Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-8734 State: PUBLISHED Published: 2018-04-18T00:00:00 Last Updated: 2024-08-05T07:02:26.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary SQL commands via the selInfoKey1 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/caleBot/f0a93b5a98574393e0139104eacc2d0f - https://www.exploit-db.com/exploits/44560/ - https://www.nagios.com/downloads/nagios-xi/change-log/ - https://blog.redactedsec.net/exploits/2018/04/26/nagios.html - https://assets.nagios.com/downloads/nagiosxi/CHAN
-log/ - https://blog.redactedsec.net/exploits/2018/04/26/nagios.html - https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT - https://www.exploit-db.com/exploits/44969/
CVE ID: CVE-2018-8735 State: PUBLISHED Published: 2018-04-18T00:00:00 Last Updated: 2024-08-05T07:02:26.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary commands on the target system, aka OS command injection. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/caleBot/f0a93b5a98574393e0139104eacc2d0f - https://www.exploit-db.com/exploits/44560/ - https://www.nagios.com/downloads/nagios-xi/change-log/ - https://blog.redactedsec.net/exploits/2018/04/26/nagios.html - https://assets.nagios.com/downloads/nagiosxi/C
nge-log/ - https://blog.redactedsec.net/exploits/2018/04/26/nagios.html - https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT - https://www.exploit-db.com/exploits/44969/
CVE ID: CVE-2018-8736 State: PUBLISHED Published: 2018-04-18T00:00:00 Last Updated: 2024-08-05T07:02:26.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to leverage an RCE vulnerability escalating to root. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/caleBot/f0a93b5a98574393e0139104eacc2d0f - https://www.exploit-db.com/exploits/44560/ - https://www.nagios.com/downloads/nagios-xi/change-log/ - https://blog.redactedsec.net/exploits/2018/04/26/nagios.html - https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT - https://www.exploi
ec.net/exploits/2018/04/26/nagios.html - https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT - https://www.exploit-db.com/exploits/44969/
CVE ID: CVE-2018-8737 State: PUBLISHED Published: 2018-03-17T13:00:00 Last Updated: 2024-08-05T07:02:26.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bookme Control Panel 2.0 Application is vulnerable to stored XSS within the Customers "Book Me" function. Within the Name and Note (aka custName and custNote) sections of the Customers screen, the application does not sanitize user-supplied input and renders injected JavaScript code to the user's browser. Additional Analyst Notes: - CVE Program Container: References: - https://neetech18.blogspot.in/2018/03/stored-xss-vulnerability-in-bookme_17.html
CVE ID: CVE-2018-8738 State: PUBLISHED Published: 2018-07-05T20:00:00 Last Updated: 2024-08-05T07:02:25.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Airties 5444 1.0.0.18 and 5444TT 1.0.0.18 devices allow XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.raifberkaydincel.com/airties-air5444tt-airties-air5444-cross-site-scripting.html - https://www.exploit-db.com/exploits/44986/
CVE ID: CVE-2018-8739 State: PUBLISHED Published: 2018-03-16T18:00:00Z Last Updated: 2024-09-16T20:26:46.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: VPN Unlimited 4.2.0 for macOS suffers from a root privilege escalation vulnerability in its privileged helper tool. The privileged helper tool implements an XPC interface, which allows arbitrary applications to execute system commands as root. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VerSprite/research/blob/master/advisories/VS-2018-014.md
CVE ID: CVE-2018-8740 State: PUBLISHED Published: 2018-03-17T00:00:00 Last Updated: 2024-08-05T07:02:26.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html - https://bugs.launchpad.net/ubuntu/+source/sqlite3/+bug/1756349 - http://www.securityfocus.com/bid/103466 - https://www.sqlite.org/cgi/src/vdiff?from=1774f1c3baf0bc3d&to=d75e67654aa9620b - https://www.sqlite.org/cgi/src/timeline?
ttps://www.sqlite.org/cgi/src/vdiff?from=1774f1c3baf0bc3d&to=d75e67654aa9620b - https://www.sqlite.org/cgi/src/timeline?r=corrupt-schema - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6964 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00050.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU4NZ6DDU4BEM3ACM3FM6GLEPX56ZQXK/ - https://usn.ubuntu.com/4205-1/ - https://usn.ubuntu.com/4394-1/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.
l/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E - https://lists.debian.org/debian-lts-announce/2023/05/msg00022.html
CVE ID: CVE-2018-8741 State: PUBLISHED Published: 2018-03-17T14:00:00 Last Updated: 2024-08-05T07:02:26.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal flaw in SquirrelMail 1.4.22 allows an authenticated attacker to exfiltrate (or potentially delete) files from the hosting server, related to ../ in the att_local_name field in Deliver.class.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2018/03/17/2 - https://gist.github.com/hannob/3c4f86863c418930ad08853c1109364e - http://www.securitytracker.com/id/1040554 - https://www.debian.org/security/2018/dsa-4168 - https://insinuator.net/2018/03/squ
/www.securitytracker.com/id/1040554 - https://www.debian.org/security/2018/dsa-4168 - https://insinuator.net/2018/03/squirrelmail-full-disclosure-troopers18/ - https://paste.pound-python.org/show/OjSLiFTxiBrTk63jqEUu/ - https://lists.debian.org/debian-lts-announce/2018/04/msg00012.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVXTYMZ35IC5KPNMAE6BWAQWURMX7KZO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5FP5O562A4FM5TCFNEW73SS6PZONSAC/
CVE ID: CVE-2018-8753 State: PUBLISHED Published: 2018-08-15T18:00:00 Last Updated: 2024-08-05T07:02:26.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IKEv1 implementation in Clavister cOS Core before 11.00.11, 11.20.xx before 11.20.06, and 12.00.xx before 12.00.09 allows remote attackers to decrypt RSA-encrypted nonces by leveraging a Bleichenbacher attack. Additional Analyst Notes: - CVE Program Container: References: - https://web-in-security.blogspot.com/2018/08/practical-bleichenbacher-attacks-on-ipsec-ike.html - https://www.clavister.com/advisories/security/clav-sa-0157-bleichenbacher-oracle-vulnerability-in-ikev1
CVE ID: CVE-2018-8754 State: PUBLISHED Published: 2018-03-18T03:00:00 Last Updated: 2024-08-05T07:02:26.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: The libevt_record_values_read_event() function in libevt_record_values.c in libevt before 2018-03-17 does not properly check for out-of-bounds values of user SID data size, strings size, or data size. NOTE: the vendor has disputed this as described in libyal/libevt issue 5 on GitHub Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4160 - https://github.com/libyal/libevt/commit/9d2cc3ca0a1612a6b271abcacffc2e3eea42925e
CVE ID: CVE-2018-8755 State: PUBLISHED Published: 2018-06-25T15:00:00 Last Updated: 2024-08-05T07:02:26.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: NuCom WR644GACV devices before STA006 allow an attacker to download the configuration file without credentials. By downloading this file, an attacker can access the admin password, WPA key, and any config information of the device. Additional Analyst Notes: - CVE Program Container: References: - https://blog.nivel4.com/investigaciones/vulnerabilidad-en-los-dispositivos-nucom-wr644gacv/
CVE ID: CVE-2018-8756 State: PUBLISHED Published: 2018-03-18T06:00:00 Last Updated: 2024-08-05T07:02:26.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection in yzmphp/core/function/global.func.php in YzmCMS v3.7.1 allows remote attackers to achieve arbitrary code execution via PHP code in the POST data of an index.php?m=member&c=member_content&a=init request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/guiciwushuang/yzmcms/blob/master/yzmcms_eval_injection_english.pdf - https://github.com/guiciwushuang/yzmcms/blob/master/yzmcms_eval_injection_chinese.pdf
CVE ID: CVE-2018-8761 State: PUBLISHED Published: 2018-03-19T14:00:00 Last Updated: 2024-08-05T07:02:26.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: protected\apps\member\controller\shopcarController.php in Yxcms building system (compatible cell phone) v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/QQ704568679/-/blob/master/YXcms%20TheCode%20audit
CVE ID: CVE-2018-8763 State: PUBLISHED Published: 2018-03-27T16:00:00 Last Updated: 2024-08-05T07:02:26.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 has XSS via the dn parameter to the templates/3rdParty/pla/htdocs/cmd.php URI or the template parameter to the templates/3rdParty/pla/htdocs/cmd.php?cmd=rename_form URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4165 - https://lists.debian.org/debian-lts-announce/2018/04/msg00007.html - http://packetstormsecurity.com/files/146858/LDAP-Account-Manager-6.2-Cross-Site-Scripting.html - http://seclists.o
tml - http://packetstormsecurity.com/files/146858/LDAP-Account-Manager-6.2-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Mar/45
CVE ID: CVE-2018-8764 State: PUBLISHED Published: 2018-03-27T16:00:00 Last Updated: 2024-08-05T07:02:26.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 places a CSRF token in the sec_token parameter of a URI, which makes it easier for remote attackers to defeat a CSRF protection mechanism by leveraging logging. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4165 - http://packetstormsecurity.com/files/146858/LDAP-Account-Manager-6.2-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Mar/45
CVE ID: CVE-2018-8765 State: PUBLISHED Published: 2018-03-18T06:00:00 Last Updated: 2024-08-05T07:02:26.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: In 2345 Security Guard 3.6, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222018. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/2345%20security%20guard/0x00222018
CVE ID: CVE-2018-8766 State: PUBLISHED Published: 2018-03-18T06:00:00 Last Updated: 2024-08-05T07:02:26.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary File Upload issue in manager/editor/upload.php, related to manager/admin_vod.php?action=add. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/joyplus/joyplus-cms/issues/421
CVE ID: CVE-2018-8767 State: PUBLISHED Published: 2018-03-18T06:00:00 Last Updated: 2024-08-05T07:02:26.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: joyplus-cms 1.6.0 has XSS in manager/admin_ajax.php?action=save&tab={pre}vod_type via the t_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/joyplus/joyplus-cms/issues/420
CVE ID: CVE-2018-8768 State: PUBLISHED Published: 2018-03-18T06:00:00 Last Updated: 2024-08-05T07:02:26.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is 'fixed' by jQuery after sanitization, making it dangerous. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2018/03/15/2 - https://lists.debian.org/debian-lts-announce/2020/11/msg00033.html
CVE ID: CVE-2018-8769 State: PUBLISHED Published: 2018-03-18T06:00:00 Last Updated: 2024-08-05T07:02:26.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: elfutils 0.170 has a buffer over-read in the ebl_dynamic_tag_name function of libebl/ebldynamictagname.c because SYMTAB_SHNDX is unsupported. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=22976
CVE ID: CVE-2018-8770 State: PUBLISHED Published: 2018-03-18T06:00:00 Last Updated: 2024-08-05T07:02:26.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/postclientdataTest.php, controllers/posterrorTest.php, controllers/posteventTest.php, controllers/posttagTest.php, controllers/postusinglogTest.php, fixtures/Controller_fixt.php, fixtures/Controller_fixt2.php, fixtures/view_fixt2.php, libs/ipTest.php, or models/commonDbfix.php in tests/. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ky
models/commonDbfix.php in tests/. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Kyhvedn/CVE_Description/blob/master/Cobub_Razor_0.8.0_more_physical_path_leakage.md - https://www.exploit-db.com/exploits/44495/
CVE ID: CVE-2018-8772 State: PUBLISHED Published: 2018-04-10T18:00:00 Last Updated: 2024-08-05T07:02:26.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Coship RT3052 4.0.0.48 devices allow XSS via a crafted SSID field on the "Wireless Setting - Basic" screen. Additional Analyst Notes: - CVE Program Container: References: - https://0day4u.wordpress.com/2018/03/19/coship-rt3052-wireless-router-persistent-cross-site-scripting-xss/
CVE ID: CVE-2018-8777 State: PUBLISHED Published: 2018-04-03T22:00:00 Last Updated: 2024-08-05T07:02:26.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, an attacker can pass a large HTTP request with a crafted header to WEBrick server or a crafted body to WEBrick server/handler and cause a denial of service (memory consumption). Additional Analyst Notes: - CVE Program Container: References: - https://www.ruby-lang.org/en/news/2018/03/28/large-request-dos-in-webrick-cve-2018-8777/ - https://usn.ubuntu.com/3685-1/ - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-5-1-releas
webrick-cve-2018-8777/ - https://usn.ubuntu.com/3685-1/ - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-5-1-released/ - http://www.securityfocus.com/bid/103683 - https://access.redhat.com/errata/RHSA-2018:3729 - http://www.securitytracker.com/id/1042004 - https://access.redhat.com/errata/RHSA-2018:3730 - https://lists.debian.org/debian-lts-announce/2018/04/msg00023.html - https://access.redhat.com/errata/RHSA-2018:3731 - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-3-7-released/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-4-4-released/ - https://www.debian.org/security/2018/dsa-4259 - https://www.ruby
ruby-lang.org/en/news/2018/03/28/ruby-2-4-4-released/ - https://www.debian.org/security/2018/dsa-4259 - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-2-10-released/ - https://lists.debian.org/debian-lts-announce/2018/04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html - https://access.redhat.com/errata/RHSA-2019:2028 - https://access.redhat.com/errata/RHSA-2020:0542 - https://access.redhat.com/errata/RHSA-2020:0591 - https://access.redhat.com/errata/RHSA-2020:0663
CVE ID: CVE-2018-8778 State: PUBLISHED Published: 2018-04-03T22:00:00 Last Updated: 2024-08-05T07:02:26.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, an attacker controlling the unpacking format (similar to format string vulnerabilities) can trigger a buffer under-read in the String#unpack method, resulting in a massive and controlled information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-5-1-released/ - https://access.redhat.com/errata/RHSA-2018:3729 - https://usn.ubuntu.com/3626-1/ - ht
/2018/03/28/ruby-2-5-1-released/ - https://access.redhat.com/errata/RHSA-2018:3729 - https://usn.ubuntu.com/3626-1/ - http://www.securitytracker.com/id/1042004 - https://access.redhat.com/errata/RHSA-2018:3730 - https://lists.debian.org/debian-lts-announce/2018/04/msg00023.html - https://access.redhat.com/errata/RHSA-2018:3731 - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-3-7-released/ - https://www.ruby-lang.org/en/news/2018/03/28/buffer-under-read-unpack-cve-2018-8778/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-4-4-released/ - https://www.debian.org/security/2018/dsa-4259 - https://www.ruby-lang.org/en/
/en/news/2018/03/28/ruby-2-4-4-released/ - https://www.debian.org/security/2018/dsa-4259 - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-2-10-released/ - https://lists.debian.org/debian-lts-announce/2018/04/msg00024.html - http://www.securityfocus.com/bid/103693 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html - https://access.redhat.com/errata/RHSA-2019:2028
CVE ID: CVE-2018-8779 State: PUBLISHED Published: 2018-04-03T22:00:00 Last Updated: 2024-08-05T07:02:26.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the UNIXServer.open and UNIXSocket.open methods are not checked for null characters. It may be connected to an unintended socket. Additional Analyst Notes: - CVE Program Container: References: - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-5-1-released/ - https://access.redhat.com/errata/RHSA-2018:3729 - https://usn.ubuntu.com/3626-1/ - http://www.securitytracker.com/id/1042004 - https://access.redhat.com/errata/RHSA-2
9 - https://usn.ubuntu.com/3626-1/ - http://www.securitytracker.com/id/1042004 - https://access.redhat.com/errata/RHSA-2018:3730 - https://lists.debian.org/debian-lts-announce/2018/04/msg00023.html - https://access.redhat.com/errata/RHSA-2018:3731 - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-3-7-released/ - http://www.securityfocus.com/bid/103767 - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html - https://www.ruby-lang.org/en/news/2018/03/28/poisoned-nul-byte-unixsocket-cve-2018-8779/ - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-4-4-released/ - https://www.debian.org/security/2018/dsa-4259 - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-2-10-release
ased/ - https://www.debian.org/security/2018/dsa-4259 - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-2-10-released/ - https://lists.debian.org/debian-lts-announce/2018/04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html - https://access.redhat.com/errata/RHSA-2019:2028
CVE ID: CVE-2018-8780 State: PUBLISHED Published: 2018-04-03T22:00:00 Last Updated: 2024-08-05T07:02:26.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the Dir.open, Dir.new, Dir.entries and Dir.empty? methods do not check NULL characters. When using the corresponding method, unintentional directory traversal may be performed. Additional Analyst Notes: - CVE Program Container: References: - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-5-1-released/ - https://access.redhat.com/errata/RHSA-2018:3729 - https://usn.ubuntu.com/3626-1/ - http://www.securitytracker.com/id/10
https://access.redhat.com/errata/RHSA-2018:3729 - https://usn.ubuntu.com/3626-1/ - http://www.securitytracker.com/id/1042004 - https://access.redhat.com/errata/RHSA-2018:3730 - https://lists.debian.org/debian-lts-announce/2018/04/msg00023.html - https://access.redhat.com/errata/RHSA-2018:3731 - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-3-7-released/ - https://www.ruby-lang.org/en/news/2018/03/28/poisoned-nul-byte-dir-cve-2018-8780/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html - http://www.securityfocus.com/bid/103739 - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-4-4-released/ - https://www.debian.org/security/2018/dsa-4259 - https://www.ruby-lang.or
g.org/en/news/2018/03/28/ruby-2-4-4-released/ - https://www.debian.org/security/2018/dsa-4259 - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-2-10-released/ - https://lists.debian.org/debian-lts-announce/2018/04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html - https://access.redhat.com/errata/RHSA-2019:2028 - https://access.redhat.com/errata/RHSA-2020:0542 - https://access.redhat.com/errata/RHSA-2020:0591 - https://access.redhat.com/errata/RHSA-2020:0663
CVE ID: CVE-2018-8781 State: PUBLISHED Published: 2018-04-23T19:00:00Z Last Updated: 2024-09-16T23:56:54.630Z Vendors: Check Point Software Technologies Ltd. Products: Linux Kernel Problem Types: Local Privilege Escalation Description: The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3083 - https://research.check
t Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3083 - https://research.checkpoint.com/mmap-vulnerabilities-linux-kernel/ - https://www.debian.org/security/2018/dsa-4187 - https://usn.ubuntu.com/3654-1/ - https://usn.ubuntu.com/3674-1/ - https://usn.ubuntu.com/3677-1/ - https://www.debian.org/security/2018/dsa-4188 - https://usn.ubuntu.com/3674-2/ - https://access.redhat.com/errata/RHSA-2018:2948 - https://patchwork.freedesktop.org/patch/211845/ - https://usn.ubuntu.com/3677-2/ - https://usn.ubuntu.com/3654-2/ - https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html - https://usn.ubuntu.com/3656-1/ - https://access.redhat.com/errata/RHSA
n.org/debian-lts-announce/2018/05/msg00000.html - https://usn.ubuntu.com/3656-1/ - https://access.redhat.com/errata/RHSA-2018:3096