Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-11168 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 26 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11169 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 27 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11170 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 28 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11171 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 29 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11172 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 30 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11173 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 31 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11174 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 32 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11175 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 33 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11176 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 34 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11177 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 35 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11178 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 36 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11179 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 37 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11180 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 38 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11181 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 39 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11182 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 40 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11183 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 41 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11184 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 42 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11185 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 43 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11186 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 44 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11187 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 45 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11188 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 46 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11189 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 1 of 6). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11190 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 2 of 6). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11191 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 3 of 6). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11192 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 4 of 6). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11193 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 5 of 6). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11194 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 6 of 6). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11195 State: PUBLISHED Published: 2018-06-01T19:00:00 Last Updated: 2024-08-05T08:01:52.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to the browser "back and refresh" attack. This allows malicious users with physical access to the web browser of a Mahara user, after they have logged in, to potentially gain access to their Mahara credentials. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/mahara/+bug/1770561 - https://mahara.org/interaction/forum/topic.php?id=8269
CVE ID: CVE-2018-11196 State: PUBLISHED Published: 2018-06-01T19:00:00 Last Updated: 2024-08-05T08:01:52.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 can be used as medium to transmit viruses by placing infected files into a Leap2A archive and uploading that to Mahara. In contrast to other ZIP files that are uploaded, ClamAV (when activated) does not check Leap2A archives for viruses, allowing malicious files to be available for download. While files cannot be executed on Mahara itself, Mahara can be used to transfer such files to user computers. Additional Analyst Notes: - CVE Program Container:
itself, Mahara can be used to transfer such files to user computers. Additional Analyst Notes: - CVE Program Container: References: - https://mahara.org/interaction/forum/topic.php?id=8270 - https://bugs.launchpad.net/bugs/1770535
CVE ID: CVE-2018-11198 State: PUBLISHED Published: 2019-09-06T20:15:44 Last Updated: 2024-08-05T08:01:52.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mautic/mautic/releases - https://github.com/mautic/mautic/releases/tag/2.14.0
CVE ID: CVE-2018-11200 State: PUBLISHED Published: 2019-09-20T17:59:50 Last Updated: 2024-08-05T08:01:52.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mautic 2.13.1. It has Stored XSS via the company name field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mautic/mautic/releases/tag/2.14.0
CVE ID: CVE-2018-11202 State: PUBLISHED Published: 2018-05-16T15:00:00Z Last Updated: 2024-09-16T18:09:16.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5
CVE ID: CVE-2018-11203 State: PUBLISHED Published: 2018-05-16T15:00:00Z Last Updated: 2024-09-16T22:45:22.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: A division by zero was discovered in H5D__btree_decode_key in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5
CVE ID: CVE-2018-11204 State: PUBLISHED Published: 2018-05-16T15:00:00Z Last Updated: 2024-09-16T19:35:38.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference was discovered in H5O__chunk_deserialize in H5Ocache.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5
CVE ID: CVE-2018-11205 State: PUBLISHED Published: 2018-05-16T15:00:00Z Last Updated: 2024-09-17T01:26:50.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5
CVE ID: CVE-2018-11206 State: PUBLISHED Published: 2018-05-16T00:00:00 Last Updated: 2024-08-05T08:01:52.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README2.md - https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5 - https://lists.debian.org/debian-lts-announce/2023/08/msg00009.html
CVE ID: CVE-2018-11207 State: PUBLISHED Published: 2018-05-16T15:00:00 Last Updated: 2024-08-05T08:01:52.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5 - https://github.com/SegfaultMasters/covering360/tree/master/HDF5#divided-by-zero---divbyzero__h5d_chunk_poc
CVE ID: CVE-2018-11208 State: PUBLISHED Published: 2018-05-16T15:00:00 Last Updated: 2024-08-05T08:01:52.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Z-BlogPHP 2.0.0. There is a persistent XSS that allows remote attackers to inject arbitrary web script or HTML into background web site settings via the "copyright information office" field. NOTE: the vendor indicates that the product was not intended to block this type of XSS by a user with the admin privilege Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/zblogcn/zblogphp/issues/205 - https://github.com/zblogcn/zblogphp/issues/187
CVE ID: CVE-2018-11209 State: PUBLISHED Published: 2018-05-16T15:00:00 Last Updated: 2024-08-05T08:01:52.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Z-BlogPHP 2.0.0. zb_system/cmd.php?act=verify relies on MD5 for the password parameter, which might make it easier for attackers to bypass intended access restrictions via a dictionary or rainbow-table attack. NOTE: the vendor declined to accept this as a valid issue Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zblogcn/zblogphp/issues/205 - https://github.com/zblogcn/zblogphp/issues/188
CVE ID: CVE-2018-11210 State: PUBLISHED Published: 2018-05-16T15:00:00 Last Updated: 2024-08-05T08:01:52.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/leethomason/tinyxml2/issues/675 - https://github.com/leethomason/tinyxml2/issues/675#issuecomment-439933437 - https://github.com/leethomason/tinyxml2/issues/675#issuecomment-462194018
CVE ID: CVE-2018-11212 State: PUBLISHED Published: 2018-05-16T17:00:00 Last Updated: 2024-08-05T08:01:52.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106583 - https://usn.ubuntu.com/3706-2/ - https://access.redhat.com/errata/RHSA-2019:0474 - https://usn.ubuntu.com/3706-1/ - https://lists.debian.org/debian-lts-announce/2019/01/msg00015.html - https://access.redhat.com/errata/RHSA-2019:0469 - https://