Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
which overrides the return address of the function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zsjevilhex/iot/blob/master/route/tenda/tenda-05/Tenda.md
CVE ID: CVE-2018-18709 State: PUBLISHED Published: 2018-10-27T22:00:00 Last Updated: 2024-08-05T11:16:00.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "firewallEn" parameter for a post request, the value is directly used in a strcpy to a local variable placed on the stack, which overrides the return address of the function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zsjevilhex/i
ddress of the function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zsjevilhex/iot/blob/master/route/tenda/tenda-08/Tenda.md
CVE ID: CVE-2018-18710 State: PUBLISHED Published: 2018-10-27T22:00:00 Last Updated: 2024-08-05T11:16:00.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 4.19. An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and CVE-2018-16658. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3848-2/ - https://usn.ubuntu.com/3847-1/ - https://usn.ubuntu.com/3847-2/ - https://usn.ubuntu.com/3849-1/ - http://www.securityfo
https://usn.ubuntu.com/3847-1/ - https://usn.ubuntu.com/3847-2/ - https://usn.ubuntu.com/3849-1/ - http://www.securityfocus.com/bid/106041 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e4f3aa2e1e67bb48dfbaaf1cad59013d5a5bc276 - https://usn.ubuntu.com/3849-2/ - https://usn.ubuntu.com/3848-1/ - https://usn.ubuntu.com/3847-3/ - https://usn.ubuntu.com/3846-1/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - https://github.com/torvalds/linux/commit/e4f3aa2e1e67bb48dfbaaf1cad59013d5a5bc276 - https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html
CVE ID: CVE-2018-18711 State: PUBLISHED Published: 2018-10-27T22:00:00 Last Updated: 2024-08-05T11:16:00.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can change the super administrator's password via index.php?m=core&f=panel&v=edit_info. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/156
CVE ID: CVE-2018-18712 State: PUBLISHED Published: 2018-10-27T22:00:00 Last Updated: 2024-08-05T11:16:00.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can change the super administrator's username via index.php?m=member&f=index&v=edit&uid=1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/156
CVE ID: CVE-2018-18713 State: PUBLISHED Published: 2018-10-27T22:00:00 Last Updated: 2024-08-05T11:16:00.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: The function down_sql_action() in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via directory traversal in an m=database&c=down_sql&name=../ URI. Additional Analyst Notes: - CVE Program Container: References: - http://jlkl.github.io/2018/10/25/CVE_02/ - http://str3am.me/2018/10/25/CVE_02/
CVE ID: CVE-2018-18714 State: PUBLISHED Published: 2018-11-01T17:00:00 Last Updated: 2024-08-05T11:16:00.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: RegFilter.sys in IOBit Malware Fighter 6.2 and earlier is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E010. This can lead to denial of service (DoS) or code execution with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://downwithup.github.io/CVEPosts.html
CVE ID: CVE-2018-18715 State: PUBLISHED Published: 2018-11-20T19:00:00 Last Updated: 2024-08-05T11:16:00.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2018/Oct/60 - http://seclists.org/fulldisclosure/2018/Nov/3 - http://packetstormsecurity.com/files/150124/Zoho-ManageEngine-OpManager-12.3-Cross-Site-Scripting.html
CVE ID: CVE-2018-18716 State: PUBLISHED Published: 2018-11-20T19:00:00 Last Updated: 2024-08-05T11:16:00.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2018/Oct/61 - http://seclists.org/fulldisclosure/2018/Nov/6 - http://packetstormsecurity.com/files/150124/Zoho-ManageEngine-OpManager-12.3-Cross-Site-Scripting.html
CVE ID: CVE-2018-18717 State: PUBLISHED Published: 2018-10-28T00:00:00 Last Updated: 2024-08-05T11:16:00.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Eleanor CMS through 2015-03-19. XSS exists via the ajax.php?direct=admin&file=autocomplete&query=[XSS] URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Sunvas/Eleanor-CMS/issues/5
CVE ID: CVE-2018-18718 State: PUBLISHED Published: 2018-10-28T00:00:00 Last Updated: 2024-08-05T11:16:00.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method in dlg-contact-sheet.c because of two successive calls of g_free, each of which frees the same buffer. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/gthumb/issues/18 - https://lists.debian.org/debian-lts-announce/2018/11/msg00002.html
CVE ID: CVE-2018-18720 State: PUBLISHED Published: 2018-10-28T00:00:00 Last Updated: 2024-08-05T11:16:00.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/source-trace/yunucms/issues/2
CVE ID: CVE-2018-18721 State: PUBLISHED Published: 2018-10-28T00:00:00 Last Updated: 2024-08-05T11:16:00.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in admin/link/editlink?id=5 in YUNUCMS 1.1.5. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/source-trace/yunucms/issues/7
CVE ID: CVE-2018-18722 State: PUBLISHED Published: 2018-10-28T00:00:00 Last Updated: 2024-08-05T11:16:00.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in admin/content/editcontent?id=29&gopage=1 in YUNUCMS 1.1.5. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/source-trace/yunucms/issues/6
CVE ID: CVE-2018-18723 State: PUBLISHED Published: 2018-10-28T00:00:00 Last Updated: 2024-08-05T11:16:00.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in index.php/admin/area/editarea/id/110000 in YUNUCMS 1.1.5. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/source-trace/yunucms/issues/3
CVE ID: CVE-2018-18724 State: PUBLISHED Published: 2018-10-28T00:00:00 Last Updated: 2024-08-05T11:16:00.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in index.php/admin/category/editcategory?id=73 in YUNUCMS 1.1.5. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/source-trace/yunucms/issues/5
CVE ID: CVE-2018-18725 State: PUBLISHED Published: 2018-10-28T00:00:00 Last Updated: 2024-08-05T11:16:00.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in admin/banner/editbanner?id=20 in YUNUCMS 1.1.5. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/source-trace/yunucms/issues/4
CVE ID: CVE-2018-18726 State: PUBLISHED Published: 2018-10-28T00:00:00 Last Updated: 2024-08-05T11:16:00.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in admin/sitelink/editsitelink?id=16 in YUNUCMS 1.1.5. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/source-trace/yunucms/issues/8
CVE ID: CVE-2018-18727 State: PUBLISHED Published: 2018-10-28T00:00:00 Last Updated: 2024-08-05T11:16:00.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'deviceList' parameter for a post request, the value is directly used in a strcpy to a local variable placed on the stack, which overrides the return address of the function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZIllR0/R
rn address of the function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZIllR0/Routers/blob/master/Tenda/stack1.md
CVE ID: CVE-2018-18728 State: PUBLISHED Published: 2018-10-28T00:00:00 Last Updated: 2024-08-05T11:16:00.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. They allow remote code execution via shell metacharacters in the usbName field to the __fastcall function with a POST request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZIllR0/Routers/blob/master/Tenda/rce1.md
CVE ID: CVE-2018-18729 State: PUBLISHED Published: 2018-10-28T00:00:00 Last Updated: 2024-08-05T11:16:00.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a heap-based buffer overflow vulnerability in the router's web server -- httpd. While processing the 'mac' parameter for a post request, the value is directly used in a strcpy to a variable placed on the heap, which can leak sensitive information or even hijack program control flow. Additional Analyst Notes: - CVE Program Container: References: - https://
formation or even hijack program control flow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZIllR0/Routers/blob/master/Tenda/heapoverflow1.md
CVE ID: CVE-2018-18730 State: PUBLISHED Published: 2018-10-28T00:00:00 Last Updated: 2024-08-05T11:16:00.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'startIp' and 'endIp' parameters for a post request, each value is directly used in a sprintf to a local variable placed on the stack, which overrides the return address of the function. Additional Analyst Notes: - CVE Program Container: References: - https://github.
des the return address of the function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZIllR0/Routers/blob/master/Tenda/stack3.md
CVE ID: CVE-2018-18731 State: PUBLISHED Published: 2018-10-28T00:00:00 Last Updated: 2024-08-05T11:16:00.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'deviceMac' parameter for a post request, the value is directly used in a sprintf to a local variable placed on the stack, which overrides the return address of the function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZIllR0/R
rn address of the function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZIllR0/Routers/blob/master/Tenda/stack4.md
CVE ID: CVE-2018-18732 State: PUBLISHED Published: 2018-10-28T00:00:00 Last Updated: 2024-08-05T11:16:00.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'ntpServer' parameter for a post request, the value is directly used in a strcpy to a local variable placed on the stack, which overrides the return address of the function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZIllR0/Ro
n address of the function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZIllR0/Routers/blob/master/Tenda/stack2.md
CVE ID: CVE-2018-18733 State: PUBLISHED Published: 2018-10-28T03:00:00 Last Updated: 2024-08-05T11:16:00.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in Catfish CMS 4.8.30, related to "write source code," a similar issue to CVE-2018-13999. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/catfish/blob/master/catfishcms.md#xss
CVE ID: CVE-2018-18734 State: PUBLISHED Published: 2018-10-28T03:00:00 Last Updated: 2024-08-05T11:16:00.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF issue was discovered in admin/Index/addmanageuser.html in Catfish CMS 4.8.30. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/catfish/blob/master/catfishcms.md#csrf
CVE ID: CVE-2018-18735 State: PUBLISHED Published: 2018-10-28T03:00:00 Last Updated: 2024-08-05T11:16:00.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/catfish/blob/master/catfishblog.md#csrf
CVE ID: CVE-2018-18736 State: PUBLISHED Published: 2018-10-28T03:00:00 Last Updated: 2024-08-05T11:16:00.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in catfish blog 2.0.33, related to "write source code." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/catfish/blob/master/catfishblog.md#xss
CVE ID: CVE-2018-18737 State: PUBLISHED Published: 2018-10-28T03:00:00 Last Updated: 2024-08-05T11:16:00.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexml_load_string. This can also be used for SSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/douchat/blob/master/xxe.md#xxe
CVE ID: CVE-2018-18738 State: PUBLISHED Published: 2018-10-28T03:00:00 Last Updated: 2024-08-05T11:16:00.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Categories.php?pid=1&lgid=1 category_key parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/SEMCMS/blob/master/XSS.md#xss2
CVE ID: CVE-2018-18739 State: PUBLISHED Published: 2018-10-28T03:00:00 Last Updated: 2024-08-05T11:16:00.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Products.php?lgid=1 Keywords field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/SEMCMS/blob/master/XSS.md#xss1
CVE ID: CVE-2018-18740 State: PUBLISHED Published: 2018-10-28T03:00:00 Last Updated: 2024-08-05T11:16:00.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in SEMCMS 3.4 via the first input field to the admin/SEMCMS_Link.php?lgid=1 URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/SEMCMS/blob/master/XSS.md#xss4
CVE ID: CVE-2018-18741 State: PUBLISHED Published: 2018-10-28T03:00:00 Last Updated: 2024-08-05T11:16:00.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Download.php?lgid=1 during editing. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/SEMCMS/blob/master/XSS.md#xss6
CVE ID: CVE-2018-18742 State: PUBLISHED Published: 2018-10-28T03:00:00 Last Updated: 2024-08-05T11:16:00.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_User.php?Class=add&CF=user URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/SEMCMS/blob/master/CSRF.md
CVE ID: CVE-2018-18743 State: PUBLISHED Published: 2018-10-28T03:00:00 Last Updated: 2024-08-05T11:16:00.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in SEMCMS 3.4 via the second text field to the admin/SEMCMS_Categories.php?pid=1&lgid=1 URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/SEMCMS/blob/master/XSS.md#xss3
CVE ID: CVE-2018-18744 State: PUBLISHED Published: 2018-10-28T03:00:00 Last Updated: 2024-08-05T11:16:00.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in SEMCMS 3.4 via the fifth text box to the admin/SEMCMS_Main.php URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/SEMCMS/blob/master/XSS.md#xss7
CVE ID: CVE-2018-18745 State: PUBLISHED Published: 2018-10-28T03:00:00 Last Updated: 2024-08-05T11:16:00.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Menu.php?lgid=1 during editing. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/SEMCMS/blob/master/XSS.md#xss5
CVE ID: CVE-2018-18748 State: PUBLISHED Published: 2018-10-28T03:00:00 Last Updated: 2024-11-14T20:26:24.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sandboxie 5.26 allows a Sandbox Escape via an "import os" statement, followed by os.system("cmd") or os.system("powershell"), within a .py file. NOTE: the vendor disputes this issue because the observed behavior is consistent with the product's intended functionality Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sandboxescape/Sandboxie-5.26-Sandbox-Escape-Exploit/blob/2632a5f7409e52b2e020f5d4467fa019f9095e73/README.doc
CVE ID: CVE-2018-18749 State: PUBLISHED Published: 2018-10-28T03:00:00Z Last Updated: 2024-09-16T17:02:38.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: data-tools through 2017-07-26 has an Integer Overflow leading to an incorrect end value for the write_wchars function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/clarkgrubb/data-tools/issues/7
CVE ID: CVE-2018-18751 State: PUBLISHED Published: 2018-10-28T17:00:00 Last Updated: 2024-08-05T11:16:00.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3815-2/ - https://usn.ubuntu.com/3815-1/ - https://github.com/CCCCCrash/POCs/tree/master/Bin/Tools-gettext-0.19.8.1/heapcorruption - https://github.com/CCCCCrash/POCs/tree/master/Bin/Tools-gettext-0.19.8.1/doublefree - https://access.redha
pcorruption - https://github.com/CCCCCrash/POCs/tree/master/Bin/Tools-gettext-0.19.8.1/doublefree - https://access.redhat.com/errata/RHSA-2019:3643 - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00061.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00065.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00025.html
CVE ID: CVE-2018-18752 State: PUBLISHED Published: 2018-10-28T17:00:00Z Last Updated: 2024-09-16T21:07:20.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/WsSaveToModel.php logo parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/149982/Webiness-Inventory-2.9-Shell-Upload.html
CVE ID: CVE-2018-18753 State: PUBLISHED Published: 2018-10-28T17:00:00Z Last Updated: 2024-09-17T03:03:06.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Typecho V1.1 allows remote attackers to send shell commands via base64-encoded serialized data, as demonstrated by SSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/157
CVE ID: CVE-2018-18754 State: PUBLISHED Published: 2018-10-28T17:00:00Z Last Updated: 2024-09-16T23:26:40.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZyXEL VMG3312-B10B 1.00(AAPP.7) devices have a backdoor root account with the tTn3+Z@!Sr0O+ password hash in the etc/default.cfg file. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/numanturle/c99d3306e9e4e17bb2164dde363406bc
CVE ID: CVE-2018-18755 State: PUBLISHED Published: 2018-11-16T18:00:00 Last Updated: 2024-08-05T11:16:00.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: K-iwi Framework 1775 has SQL Injection via the admin/user/group/update user_group_id parameter or the admin/user/user/update user_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150016/K-iwi-Framework-1775-SQL-Injection.html - https://www.exploit-db.com/exploits/45735/
CVE ID: CVE-2018-18756 State: PUBLISHED Published: 2018-11-16T18:00:00 Last Updated: 2024-08-05T11:16:00.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Local Server 1.0.9 has a Buffer Overflow via crafted data on Port 4008. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149986/Local-Server-1.0.9-Denial-Of-Service.html
CVE ID: CVE-2018-18757 State: PUBLISHED Published: 2019-06-19T15:40:24 Last Updated: 2024-08-05T11:16:00.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Faculty Evaluation System 5.6 for PHP 5.6 allows submit_feedback.php SQL Injection, a different vulnerability than CVE-2018-18758. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/author/?a=8844 - https://www.exploit-db.com/exploits/45703
CVE ID: CVE-2018-18758 State: PUBLISHED Published: 2019-06-19T15:30:23 Last Updated: 2024-08-05T11:16:00.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Faculty Evaluation System 7 for PHP 7 allows submit_feedback.php SQL Injection, a different vulnerability than CVE-2018-18757. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/author/?a=8844 - https://www.exploit-db.com/exploits/45707