https://access.redhat.com/errata/RHSA-2018:2666 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201811-10 - htt
eleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201811-10 - https://crbug.com/858820
CVE ID: CVE-2018-16079 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:17:36.992Z Vendors: Google Products: Chrome Problem Types: Race Description: A race condition between permission prompts and navigations in Prompts in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105215 - https://access.redhat.com/errata/RHSA-2018:2666 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201811-10 - https://crbug.com/723503
CVE ID: CVE-2018-16080 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:17:37.021Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: A missing check for popup window handling in Fullscreen in Google Chrome on macOS prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105215 - https://crbug.com/858929 - https://access.redhat.com/errata/RHSA-2018:2666 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.
CVE ID: CVE-2018-16081 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:17:37.008Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system without file access permission via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/666299 - http://www.securityfocus.com/bid/105215 - https://access.redhat.com/errata/RHSA-2018:2666 - https://chromereleases.googl
http://www.securityfocus.com/bid/105215 - https://access.redhat.com/errata/RHSA-2018:2666 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201811-10
CVE ID: CVE-2018-16082 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:17:37.014Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: An out of bounds read in Swiftshader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105215 - https://access.redhat.com/errata/RHSA-2018:2666 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://crbug.com/851398 - https://security.gentoo.org/glsa/201811-10
CVE ID: CVE-2018-16083 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:17:36.934Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105215 - https://www.exploit-db.com/exploits/45444/ - https://access.redhat.com/errata/RHSA-2018:2666 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.or
2666 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201811-10 - https://crbug.com/856823
CVE ID: CVE-2018-16084 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:17:37.004Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: The default selected dialog button in CustomHandlers in Google Chrome prior to 69.0.3497.81 allowed a remote attacker who convinced the user to perform certain operations to open external programs via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105215 - https://access.redhat.com/errata/RHSA-2018:2666 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/2
ttps://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201811-10 - https://crbug.com/865202
CVE ID: CVE-2018-16085 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:17:37.017Z Vendors: Google Products: Chrome Problem Types: Use after free Description: A use after free in ResourceCoordinator in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105215 - https://access.redhat.com/errata/RHSA-2018:2666 - https://crbug.com/856578 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201811-10
CVE ID: CVE-2018-16086 State: PUBLISHED Published: 2019-06-27T16:13:41 Last Updated: 2024-08-05T10:17:37.007Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in extensions API in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://crbug.com/844428
CVE ID: CVE-2018-16087 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:17:37.617Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Lack of proper state tracking in Permissions in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2666 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201811-10 - https://crbug.com/848535
CVE ID: CVE-2018-16088 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:17:37.005Z Vendors: Google Products: Chrome Problem Types: Policy bypass Description: A missing check for JS-simulated input events in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to download arbitrary files with no user input via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/848531 - https://access.redhat.com/errata/RHSA-2018:2666 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201811-10
CVE ID: CVE-2018-16089 State: PUBLISHED Published: 2018-11-27T14:00:00 Last Updated: 2024-08-05T10:17:37.618Z Vendors: Lenovo Products: ThinkSystem SMM Problem Types: Privilege escalation Description: In System Management Module (SMM) versions prior to 1.06, a field in the header of SMM firmware update images is insufficiently sanitized, allowing post-authentication command injection on the SMM as the root user. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-24374
CVE ID: CVE-2018-16090 State: PUBLISHED Published: 2018-11-27T14:00:00 Last Updated: 2024-08-05T10:17:37.619Z Vendors: Lenovo Products: ThinkSystem SMM Problem Types: Privilege escalation Description: In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable to post-authentication command injection. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-24374
CVE ID: CVE-2018-16091 State: PUBLISHED Published: 2018-11-27T14:00:00 Last Updated: 2024-08-05T10:17:37.011Z Vendors: Lenovo Products: ThinkSystem SMM Problem Types: Privilege escalation Description: In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable to several buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-24374
CVE ID: CVE-2018-16092 State: PUBLISHED Published: 2018-11-27T14:00:00 Last Updated: 2024-08-05T10:17:37.776Z Vendors: Lenovo Products: ThinkSystem SMM Problem Types: Privilege escalation Description: In System Management Module (SMM) versions prior to 1.06, the FFDC feature includes the collection of SMM system files containing sensitive information; notably, the SMM user account credentials and the system shadow file. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-24374
CVE ID: CVE-2018-16093 State: PUBLISHED Published: 2018-11-30T14:00:00 Last Updated: 2024-08-05T10:17:37.690Z Vendors: Lenovo Products: LXCI for VMware Problem Types: information disclosure Description: In versions prior to 5.5, LXCI for VMware allows an authenticated user to write to any system file due to insufficient sanitization during the upload of a backup file. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-23800
CVE ID: CVE-2018-16094 State: PUBLISHED Published: 2018-11-27T14:00:00 Last Updated: 2024-08-05T10:17:37.767Z Vendors: Lenovo Products: ThinkSystem SMM Problem Types: Privilege escalation Description: In System Management Module (SMM) versions prior to 1.06, an internal SMM function that retrieves configuration settings is prone to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-24374
CVE ID: CVE-2018-16095 State: PUBLISHED Published: 2018-11-27T14:00:00 Last Updated: 2024-08-05T10:17:37.616Z Vendors: Lenovo Products: ThinkSystem SMM Problem Types: Privilege escalation Description: In System Management Module (SMM) versions prior to 1.06, the SMM records hashed passwords to a debug log when user authentication fails. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-24374
CVE ID: CVE-2018-16096 State: PUBLISHED Published: 2018-11-27T14:00:00 Last Updated: 2024-08-05T10:17:37.631Z Vendors: Lenovo Products: ThinkSystem SMM Problem Types: Privilege escalation Description: In System Management Module (SMM) versions prior to 1.06, the SMM web interface for changing Enclosure VPD fails to sufficiently sanitize all input for HTML tags, possibly opening a path for cross-site scripting. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-24374
CVE ID: CVE-2018-16097 State: PUBLISHED Published: 2018-11-30T14:00:00 Last Updated: 2024-08-05T10:17:37.668Z Vendors: Lenovo Products: LXCI for VMware, LXCI for Microsoft System Center Problem Types: file system modification Description: LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-23800
CVE ID: CVE-2018-16098 State: PUBLISHED Published: 2019-01-24T22:00:00Z Last Updated: 2024-09-16T16:32:37.513Z Vendors: Lenovo Group Ltd. Products: Various ThinkPad products Problem Types: Code execution Description: In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-24573
CVE ID: CVE-2018-16099 State: REJECTED Published: 2019-02-11T19:00:00 Last Updated: 2019-02-11T18:57:01 Description: No description available.
CVE ID: CVE-2018-16100 State: REJECTED Published: 2019-02-11T19:00:00 Last Updated: 2019-02-11T18:57:01 Description: No description available.
CVE ID: CVE-2018-16101 State: REJECTED Published: 2019-02-11T19:00:00 Last Updated: 2019-02-11T18:57:01 Description: No description available.
CVE ID: CVE-2018-16102 State: REJECTED Published: 2019-02-11T19:00:00 Last Updated: 2019-02-11T18:57:01 Description: No description available.
CVE ID: CVE-2018-16103 State: REJECTED Published: 2019-02-11T19:00:00 Last Updated: 2019-02-11T18:57:01 Description: No description available.
CVE ID: CVE-2018-16104 State: REJECTED Published: 2019-02-11T19:00:00 Last Updated: 2019-02-11T18:57:01 Description: No description available.
CVE ID: CVE-2018-16105 State: REJECTED Published: 2019-02-11T19:00:00 Last Updated: 2019-02-11T18:57:01 Description: No description available.
CVE ID: CVE-2018-16106 State: REJECTED Published: 2019-02-11T19:00:00 Last Updated: 2019-02-11T18:57:01 Description: No description available.
CVE ID: CVE-2018-16107 State: REJECTED Published: 2019-02-11T20:00:00 Last Updated: 2019-02-11T19:57:01 Description: No description available.
CVE ID: CVE-2018-16108 State: REJECTED Published: 2019-02-11T20:00:00 Last Updated: 2019-02-11T19:57:01 Description: No description available.
CVE ID: CVE-2018-16109 State: REJECTED Published: 2019-02-11T20:00:00 Last Updated: 2019-02-11T19:57:01 Description: No description available.
CVE ID: CVE-2018-16110 State: REJECTED Published: 2019-02-11T20:00:00 Last Updated: 2019-02-11T19:57:01 Description: No description available.
CVE ID: CVE-2018-16111 State: REJECTED Published: 2019-02-11T20:00:00 Last Updated: 2019-02-11T19:57:01 Description: No description available.
CVE ID: CVE-2018-16112 State: REJECTED Published: 2019-02-11T20:00:00 Last Updated: 2019-02-11T19:57:01 Description: No description available.
CVE ID: CVE-2018-16113 State: REJECTED Published: 2019-02-11T20:00:00 Last Updated: 2019-02-11T19:57:01 Description: No description available.
CVE ID: CVE-2018-16115 State: PUBLISHED Published: 2018-08-29T22:00:00 Last Updated: 2024-08-05T10:17:37.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lightbend Akka 2.5.x before 2.5.16 allows message disclosure and modification because of an RNG error. A random number generator is used in Akka Remoting for TLS (both classic and Artery Remoting). Akka allows configuration of custom random number generators. For historical reasons, Akka included the AES128CounterSecureRNG and AES256CounterSecureRNG random number generators. The implementations had a bug that caused the generated numbers to be repeated after only a few bytes. The custom RNG implementations were not configured
t caused the generated numbers to be repeated after only a few bytes. The custom RNG implementations were not configured by default but examples in the documentation showed (and therefore implicitly recommended) using the custom ones. This can be used by an attacker to compromise the communication if these random number generators are enabled in configuration. It would be possible to eavesdrop, replay, or modify the messages sent with Akka Remoting/Cluster. Additional Analyst Notes: - CVE Program Container: References: - https://doc.akka.io/docs/akka/current/security/2018-08-29-aes-rng.html
CVE ID: CVE-2018-16116 State: PUBLISHED Published: 2019-06-20T16:18:55 Last Updated: 2024-08-05T10:17:38.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in AccountStatus.jsp in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attackers to execute arbitrary SQL commands via the "username" GET parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.sophos.com/en-us/legal/sophos-responsible-disclosure-policy.aspx - https://github.com/klsecservices/Advisories/blob/master/KL-SOPHOS-2018-001.md - https://community.sophos.com/kb/en-us/132637
CVE ID: CVE-2018-16117 State: PUBLISHED Published: 2019-06-20T16:06:13 Last Updated: 2024-08-05T10:17:37.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: A shell escape vulnerability in /webconsole/Controller in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attackers to execute arbitrary OS commands via shell metacharacters in the "dbName" POST parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.sophos.com/en-us/legal/sophos-responsible-disclosure-policy.aspx - https://github.com/klsecservices/Advisories/blob/master/KL-SOPHOS-2018-002.md - https://community.sophos.com/kb/en-us/132637
CVE ID: CVE-2018-16118 State: PUBLISHED Published: 2019-06-20T16:02:54 Last Updated: 2024-08-05T10:17:38.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: A shell escape vulnerability in /webconsole/APIController in the API Configuration component of Sophos XG firewall 17.0.8 MR-8 allows remote attackers to execute arbitrary OS commands via shell metachracters in the "X-Forwarded-for" HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://www.sophos.com/en-us/legal/sophos-responsible-disclosure-policy.aspx - https://github.com/klsecservices/Advisories/blob/master/KL-SOPHOS-2018-003.md - https://community.sophos.com/kb/en-us/132637
CVE ID: CVE-2018-16119 State: PUBLISHED Published: 2019-06-20T15:51:45 Last Updated: 2024-08-05T10:17:37.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the httpd server of TP-Link WR1043nd (Firmware Version 3) allows remote attackers to execute arbitrary code via a malicious MediaServer request to /userRpm/MediaServerFoldersCfgRpm.htm. Additional Analyst Notes: - CVE Program Container: References: - http://tp-link.com/ - https://www.secsignal.org/news/exploiting-routers-just-another-tp-link-0day
CVE ID: CVE-2018-16130 State: PUBLISHED Published: 2018-11-27T21:00:00 Last Updated: 2024-08-05T10:17:37.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: System command injection in request_mitv in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary system commands via the "payload" URL parameter. Additional Analyst Notes: - CVE Program Container: References: - https://blog.securityevaluators.com/hack-routers-get-toys-exploiting-the-mi-router-3-1d7fd42f0838
CVE ID: CVE-2018-16131 State: PUBLISHED Published: 2018-08-30T13:00:00 Last Updated: 2024-08-05T10:17:38.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to cause a denial of service (memory consumption and daemon crash) via a ZIP bomb. Additional Analyst Notes: - CVE Program Container: References: - https://doc.akka.io/docs/akka-http/current/security/2018-09-05-denial-of-service-via-decodeRequest.html - https://groups.google.com/forum/#%21topic/akka-security/Dj7INsYWdjg - https://akka.io/blog/news/2018/08/30/akka-http-dos-vulnerabil
ups.google.com/forum/#%21topic/akka-security/Dj7INsYWdjg - https://akka.io/blog/news/2018/08/30/akka-http-dos-vulnerability-found - https://github.com/akka/akka-http/issues/2137
CVE ID: CVE-2018-16132 State: PUBLISHED Published: 2018-08-29T22:00:00 Last Updated: 2024-08-05T10:17:38.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: The image rendering component (createGenericPreview) of the Open Whisper Signal app through 2.29.0 for iOS fails to check for unreasonably large images before manipulating received images. This allows for a large image sent to a user to exhaust all available memory when the image is displayed, resulting in a forced restart of the device. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2018/Aug/57
CVE ID: CVE-2018-16133 State: PUBLISHED Published: 2018-08-29T22:00:00 Last Updated: 2024-08-05T10:17:38.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybrotech CyBroHttpServer 1.0.3 allows Directory Traversal via a ../ in the URI. Additional Analyst Notes: - CVE Program Container: References: - https://emreovunc.com/blog/en/CyBroHttpServer-v.1.0.3-Directory-Traversal-3.png - https://github.com/EmreOvunc/CyBroHttpServer-v1.0.3-Directory-Traversal - https://www.exploit-db.com/exploits/45303/
CVE ID: CVE-2018-16134 State: PUBLISHED Published: 2018-08-29T22:00:00 Last Updated: 2024-08-05T10:17:37.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybrotech CyBroHttpServer 1.0.3 allows XSS via a URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45309/ - https://github.com/EmreOvunc/CyBroHttpServer-v1.0.3-Reflected-XSS - https://emreovunc.com/blog/en/CyBroHttpServer-v1.0.3-XSS.png
CVE ID: CVE-2018-16135 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T18:32:06.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Opera Mini application 47.1.2249.129326 for Android allows remote attackers to spoof the Location Permission dialog via a crafted web site. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://payatu.com/advisory/opera-mini-location-permission-spoof-
CVE ID: CVE-2018-16136 State: PUBLISHED Published: 2019-05-13T20:16:46 Last Updated: 2024-08-05T10:17:37.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the administrator interface in IPBRICK OS 6.3. The application doesn't check for Anti-CSRF tokens, allowing the submission of multiple forms unwillingly by a victim. Additional Analyst Notes: - CVE Program Container: References: - https://www.0x90.zone/web/multiple/2019/02/01/Multiple-Vulnerabilities-IPBrick.html