Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1974 State: PUBLISHED Published: 2019-03-11T22:00:00Z Last Updated: 2024-09-16T16:43:47.558Z Severity: HIGH (CVSS 7.5 CVSS:3.0/A:H/AC:H/AV:N/C:H/I:H/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: MQ Problem Types: Gain Privileges Description: IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM X-Force ID: 153915. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/153915 - https://www.ibm.com/support/docview.wss?uid=ibm10792043
CVE ID: CVE-2018-1975 State: PUBLISHED Published: 2019-05-16T14:50:14.195317Z Last Updated: 2024-09-16T18:19:45.388Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/I:L/C:L/S:C/PR:L/AC:L/AV:N/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: Rational DOORS Web Access Problem Types: Cross-Site Scripting Description: IBM Rational DOORS Web Access 9.5.1 through 9.5.2.9, and 9.6 through 9.6.1.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153916. Additional Analyst Notes: - CVE Program Container: References: -
osure within a trusted session. IBM X-Force ID: 153916. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10883198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153916
CVE ID: CVE-2018-1976 State: PUBLISHED Published: 2019-01-29T16:00:00Z Last Updated: 2024-09-17T02:53:30.173Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:H/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 5.0.0.0 through 5.0.8.4 is impacted by sensitive information disclosure via a REST API that could allow a user with administrative privileges to obtain highly sensitive information. IBM X-Force ID: 154031. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/154031 - http://www.securityfocus.com/bid/106792 - https://www.ibm.com/support/do
ge.xforce.ibmcloud.com/vulnerabilities/154031 - http://www.securityfocus.com/bid/106792 - https://www.ibm.com/support/docview.wss?uid=ibm10843130
CVE ID: CVE-2018-1977 State: PUBLISHED Published: 2018-12-14T15:30:00Z Last Updated: 2024-09-17T00:11:53.091Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:H/AC:H/AV:N/C:N/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Denial of Service Description: IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) contains a denial of service vulnerability. A remote, authenticated DB2 user could exploit this vulnerability by issuing a specially-crafted SELECT statement with TRUNCATE function. IBM X-Force ID: 154032. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106222 - https://exchange.x
ional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/154032 - http://www.ibm.com/support/docview.wss?uid=ibm10788089
CVE ID: CVE-2018-1978 State: PUBLISHED Published: 2019-03-11T22:00:00Z Last Updated: 2024-09-16T20:11:48.872Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 154069. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10740413 - http://www.securityfocus.com/bid/
ram Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10740413 - http://www.securityfocus.com/bid/107398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/154069
CVE ID: CVE-2018-1980 State: PUBLISHED Published: 2019-03-11T22:00:00Z Last Updated: 2024-09-17T01:50:39.838Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 154078. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10740413 - https://exchange.xforce.ibmcloud.
ram Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10740413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/154078 - http://www.securityfocus.com/bid/107398
CVE ID: CVE-2018-1982 State: PUBLISHED Published: 2019-03-14T23:00:00Z Last Updated: 2024-09-16T19:01:33.404Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Team Concert Problem Types: Cross-Site Scripting Description: IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 154135. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulner
ID: 154135. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/154135 - http://www.securityfocus.com/bid/107419 - http://www.ibm.com/support/docview.wss?uid=ibm10875364
CVE ID: CVE-2018-1983 State: PUBLISHED Published: 2019-03-14T23:00:00Z Last Updated: 2024-09-17T01:31:51.060Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Team Concert Problem Types: Cross-Site Scripting Description: IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 154136. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulner
ID: 154136. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/154136 - http://www.securityfocus.com/bid/107419 - http://www.ibm.com/support/docview.wss?uid=ibm10875364
CVE ID: CVE-2018-1984 State: PUBLISHED Published: 2019-03-14T23:00:00Z Last Updated: 2024-09-16T20:47:19.635Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Team Concert Problem Types: Cross-Site Scripting Description: IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 154137. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107419 - h
ID: 154137. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107419 - http://www.ibm.com/support/docview.wss?uid=ibm10875364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/154137
CVE ID: CVE-2018-1985 State: PUBLISHED Published: 2020-08-24T15:30:29.323615Z Last Updated: 2024-09-16T16:32:50.588Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/I:N/UI:N/AC:L/C:N/AV:L/S:U/PR:H/A:H/E:U/RL:O/RC:C) Vendors: IBM Products: Security Trusteer Rapport, Security Rapport for MacOS Problem Types: Denial of Service Description: IBM Trusteer Rapport/Apex 3.6.1908.22 contains an unused legacy driver which could allow a user with administrator privileges to cause a buffer overflow that would result in a kernel panic. IBM X-Force ID: 154207. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10869212 - https://exchange.xforce.ibmcloud.com
Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10869212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/154207
CVE ID: CVE-2018-1987 State: PUBLISHED Published: 2019-08-02T14:10:12.747975Z Last Updated: 2024-09-17T02:52:22.207Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/PR:N/S:U/AC:H/I:N/AV:L/UI:N/C:H/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Protect for Enterprise Resource Planning Problem Types: Obtain Information Description: IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect node password may be displayed in plain text in the ERP trace file. IBM X-Force ID: 154280. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10883782 - https://exchange.xforce.ibmcloud.com/vulnerab
er: References: - http://www.ibm.com/support/docview.wss?uid=ibm10883782 - https://exchange.xforce.ibmcloud.com/vulnerabilities/154280
CVE ID: CVE-2018-1990 State: PUBLISHED Published: 2019-05-10T14:40:19.958799Z Last Updated: 2024-09-16T23:15:20.872Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:L/A:N/C:L/I:N/AV:N/S:U/PR:N/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: Cloud App Management Problem Types: Obtain Information Description: IBM Cloud App Management V2018.2.0, V2018.4.0, and V2018.4.1 could allow an attacker to obtain sensitive configuration information using a specially crafted HTTP request. IBM X-Force ID: 154283. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10883350 - https://exchange.xforce.ibmcloud.com/vulnerabilities/154283 - http://www.securityfocus.
rt/docview.wss?uid=ibm10883350 - https://exchange.xforce.ibmcloud.com/vulnerabilities/154283 - http://www.securityfocus.com/bid/108327
CVE ID: CVE-2018-1991 State: PUBLISHED Published: 2019-05-22T14:45:18.466199Z Last Updated: 2024-09-16T18:08:31.176Z Severity: LOW (CVSS 2.7 CVSS:3.0/A:N/S:U/PR:H/AV:N/C:L/I:N/UI:N/AC:L/RC:C/RL:O/E:U) Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 5.0.0.0, and 5.0.8.6 could could return sensitive information that could provide critical information as to the underlying software stack in CMC UI headers. IBM X-Force ID: 154284. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10871970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/154284
CVE ID: CVE-2018-1992 State: PUBLISHED Published: 2019-03-21T14:35:28.145154Z Last Updated: 2024-09-16T17:18:29.221Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/PR:H/AV:L/S:U/I:H/UI:N/AC:H/A:H/C:H/RC:C/E:U/RL:O) Vendors: IBM Products: Power 9 Systems Problem Types: Gain Privileges Description: The IBM Power 9 OP910, OP920, and FW910 boot firmware's bootloader is responsible for loading and validating the initial boot firmware image that drives the rest of the system's hardware initialization. The bootloader firmware contains a buffer overflow vulnerability such that, if an attacker were able to replace the initial boot firmware image with a very carefully crafted and sufficiently large, malicious re
were able to replace the initial boot firmware image with a very carefully crafted and sufficiently large, malicious replacement, it could cause the bootloader, during the load of that image, to overwrite its own instruction memory and circumvent secure boot protections, install trojans, etc. IBM X-Force ID: 154345. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10868992 - https://exchange.xforce.ibmcloud.com/vulnerabilities/154345
CVE ID: CVE-2018-1993 State: PUBLISHED Published: 2019-01-08T17:00:00Z Last Updated: 2024-09-16T16:27:57.707Z Severity: MEDIUM (CVSS 4 CVSS:3.0/A:N/AC:L/AV:L/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Scale Problem Types: Obtain Information Description: IBM Spectrum Scale (GPFS) 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache (LROC) is enabled may caused read operation on a file to return data from a different file. IBM X-Force ID: 154440. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/154440 - https://www.ibm.com/support/docview.wss?uid=ibm10793719 - http://ww
xchange.xforce.ibmcloud.com/vulnerabilities/154440 - https://www.ibm.com/support/docview.wss?uid=ibm10793719 - http://www.securityfocus.com/bid/106485
CVE ID: CVE-2018-1994 State: PUBLISHED Published: 2019-04-10T14:30:27.474177Z Last Updated: 2024-09-17T04:05:09.306Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AC:L/C:L/UI:N/I:L/A:L/S:U/PR:L/AV:N/RC:C/RL:O/E:U) Vendors: IBM Products: InfoSphere Information Server Problem Types: Data Manipulation Description: IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 154494. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10793871 - https:/
Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10793871 - https://exchange.xforce.ibmcloud.com/vulnerabilities/154494
CVE ID: CVE-2018-1996 State: PUBLISHED Published: 2019-02-19T17:00:00Z Last Updated: 2024-09-17T04:14:25.602Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server Problem Types: Obtain Information Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security, caused by the improper TLS configuration. A remote attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 154650. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/
. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/154650 - https://www.ibm.com/support/docview.wss?uid=ibm10793421 - http://www.securityfocus.com/bid/107155
CVE ID: CVE-2018-1997 State: PUBLISHED Published: 2019-04-08T14:50:37.952252Z Last Updated: 2024-09-16T23:52:15.945Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:L/PR:L/I:N/AC:L/C:N/S:U/UI:N/AV:N/RL:O/E:U/RC:C) Vendors: IBM Products: Business Automation Workflow Problem Types: Denial of Service Description: IBM Business Automation Workflow and Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 are vulnerable to a denial of service attack. An authenticated attacker might send a specially crafted request that exhausts server-side memory. IBM X-Force ID: 154774. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10794831 - https://exc
lyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10794831 - https://exchange.xforce.ibmcloud.com/vulnerabilities/154774
CVE ID: CVE-2018-1998 State: PUBLISHED Published: 2019-03-11T22:00:00Z Last Updated: 2024-09-17T02:41:53.831Z Severity: HIGH (CVSS 8.8 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:L/S:C/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: MQ Problem Types: Gain Privileges Description: IBM WebSphere MQ 8.0.0.0 through 9.1.1 could allow a local user to inject code that could be executed with root privileges. This is due to an incomplete fix for CVE-2018-1792. IBM X-ForceID: 154887. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/154887 - https://www.ibm.com/support/docview.wss?uid=ibm10870488
CVE ID: CVE-2018-1999 State: PUBLISHED Published: 2019-04-08T14:50:37.999223Z Last Updated: 2024-09-16T20:48:14.189Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/S:U/UI:N/AC:L/C:L/PR:L/A:N/I:N/RC:C/E:U/RL:O) Vendors: IBM Products: Business Automation Workflow Problem Types: Obtain Information Description: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks against the system. IBM X-Force ID: 154889. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=ibm10870502 - https://exchange.xforce.ibmcloud.com/vuln
ainer: References: - https://www.ibm.com/support/docview.wss?uid=ibm10870502 - https://exchange.xforce.ibmcloud.com/vulnerabilities/154889
CVE ID: CVE-2018-20000 State: PUBLISHED Published: 2018-12-10T02:00:00Z Last Updated: 2024-09-16T18:44:08.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apereo Bedework bw-webdav before 4.0.3 allows XXE attacks, as demonstrated by an invite-reply document that reads a local file, related to webdav/servlet/common/MethodBase.java and webdav/servlet/common/PostRequestPars.java. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Bedework/bw-webdav/pull/1 - https://github.com/Bedework/bw-webdav/compare/bw-webdav-4.0.2...bw-webdav-4.0.3
CVE ID: CVE-2018-20001 State: PUBLISHED Published: 2018-12-10T02:00:00Z Last Updated: 2024-09-17T01:05:48.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Libav 12.3, there is a floating point exception in the range_decode_culshift function (called from range_decode_bits) in libavcodec/apedec.c that will lead to remote denial of service via crafted input. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1141
CVE ID: CVE-2018-20002 State: PUBLISHED Published: 2018-12-10T02:00:00 Last Updated: 2024-08-05T11:51:18.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memory leak via a crafted ELF file, leading to a denial of service (memory consumption), as demonstrated by nm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106142 - https://security.netapp.com/advisory/ntap-20190221-0004/ - https://sourceware.org/bugzilla/show_bug.cgi?id=23952 - https://sourceware.org/git/gitweb.cgi?p=bin
tap-20190221-0004/ - https://sourceware.org/bugzilla/show_bug.cgi?id=23952 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=c2f5dc30afa34696f2da0081c4ac50b958ecb0e9 - https://support.f5.com/csp/article/K62602089 - https://security.gentoo.org/glsa/201908-01 - https://usn.ubuntu.com/4336-1/
CVE ID: CVE-2018-20004 State: PUBLISHED Published: 2018-12-10T06:00:00 Last Updated: 2024-08-05T11:51:18.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in Mini-XML (aka mxml) 2.12. It is a stack-based buffer overflow in mxml_write_node in mxml-file.c via vectors involving a double-precision floating point number and the '<order type="real">' substring, as demonstrated by testmxml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/michaelrsweet/mxml/issues/233 - https://lists.debian.org/debian-lts-announce/2019/01/msg00018.html - https://github.com/fouzhe/security/tree/master/mxml#stack-buffer-overflow-in-function-mxml
ounce/2019/01/msg00018.html - https://github.com/fouzhe/security/tree/master/mxml#stack-buffer-overflow-in-function-mxml_write_node - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N53IJHDYR5HVQLKH4J6B27OEQLGKSGY5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RNWF6BAU7S42O4LE4B74KIMHFE2HDNMI/
CVE ID: CVE-2018-20005 State: PUBLISHED Published: 2018-12-10T06:00:00 Last Updated: 2024-08-05T11:51:18.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in Mini-XML (aka mxml) 2.12. It is a use-after-free in mxmlWalkNext in mxml-search.c, as demonstrated by mxmldoc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/michaelrsweet/mxml/issues/234 - https://github.com/fouzhe/security/tree/master/mxml#heap-use-after-free-in-function-mxmlwalknext - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N53IJHDYR5HVQLKH4J6B27OEQLGKSGY5/ - https://lists.fedoraproject.org/archives/list
unce%40lists.fedoraproject.org/message/N53IJHDYR5HVQLKH4J6B27OEQLGKSGY5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RNWF6BAU7S42O4LE4B74KIMHFE2HDNMI/
CVE ID: CVE-2018-20006 State: PUBLISHED Published: 2018-12-10T06:00:00 Last Updated: 2024-08-05T11:51:18.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PHPok v5.0.055. There is a Stored XSS vulnerability via the title parameter to api.php?c=post&f=save (reachable via the index.php?id=book URI). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/qinggan/phpok/issues/3
CVE ID: CVE-2018-20007 State: PUBLISHED Published: 2019-05-16T18:08:34 Last Updated: 2024-08-05T11:51:18.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yeelight Smart AI Speaker 3.3.10_0074 devices have improper access control over the UART interface, allowing physical attackers to obtain a root shell. The attacker can then exfiltrate the audio data, read cleartext Wi-Fi credentials in a log file, or access other sensitive device and user information. Additional Analyst Notes: - CVE Program Container: References: - https://forum.yeelight.com/ - https://payatu.com/yeelight-smart-ai-speaker-responsible-disclosure/
CVE ID: CVE-2018-20008 State: PUBLISHED Published: 2019-05-28T20:03:27 Last Updated: 2024-08-05T11:51:18.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface, allowing physical attackers to discover Wi-Fi credentials (plain text) and the web-console password (base64) via the debugging console. Additional Analyst Notes: - CVE Program Container: References: - https://www.iball.co.in/Category/Baton/283 - https://payatu.com/ibaton-routers-responsible-disclosure/
CVE ID: CVE-2018-20009 State: PUBLISHED Published: 2018-12-10T09:00:00 Last Updated: 2024-08-05T11:51:18.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/domainmod/domainmod/issues/88 - https://www.exploit-db.com/exploits/46372/
CVE ID: CVE-2018-20010 State: PUBLISHED Published: 2018-12-10T09:00:00 Last Updated: 2024-08-05T11:51:18.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/domainmod/domainmod/issues/88 - https://www.exploit-db.com/exploits/46373/
CVE ID: CVE-2018-20011 State: PUBLISHED Published: 2018-12-10T09:00:00 Last Updated: 2024-08-05T11:51:18.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/domainmod/domainmod/issues/88 - https://www.exploit-db.com/exploits/46374/