Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-10087 State: PUBLISHED Published: 2018-04-13T13:00:00 Last Updated: 2024-08-05T07:32:01.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel_wait4 function in kernel/exit.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service by triggering an attempted use of the -INT_MIN value. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3696-1/ - https://news.ycombinator.com/item?id=2972021 - https://usn.ubuntu.com/3754-1/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html - http://git.kernel.org/cgit/linux/kernel/git/to
1/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dd83c161fbcc5d8be637ab159c0de015cbff5ba4 - https://github.com/torvalds/linux/commit/dd83c161fbcc5d8be637ab159c0de015cbff5ba4 - https://usn.ubuntu.com/3696-2/ - http://www.securityfocus.com/bid/103774
CVE ID: CVE-2018-10088 State: PUBLISHED Published: 2018-06-08T12:00:00 Last Updated: 2024-08-05T07:32:00.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit - https://www.exploit-db.com/exploits/44864/
CVE ID: CVE-2018-10091 State: PUBLISHED Published: 2019-03-17T17:00:57 Last Updated: 2024-08-05T07:32:00.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow XSS. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151115/AudioCode-400HD-Cross-Site-scripting.html - http://seclists.org/fulldisclosure/2019/Jan/37
CVE ID: CVE-2018-10092 State: PUBLISHED Published: 2018-05-22T20:00:00 Last Updated: 2024-08-05T07:32:00.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin panel in Dolibarr before 7.0.2 might allow remote attackers to execute arbitrary commands by leveraging support for updating the antivirus command and parameters used to scan file uploads. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/5d121b2d3ae2a95abebc9dc31e4782cbc61a1f39 - https://github.com/Dolibarr/dolibarr/blob/7.0.2/ChangeLog - https://sysdream.com/news/lab/2018-05-21-cve-2018-10092-dolibarr-admin-panel-authenticated-remote-code-execution-rce-vul
https://sysdream.com/news/lab/2018-05-21-cve-2018-10092-dolibarr-admin-panel-authenticated-remote-code-execution-rce-vulnerability/ - http://www.openwall.com/lists/oss-security/2018/05/21/2
CVE ID: CVE-2018-10093 State: PUBLISHED Published: 2019-03-17T17:05:45 Last Updated: 2024-08-05T07:32:00.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151116/AudioCode-400HD-Remote-Command-Injection.html - http://seclists.org/fulldisclosure/2019/Jan/38 - https://www.exploit-db.com/exploits/46164/
CVE ID: CVE-2018-10094 State: PUBLISHED Published: 2018-05-22T20:00:00 Last Updated: 2024-08-05T07:32:01.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes. Additional Analyst Notes: - CVE Program Container: References: - https://sysdream.com/news/lab/2018-05-21-cve-2018-10094-dolibarr-sql-injection-vulnerability/ - http://www.openwall.com/lists/oss-security/2018/05/21/1 - https://www.exploit-db.com/exploits/44805/ - https://github.com/Dolibarr/dolibarr/blob/7.0.2/ChangeLog - https://github.com/Dolibarr/dolibarr/co
om/exploits/44805/ - https://github.com/Dolibarr/dolibarr/blob/7.0.2/ChangeLog - https://github.com/Dolibarr/dolibarr/commit/7ade4e37f24d6859987bb9f6232f604325633fdd
CVE ID: CVE-2018-10095 State: PUBLISHED Published: 2018-05-22T20:00:00 Last Updated: 2024-08-05T07:32:01.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2018/05/21/3 - https://sysdream.com/news/lab/2018-05-21-cve-2018-10095-dolibarr-xss-injection-vulnerability/ - https://github.com/Dolibarr/dolibarr/blob/7.0.2/ChangeLog - https://github.com/Dolibarr/dolibarr/commit/1dc466e1fb687cfe6
ttps://github.com/Dolibarr/dolibarr/blob/7.0.2/ChangeLog - https://github.com/Dolibarr/dolibarr/commit/1dc466e1fb687cfe647de4af891720419823ed56
CVE ID: CVE-2018-10096 State: PUBLISHED Published: 2018-04-13T16:00:00Z Last Updated: 2024-09-17T03:23:44.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: joyplus-cms 1.6.0 has XSS via the device_name parameter in a manager/admin_ajax.php?action=save flag=add request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/joyplus/joyplus-cms/issues/424
CVE ID: CVE-2018-10097 State: PUBLISHED Published: 2018-04-13T21:00:00Z Last Updated: 2024-09-16T17:14:48.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in Domain Trader 2.5.3 via the recoverlogin.php email_address parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/146855/Domaintrader-2.5.3-Cross-Site-Scripting.html
CVE ID: CVE-2018-10098 State: PUBLISHED Published: 2018-07-13T17:00:00 Last Updated: 2024-08-05T07:32:01.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MicroWorld eScan Internet Security Suite (ISS) for Business 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send a 0x830020E0 IOCTL request to \\.\econceal to cause a denial of service (BSOD). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Jul/53
CVE ID: CVE-2018-10099 State: PUBLISHED Published: 2018-11-20T09:00:00 Last Updated: 2024-08-05T07:32:01.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Monorail before 2018-04-04 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected by CSRF, and calculations of download times (for requests with duplicated columns) can be used to obtain sensitive information about the content of bug reports. Additional Analyst Notes: - CVE Program Container: References: - https://chromium.googlesource.com/infra/infra/+/0ff6b6453b6192987bd9240c1e872a7de5fb1313 - https://www.reddit.com/r/netsec/comments/9yiidf/xssearching_googles_bug_tracker_to_find_out/ea2
d9240c1e872a7de5fb1313 - https://www.reddit.com/r/netsec/comments/9yiidf/xssearching_googles_bug_tracker_to_find_out/ea2i7wz/ - https://medium.com/%40luanherrera/xs-searching-googles-bug-tracker-to-find-out-vulnerable-source-code-50d8135b7549
CVE ID: CVE-2018-10100 State: PUBLISHED Published: 2018-04-14T13:00:00 Last Updated: 2024-08-05T07:32:01.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Before WordPress 4.9.5, the redirection URL for the login page was not validated or sanitized if forced to use HTTPS. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040836 - https://core.trac.wordpress.org/changeset/42892 - https://wpvulndb.com/vulnerabilities/9054 - https://www.debian.org/security/2018/dsa-4193 - https://wordpress.org/news/2018/04/wordpress-4-9-5-security-and-maintenance-release/ - https://lists.debian.org/debian-lts-announce/2018/04/msg00031.html - https:
ss-4-9-5-security-and-maintenance-release/ - https://lists.debian.org/debian-lts-announce/2018/04/msg00031.html - https://codex.wordpress.org/Version_4.9.5 - https://github.com/WordPress/WordPress/commit/14bc2c0a6fde0da04b47130707e01df850eedc7e
CVE ID: CVE-2018-10101 State: PUBLISHED Published: 2018-04-14T13:00:00 Last Updated: 2024-08-05T07:32:01.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9053 - http://www.securityfocus.com/bid/104350 - http://www.securitytracker.com/id/1040836 - https://www.debian.org/security/2018/dsa-4193 - https://wordpress.org/news/2018/04/wordpress-4-9-5-security-and-maintenance-release/ - https://core.trac.wordpress.org/changeset/42894 - https://codex.wordpre
dpress-4-9-5-security-and-maintenance-release/ - https://core.trac.wordpress.org/changeset/42894 - https://codex.wordpress.org/Version_4.9.5 - https://github.com/WordPress/WordPress/commit/804363859602d4050d9a38a21f5a65d9aec18216
CVE ID: CVE-2018-10102 State: PUBLISHED Published: 2018-04-14T13:00:00 Last Updated: 2024-08-05T07:32:01.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Before WordPress 4.9.5, the version string was not escaped in the get_the_generator function, and could lead to XSS in a generator tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103775 - https://wpvulndb.com/vulnerabilities/9055 - http://www.securitytracker.com/id/1040836 - https://www.debian.org/security/2018/dsa-4193 - https://core.trac.wordpress.org/changeset/42893 - https://wordpress.org/news/2018/04/wordpress-4-9-5-security-and-maintenance-release/ - https://lists.d
changeset/42893 - https://wordpress.org/news/2018/04/wordpress-4-9-5-security-and-maintenance-release/ - https://lists.debian.org/debian-lts-announce/2018/04/msg00031.html - https://codex.wordpress.org/Version_4.9.5 - https://github.com/WordPress/WordPress/commit/31a4369366d6b8ce30045d4c838de2412c77850d
CVE ID: CVE-2018-10103 State: PUBLISHED Published: 2019-10-03T15:05:26 Last Updated: 2024-08-05T07:32:01.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES - https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html - https://seclists.org/bugtraq/2019/Oct/28 - https://www.debian.org/security/2019/dsa-4547 - https:/
19-10/msg00053.html - https://seclists.org/bugtraq/2019/Oct/28 - https://www.debian.org/security/2019/dsa-4547 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://support.f5.com/csp/article/K44551633?utm_source=f5support&amp%3Butm_medium=RSS - https://support.apple.com/kb/HT210788 - https://seclists.org/bugtraq/2019/Dec/23 - http://seclists.
p%3Butm_medium=RSS - https://support.apple.com/kb/HT210788 - https://seclists.org/bugtraq/2019/Dec/23 - http://seclists.org/fulldisclosure/2019/Dec/26 - https://security.netapp.com/advisory/ntap-20200120-0001/ - https://usn.ubuntu.com/4252-2/ - https://usn.ubuntu.com/4252-1/
CVE ID: CVE-2018-10105 State: PUBLISHED Published: 2019-10-03T15:07:15 Last Updated: 2024-08-05T07:32:00.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES - https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html - https://seclists.org/bugtraq/2019/Oct/28 - https://www.debian.org/security/2019/dsa-4547 - https:/
CVE ID: CVE-2018-10106 State: PUBLISHED Published: 2018-04-16T06:00:00 Last Updated: 2024-08-05T07:32:01.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have permission bypass and information disclosure in /htdocs/web/getcfg.php, as demonstrated by a /getcfg.php?a=%0a_POST_SERVICES%3DDEVICE.ACCOUNT%0aAUTHORIZED_GROUP%3D1 request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/iceMatcha/Some-Vulnerabilities-of-D-link-Dir815/blob/master/Vulnerabilities_Summary.md
CVE ID: CVE-2018-10107 State: PUBLISHED Published: 2018-04-16T06:00:00 Last Updated: 2024-08-05T07:32:01.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have XSS in the RESULT parameter to /htdocs/webinc/js/info.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/iceMatcha/Some-Vulnerabilities-of-D-link-Dir815/blob/master/Vulnerabilities_Summary.md
CVE ID: CVE-2018-10108 State: PUBLISHED Published: 2018-04-16T06:00:00 Last Updated: 2024-08-05T07:32:01.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have XSS in the Treturn parameter to /htdocs/webinc/js/bsc_sms_inbox.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/iceMatcha/Some-Vulnerabilities-of-D-link-Dir815/blob/master/Vulnerabilities_Summary.md
CVE ID: CVE-2018-10109 State: PUBLISHED Published: 2018-04-14T13:00:00 Last Updated: 2024-08-05T07:32:01.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the content section of a new page in the blog catalog. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44502/ - https://github.com/monstra-cms/monstra/issues/435
CVE ID: CVE-2018-10110 State: PUBLISHED Published: 2018-04-18T21:00:00 Last Updated: 2024-08-05T07:32:01.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-615 T1 devices allow XSS via the Add User feature. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/147184/D-Link-DIR-615-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/44473/ - https://hacksayan.wordpress.com/d-link-dir-615-wireless-router-persistent-cross-site-scripting-xss/
CVE ID: CVE-2018-10111 State: PUBLISHED Published: 2018-04-14T14:00:00 Last Updated: 2024-08-05T07:32:01.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GEGL through 0.3.32. The render_rectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of service (application crash) upon allocation failure. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xiaoqx/pocs/tree/master/gegl
CVE ID: CVE-2018-10112 State: PUBLISHED Published: 2018-04-14T14:00:00 Last Updated: 2024-08-05T07:32:01.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GEGL through 0.3.32. The gegl_tile_backend_swap_constructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to cause a denial of service (write access violation) or possibly have unspecified other impact via a malformed PNG file that is mishandled during a call to the babl_format_get_bytes_per_pixel function in babl-format.c in babl 0.1.46. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=795249 - https://github.com/xiaoq
tes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=795249 - https://github.com/xiaoqx/pocs/tree/master/gegl
CVE ID: CVE-2018-10113 State: PUBLISHED Published: 2018-04-14T14:00:00 Last Updated: 2024-08-05T07:32:01.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GEGL through 0.3.32. The process function in operations/external/ppm-load.c has unbounded memory allocation, leading to a denial of service (application crash) upon allocation failure. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xiaoqx/pocs/tree/master/gegl
CVE ID: CVE-2018-10114 State: PUBLISHED Published: 2018-04-14T14:00:00 Last Updated: 2024-08-05T07:32:01.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GEGL through 0.3.32. The gegl_buffer_iterate_read_simple function in buffer/gegl-buffer-access.c allows remote attackers to cause a denial of service (write access violation) or possibly have unspecified other impact via a malformed PPM file, related to improper restrictions on memory allocation in the ppm_load_read_header function in operations/external/ppm-load.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=795248 - https://github.com
yst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=795248 - https://github.com/xiaoqx/pocs/tree/master/gegl
CVE ID: CVE-2018-10115 State: PUBLISHED Published: 2018-05-02T21:00:00 Last Updated: 2024-08-05T07:32:01.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/sevenzip/discussion/45797/thread/adc65bfa/ - http://www.securitytracker.com/id/1040832 - http://www.securityfocus.com/bid/104132 - https://landave.io/2018/05/7-zip-from-uninitialized-memor
ker.com/id/1040832 - http://www.securityfocus.com/bid/104132 - https://landave.io/2018/05/7-zip-from-uninitialized-memory-to-remote-code-execution/
CVE ID: CVE-2018-10117 State: PUBLISHED Published: 2018-04-15T11:00:00Z Last Updated: 2024-09-16T20:52:08.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in idreamsoft iCMS V7.0.7. There is a CSRF vulnerability that can add an admin account via admincp.php?app=members&do=save&frame=iPHP. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idreamsoft/iCMS/issues/20
CVE ID: CVE-2018-10118 State: PUBLISHED Published: 2018-04-15T12:00:00 Last Updated: 2024-08-05T07:32:01.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monstra CMS 3.0.4 has Stored XSS via the Name field on the Create New Page screen under the admin/index.php?id=pages URI, related to plugins/box/pages/pages.admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monstra-cms/monstra/issues/436 - https://www.exploit-db.com/exploits/44855/
CVE ID: CVE-2018-10119 State: PUBLISHED Published: 2018-04-15T16:00:00 Last Updated: 2024-08-05T07:32:01.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format. Additional Analyst Notes: - CVE Program Container: References: - https://gerrit.libreoffice.org/#/c/48758/ - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=574
ner: References: - https://gerrit.libreoffice.org/#/c/48758/ - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5747 - https://access.redhat.com/errata/RHSA-2018:3054 - https://www.debian.org/security/2018/dsa-4178 - https://www.libreoffice.org/about-us/security/advisories/cve-2018-10119/ - https://usn.ubuntu.com/3883-1/ - https://gerrit.libreoffice.org/gitweb?p=core.git%3Ba=commit%3Bh=fdd41c995d1f719e92c6f083e780226114762f05 - https://gerrit.libreoffice.org/#/c/48751/ - https://lists.debian.org/debian-lts-announce/2018/04/msg00021.html - https://gerrit.libreoffice.org/#/c/48756/ - https://gerrit.libreoffice.org/#/c/48757/
CVE ID: CVE-2018-10120 State: PUBLISHED Published: 2018-04-15T16:00:00 Last Updated: 2024-08-05T07:32:01.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service (heap-based buffer overflow with write access) or possibly have unspecified other impact via a crafted document that contains a certain Microsoft Word record. Additional Analyst Notes: - CVE Program Container: References: - https://gerrit.libreoffice.org/#/c/49499/ - https://gerrit.libreoffice.org/#/c/494
CVE Program Container: References: - https://gerrit.libreoffice.org/#/c/49499/ - https://gerrit.libreoffice.org/#/c/49486/ - https://gerrit.libreoffice.org/gitweb?p=core.git%3Ba=commit%3Bh=017fcc2fcd00af17a97bd5463d89662404f57667 - https://access.redhat.com/errata/RHSA-2018:3054 - https://www.debian.org/security/2018/dsa-4178 - https://usn.ubuntu.com/3883-1/ - https://lists.debian.org/debian-lts-announce/2018/04/msg00021.html - https://www.libreoffice.org/about-us/security/advisories/cve-2018-10120/ - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6173 - https://gerrit.libreoffice.org/#/c/49500/
CVE ID: CVE-2018-10121 State: PUBLISHED Published: 2018-04-15T17:00:00Z Last Updated: 2024-09-17T03:13:40.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins/box/pages/pages.admin.php in Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the title section of an admin/index.php?id=pages&action=edit_page&name=error404 (aka Edit 404 page) action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monstra-cms/monstra/issues/437
CVE ID: CVE-2018-10122 State: PUBLISHED Published: 2018-04-16T03:00:00 Last Updated: 2024-08-05T07:32:01.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: QingDao Nature Easy Soft Chanzhi Enterprise Portal System (aka chanzhieps) pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/goodrain-apps/chanzhieps/issues/1
CVE ID: CVE-2018-10123 State: PUBLISHED Published: 2018-05-16T13:00:00 Last Updated: 2024-08-05T07:32:01.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: p910nd on Inteno IOPSYS 2.0 through 4.2.0 allows remote attackers to read, or append data to, arbitrary files via requests on TCP port 9100. Additional Analyst Notes: - CVE Program Container: References: - https://neonsea.uk/blog/2018/04/15/pwn910nd.html - https://www.exploit-db.com/exploits/44635/