Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-17694 State: PUBLISHED Published: 2019-01-24T04:00:00 Last Updated: 2024-08-05T10:54:10.852Z Vendors: Foxit Products: PhantomPDF Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the display property of a button. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute c
ence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7138. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-1224/ - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-17695 State: PUBLISHED Published: 2019-01-24T04:00:00 Last Updated: 2024-08-05T10:54:10.727Z Vendors: Foxit Products: PhantomPDF Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the username property of a TextField. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execu
xistence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7145. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-1199/ - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-17696 State: PUBLISHED Published: 2019-01-24T04:00:00 Last Updated: 2024-08-05T10:54:10.591Z Vendors: Foxit Products: Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the dataObjects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the
o performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7169. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://www.zerodayinitiative.com/advisories/ZDI-18-1223/
CVE ID: CVE-2018-17697 State: PUBLISHED Published: 2019-01-24T04:00:00 Last Updated: 2024-08-05T10:54:10.611Z Vendors: Foxit Products: Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of templates. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the curre
orming operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7170. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-1215/ - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-17698 State: PUBLISHED Published: 2019-01-24T04:00:00 Last Updated: 2024-08-05T10:54:10.755Z Vendors: Foxit Products: PhantomPDF Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the richValue property of a text field. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to exe
existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7067. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://www.zerodayinitiative.com/advisories/ZDI-18-1219/
CVE ID: CVE-2018-17699 State: PUBLISHED Published: 2019-01-24T04:00:00 Last Updated: 2024-08-05T10:54:10.667Z Vendors: Foxit Products: Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other
which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-7073. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://www.zerodayinitiative.com/advisories/ZDI-18-1213/
CVE ID: CVE-2018-17700 State: PUBLISHED Published: 2019-01-24T04:00:00 Last Updated: 2024-08-05T10:54:10.584Z Vendors: n/a Products: n/a Problem Types: CWE-125 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Array.prototype.concat. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this vulnerability to execute
, which can result in a read past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7131. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-1146/ - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-17701 State: PUBLISHED Published: 2019-01-24T04:00:00 Last Updated: 2024-08-05T10:54:10.696Z Vendors: Foxit Products: PhantomPDF Problem Types: CWE-125 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of JSON objects. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this vulnerability to execute
which can result in a read past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7132. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://www.zerodayinitiative.com/advisories/ZDI-18-1147/
CVE ID: CVE-2018-17702 State: PUBLISHED Published: 2019-01-24T04:00:00 Last Updated: 2024-08-05T10:54:10.761Z Vendors: Foxit Products: Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the richValue property of button objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute c
ence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7252. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://www.zerodayinitiative.com/advisories/ZDI-18-1183/
CVE ID: CVE-2018-17703 State: PUBLISHED Published: 2019-01-24T04:00:00 Last Updated: 2024-08-05T10:54:10.611Z Vendors: Foxit Products: Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the defaultValue property of ComboBox objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to exec
existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7253. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://www.zerodayinitiative.com/advisories/ZDI-18-1162/
CVE ID: CVE-2018-17704 State: PUBLISHED Published: 2019-01-24T04:00:00 Last Updated: 2024-08-05T10:54:10.578Z Vendors: Foxit Products: Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the textColor property of RadioButton objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to exec
existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7254. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://www.zerodayinitiative.com/advisories/ZDI-18-1208/
CVE ID: CVE-2018-17705 State: PUBLISHED Published: 2019-01-24T04:00:00 Last Updated: 2024-08-05T10:54:10.595Z Vendors: Foxit Products: Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the display property of CheckBox objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute c
ence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7255. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-1198/ - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-17706 State: PUBLISHED Published: 2018-10-29T22:00:00 Last Updated: 2024-08-05T10:54:10.756Z Vendors: Foxit Products: Foxit PhantomPDF Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF Phantom PDF 9.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within fxhtml2pdf. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to e
hich can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6230. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-1095
CVE ID: CVE-2018-17707 State: PUBLISHED Published: 2019-01-24T04:00:00 Last Updated: 2024-08-05T10:54:10.753Z Vendors: Epic Games Products: Epic Games Launcher Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Epic Games Launcher versions prior to 8.2.2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handler for the com.epicgames.launcher protocol. A crafted URI with the com.epicgames.launcher protocol can trigger execution of a system call composed from a user-supplied string. An attacker
com.epicgames.launcher protocol can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-7241. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-1359/
CVE ID: CVE-2018-17765 State: PUBLISHED Published: 2020-09-09T18:55:16 Last Updated: 2024-08-05T10:54:10.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ingenico Telium 2 POS terminals have undeclared TRACE protocol commands. This is fixed in Telium 2 SDK v9.32.03 patch N. Additional Analyst Notes: - CVE Program Container: References: - https://ingenico.us/smart-terminals/telium2 - https://youtu.be/gtbS3Gr264w - https://youtu.be/oyUD7RDJsJs - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-14/
CVE ID: CVE-2018-17766 State: PUBLISHED Published: 2020-09-09T18:55:20 Last Updated: 2024-08-05T10:54:10.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ingenico Telium 2 POS Telium2 OS allow bypass of file-reading restrictions via the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. Additional Analyst Notes: - CVE Program Container: References: - https://ingenico.us/smart-terminals/telium2 - https://youtu.be/gtbS3Gr264w - https://youtu.be/oyUD7RDJsJs - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-15/
CVE ID: CVE-2018-17767 State: PUBLISHED Published: 2020-09-09T18:55:24 Last Updated: 2024-08-05T10:54:10.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ingenico Telium 2 POS terminals have hardcoded PPP credentials. This is fixed in Telium 2 SDK v9.32.03 patch N. Additional Analyst Notes: - CVE Program Container: References: - https://ingenico.us/smart-terminals/telium2 - https://youtu.be/gtbS3Gr264w - https://youtu.be/oyUD7RDJsJs - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-10/
CVE ID: CVE-2018-17768 State: PUBLISHED Published: 2020-09-09T18:55:28 Last Updated: 2024-08-05T10:54:10.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ingenico Telium 2 POS terminals have an insecure TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. Additional Analyst Notes: - CVE Program Container: References: - https://ingenico.us/smart-terminals/telium2 - https://youtu.be/gtbS3Gr264w - https://youtu.be/oyUD7RDJsJs - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-13/
CVE ID: CVE-2018-17769 State: PUBLISHED Published: 2020-09-09T18:55:33 Last Updated: 2024-08-05T10:54:10.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ingenico Telium 2 POS terminals have a buffer overflow via the 0x26 command of the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. Additional Analyst Notes: - CVE Program Container: References: - https://ingenico.us/smart-terminals/telium2 - https://youtu.be/gtbS3Gr264w - https://youtu.be/oyUD7RDJsJs - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-16/
CVE ID: CVE-2018-17770 State: PUBLISHED Published: 2020-09-09T18:55:37 Last Updated: 2024-08-05T10:54:10.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ingenico Telium 2 POS terminals have a buffer overflow via the RemotePutFile command of the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. Additional Analyst Notes: - CVE Program Container: References: - https://www.ptsecurity.com/ww-en/analytics/threatscape/ - https://ingenico.us/smart-terminals/telium2 - https://youtu.be/gtbS3Gr264w - https://youtu.be/oyUD7RDJsJs
CVE ID: CVE-2018-17771 State: PUBLISHED Published: 2020-09-09T18:55:41 Last Updated: 2024-08-05T10:54:10.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ingenico Telium 2 POS terminals have hardcoded FTP credentials. This is fixed in Telium 2 SDK v9.32.03 patch N. Additional Analyst Notes: - CVE Program Container: References: - https://ingenico.us/smart-terminals/telium2 - https://youtu.be/gtbS3Gr264w - https://youtu.be/oyUD7RDJsJs - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-11/
CVE ID: CVE-2018-17772 State: PUBLISHED Published: 2020-09-09T18:55:45 Last Updated: 2024-08-05T10:54:10.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ingenico Telium 2 POS terminals allow arbitrary code execution via the TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. Additional Analyst Notes: - CVE Program Container: References: - https://ingenico.us/smart-terminals/telium2 - https://youtu.be/gtbS3Gr264w - https://youtu.be/oyUD7RDJsJs - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-18/
CVE ID: CVE-2018-17773 State: PUBLISHED Published: 2020-09-09T18:55:49 Last Updated: 2024-08-05T10:54:10.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ingenico Telium 2 POS terminals have a buffer overflow via SOCKET_TASK in the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. Additional Analyst Notes: - CVE Program Container: References: - https://ingenico.us/smart-terminals/telium2 - https://youtu.be/gtbS3Gr264w - https://youtu.be/oyUD7RDJsJs - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-19/
CVE ID: CVE-2018-17774 State: PUBLISHED Published: 2020-09-09T18:55:53 Last Updated: 2024-08-05T10:54:10.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ingenico Telium 2 POS terminals have an insecure NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. Additional Analyst Notes: - CVE Program Container: References: - https://ingenico.us/smart-terminals/telium2 - https://youtu.be/gtbS3Gr264w - https://youtu.be/oyUD7RDJsJs - https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-12/
CVE ID: CVE-2018-17775 State: PUBLISHED Published: 2018-10-08T17:00:00 Last Updated: 2024-08-05T10:54:10.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Seqrite End Point Security v7.4 has "Everyone: (F)" permission for %PROGRAMFILES%\Seqrite\Seqrite, which allows local users to gain privileges by replacing an executable file with a Trojan horse. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/149586/Seqrite-End-Point-Security-7.4-Privilege-Escalation.html - https://www.exploit-db.com/exploits/45568/
CVE ID: CVE-2018-17776 State: PUBLISHED Published: 2018-09-28T21:00:00 Last Updated: 2024-08-05T10:54:10.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: PCProtect Anti-Virus v4.8.35 has "Everyone: (F)" permission for %PROGRAMFILES(X86)%\PCProtect, which allows local users to gain privileges by replacing an executable file with a Trojan horse. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/149581/PCProtect-4-8.35-Privilege-Escalation.html - https://www.exploit-db.com/exploits/45503/
CVE ID: CVE-2018-17777 State: PUBLISHED Published: 2018-12-18T22:00:00 Last Updated: 2024-08-05T10:54:10.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DVA-5592 A1_WI_20180823 devices. If the PIN of the page "/ui/cbpc/login" is the default Parental Control PIN (0000), it is possible to bypass the login form by editing the path of the cookie "sid" generated by the page. The attacker will have access to the router control panel with administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.gubello.me/blog/router-dlink-dva-5592-authentication-bypass/
CVE ID: CVE-2018-17780 State: PUBLISHED Published: 2018-09-29T19:00:00 Last Updated: 2024-08-05T10:54:10.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105521 - https://www.inputzero.io/2018/09/bug-bounty-telegram-cve-2018-17780.html
CVE ID: CVE-2018-17781 State: PUBLISHED Published: 2018-09-29T17:00:00 Last Updated: 2024-08-05T10:54:10.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataView objects is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securitytracker.com/id/1041769
CVE ID: CVE-2018-17782 State: PUBLISHED Published: 2018-10-30T18:00:00 Last Updated: 2024-08-05T10:54:10.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Manage Filters page (manage_filter_page.php) in MantisBT 2.1.0 through 2.17.1 allows remote attackers (if access rights permit it) to inject arbitrary code (if CSP settings permit it) through a crafted project name. Additional Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/blog/archives/mantisbt/613 - https://mantisbt.org/bugs/view.php?id=24813
CVE ID: CVE-2018-17783 State: PUBLISHED Published: 2018-10-30T18:00:00 Last Updated: 2024-08-05T10:54:10.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Edit Filter page (manage_filter_edit page.php) in MantisBT 2.1.0 through 2.17.1 allows remote attackers (if access rights permit it) to inject arbitrary code (if CSP settings permit it) through a crafted project name. Additional Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/blog/archives/mantisbt/613 - https://mantisbt.org/bugs/view.php?id=24814