Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/ - https://github.com/cacalabs/libcaca/issues/37 - https://github.com/cacalabs/libcaca/commit/3e52dabe3e64dc50f4422effe364a1457a8a8592
CVE ID: CVE-2018-20546 State: PUBLISHED Published: 2018-12-28T03:00:00 Last Updated: 2024-08-05T12:05:17.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for the default bpp case. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3860-2/ - https://bugzilla.redhat.com/show_bug.cgi?id=1652622 - https://lists.debian.org/debian-lts-announce/2019/01/msg00007.html - https://usn.ubuntu.com/3860-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html - https://lists.fedoraproject.org/archives/list/package-announce%40li
g/opensuse-security-announce/2019-04/msg00033.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/ - https://github.com/cacalabs/libcaca/issues/38 - https://github.com/cacalabs/libcaca/commit/1022d97496c7899e8641515af363381b31ae2f05
CVE ID: CVE-2018-20547 State: PUBLISHED Published: 2018-12-28T03:00:00 Last Updated: 2024-08-05T12:05:17.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for 24bpp data. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3860-2/ - https://bugzilla.redhat.com/show_bug.cgi?id=1652624 - https://lists.debian.org/debian-lts-announce/2019/01/msg00007.html - https://usn.ubuntu.com/3860-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora
-security-announce/2019-04/msg00033.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/
CVE ID: CVE-2018-20548 State: PUBLISHED Published: 2018-12-28T03:00:00 Last Updated: 2024-08-05T12:05:17.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 1bpp data. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3860-2/ - https://bugzilla.redhat.com/show_bug.cgi?id=1652625 - https://usn.ubuntu.com/3860-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/ - https://lists.fedo
/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/
CVE ID: CVE-2018-20549 State: PUBLISHED Published: 2018-12-28T03:00:00 Last Updated: 2024-08-05T12:05:17.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal WRITE memory access at caca/file.c (function caca_file_read) in libcaca 0.99.beta19. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3860-2/ - https://lists.debian.org/debian-lts-announce/2019/01/msg00007.html - https://bugzilla.redhat.com/show_bug.cgi?id=1652628 - https://usn.ubuntu.com/3860-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/messag
/2019-04/msg00033.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/
CVE ID: CVE-2018-20551 State: PUBLISHED Published: 2018-12-28T04:00:00 Last Updated: 2024-08-05T12:05:17.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/poppler/poppler/merge_requests/146 - https://usn.ubuntu.com/3886-1/ - https://gitlab.freedesktop.org/poppler/poppler/issues/703 - https://access.redhat.com/errata/RHSA-2019:2713
CVE ID: CVE-2018-20552 State: PUBLISHED Published: 2018-12-28T13:00:00Z Last Updated: 2024-09-16T22:21:00.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appneta/tcpreplay/issues/530 - https://github.com/appneta/tcpreplay/pull/532/commits/6b830a1640ca20528032c89a4fdd8291a4d2d8b2
CVE ID: CVE-2018-20553 State: PUBLISHED Published: 2018-12-28T13:00:00Z Last Updated: 2024-09-16T16:13:19.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tcpreplay before 4.3.1 has a heap-based buffer over-read in get_l2len in common/get.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appneta/tcpreplay/issues/530 - https://github.com/appneta/tcpreplay/pull/532/commits/6b830a1640ca20528032c89a4fdd8291a4d2d8b2
CVE ID: CVE-2018-20555 State: PUBLISHED Published: 2019-03-18T15:32:40 Last Updated: 2024-08-05T12:05:17.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_secret, consumer_key, and consumer_secret values by reading the dcwp_twitter.php source code. This leads to Twitter account takeover. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9204 - https://twitter.com/fs0c131y/status/1085828186708066304 - https://github.com/fs0c131y/CVE-2018-20555
CVE ID: CVE-2018-20556 State: PUBLISHED Published: 2019-03-18T15:43:48 Last Updated: 2024-08-05T12:05:17.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the booking_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151692/WordPress-Booking-Calendar-8.4.3-SQL-Injection.html - https://www.exploit-db.com/exploits/46377/ - https://gist.github.com/B0UG/a750c2c204825453e6faf898ea6d09f6 - https://vulners.com/exploitdb/EDB-ID:46377
CVE ID: CVE-2018-20557 State: PUBLISHED Published: 2018-12-28T15:00:00Z Last Updated: 2024-09-16T17:43:42.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/page.php?rec=edit has XSS via the page_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss3
CVE ID: CVE-2018-20558 State: PUBLISHED Published: 2018-12-28T15:00:00Z Last Updated: 2024-09-17T01:15:43.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/system.php?rec=update has XSS via the site_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss8
CVE ID: CVE-2018-20559 State: PUBLISHED Published: 2018-12-28T15:00:00Z Last Updated: 2024-09-17T00:16:04.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product.php?rec=update has XSS via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss5
CVE ID: CVE-2018-20560 State: PUBLISHED Published: 2018-12-28T15:00:00Z Last Updated: 2024-09-16T22:45:06.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/show.php?rec=update has XSS via the show_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss2
CVE ID: CVE-2018-20561 State: PUBLISHED Published: 2018-12-28T15:00:00Z Last Updated: 2024-09-16T22:15:36.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article.php?rec=update has XSS via the title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss7
CVE ID: CVE-2018-20562 State: PUBLISHED Published: 2018-12-28T15:00:00Z Last Updated: 2024-09-17T03:29:01.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article_category.php?rec=update has XSS via the cat_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss6
CVE ID: CVE-2018-20563 State: PUBLISHED Published: 2018-12-28T15:00:00Z Last Updated: 2024-09-17T02:42:26.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/mobile.php?rec=system&act=update has XSS via the mobile_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss9
CVE ID: CVE-2018-20564 State: PUBLISHED Published: 2018-12-28T15:00:00Z Last Updated: 2024-09-16T20:57:38.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product_category.php?rec=update has XSS via the cat_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss4
CVE ID: CVE-2018-20565 State: PUBLISHED Published: 2018-12-28T15:00:00Z Last Updated: 2024-09-17T01:00:58.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/nav.php?rec=update has XSS via the nav_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss1
CVE ID: CVE-2018-20566 State: PUBLISHED Published: 2018-12-28T15:00:00Z Last Updated: 2024-09-16T20:07:33.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DouCo DouPHP 1.5 20181221. It allows full path disclosure in "Smarty error: unable to read resource" error messages for a crafted installation page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#information-disclosure
CVE ID: CVE-2018-20567 State: PUBLISHED Published: 2018-12-28T15:00:00Z Last Updated: 2024-09-16T19:51:37.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DouCo DouPHP 1.5 20181221. \install\index.php allows a reload of the product in opportunistic circumstances in which install.lock cannot be read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#reloadapplication
CVE ID: CVE-2018-20568 State: PUBLISHED Published: 2018-12-28T15:00:00Z Last Updated: 2024-09-17T01:36:11.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Administrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nabby27/CMS/pull/2
CVE ID: CVE-2018-20569 State: PUBLISHED Published: 2018-12-28T15:00:00Z Last Updated: 2024-09-16T18:04:12.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nabby27/CMS/pull/2
CVE ID: CVE-2018-20570 State: PUBLISHED Published: 2018-12-28T15:00:00 Last Updated: 2024-08-05T12:05:17.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/01/msg00003.html - https://github.com/mdadams/jasper/issues/191 - https://www.oracle.com/security-alerts/cpuapr2020.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
CVE ID: CVE-2018-20571 State: PUBLISHED Published: 2018-12-28T16:00:00Z Last Updated: 2024-09-17T02:16:22.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=Tpl/Add/id/.\Public\Config\config.ini.php to read the global configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AutismJH/damicms/issues/1
CVE ID: CVE-2018-20572 State: PUBLISHED Published: 2018-12-28T16:00:00Z Last Updated: 2024-09-17T01:06:25.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: WUZHI CMS 4.1.0 allows coreframe/app/coupon/admin/copyfrom.php SQL injection via the index.php?m=promote&f=index&v=search keywords parameter, a related issue to CVE-2018-15893. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/166
CVE ID: CVE-2018-20573 State: PUBLISHED Published: 2018-12-28T16:00:00.000Z Last Updated: 2025-11-03T21:44:07.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jbeder/yaml-cpp/issues/655
CVE ID: CVE-2018-20574 State: PUBLISHED Published: 2018-12-28T16:00:00.000Z Last Updated: 2025-11-03T21:44:08.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jbeder/yaml-cpp/issues/654
CVE ID: CVE-2018-20575 State: PUBLISHED Published: 2018-12-28T17:00:00 Last Updated: 2024-08-05T12:05:17.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Orange Livebox 00.96.320S devices have an undocumented /system_firmwarel.stm URI for manual firmware update. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03, Modem 5.4.1.10.1.1A, Hardware 02, and Arcadyan ARV7519RW22-A-L T VR9 1.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zadewg/LIVEBOX-0DAY
CVE ID: CVE-2018-20576 State: PUBLISHED Published: 2018-12-28T17:00:00 Last Updated: 2024-08-05T12:05:17.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Orange Livebox 00.96.320S devices allow cgi-bin/autodialing.exe and cgi-bin/phone_test.exe CSRF, leading to arbitrary outbound telephone calls to an attacker-specified telephone number. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03, Modem 5.4.1.10.1.1A, Hardware 02, and Arcadyan ARV7519RW22-A-L T VR9 1.2. Additional Analyst Notes: - CVE Program Container: References: - https://gbhackers.com/orange-adsl-modems/ - https://github.com/zadewg/LIVEBOX-0DAY
CVE ID: CVE-2018-20577 State: PUBLISHED Published: 2018-12-28T17:00:00 Last Updated: 2024-08-05T12:05:17.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Orange Livebox 00.96.320S devices allow cgi-bin/restore.exe, cgi-bin/firewall_SPI.exe, cgi-bin/setup_remote_mgmt.exe, cgi-bin/setup_pass.exe, and cgi-bin/upgradep.exe CSRF. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03, Modem 5.4.1.10.1.1A, Hardware 02, and Arcadyan ARV7519RW22-A-L T VR9 1.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zadewg/LIVEBOX-0DAY
CVE ID: CVE-2018-20578 State: PUBLISHED Published: 2018-12-28T18:00:00Z Last Updated: 2024-09-17T02:36:02.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NuttX before 7.27. The function netlib_parsehttpurl() in apps/netutils/netlib/netlib_parsehttpurl.c mishandles URLs longer than hostlen bytes (in the webclient, this is set by default to 40), leading to an Infinite Loop. The attack vector is the Location header of an HTTP 3xx response. Additional Analyst Notes: - CVE Program Container: References: - https://bitbucket.org/nuttx/nuttx/issues/119/denial-of-service-infinite-loop-while - https://bitbucket.org/nuttx/nuttx/downloads/nuttx-7_27-README.txt
CVE ID: CVE-2018-20579 State: PUBLISHED Published: 2018-12-28T18:00:00Z Last Updated: 2024-09-16T18:24:27.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Contiki-NG before 4.2 has a stack-based buffer overflow in the push function in os/lib/json/jsonparse.c that allows an out-of-bounds write of an '{' or '[' character. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/contiki-ng/contiki-ng/issues/601
CVE ID: CVE-2018-20580 State: PUBLISHED Published: 2019-05-03T19:57:55 Last Updated: 2024-08-05T12:05:17.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gscamelo/CVE-2018-20580 - https://www.exploit-db.com/exploits/46796/ - http://packetstormsecurity.com/files/152731/ReadyAPI-2.5.0-2.6.0-Remote-Code-Execution.html - https://vimeo.com/332912402 - https://vimeo.com/332912473
CVE ID: CVE-2018-20582 State: PUBLISHED Published: 2019-10-11T19:20:48 Last Updated: 2024-08-05T12:05:17.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GREE+ (aka com.gree.greeplus) application 1.4.0.8 for Android suffers from Cross Site Request Forgery. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40beefaaubee/dissecting-into-gree-android-application-43892d54b006 - https://play.google.com/store/apps/details?id=com.gree.greeplus
CVE ID: CVE-2018-20583 State: PUBLISHED Published: 2018-12-30T05:00:00Z Last Updated: 2024-09-16T21:57:28.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML (even if allow_unsafe_links is false) via a newline character (e.g., writing javascript as javascri%0apt). Additional Analyst Notes: - CVE Program Container: References: - https://commonmark.thephpleague.com/changelog/ - https://github.com/thephpleague/commonmark/issues/337 - https://github.com/thephpleague/commonmark/releases/tag/0.18.1
CVE ID: CVE-2018-20584 State: PUBLISHED Published: 2018-12-30T05:00:00 Last Updated: 2024-08-05T12:05:17.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an attempted conversion to the jp2 format. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/01/msg00003.html - http://www.securityfocus.com/bid/106356 - https://github.com/mdadams/jasper/issues/192 - https://security.gentoo.org/glsa/201908-03 - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2018-20586 State: PUBLISHED Published: 2020-03-12T20:34:08 Last Updated: 2024-08-05T12:05:17.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call. Additional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20586
CVE ID: CVE-2018-20587 State: PUBLISHED Published: 2019-02-11T12:00:00 Last Updated: 2024-08-05T12:05:17.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control. Local users can exploit this to steal currency by binding the RPC IPv4 localhost port, and forwarding requests to the IPv6 localhost port. Additional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20587 - https://medium.com/%40lukedashjr/cve-2018-20587-advisory-and-full-disclosure-a3105551e78b
CVE ID: CVE-2018-20588 State: PUBLISHED Published: 2018-12-30T14:00:00 Last Updated: 2024-08-05T12:05:17.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/support/unicodeconv/unicodeconv.c in libotfcc.a in otfcc v0.10.3-alpha has a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/caryll/otfcc/issues/59
CVE ID: CVE-2018-20589 State: PUBLISHED Published: 2018-12-30T18:00:00 Last Updated: 2024-08-05T12:05:17.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/add_pictures.php article ID. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nabby27/CMS/pull/3
CVE ID: CVE-2018-20590 State: PUBLISHED Published: 2018-12-30T18:00:00 Last Updated: 2024-08-05T12:05:17.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.php user ID. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nabby27/CMS/pull/3
CVE ID: CVE-2018-20591 State: PUBLISHED Published: 2018-12-30T18:00:00 Last Updated: 2024-08-05T12:05:17.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of libming v0.4.8. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by swftocxx. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/168