Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/lists.debian.org/debian-lts-announce/2019/01/msg00015.html - https://access.redhat.com/errata/RHSA-2019:0469 - https://access.redhat.com/errata/RHSA-2019:0473 - https://access.redhat.com/errata/RHSA-2019:0472 - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00028.html - https://access.redhat.com/errata/RHSA-2019:0640 - https://access.redhat.com/errata/RHSA-2019:1238 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html - https://access.redhat.com/errata/RHSA-2019:2052 - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://www.oracle.com/secur
-2019:2052 - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.netapp.com/advisory/ntap-20190118-0001/ - https://github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9a - http://www.ijg.org/ - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03958en_us - https://github.com/zzyyrr/divide-by-zero-in-libjpeg-9d.git
CVE ID: CVE-2018-11213 State: PUBLISHED Published: 2018-05-16T17:00:00 Last Updated: 2024-08-05T08:01:52.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libjpeg 9a. The get_text_gray_row function in rdppm.c allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3706-2/ - https://github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9a - https://usn.ubuntu.com/3706-1/ - https://lists.debian.org/debian-lts-announce/2019/01/msg00015.html - https://access.redhat.com/errata/RHSA-2019:2052
CVE ID: CVE-2018-11214 State: PUBLISHED Published: 2018-05-16T17:00:00 Last Updated: 2024-08-05T08:01:52.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libjpeg 9a. The get_text_rgb_row function in rdppm.c allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3706-2/ - https://github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9a - https://usn.ubuntu.com/3706-1/ - https://lists.debian.org/debian-lts-announce/2019/01/msg00015.html - https://access.redhat.com/errata/RHSA-2019:2052
CVE ID: CVE-2018-11215 State: PUBLISHED Published: 2019-07-03T15:46:08 Last Updated: 2024-08-05T08:01:52.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior releases via unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html
CVE ID: CVE-2018-11218 State: PUBLISHED Published: 2018-06-17T17:00:00 Last Updated: 2024-08-05T08:01:52.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104553 - https://github.com/antirez/redis/issues/5017 - https://www.debian.org/security/2018/dsa-4230 - https://access.redhat.com/errata/RHSA-2019:0052 - https://github.com/antirez/redis/commit/5ccb6f7a791bf3490357b00a898885759d98bab0 - http://anti
m/errata/RHSA-2019:0052 - https://github.com/antirez/redis/commit/5ccb6f7a791bf3490357b00a898885759d98bab0 - http://antirez.com/news/119 - https://github.com/antirez/redis/commit/52a00201fca331217c3b4b8b634f6a0f57d6b7d3 - https://access.redhat.com/errata/RHSA-2019:0094 - https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES - https://raw.githubusercontent.com/antirez/redis/5.0/00-RELEASENOTES - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://access.redhat.com/errata/RHSA-2019:1860 - https://security.gentoo.org/glsa/201908-04
CVE ID: CVE-2018-11219 State: PUBLISHED Published: 2018-06-17T17:00:00 Last Updated: 2024-08-05T08:01:52.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of bounds checking. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104552 - https://github.com/antirez/redis/issues/5017 - https://github.com/antirez/redis/commit/1eb08bcd4634ae42ec45e8284923ac048beaa4c3 - https://www.debian.org/security/2018/dsa-4230 - https://access.redhat.com/errata/RHSA-2019:0052 - http
923ac048beaa4c3 - https://www.debian.org/security/2018/dsa-4230 - https://access.redhat.com/errata/RHSA-2019:0052 - http://antirez.com/news/119 - https://access.redhat.com/errata/RHSA-2019:0094 - https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES - https://github.com/antirez/redis/commit/e89086e09a38cc6713bcd4b9c29abf92cf393936 - https://raw.githubusercontent.com/antirez/redis/5.0/00-RELEASENOTES - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://access.redhat.com/errata/RHSA-2019:1860 - https://security.gentoo.org/glsa/201908-04
CVE ID: CVE-2018-11220 State: PUBLISHED Published: 2018-05-31T15:00:00 Last Updated: 2024-08-05T08:01:52.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution via the system restore function. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44779/
CVE ID: CVE-2018-11221 State: PUBLISHED Published: 2018-06-15T21:00:00 Last Updated: 2024-08-05T08:01:52.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unauthenticated untrusted file upload in Artica Pandora FMS through version 7.23 allows an attacker to upload an arbitrary plugin via include/ajax/update_manager.ajax in the update system. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com/wp-content/uploads/2018/06/whats-new-723-EN.pdf - https://blog.hackercat.ninja/post/pandoras_box/
CVE ID: CVE-2018-11222 State: PUBLISHED Published: 2018-06-15T21:00:00 Last Updated: 2024-08-05T08:01:52.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Local File Inclusion (LFI) in Artica Pandora FMS through version 7.23 allows an attacker to call any php file via the /pandora_console/ajax.php ajax endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com/wp-content/uploads/2018/06/whats-new-723-EN.pdf - https://blog.hackercat.ninja/post/pandoras_box/
CVE ID: CVE-2018-11223 State: PUBLISHED Published: 2018-06-15T21:00:00 Last Updated: 2024-08-05T08:01:52.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS in Artica Pandora FMS before 7.0 NG 723 allows an attacker to execute arbitrary code via a crafted "refr" parameter in a "/pandora_console/index.php?sec=estado&sec2=operation/agentes/estado_agente&refr=" call. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com/wp-content/uploads/2018/06/whats-new-723-EN.pdf - https://blog.hackercat.ninja/post/pandoras_box/
CVE ID: CVE-2018-11224 State: PUBLISHED Published: 2018-05-17T04:00:00Z Last Updated: 2024-09-16T23:26:13.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Libav 12.3. A read access violation in the in_table_init16 function in libavcodec/aacsbr.c allows remote attackers to cause a denial of service (application crash), as demonstrated by avconv. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/document/d/16_HC-FjFuBNMbaoR397z_3EwpDP6wb1DNWrfkD4qRDE/edit - https://bugzilla.libav.org/show_bug.cgi?id=1129
CVE ID: CVE-2018-11225 State: PUBLISHED Published: 2018-05-17T04:00:00Z Last Updated: 2024-09-16T19:14:31.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dcputs function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/143 - https://docs.google.com/document/d/1gTd44AjxkCNkoDDh28NwiSeLDa5poBYROEoLEG4JVCA/edit
CVE ID: CVE-2018-11226 State: PUBLISHED Published: 2018-05-17T04:00:00Z Last Updated: 2024-09-16T23:25:43.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/144 - https://docs.google.com/document/d/1NtI3PiiL55SMj-kmdwJhMViIALGHPnLZYRxOgNCfhYA/edit
CVE ID: CVE-2018-11227 State: PUBLISHED Published: 2019-07-03T15:42:58 Last Updated: 2024-08-05T08:01:52.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monstra CMS 3.0.4 and earlier has XSS via index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monstra-cms/monstra/issues - https://github.com/monstra-cms/monstra/issues/438 - https://www.exploit-db.com/exploits/44646
CVE ID: CVE-2018-11228 State: PUBLISHED Published: 2018-06-08T01:00:00 Last Updated: 2024-08-05T08:01:52.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via a Bash shell service in Crestron Toolbox Protocol (CTP). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105051 - https://ics-cert.us-cert.gov/advisories/ICSA-18-221-01 - https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet
CVE ID: CVE-2018-11229 State: PUBLISHED Published: 2018-06-08T01:00:00 Last Updated: 2024-08-05T08:01:52.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via command injection in Crestron Toolbox Protocol (CTP). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105051 - https://ics-cert.us-cert.gov/advisories/ICSA-18-221-01 - https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet
CVE ID: CVE-2018-11230 State: PUBLISHED Published: 2018-05-17T12:00:00Z Last Updated: 2024-09-17T02:10:38.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: jbig2_add_page in jbig2enc.cc in libjbig2enc.a in jbig2enc 0.29 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/agl/jbig2enc/issues/61
CVE ID: CVE-2018-11231 State: PUBLISHED Published: 2018-05-23T16:00:00 Last Updated: 2024-08-05T08:01:52.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Divido plugin for OpenCart, there is SQL injection. Attackers can use SQL injection to get some confidential information. Additional Analyst Notes: - CVE Program Container: References: - http://foreversong.cn/archives/1183
CVE ID: CVE-2018-11232 State: PUBLISHED Published: 2018-05-18T04:00:00 Last Updated: 2024-08-05T08:01:52.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: The etm_setup_aux function in drivers/hwtracing/coresight/coresight-etm-perf.c in the Linux kernel before 4.10.2 allows attackers to cause a denial of service (panic) because a parameter is incorrectly used as a local variable. Additional Analyst Notes: - CVE Program Container: References: - https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f09444639099584bc4784dfcd85ada67c6f33e0f - https://github.com/torvalds/linux/commit/f09444639099584b
inux.git/commit/?id=f09444639099584bc4784dfcd85ada67c6f33e0f - https://github.com/torvalds/linux/commit/f09444639099584bc4784dfcd85ada67c6f33e0f
CVE ID: CVE-2018-11233 State: PUBLISHED Published: 2018-05-30T04:00:00 Last Updated: 2024-08-05T08:01:52.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2147 - https://usn.ubuntu.com/3671-1/ - http://www.securityfocus.com/bid/104346 - https://marc.info/?l=git&m=152761328506724&w=2 - http://www.securitytracker.com/id/1040991 - https://security.gentoo.org/glsa/201805-13 - http:/
&m=152761328506724&w=2 - http://www.securitytracker.com/id/1040991 - https://security.gentoo.org/glsa/201805-13 - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html
CVE ID: CVE-2018-11235 State: PUBLISHED Published: 2018-05-30T04:00:00 Last Updated: 2024-08-05T08:01:52.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs "git clone --recurse-submodules" because submodule "names" are obtained from this file, and then appended to $GIT_DIR/modules, leading to directory traversal with "../" in a name. Finally, post-checkout hooks from a submodule are executed, bypassing the intended design in whi
l with "../" in a name. Finally, post-checkout hooks from a submodule are executed, bypassing the intended design in which hooks are not obtained from a remote server. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44822/ - https://access.redhat.com/errata/RHSA-2018:2147 - https://usn.ubuntu.com/3671-1/ - https://marc.info/?l=git&m=152761328506724&w=2 - http://www.securitytracker.com/id/1040991 - https://access.redhat.com/errata/RHSA-2018:1957 - https://security.gentoo.org/glsa/201805-13 - http://www.securityfocus.com/bid/104345 - https://blogs.msdn.microsoft.com/devops/2018/05/29/announcing-the-may-2018-git-security-vulnerability/ - http
d/104345 - https://blogs.msdn.microsoft.com/devops/2018/05/29/announcing-the-may-2018-git-security-vulnerability/ - https://www.debian.org/security/2018/dsa-4212 - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html
CVE ID: CVE-2018-11236 State: PUBLISHED Published: 2018-05-18T16:00:00 Last Updated: 2024-08-05T08:01:52.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=5460617d1567657621107d895ee2dd83bc1f88f2 - http://www.securityfocus.com/bid/104255 - https://sourceware.org/bugzi
it%3Bh=5460617d1567657621107d895ee2dd83bc1f88f2 - http://www.securityfocus.com/bid/104255 - https://sourceware.org/bugzilla/show_bug.cgi?id=22786 - https://access.redhat.com/errata/RHSA-2018:3092 - https://security.netapp.com/advisory/ntap-20190329-0001/ - https://security.netapp.com/advisory/ntap-20190401-0001/ - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://access.redhat.com/errata/RHBA-2019:0327 - https://usn.ubuntu.com/4416-1/
CVE ID: CVE-2018-11237 State: PUBLISHED Published: 2018-05-18T16:00:00 Last Updated: 2024-08-05T08:01:52.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcpy_avx512_no_vzeroupper. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=23196 - https://www.exploit-db.com/exploits/44750/ - http://www.securityfocus.com/bid/104256 - https://access.redhat.com/errata/RHSA-2018:3092 - https://security.netapp.com/advisory/ntap-2019032
cus.com/bid/104256 - https://access.redhat.com/errata/RHSA-2018:3092 - https://security.netapp.com/advisory/ntap-20190329-0001/ - https://security.netapp.com/advisory/ntap-20190401-0001/ - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://access.redhat.com/errata/RHBA-2019:0327 - https://usn.ubuntu.com/4416-1/
CVE ID: CVE-2018-11239 State: PUBLISHED Published: 2018-05-19T18:00:00 Last Updated: 2024-08-05T08:01:52.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow in the _transfer function of a smart contract implementation for Hexagon (HXG), an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a _to argument in conjunction with a large _value argument, as exploited in the wild in May 2018, aka the "burnOverflow" issue. Additional Analyst Notes: - CVE Program Container: References: - https://peckshield.com/2018/05/18/burnOverflow/
CVE ID: CVE-2018-11240 State: PUBLISHED Published: 2018-09-21T15:00:00 Last Updated: 2024-08-05T08:01:52.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on SoftCase T-Router build 20112017 devices. There are no restrictions on the 'exec command' feature of the T-Router protocol. If the command syntax is correct, there is code execution both on the other modem and on the main servers. This is fixed in production builds as of Spring 2018. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/neolead/1b90d8df7ef4fd1d3d03c1265e5804ac#file-cve-2018-11240-txt
CVE ID: CVE-2018-11241 State: PUBLISHED Published: 2018-09-21T15:00:00 Last Updated: 2024-08-05T08:01:52.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on SoftCase T-Router build 20112017 devices. A remote attacker can read and write to arbitrary files on the system as root, as demonstrated by code execution after writing to a crontab file. This is fixed in production builds as of Spring 2018. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/neolead/2b052512f90f75e93b5c465c265322b0#file-cve-2018-11241-txt
CVE ID: CVE-2018-11242 State: PUBLISHED Published: 2018-05-20T14:00:00 Last Updated: 2024-08-05T08:01:52.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the MakeMyTrip application 7.2.4 for Android. The databases (locally stored) are not encrypted and have cleartext that might lead to sensitive information disclosure, as demonstrated by data/com.makemytrip/databases and data/com.makemytrip/Cache SQLite database files. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44690/ - https://gist.github.com/NinjaXshell/ba0aeee4b77b4bdea76d0c0c095d53b1
CVE ID: CVE-2018-11243 State: PUBLISHED Published: 2018-05-18T17:00:00 Last Updated: 2024-08-05T08:01:52.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: PackLinuxElf64::unpack in p_lx_elf.cpp in UPX 3.95 allows remote attackers to cause a denial of service (double free), limit the ability of a malware scanner to operate on the entire original data, or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/upx/upx/issues/206 - https://github.com/upx/upx/blob/devel/NEWS - https://github.com/upx/upx/issues/207 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproj
ttps://github.com/upx/upx/issues/207 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D7XU42G6MUQQXHWRP7DCF2JSIBOJ5GOO/ - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00008.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUTVSTXAFTD552NO2K2RIF6MDQEHP3BE/
CVE ID: CVE-2018-11244 State: PUBLISHED Published: 2018-05-18T17:00:00 Last Updated: 2024-08-05T08:01:52.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BBE theme before 1.53 for WordPress allows a direct launch of an HTML editor. Additional Analyst Notes: - CVE Program Container: References: - https://www.dopewp.com/version-history/ - https://wpvulndb.com/vulnerabilities/9087
CVE ID: CVE-2018-11245 State: PUBLISHED Published: 2018-05-18T18:00:00Z Last Updated: 2024-09-17T02:17:10.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/webroot/js/misp.js in MISP 2.4.91 has a DOM based XSS with cortex type attributes. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/5efc07b12f82301a6086fd3433fedd69fe7119d3 - https://zigrin.com/advisories/misp-xss-with-cortex-type-attributes/
CVE ID: CVE-2018-11246 State: PUBLISHED Published: 2021-01-11T15:43:01 Last Updated: 2024-08-05T08:01:52.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: K7TSMngr.exe in K7Computing K7AntiVirus Premium 15.1.0.53 has a Memory Leak. Additional Analyst Notes: - CVE Program Container: References: - https://www.k7computing.com - https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-January-2021
CVE ID: CVE-2018-11247 State: PUBLISHED Published: 2018-08-15T18:00:00 Last Updated: 2024-08-05T08:01:52.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JMX/RMI interface in Nasdaq BWise 5.0 does not require authentication for an SAP BO Component, which allows remote attackers to execute arbitrary code via a session on port 81. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Aug/11
CVE ID: CVE-2018-11248 State: PUBLISHED Published: 2018-05-18T18:00:00 Last Updated: 2024-08-05T08:01:52.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: util/FileDownloadUtils.java in FileDownloader 1.7.3 does not check an attachment's name. If an attacker places "../" in the file name, the file can be stored in an unintended directory because of Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lingochamp/FileDownloader/issues/1028