Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-18661 State: PUBLISHED Published: 2018-10-26T13:00:00 Last Updated: 2024-08-05T11:15:59.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif_lzw.c. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3864-1/ - http://bugzilla.maptools.org/show_bug.cgi?id=2819 - http://www.securityfocus.com/bid/105762 - https://access.redhat.com/errata/RHSA-2019:2053 - https://lists.debian.org/debian-lts-announce/2019/11/msg00027.html
CVE ID: CVE-2018-18662 State: PUBLISHED Published: 2018-10-26T13:00:00 Last Updated: 2024-09-12T16:21:04.944116 Vendors: n/a Products: n/a Problem Types: n/a Description: There is an out-of-bounds read in fz_run_t3_glyph in fitz/font.c in Artifex MuPDF 1.14.0, as demonstrated by mutool. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105755 - https://bugs.ghostscript.com/show_bug.cgi?id=700043 - https://github.com/TeamSeri0us/pocs/tree/master/mupdf - https://lists.debian.org/debian-lts-announce/2020/07/msg00019.html - https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=164ddc22ee0d5b63a81d5148f44c37dd132a9356
CVE ID: CVE-2018-18665 State: PUBLISHED Published: 2018-12-28T17:00:00 Last Updated: 2024-08-05T11:16:00.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of Nexxus (NXX) aka NexxusToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/n0pn0pn0p/smart_contract_-vulnerability/blob/master/PolyAi.md - https://etherscan.io/address/0x7627de4b93263a6a7570b8dafa64bae812e5c394#code - https://github.com/NexxusUniversity/nexxuscoin/issues/2
CVE ID: CVE-2018-18666 State: PUBLISHED Published: 2018-12-28T17:00:00 Last Updated: 2024-08-05T11:16:00.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of SwftCoin (SWFTC) aka SwftCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SwftCoins/SwftCoin/issues/1 - https://github.com/n0pn0pn0p/smart_contract_-vulnerability/blob/master/PolyAi.md - https://etherscan.io/address/0x0bb217e40f8a5cb79adf04e1aab60e5abd0dfc1e#code
CVE ID: CVE-2018-18667 State: PUBLISHED Published: 2018-12-28T17:00:00 Last Updated: 2024-08-05T11:16:00.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of Pylon (PYLNT) aka PylonToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value, a related issue to CVE-2018-11812. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/n0pn0pn0p/smart_contract_-vulnerability/blob/master/PolyAi.md - https://etherscan.io/address/0x7703c35cffdc5cda8d27aa3df2f9ba6964544b6e#code - https://github.com/klenergy/ethereum-contracts/issues/1
CVE ID: CVE-2018-18668 State: PUBLISHED Published: 2019-08-26T20:04:54 Last Updated: 2024-08-05T11:16:00.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter, aka the adm/config_form_update.php cf_title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gnuboard/gnuboard5/compare/15b2e73...2549172 - https://github.com/gnuboard/gnuboard5/commit/a45241f4bc46aee1ab2cc0749f6444b043681edf#diff-53f7f220c2d2861a98444adf09471496 - https://github.com/gnuboard/gnuboard5/releases/tag/5.3.2.0
CVE ID: CVE-2018-18669 State: PUBLISHED Published: 2019-07-23T14:47:13 Last Updated: 2024-08-05T11:16:00.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board title contents" parameter, aka the adm/board_form_update.php bo_subject parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gnuboard/gnuboard5/releases/tag/5.3.2.0 - https://github.com/gnuboard/gnuboard5/compare/15b2e73...2549172 - https://github.com/gnuboard/gnuboard5/commit/a45241f4bc46aee1ab2cc0749f6444b043681edf#diff-94ec20582215bda9f55fadcefe68c168
CVE ID: CVE-2018-18670 State: PUBLISHED Published: 2019-07-23T16:03:29 Last Updated: 2024-08-05T11:16:00.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" parameter, aka the adm/config_form_update.php cf_1~10 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gnuboard/gnuboard5/releases/tag/5.3.2.0 - https://github.com/gnuboard/gnuboard5/compare/15b2e73...2549172 - https://github.com/gnuboard/gnuboard5/commit/a45241f4bc46aee1ab2cc0749f6444b043681edf#diff-d1ecbee80f57fde59063c4fafcef1bce
CVE ID: CVE-2018-18671 State: PUBLISHED Published: 2019-07-23T15:44:21 Last Updated: 2024-08-05T11:16:00.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board head contents" parameter, aka the adm/board_form_update.php bo_mobile_content_head parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gnuboard/gnuboard5/releases/tag/5.3.2.0 - https://github.com/gnuboard/gnuboard5/compare/15b2e73...2549172 - https://github.com/gnuboard/gnuboard5/commit/a45241f4bc46aee1ab2cc0749f6444b043681edf#diff-05e83ad5f4c0624ed6ff385aed1bf33b
CVE ID: CVE-2018-18672 State: PUBLISHED Published: 2019-07-23T16:11:20 Last Updated: 2024-08-05T11:16:00.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board head contents" parameter, aka the adm/board_form_update.php bo_content_head parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gnuboard/gnuboard5/releases/tag/5.3.2.0 - https://github.com/gnuboard/gnuboard5/compare/15b2e73...2549172 - https://github.com/gnuboard/gnuboard5/commit/a45241f4bc46aee1ab2cc0749f6444b043681edf#diff-05e83ad5f4c0624ed6ff385aed1bf33b
CVE ID: CVE-2018-18673 State: PUBLISHED Published: 2019-07-23T15:48:11 Last Updated: 2024-08-05T11:16:00.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Menu Link" parameter, aka the adm/menu_list_update.php me_link parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gnuboard/gnuboard5/releases/tag/5.3.2.0 - https://github.com/gnuboard/gnuboard5/compare/15b2e73...2549172 - https://github.com/gnuboard/gnuboard5/commit/a45241f4bc46aee1ab2cc0749f6444b043681edf#diff-bf0e19438d64230c1541bcbf9746e6e5
CVE ID: CVE-2018-18674 State: PUBLISHED Published: 2019-11-07T20:46:57 Last Updated: 2024-08-05T11:16:00.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board tail contents" parameter, aka the adm/board_form_update.php bo_content_tail parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gnuboard/gnuboard5/releases/tag/5.3.2.0 - https://github.com/gnuboard/gnuboard5/compare/15b2e73...2549172 - https://github.com/gnuboard/gnuboard5/commit/a45241f4bc46aee1ab2cc0749f6444b043681edf#diff-653a2b5a93ed2ca9b8c809ba723638c1
CVE ID: CVE-2018-18675 State: PUBLISHED Published: 2019-07-23T16:16:39 Last Updated: 2024-08-05T11:16:00.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board title contents" parameter, aka the adm/board_form_update.php bo_mobile_subject parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gnuboard/gnuboard5/releases/tag/5.3.2.0 - https://github.com/gnuboard/gnuboard5/compare/15b2e73...2549172 - https://github.com/gnuboard/gnuboard5/commit/a45241f4bc46aee1ab2cc0749f6444b043681edf#diff-94ec20582215bda9f55fadcefe68c168
CVE ID: CVE-2018-18676 State: PUBLISHED Published: 2019-07-23T16:19:38 Last Updated: 2024-08-05T11:16:00.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board tail contents" parameter, aka the adm/board_form_update.php bo_mobile_content_tail parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gnuboard/gnuboard5/releases/tag/5.3.2.0 - https://github.com/gnuboard/gnuboard5/compare/15b2e73...2549172 - https://github.com/gnuboard/gnuboard5/commit/a45241f4bc46aee1ab2cc0749f6444b043681edf#diff-653a2b5a93ed2ca9b8c809ba723638c1
CVE ID: CVE-2018-18678 State: PUBLISHED Published: 2019-10-30T17:58:11 Last Updated: 2024-08-05T11:16:00.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board group extra contents" parameter, aka the adm/boardgroup_form_update.php gr_1~10 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gnuboard/gnuboard5/releases/tag/5.3.2.0 - https://github.com/gnuboard/gnuboard5/compare/15b2e73...2549172 - https://github.com/gnuboard/gnuboard5/commit/a45241f4bc46aee1ab2cc0749f6444b043681edf#diff-d87f2c71fb4fe131465ba1ff0a5d573d
CVE ID: CVE-2018-18688 State: PUBLISHED Published: 2021-01-07T17:38:45 Last Updated: 2024-08-05T11:16:00.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or annotations, Body Updates are displayed to the user without any action by the signature-validation logic. This affects Foxit Reader before 9.4 and PhantomPDF before 8.3.9 and 9.x before 9.4. It also affects LibreOffice, Master PDF Editor
s Foxit Reader before 9.4 and PhantomPDF before 8.3.9 and 9.x before 9.4. It also affects LibreOffice, Master PDF Editor, Nitro Pro, Nitro Reader, Nuance Power PDF Standard, PDF Editor 6 Pro, PDFelement6 Pro, PDF Studio Viewer 2018, PDF Studio Pro, Perfect PDF 10 Premium, and Perfect PDF Reader. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://pdf-insecurity.org/signature/evaluation_2018.html - https://pdf-insecurity.org/signature/signature.html - https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/
CVE ID: CVE-2018-18689 State: PUBLISHED Published: 2021-01-07T17:59:16 Last Updated: 2024-08-05T11:16:00.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, a Signature Wrapping vulnerability exists in multiple products. An attacker can use /ByteRange and xref manipulations that are not detected by the signature-validation logic. This affects Foxit Reader before 9.4 and PhantomPDF before 8.3.9 and 9.x before 9.4. It also affects eXpert PDF 12 Ultimate, Expert PDF Reader, Nitro Pro, Nitro Reader, PDF Architect 6, PDF Editor
ore 9.4. It also affects eXpert PDF 12 Ultimate, Expert PDF Reader, Nitro Pro, Nitro Reader, PDF Architect 6, PDF Editor 6 Pro, PDF Experte 9 Ultimate, PDFelement6 Pro, PDF Studio Viewer 2018, PDF Studio Pro, PDF-XChange Editor and Viewer, Perfect PDF 10 Premium, Perfect PDF Reader, Soda PDF, and Soda PDF Desktop. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://pdf-insecurity.org/signature/evaluation_2018.html - https://pdf-insecurity.org/signature/signature.html - https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/
CVE ID: CVE-2018-18690 State: PUBLISHED Published: 2018-10-26T18:00:00 Last Updated: 2024-08-05T11:16:00.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational until the next mount by triggering an unchecked error condition during an xfs attribute change, because xfs_attr_shortform_addname in fs/xfs/libxfs/xfs_attr.c mishandles ATTR_REPLACE operations with conversion of an attr from short to long form. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3848-2/ - https://usn.ubuntu.com/3847-1/ - https://usn.ubunt
CVE Program Container: References: - https://usn.ubuntu.com/3848-2/ - https://usn.ubuntu.com/3847-1/ - https://usn.ubuntu.com/3847-2/ - https://usn.ubuntu.com/3849-1/ - https://usn.ubuntu.com/3849-2/ - https://usn.ubuntu.com/3848-1/ - https://usn.ubuntu.com/3847-3/ - https://bugzilla.suse.com/show_bug.cgi?id=1105025 - http://www.securityfocus.com/bid/105753 - https://bugzilla.kernel.org/show_bug.cgi?id=199119 - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7b38460dc8e4eafba06c78f8e37099d3b34d473c - https://github.com/torvalds/linux/commit/7b38460dc8e4eafba06c78f8e37099d3b34d473c - https://lists.d
f8e37099d3b34d473c - https://github.com/torvalds/linux/commit/7b38460dc8e4eafba06c78f8e37099d3b34d473c - https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html
CVE ID: CVE-2018-18692 State: PUBLISHED Published: 2019-02-23T11:00:00 Last Updated: 2024-08-05T11:16:00.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected Cross-Site scripting (XSS) vulnerability in SEMCO Semcosoft 5.3 allows remote attackers to inject arbitrary web scripts or HTML via the username parameter to the Login Form. Additional Analyst Notes: - CVE Program Container: References: - https://atomic111.github.io/article/semcosoft-cross-site-scripting
CVE ID: CVE-2018-18694 State: PUBLISHED Published: 2018-10-26T20:00:00Z Last Updated: 2024-09-16T16:43:54.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/index.php?id=filesmanager in Monstra CMS 3.0.4 allows remote authenticated administrators to trigger stored XSS via JavaScript content in a file whose name lacks an extension. Such a file is interpreted as text/html in certain cases. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monstra-cms/monstra/issues/459
CVE ID: CVE-2018-18695 State: PUBLISHED Published: 2018-11-01T17:00:00 Last Updated: 2024-08-05T11:16:00.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: M2SOFT Report Designer Viewer 5.0 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via a crafted MRD file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DelspoN/CVE/tree/master/CVE-2018-18695
CVE ID: CVE-2018-18696 State: PUBLISHED Published: 2018-12-28T17:00:00 Last Updated: 2024-08-05T11:16:00.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: main.aspx in Microstrategy Analytics 10.4.0026.0049 and earlier has CSRF. NOTE: The vendor claims that documentation for preventing a CSRF attack has been provided (https://community.microstrategy.com/s/article/KB37643-New-security-feature-introduced-in-MicroStrategy-Web-9-0?language=en_US) and disagrees that this issue is a vulnerability. They also claim that MicroStrategy was never properly informed of this issue via normal support channels or their vulnerability reporting page on their website, so they were unable to evalu
s issue via normal support channels or their vulnerability reporting page on their website, so they were unable to evaluate the report or explain how this is something their customers view as a feature and not a security vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://raw.githubusercontent.com/Siros96/MicroStrategy_CSRF/master/PoC - https://seclists.org/bugtraq/2018/Dec/3 - https://community.microstrategy.com/s/article/KB37643-New-security-feature-introduced-in-MicroStrategy-Web-9-0?language=en_US
CVE ID: CVE-2018-18698 State: PUBLISHED Published: 2018-12-24T17:00:00 Last Updated: 2024-08-05T11:16:00.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Xiaomi Mi A1 tissot_sprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store cleartext Wi-Fi passwords in logcat during the process of setting up the phone as a hotspot. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/0x5h1v4m/CVE-ID-s/blob/master/CVE-2018-18698/MI%20A1.txt
CVE ID: CVE-2018-18699 State: PUBLISHED Published: 2018-10-27T16:00:00Z Last Updated: 2024-09-17T01:50:35.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GoPro gpmf-parser 1.2.1. There is an out-of-bounds write in OpenMP4Source in GPMF_mp4reader.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gopro/gpmf-parser/issues/43
CVE ID: CVE-2018-18700 State: PUBLISHED Published: 2018-10-27T16:00:00 Last Updated: 2024-08-05T11:16:00.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions d_name(), d_encoding(), and d_local_name() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm. Additional Analyst Notes: - CVE Program Container: References: - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87681 - https://usn.ubuntu.com/4326-1/ - https://u
Container: References: - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87681 - https://usn.ubuntu.com/4326-1/ - https://usn.ubuntu.com/4336-1/
CVE ID: CVE-2018-18701 State: PUBLISHED Published: 2018-10-27T16:00:00 Last Updated: 2024-08-05T11:16:00.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions next_is_type_qual() and cplus_demangle_type() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm. Additional Analyst Notes: - CVE Program Container: References: - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87675 - https://usn.ubuntu.com/4326-1/ - https:
am Container: References: - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87675 - https://usn.ubuntu.com/4326-1/ - https://usn.ubuntu.com/4336-1/
CVE ID: CVE-2018-18702 State: PUBLISHED Published: 2018-10-27T19:00:00 Last Updated: 2024-08-05T11:16:00.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: spider.admincp.php in iCMS v7.0.11 allows SQL injection via admincp.php?app=spider&do=import_rule because the upfile content is base64 decoded, deserialized, and used for database insertion. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idreamsoft/iCMS/issues/42
CVE ID: CVE-2018-18703 State: PUBLISHED Published: 2018-10-27T19:00:00 Last Updated: 2024-08-05T11:16:00.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhpTpoint Mailing Server Using File Handling 1.0 suffers from multiple Arbitrary File Read vulnerabilities in different sections that allow an attacker to read sensitive files on the system via directory traversal, bypassing the login page, as demonstrated by the Mailserver_filesystem/home.php coninb, consent, contrsh, condrft, or conspam parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/149965/PHPTPoint-Mailing-Server-Using-File-Handling-1.0-Arbitrary-File-Read.
es: - https://packetstormsecurity.com/files/149965/PHPTPoint-Mailing-Server-Using-File-Handling-1.0-Arbitrary-File-Read.html
CVE ID: CVE-2018-18704 State: PUBLISHED Published: 2018-10-27T19:00:00 Last Updated: 2024-08-05T11:16:00.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhpTpoint Pharmacy Management System suffers from a SQL injection vulnerability in the index.php username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45682/
CVE ID: CVE-2018-18705 State: PUBLISHED Published: 2018-10-27T19:00:00 Last Updated: 2024-08-05T11:16:00.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhpTpoint hospital management system suffers from multiple SQL injection vulnerabilities via the index.php user parameter associated with LOGIN.php, or the rno parameter to ALIST.php, DUNDEL.php, PDEL.php, or PUNDEL.php. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/149942/PHPTPoint-Hospital-Management-System-1-SQL-Injection.html
CVE ID: CVE-2018-18706 State: PUBLISHED Published: 2018-10-27T22:00:00 Last Updated: 2024-08-05T11:16:00.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function "fromDhcpListClient" for a request, it is directly used in a sprintf to a local variable placed on the stack, which overrides the return address of the function. Additional Analyst Notes: - CVE Program Container: References: - https://git
errides the return address of the function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zsjevilhex/iot/blob/master/route/tenda/tenda-06/Tenda.md
CVE ID: CVE-2018-18707 State: PUBLISHED Published: 2018-10-27T22:00:00 Last Updated: 2024-08-05T11:16:00.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "ssid" parameter for a post request, the value is directly used in a strcpy to a local variable placed on the stack, which overrides the return address of the function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zsjevilhex/iot/blo
of the function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zsjevilhex/iot/blob/master/route/tenda/tenda-07/Tenda.md
CVE ID: CVE-2018-18708 State: PUBLISHED Published: 2018-10-27T22:00:00 Last Updated: 2024-08-05T11:16:00.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function "fromAddressNat" for a post request, the value is directly used in a sprintf to a local variable placed on the stack, which overrides the return address of the function. Additional Analyst Notes: - CVE Program Container: References: - htt