Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-17907 State: PUBLISHED Published: 2018-11-05T23:00:00Z Last Updated: 2024-09-17T00:35:43.519Z Vendors: Omron Products: CX-Supervisor Problem Types: CWE-119 Description: When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can force the application to read a value outside of an array. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-290-01 - http://www.securityfocus.com/bid/105691
CVE ID: CVE-2018-17908 State: PUBLISHED Published: 2018-10-29T18:00:00 Last Updated: 2024-08-05T11:01:14.890Z Vendors: n/a Products: WebAccess Versions 8.3.2 and prior. Problem Types: CWE-284 Description: WebAccess Versions 8.3.2 and prior. During installation, the application installer disables user access control and does not re-enable it after the installation is complete. This could allow an attacker to run elevated arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-298-02 - http://www.securityfocus.com/bid/105736 - http://www.securitytracker.com/id/1041957
CVE ID: CVE-2018-17909 State: PUBLISHED Published: 2018-11-05T23:00:00Z Last Updated: 2024-09-16T20:58:29.132Z Vendors: Omron Products: CX-Supervisor Problem Types: CWE-416 Description: When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed memory, which may allow an attacker to execute code under the context of the application. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-290-01 - http://www.securityfocus.com/bid/105691
CVE ID: CVE-2018-17910 State: PUBLISHED Published: 2018-10-29T18:00:00 Last Updated: 2024-08-05T11:01:14.512Z Vendors: n/a Products: WebAccess Versions 8.3.2 and prior. Problem Types: CWE-121 Description: WebAccess Versions 8.3.2 and prior. The application fails to properly validate the length of user-supplied data, causing a buffer overflow condition that allows for arbitrary remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-298-02 - http://www.securityfocus.com/bid/105736 - http://www.securitytracker.com/id/1041957
CVE ID: CVE-2018-17911 State: PUBLISHED Published: 2018-10-17T02:00:00Z Last Updated: 2024-09-16T18:34:43.642Z Vendors: LCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA ME Products: LAquis SCADA Problem Types: CWE-121 Description: LAquis SCADA Versions 4.1.0.3870 and prior has several stack-based buffer overflow vulnerabilities, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://laquisscada.com/instale1.php - https://ics-cert.us-cert.gov/advisories/ICSA-18-289-01
CVE ID: CVE-2018-17912 State: PUBLISHED Published: 2018-11-02T14:00:00 Last Updated: 2024-08-05T11:01:14.606Z Vendors: unknown Products: CASE Suite Problem Types: CWE-611 Description: An XXE vulnerability exists in CASE Suite Versions 3.10 and prior when processing parameter entities, which may allow remote file disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105804 - https://ics-cert.us-cert.gov/advisories/ICSA-18-305-04
CVE ID: CVE-2018-17913 State: PUBLISHED Published: 2018-11-05T23:00:00Z Last Updated: 2024-09-16T17:47:42.838Z Vendors: Omron Products: CX-Supervisor Problem Types: CWE-704 Description: A type confusion vulnerability exists when processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, which may allow an attacker to execute code in the context of the application. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-290-01 - http://www.securityfocus.com/bid/105691
CVE ID: CVE-2018-17914 State: PUBLISHED Published: 2018-11-02T13:00:00 Last Updated: 2024-08-05T11:01:14.684Z Vendors: unknown Products: InduSoft Web Studio, and InTouch Edge HMI (formerly InTouch Machine Edition) Problem Types: CWE-258 Description: InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. This vulnerability could allow an unauthenticated user to remotely execute code with the same privileges as that of the InduSoft Web Studio or InTouch Edge HMI (formerly InTouch Machine Edition) runtime. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-30
ime. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-305-01 - https://www.tenable.com/security/research/tra-2018-34
CVE ID: CVE-2018-17915 State: PUBLISHED Published: 2018-10-10T15:00:00Z Last Updated: 2024-09-16T22:56:29.656Z Vendors: Hangzhou Xiongmai Technology Co., Ltd Products: XMeye P2P Cloud Server Problem Types: CWE-311 Description: All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the update server with malicious update code. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06
CVE ID: CVE-2018-17916 State: PUBLISHED Published: 2018-11-02T13:00:00 Last Updated: 2024-08-05T11:01:14.594Z Vendors: unknown Products: InduSoft Web Studio, and InTouch Edge HMI (formerly InTouch Machine Edition) Problem Types: CWE-121 Description: InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. A remote attacker could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed. If InduSoft Web Studio remote communication security was not enabled, or a password was left blank,
ode to be executed. If InduSoft Web Studio remote communication security was not enabled, or a password was left blank, a remote user could send a carefully crafted packet to invoke an arbitrary process, with potential for code to be executed. The code would be executed under the privileges of the InduSoft Web Studio or InTouch Edge HMI runtime and could lead to a compromise of the InduSoft Web Studio or InTouch Edge HMI server machine. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-305-01 - https://www.tenable.com/security/research/tra-2018-34
CVE ID: CVE-2018-17917 State: PUBLISHED Published: 2018-10-10T15:00:00Z Last Updated: 2024-09-16T17:59:25.518Z Vendors: Hangzhou Xiongmai Technology Co., Ltd Products: XMeye P2P Cloud Server Problem Types: CWE-341 Description: All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06
CVE ID: CVE-2018-17918 State: PUBLISHED Published: 2018-11-02T15:00:00 Last Updated: 2024-08-05T11:01:14.680Z Vendors: unknown Products: Circontrol CirCarLife all versions prior to 4.3.1 Problem Types: CWE-288 Description: Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105816 - https://ics-cert.us-cert.gov/advisories/ICSA-18-305-03
CVE ID: CVE-2018-17919 State: PUBLISHED Published: 2018-10-10T15:00:00Z Last Updated: 2024-09-16T18:03:48.747Z Vendors: Hangzhou Xiongmai Technology Co., Ltd Products: XMeye P2P Cloud Server Problem Types: CWE-912 Description: All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumented user account "default" with its default password to login to XMeye and access/view video streams. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-282-06
CVE ID: CVE-2018-17921 State: PUBLISHED Published: 2018-10-24T22:00:00Z Last Updated: 2024-09-17T01:46:32.072Z Vendors: GAIN Electronic Co. Ltd Products: SAGA1-L8B Problem Types: CWE-284 Description: SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that may allow an attacker to force-pair the device without human interaction. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-296-02 - http://www.securityfocus.com/bid/105729
CVE ID: CVE-2018-17922 State: PUBLISHED Published: 2018-11-02T15:00:00 Last Updated: 2024-08-05T11:01:14.638Z Vendors: unknown Products: Circontrol CirCarLife all versions prior to 4.3.1 Problem Types: CWE-522 Description: Circontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored in clear text in a log file that is accessible without authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105816 - https://ics-cert.us-cert.gov/advisories/ICSA-18-305-03
CVE ID: CVE-2018-17923 State: PUBLISHED Published: 2018-10-24T22:00:00Z Last Updated: 2024-09-16T16:27:58.179Z Vendors: GAIN Electronic Co. Ltd Products: SAGA1-L8B Problem Types: CWE-287 Description: SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker with physical access to the product may able to reprogram it. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-296-02 - http://www.securityfocus.com/bid/105729
CVE ID: CVE-2018-17924 State: PUBLISHED Published: 2018-12-07T14:00:00 Last Updated: 2024-08-05T11:01:14.626Z Vendors: n/a Products: Rockwell Automation Problem Types: CWE-306 Description: Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller in the system is set to Hard RUN mode. When the affected device accepts this new IP configuration, a loss of communication occurs between the device and the rest of the system as the system traffic is still attemp
tion, a loss of communication occurs between the device and the rest of the system as the system traffic is still attempting to communicate with the device via the overwritten IP address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106132 - https://ics-cert.us-cert.gov/advisories/ICSA-18-310-02
CVE ID: CVE-2018-17925 State: PUBLISHED Published: 2018-10-10T17:00:00Z Last Updated: 2024-09-16T23:25:32.834Z Vendors: GE Products: iFix Problem Types: CWE-623 Description: Multiple instances of this vulnerability (Unsafe ActiveX Control Marked Safe For Scripting) have been identified in the third-party ActiveX object provided to GE iFIX versions 2.0 - 5.8 by Gigasoft. Only the independent use of the Gigasoft charting package outside the iFIX product may expose users to the reported vulnerability. The reported method shown to impact Internet Explorer is not exposed in the iFIX product, nor is the core functionality of the iFIX product known to be impacted. Additional Analyst Notes: - CVE Pr
iFIX product, nor is the core functionality of the iFIX product known to be impacted. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105540 - https://ics-cert.us-cert.gov/advisories/ICSA-18-282-01
CVE ID: CVE-2018-17926 State: PUBLISHED Published: 2019-01-31T17:00:00Z Last Updated: 2024-09-16T22:09:25.254Z Vendors: ABB Products: M2M ETHERNET Problem Types: CWE-287 Description: The product M2M ETHERNET (FW Versions 2.22 and prior, ETH-FW Versions 1.01 and prior) is vulnerable in that an attacker can upload a malicious language file by bypassing the user authentication mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106243 - https://ics-cert.us-cert.gov/advisories/ICSA-18-352-07
CVE ID: CVE-2018-17927 State: PUBLISHED Published: 2018-10-11T22:00:00Z Last Updated: 2024-09-17T03:59:28.401Z Vendors: Delta Electronics Products: Delta Industrial Automation TPEditor Problem Types: CWE-787 Description: In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple out-of-bounds write vulnerabilities may be exploited by processing specially crafted project files lacking user input validation, which may cause the system to write outside the intended buffer area and may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105682 - https://ics-cert.us-cert.gov/advisories/ICSA-18-284-
Container: References: - http://www.securityfocus.com/bid/105682 - https://ics-cert.us-cert.gov/advisories/ICSA-18-284-03
CVE ID: CVE-2018-17928 State: PUBLISHED Published: 2019-01-31T21:00:00Z Last Updated: 2024-09-17T02:36:09.547Z Vendors: ABB Products: CMS-770 Problem Types: CWE-287 Description: The product CMS-770 (Software Versions 1.7.1 and prior)is vulnerable that an attacker can read sensitive configuration files by bypassing the user authentication mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106244 - https://ics-cert.us-cert.gov/advisories/ICSA-18-352-06
CVE ID: CVE-2018-17929 State: PUBLISHED Published: 2018-10-11T22:00:00Z Last Updated: 2024-09-17T02:16:47.170Z Vendors: Delta Electronics Products: Delta Industrial Automation TPEditor Problem Types: CWE-121 Description: In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files lacking user input validation before copying data from project files onto the stack and may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105682 - https://ics-cert.us-cert.gov/adviso
es: - CVE Program Container: References: - http://www.securityfocus.com/bid/105682 - https://ics-cert.us-cert.gov/advisories/ICSA-18-284-03
CVE ID: CVE-2018-17930 State: PUBLISHED Published: 2018-11-28T23:00:00Z Last Updated: 2024-09-17T04:00:05.112Z Vendors: ICS-CERT Products: Teledyne DALSA Sherlock Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability has been identified in Teledyne DALSA Sherlock Version 7.2.7.4 and prior, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105967 - https://ics-cert.us-cert.gov/advisories/ICSA-18-324-01%2C - https://www.teledynedalsa.com/en/products/imaging/vision-software/sherlock/
CVE ID: CVE-2018-17931 State: PUBLISHED Published: 2018-10-30T21:00:00 Last Updated: 2024-08-05T11:01:14.712Z Vendors: n/a Products: VGo Robot Problem Types: CWE-284 Description: If an attacker has physical access to the VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) they may be able to alter scripts, which may allow code execution with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01
CVE ID: CVE-2018-17932 State: PUBLISHED Published: 2020-11-02T16:51:15 Last Updated: 2024-08-05T11:01:14.716Z Vendors: n/a Products: JUUKO K-800 Problem Types: CWE-294 Description: JUUKO K-800 (Firmware versions prior to numbers ending ...9A, ...9B, ...9C, etc.) is vulnerable to a replay attack and command forgery, which could allow attackers to replay commands, control the device, view commands, or cause the device to stop running. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-301-01
CVE ID: CVE-2018-17933 State: PUBLISHED Published: 2018-10-30T21:00:00 Last Updated: 2024-08-05T11:01:14.711Z Vendors: n/a Products: VGo Robot Problem Types: CWE-285 Description: VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) connected to the VGo XAMPP. User accounts may be able to execute commands that are outside the scope of their privileges and within the scope of an admin account. If an attacker has access to VGo XAMPP Client credentials, they may be able to execute admin commands on the connected robot. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01
CVE ID: CVE-2018-17934 State: PUBLISHED Published: 2018-11-27T21:00:00 Last Updated: 2024-08-05T11:01:14.683Z Vendors: n/a Products: NUUO CMS Problem Types: CWE-22 Description: NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the intended directory. This could allow an attacker to impersonate a legitimate user, obtain restricted information, or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02
CVE ID: CVE-2018-17935 State: PUBLISHED Published: 2018-10-24T13:00:00Z Last Updated: 2024-09-16T20:27:41.320Z Vendors: Telecrane Products: F25 Series Problem Types: CWE-294 Description: All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105732 - https://ics-cert.us-cert.gov/advisories/ICSA-18-296-03
CVE ID: CVE-2018-17936 State: PUBLISHED Published: 2018-11-27T21:00:00 Last Updated: 2024-08-05T11:01:14.717Z Vendors: n/a Products: NUUO CMS Problem Types: CWE-434 Description: NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can modify or overwrite configuration files to the server, which could allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02
CVE ID: CVE-2018-17937 State: PUBLISHED Published: 2019-03-13T17:00:00Z Last Updated: 2024-09-16T19:36:34.191Z Vendors: ICS-CERT Products: gpsd and microjson (Open Source Project) Problem Types: CWE-121 Description: gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow remote attackers to execute arbitrary code on embedded platforms via traffic on Port 2947/TCP or crafted JSON inputs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107029 - https://ics-cert.us-cert.gov/advisories/ICSA-18-310-01 - https://lists.debian.org/debian-lts-announce/2019/03/msg00040.h
https://ics-cert.us-cert.gov/advisories/ICSA-18-310-01 - https://lists.debian.org/debian-lts-announce/2019/03/msg00040.html - https://security.gentoo.org/glsa/202009-17 - https://lists.debian.org/debian-lts-announce/2021/10/msg00024.html
CVE ID: CVE-2018-17938 State: PUBLISHED Published: 2018-10-03T08:00:00 Last Updated: 2024-08-05T11:01:14.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.zimbra.com/show_bug.cgi?id=109021 - https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.10
CVE ID: CVE-2018-17939 State: PUBLISHED Published: 2018-12-04T23:00:00 Last Updated: 2024-08-05T11:01:14.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via the merge request JSON endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ce/issues/51956 - https://about.gitlab.com/2018/10/05/critical-security-release-11-3-4/
CVE ID: CVE-2018-17942 State: PUBLISHED Published: 2018-10-03T08:00:00 Last Updated: 2024-08-05T11:01:14.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: The convert_to_decimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/coreutils/gnulib/commit/278b4175c9d7dd47c1a3071554aac02add3b3c35 - https://savannah.gnu.org/bugs/?func=detailitem&item_id=54686 - https://lists.gnu.org/archive/html/bug-gnulib/2018-09/msg00107.html - https://lists.fedoraproject.org/archives/list/package-
s://lists.gnu.org/archive/html/bug-gnulib/2018-09/msg00107.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A5UQRNQE6XHMD5UYYHAU3VQWAYHIPMQS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMGHTVYH3KAFN34QXNSGEQDSTV7MCOQW/
CVE ID: CVE-2018-17944 State: PUBLISHED Published: 2019-03-12T16:00:00 Last Updated: 2024-08-05T11:01:14.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: On certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious administrator can discover LDAP or SMTP credentials by changing that server's hostname to one that they control, and then capturing the credentials that are sent there. This occurs because stored credentials are not automatically deleted upon that type of hostname change. Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/index?page=content&id=TE909
CVE ID: CVE-2018-17946 State: PUBLISHED Published: 2018-10-03T08:00:00Z Last Updated: 2024-09-17T03:08:19.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id, method, Gallerymessage, Galleryerror, or Galleryupdated parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/slideshow-gallery/#developers - http://www.defensecode.com/advisories/DC-2017-01-014_WordPress_Tribulant_Slideshow_Gallery_Plugin_Advisory.pdf
CVE ID: CVE-2018-17947 State: PUBLISHED Published: 2018-10-03T08:00:00Z Last Updated: 2024-09-17T00:15:32.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Snazzy Maps plugin before 1.1.5 for WordPress has XSS via the text or tab parameter. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2018/Jul/72 - https://wordpress.org/plugins/snazzy-maps/#developers - http://www.defensecode.com/advisories/DC-2018-05-006_WordPress_Snazzy_Maps_Plugin_Advisory.pdf
CVE ID: CVE-2018-17948 State: PUBLISHED Published: 2018-11-20T18:00:00Z Last Updated: 2024-09-16T18:13:03.787Z Vendors: Access Manager Products: Access Manager Problem Types: Open Redirect Description: An open redirect vulnerability exists in the Access Manager Identity Provider prior to 4.4 SP3. Additional Analyst Notes: - CVE Program Container: References: - https://support.microfocus.com/kb/doc.php?id=7023530
CVE ID: CVE-2018-17949 State: PUBLISHED Published: 2018-12-12T14:00:00 Last Updated: 2024-08-05T11:01:14.661Z Vendors: Micro Focus Products: NetIQ iManager 3.1 SP2 Problem Types: XSS Description: Cross site scripting vulnerability in iManager prior to 3.1 SP2. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/imanager-31/imanager312_releasenotes/data/imanager312_releasenotes.html