Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ere Horizon Connection Server, Horizon Agent or Horizon Client are installed. Note: This issue doesn't apply to Horizon 6, 7 Agents installed on Linux systems or Horizon Clients installed on non-Windows systems. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041430 - https://www.vmware.com/security/advisories/VMSA-2018-0019.html - http://www.securityfocus.com/bid/105031
CVE ID: CVE-2018-6971 State: PUBLISHED Published: 2018-07-25T13:00:00Z Last Updated: 2024-09-17T03:39:03.443Z Vendors: VMware Products: Horizon View Agent Problem Types: Local information disclosure vulnerability Description: VMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure vulnerability due to insecure logging of credentials in the vmmsi.log file when an account other than the currently logged on user is specified during installation (including silent installations). Successful exploitation of this issue may allow low privileged users access to the credentials specified during the Horizon View Agent installation. Additional Analyst Notes: - CVE Program
access to the credentials specified during the Horizon View Agent installation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041357 - http://www.securityfocus.com/bid/104883 - http://www.securitytracker.com/id/1041358 - https://www.vmware.com/security/advisories/VMSA-2018-0018.html
CVE ID: CVE-2018-6972 State: PUBLISHED Published: 2018-07-25T13:00:00Z Last Updated: 2024-09-16T23:06:29.205Z Vendors: VMware Products: ESXi, Workstation, Fusion Problem Types: Denial-of-service vulnerability Description: VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain a denial-of-service vulnerability due to NULL pointer dereference issue in RPC handler. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs. Additional Analyst Notes: - CVE Program Container: References
attackers with normal user privileges to crash their VMs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104884 - http://www.securitytracker.com/id/1041356 - http://www.securitytracker.com/id/1041357 - https://www.vmware.com/security/advisories/VMSA-2018-0018.html
CVE ID: CVE-2018-6973 State: PUBLISHED Published: 2018-08-15T12:00:00Z Last Updated: 2024-09-17T02:41:38.547Z Vendors: VMware Products: Workstation, Fusion Problem Types: Out-of-bounds write vulnerability Description: VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in the e1000 device. This issue may allow a guest to execute code on the host. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041491 - https://www.vmware.com/security/advisories/VMSA-2018-0022.html - http://www.securityfocus.com/bid/105094
CVE ID: CVE-2018-6974 State: PUBLISHED Published: 2018-10-16T20:00:00Z Last Updated: 2024-09-16T19:46:18.799Z Vendors: VMware Products: ESXi, Workstation, Fusion Problem Types: Out-of-bounds read vulnerability Description: VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to execute code on the host. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105660 - http://www.securitytracker.com/id/1041876 - http://www.securitytracker
nces: - http://www.securityfocus.com/bid/105660 - http://www.securitytracker.com/id/1041876 - http://www.securitytracker.com/id/1041875 - https://www.vmware.com/security/advisories/VMSA-2018-0026.html
CVE ID: CVE-2018-6975 State: PUBLISHED Published: 2018-09-11T15:00:00Z Last Updated: 2024-09-17T02:27:25.051Z Vendors: VMware Products: AirWatch Agent for iOS prior to 5.8.1 Problem Types: Data protection vulnerability Description: The AirWatch Agent for iOS prior to 5.8.1 contains a data protection vulnerability whereby the files and keychain entries in the Agent are not encrypted. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2018-0023.html - http://www.securityfocus.com/bid/105356 - http://www.securitytracker.com/id/1041604
CVE ID: CVE-2018-6976 State: PUBLISHED Published: 2018-09-11T15:00:00Z Last Updated: 2024-09-16T17:32:37.077Z Vendors: VMware Products: Content Locker for iOS Problem Types: Data protection vulnerability Description: The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database. This vulnerability relates to unencrypted filenames and associated metadata in SQLite database for the Content Locker. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2018-0023.html - http://www.securityfocus.com/bid/105367 - http://www.securitytracker.com/id/1041604
CVE ID: CVE-2018-6977 State: PUBLISHED Published: 2018-10-09T20:00:00Z Last Updated: 2024-09-16T20:26:19.691Z Vendors: VMware Products: ESXi, Workstation, Fusion Problem Types: Denial-of-service vulnerability Description: VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infinite loop in a 3D-rendering shader. Successfully exploiting this issue may allow an attacker with normal user privileges in the guest to make the VM unresponsive, and in some cases, possibly result other VMs on the host or the host itself becoming unresponsive. Additional Analyst Notes: - CVE Program Container: References: - http://www.
t or the host itself becoming unresponsive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105549 - http://www.securitytracker.com/id/1041821 - https://www.vmware.com/security/advisories/VMSA-2018-0025.html - http://www.securitytracker.com/id/1041822
CVE ID: CVE-2018-6978 State: PUBLISHED Published: 2018-12-18T20:00:00 Last Updated: 2024-08-05T06:17:17.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: vRealize Operations (7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6.1.11286876) contains a local privilege escalation vulnerability due to improper permissions of support scripts. Admin user of the vROps application with shell access may exploit this issue to elevate the privileges to root on a vROps machine. Note: the admin user (non-sudoer) should not be confused with root of the vROps machine. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/adviso
e vROps machine. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2018-0031.html - http://www.securityfocus.com/bid/106242
CVE ID: CVE-2018-6979 State: PUBLISHED Published: 2018-10-05T13:00:00Z Last Updated: 2024-09-17T01:12:18.994Z Vendors: VMware Products: VMware Workspace ONE Unified Endpoint Management Console (AirWatch Console) Problem Types: SAML authentication bypass Description: The VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0.7, 9.5.x prior to 9.5.0.16, 9.4.x prior to 9.4.0.22, 9.3.x prior to 9.3.0.25, 9.2.x prior to 9.2.3.27, and 9.1.x prior to 9.1.5.6 contains a SAML authentication bypass vulnerability which can be leveraged during device enrollment. This vulnerability may allow for a malicious actor to impersonate an authorized SA
e leveraged during device enrollment. This vulnerability may allow for a malicious actor to impersonate an authorized SAML session if certificate-based authentication is enabled. This vulnerability is also relevant if certificate-based authentication is not enabled, but the outcome of exploitation is limited to an information disclosure (Important Severity) in those cases. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2018-0024.html - http://www.securitytracker.com/id/1041808
CVE ID: CVE-2018-6980 State: PUBLISHED Published: 2018-11-13T22:00:00 Last Updated: 2024-08-05T06:17:17.509Z Vendors: VMware Products: VMware vRealize Log Insight Problem Types: Authorization bypass vulnerability Description: VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user registration method. Successful exploitation of this issue may allow Admin users with view only permission to perform certain administrative functions which they are not allowed to perform. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2018-0028.html - http://www.secu
- CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2018-0028.html - http://www.securityfocus.com/bid/105925
CVE ID: CVE-2018-6981 State: PUBLISHED Published: 2018-12-04T14:00:00 Last Updated: 2024-08-05T06:17:17.343Z Vendors: VMware Products: VMware ESXi, VMware Workstation, and VMware Fusion Problem Types: uninitialized stack memory Description: VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware Workstation 14.1.3 or below, VMware Fusion 11, VMware Fusion 10.1.3 or below contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may allow a guest to execute code on the host. Additional Analyst Notes: - CVE Program Container: References: - http://www.se
llow a guest to execute code on the host. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1042055 - http://www.securityfocus.com/bid/105881 - https://www.vmware.com/security/advisories/VMSA-2018-0027.html - http://www.securitytracker.com/id/1042054
CVE ID: CVE-2018-6982 State: PUBLISHED Published: 2018-12-04T14:00:00 Last Updated: 2024-08-05T06:17:17.491Z Vendors: VMware Products: VMware ESXi Problem Types: uninitialized stack memory Description: VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may lead to an information leak from host to guest. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1042055 - http://www.securityfocus.com/bid/105882 - https://www.vmware.com/security/advisories/VMSA-2018-0027.html
CVE ID: CVE-2018-6983 State: PUBLISHED Published: 2018-11-27T17:00:00 Last Updated: 2024-08-05T06:17:17.413Z Vendors: VMware Products: VMware Workstation and Fusion Problem Types: Integer overflow vulnerability Description: VMware Workstation (15.x before 15.0.2 and 14.x before 14.1.5) and Fusion (11.x before 11.0.2 and 10.x before 10.1.5) contain an integer overflow vulnerability in the virtual network devices. This issue may allow a guest to execute code on the host. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2018-0030.html - http://www.securityfocus.com/bid/105986
CVE ID: CVE-2018-6985 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-6986 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-6987 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-6988 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-6989 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-6990 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-6991 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-6992 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-6993 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-6994 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-6995 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-6996 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-6997 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-6998 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-6999 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7000 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7001 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7002 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7003 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7004 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7005 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7006 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7007 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7008 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7009 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7010 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7011 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7012 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7013 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7014 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7015 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7016 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7017 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7018 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7019 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7020 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7021 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7022 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7023 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7024 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7025 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7026 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7027 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7028 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7029 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7030 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7031 State: REJECTED Published: 2019-01-17T17:00:00 Last Updated: 2019-01-17T16:57:01 Description: No description available.
CVE ID: CVE-2018-7032 State: PUBLISHED Published: 2018-02-14T15:00:00Z Last Updated: 2024-09-16T17:28:55.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/840014
CVE ID: CVE-2018-7033 State: PUBLISHED Published: 2018-03-15T22:00:00 Last Updated: 2024-08-05T06:17:17.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4254 - https://www.schedmd.com/news.php?id=201 - https://lists.debian.org/debian-lts-announce/2018/04/msg00032.html - https://lists.schedmd.com/pipermail/slurm-announce/2018/000006.html - https://lists.debian.org/debian-lts-announce/2018/07/msg00029.html
CVE ID: CVE-2018-7034 State: PUBLISHED Published: 2018-02-14T16:00:00Z Last Updated: 2024-09-16T22:35:37.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW-751DR v1.03B03, TEW-752DRU v1.03B01, and TEW733GR v1.03B01 devices allow authentication bypass via an AUTHORIZED_GROUP=1 value, as demonstrated by a request for getcfg.php. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.securiteam.com/index.php/archives/3627
CVE ID: CVE-2018-7035 State: PUBLISHED Published: 2018-04-05T14:00:00 Last Updated: 2024-08-05T06:17:17.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to inject JavaScript via HTML content in an editor, which will result in Stored XSS when an Administrator tries to edit the same content, as demonstrated by use of the source editor for HTML mode in an Add Blog action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gleez/cms/issues/794
CVE ID: CVE-2018-7039 State: PUBLISHED Published: 2018-02-14T19:00:00Z Last Updated: 2024-09-16T20:17:14.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: CCN-lite 2.0.0 Beta allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact because the ccnl_ndntlv_prependBlob function in ccnl-pkt-ndntlv.c can be called with wrong arguments. Specifically, there is an incorrect integer data type causing a negative third argument in some cases of crafted TLV data with inconsistent length information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cn-uofbasel/ccn-lite/issues/191
CVE ID: CVE-2018-7046 State: PUBLISHED Published: 2018-02-20T15:00:00 Last Updated: 2024-08-05T06:17:17.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary code execution vulnerability in Kentico 9 through 11 allows remote authenticated users to execute arbitrary operating system commands in a dynamic .NET code evaluation context via C# code in a "Pages -> Edit -> Template -> Edit template properties -> Layout" box. NOTE: the vendor has responded that there is intended functionality for authorized users to edit and update ascx code layout Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/541790/100/0/threaded
CVE ID: CVE-2018-7047 State: PUBLISHED Published: 2018-03-01T20:00:00 Last Updated: 2024-08-05T06:17:17.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1. The file system may be read and written to via JMX using the default JMX credentials (remote code execution may be possible as well). Additional Analyst Notes: - CVE Program Container: References: - https://www.wowza.com/docs/wowza-streaming-engine-4-7-1-release-notes - https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2018-7047.txt
CVE ID: CVE-2018-7048 State: PUBLISHED Published: 2018-03-01T20:00:00 Last Updated: 2024-08-05T06:17:17.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service (memory consumption) via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://www.wowza.com/docs/wowza-streaming-engine-4-7-1-release-notes - https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2018-7048.txt
CVE ID: CVE-2018-7049 State: PUBLISHED Published: 2018-03-01T20:00:00 Last Updated: 2024-08-05T06:17:17.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Wowza Streaming Engine before 4.7.1. There is an XSS vulnerability in the HTTP providers (com.wowza.wms.http.HTTPProviderMediaList and com.wowza.wms.http.streammanager.HTTPStreamManager) causing script injection and/or reflection via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://www.wowza.com/docs/wowza-streaming-engine-4-7-1-release-notes - https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2018-7049.txt
CVE ID: CVE-2018-7050 State: PUBLISHED Published: 2018-02-15T20:00:00 Last Updated: 2024-08-05T06:17:17.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. A NULL pointer dereference occurs for an "empty" nick. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4162 - https://irssi.org/security/irssi_sa_2018_02.txt - http://openwall.com/lists/oss-security/2018/02/15/1 - https://usn.ubuntu.com/3590-1/