Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-20712 State: PUBLISHED Published: 2019-01-15T00:00:00 Last Updated: 2024-08-05T12:05:17.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt. Additional Analyst Notes: - CVE Program Container: References: - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88629 - https://sourceware.org/bugzilla/show_bug.cgi?id=24043 - http://www.securityfocus.com/bid/106563 - https://support.f5.com/csp/article/K38336243
CVE ID: CVE-2018-20713 State: PUBLISHED Published: 2019-01-15T16:00:00 Last Updated: 2024-08-05T12:05:17.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404. Additional Analyst Notes: - CVE Program Container: References: - https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-05-2018
CVE ID: CVE-2018-20714 State: PUBLISHED Published: 2019-01-15T16:00:00 Last Updated: 2024-08-05T12:05:17.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: The logging system of the Automattic WooCommerce plugin before 3.4.6 for WordPress is vulnerable to a File Deletion vulnerability. This allows deletion of woocommerce.php, which leads to certain privilege checks not being in place, and therefore a shop manager can escalate privileges to admin. Additional Analyst Notes: - CVE Program Container: References: - https://blog.ripstech.com/2018/wordpress-design-flaw-leads-to-woocommerce-rce/
CVE ID: CVE-2018-20715 State: PUBLISHED Published: 2019-01-15T16:00:00 Last Updated: 2024-08-05T12:12:28.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the oxConfig::getRequestParameter() method in core/oxconfig.php. Additional Analyst Notes: - CVE Program Container: References: - https://demo.ripstech.com/main/%28scans/38/51//sidebar:types/38/51/0%29
CVE ID: CVE-2018-20716 State: PUBLISHED Published: 2019-01-15T16:00:00 Last Updated: 2024-08-05T12:12:28.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: CubeCart before 6.1.13 has SQL Injection via the validate[] parameter of the "I forgot my Password!" feature. Additional Analyst Notes: - CVE Program Container: References: - https://blog.ripstech.com/2018/cubecart-admin-authentication-bypass/
CVE ID: CVE-2018-20717 State: PUBLISHED Published: 2019-01-15T16:00:00 Last Updated: 2024-08-05T12:12:27.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the orders section of PrestaShop before 1.7.2.5, an attack is possible after gaining access to a target store with a user role with the rights of at least a Salesman or higher privileges. The attacker can then inject arbitrary PHP objects into the process and abuse an object chain in order to gain Remote Code Execution. This occurs because protection against serialized objects looks for a 0: followed by an integer, but does not consider 0:+ followed by an integer. Additional Analyst Notes: - CVE Program Container: Referenc
n integer, but does not consider 0:+ followed by an integer. Additional Analyst Notes: - CVE Program Container: References: - https://blog.ripstech.com/2018/prestashop-remote-code-execution/ - https://build.prestashop.com/news/prestashop-1-7-2-5-maintenance-release/
CVE ID: CVE-2018-20718 State: PUBLISHED Published: 2019-01-15T16:00:00 Last Updated: 2024-08-05T12:12:28.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Pydio before 8.2.2, an attack is possible via PHP Object Injection because a user is allowed to use the $phpserial$a:0:{} syntax to store a preference. An attacker either needs a "public link" of a file, or access to any unprivileged user account for creation of such a link. Additional Analyst Notes: - CVE Program Container: References: - https://blog.ripstech.com/2018/pydio-unauthenticated-remote-code-execution/
CVE ID: CVE-2018-20719 State: PUBLISHED Published: 2019-01-15T16:00:00 Last Updated: 2024-08-05T12:12:28.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tiki before 17.2, the user task component is vulnerable to a SQL Injection via the tiki-user_tasks.php show_history parameter. Additional Analyst Notes: - CVE Program Container: References: - https://blog.ripstech.com/2018/scan-verify-patch-security-issues-in-minutes/
CVE ID: CVE-2018-20720 State: PUBLISHED Published: 2019-01-16T03:00:00 Last Updated: 2024-08-05T12:12:27.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: ABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before 1.2.0.B3, and 1.3 before 1.3.0.A6 allow remote attackers to cause a denial of service (reboot) via a reboot command in an SPA message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106641 - http://search.abb.com/library/Download.aspx?DocumentID=1MRS758909&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2018-20721 State: PUBLISHED Published: 2019-01-16T14:00:00 Last Updated: 2024-08-05T12:12:28.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: URI_FUNC() in UriParse.c in uriparser before 0.9.1 has an out-of-bounds read (in uriParse*Ex* functions) for an incomplete URI with an IPv6 address containing an embedded IPv4 address, such as a "//[::44.1" address. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/02/msg00028.html - https://github.com/uriparser/uriparser/commit/cef25028de5ff872c2e1f0a6c562eb3ea9ecbce4 - https://github.com/uriparser/uriparser/blob/master/ChangeLog - https://lists.debian.org/debi
2c2e1f0a6c562eb3ea9ecbce4 - https://github.com/uriparser/uriparser/blob/master/ChangeLog - https://lists.debian.org/debian-lts-announce/2021/11/msg00029.html
CVE ID: CVE-2018-20723 State: PUBLISHED Published: 2019-01-16T16:00:00 Last Updated: 2024-08-05T12:12:28.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability exists in color_templates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Name field for a Color. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cacti/cacti/commit/80c2a88fb2afb93f87703ba4641f9970478c102d - https://github.com/Cacti/cacti/blob/develop/CHANGELOG - https://github.com/Cacti/cacti/issues/2215 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html - http://lists.opensuse.org/opensu
ues/2215 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00048.html
CVE ID: CVE-2018-20724 State: PUBLISHED Published: 2019-01-16T16:00:00 Last Updated: 2024-08-05T12:12:28.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability exists in pollers.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname for Data Collectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cacti/cacti/issues/2212 - https://github.com/Cacti/cacti/blob/develop/CHANGELOG - https://github.com/Cacti/cacti/commit/1f42478506d83d188f68ce5ff41728a7bd159f53 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html - http://lists.opensuse.org/
1728a7bd159f53 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00048.html
CVE ID: CVE-2018-20725 State: PUBLISHED Published: 2019-01-16T16:00:00 Last Updated: 2024-08-05T12:12:27.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability exists in graph_templates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Graph Vertical Label. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cacti/cacti/commit/80c2a88fb2afb93f87703ba4641f9970478c102d - https://github.com/Cacti/cacti/blob/develop/CHANGELOG - https://github.com/Cacti/cacti/issues/2214 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html - http://lists.opensuse.org/opensuse
s/2214 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00048.html
CVE ID: CVE-2018-20726 State: PUBLISHED Published: 2019-01-16T16:00:00 Last Updated: 2024-08-05T12:12:28.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability exists in host.php (via tree.php) in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname field for Devices. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cacti/cacti/commit/80c2a88fb2afb93f87703ba4641f9970478c102d - https://github.com/Cacti/cacti/blob/develop/CHANGELOG - https://github.com/Cacti/cacti/issues/2213 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html - http://lists.ope
/Cacti/cacti/issues/2213 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00048.html
CVE ID: CVE-2018-20727 State: PUBLISHED Published: 2019-01-17T02:00:00 Last Updated: 2024-08-05T12:12:27.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple command injection vulnerabilities in NeDi before 1.7Cp3 allow authenticated users to execute code on the server side via the flt parameter to Nodes-Traffic.php, the dv parameter to Devices-Graph.php, or the tit parameter to drawmap.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.nedi.ch/end-of-year-update/ - https://www.sakerhetskontoret.com/disclosures/nedi/report.html
CVE ID: CVE-2018-20728 State: PUBLISHED Published: 2019-01-17T02:00:00 Last Updated: 2024-08-05T12:12:28.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross site request forgery (CSRF) vulnerability in NeDi before 1.7Cp3 allows remote attackers to escalate privileges via User-Management.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.nedi.ch/end-of-year-update/ - https://www.sakerhetskontoret.com/disclosures/nedi/report.html
CVE ID: CVE-2018-20729 State: PUBLISHED Published: 2019-01-17T02:00:00 Last Updated: 2024-08-05T12:12:27.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML via the reg parameter in mh.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.nedi.ch/end-of-year-update/ - https://www.sakerhetskontoret.com/disclosures/nedi/report.html
CVE ID: CVE-2018-20730 State: PUBLISHED Published: 2019-01-17T02:00:00 Last Updated: 2024-08-05T12:12:28.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in NeDi before 1.7Cp3 allows any user to execute arbitrary SQL read commands via the query.php component. Additional Analyst Notes: - CVE Program Container: References: - https://www.nedi.ch/end-of-year-update/ - https://www.sakerhetskontoret.com/disclosures/nedi/report.html
CVE ID: CVE-2018-20731 State: PUBLISHED Published: 2019-01-17T02:00:00 Last Updated: 2024-08-05T12:12:28.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML via User-Chat.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.nedi.ch/end-of-year-update/ - https://www.sakerhetskontoret.com/disclosures/nedi/report.html
CVE ID: CVE-2018-20732 State: PUBLISHED Published: 2019-01-17T01:00:00 Last Updated: 2024-08-05T12:12:28.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106648 - https://support.sas.com/kb/63/391.html
CVE ID: CVE-2018-20733 State: PUBLISHED Published: 2019-01-17T01:00:00 Last Updated: 2024-08-05T12:12:29.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE. Additional Analyst Notes: - CVE Program Container: References: - http://support.sas.com/kb/62/987.html
CVE ID: CVE-2018-20735 State: PUBLISHED Published: 2019-01-17T20:00:00 Last Updated: 2024-08-05T12:12:27.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in BMC PATROL Agent through 11.3.01. It was found that the PatrolCli application can allow for lateral movement and escalation of privilege inside a Windows Active Directory environment. It was found that by default the PatrolCli / PATROL Agent application only verifies if the password provided for the given username is correct; it does not verify the permissions of the user on the network. This means if you have PATROL Agent installed on a high value target (domain controller), you can use a low privi
twork. This means if you have PATROL Agent installed on a high value target (domain controller), you can use a low privileged domain user to authenticate with PatrolCli and then connect to the domain controller and run commands as SYSTEM. This means any user on a domain can escalate to domain admin through PATROL Agent. NOTE: the vendor disputes this because they believe it is adequate to prevent this escalation by means of a custom, non-default configuration Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.securifera.com/blog/2018/12/17/bmc-patrol-agent-domain-user-to-domain-admin/ - https://www.exploit-db.com/exploits/46556/
CVE ID: CVE-2018-20736 State: PUBLISHED Published: 2019-03-18T20:21:44 Last Updated: 2024-08-05T12:12:28.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WSO2 API Manager 2.1.0 and 2.6.0. A DOM-based XSS exists in the store part of the product. Additional Analyst Notes: - CVE Program Container: References: - https://wso2.com/security-patch-releases/api-manager - https://www.excellium-services.com/cert-xlm-advisory/cve-2018-20736/ - https://github.com/wso2/carbon-apimgt/pull/5844/files
CVE ID: CVE-2018-20737 State: PUBLISHED Published: 2019-03-18T20:16:49 Last Updated: 2024-08-05T12:12:29.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WSO2 API Manager 2.1.0 and 2.6.0. Reflected XSS exists in the carbon part of the product. Additional Analyst Notes: - CVE Program Container: References: - https://www.excellium-services.com/cert-xlm-advisory/cve-2018-20737/ - https://github.com/wso2-extensions/identity-inbound-auth-oauth/pull/978/files - https://wso2.com/security-patch-releases/api-manager
CVE ID: CVE-2018-20742 State: PUBLISHED Published: 2019-01-24T05:00:00Z Last Updated: 2024-09-17T02:37:39.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocall_malloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ucbrise/opaque/issues/66 - https://github.com/ucbrise/opaque/commit/5ddda15d89f5ac82f4416208c5319ace4aecdc36
CVE ID: CVE-2018-20743 State: PUBLISHED Published: 2019-01-25T16:00:00 Last Updated: 2024-08-05T12:12:28.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows remote attackers to cause a denial of service (daemon hang or crash) via a message flood. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/919249 - https://www.debian.org/security/2019/dsa-4402 - https://github.com/mumble-voip/mumble/pull/3510 - https://lists.debian.org/debian-lts-announce/2019/02/msg00006.html - https://github.com/mumble-voip/mumble
e/pull/3510 - https://lists.debian.org/debian-lts-announce/2019/02/msg00006.html - https://github.com/mumble-voip/mumble/issues/3505 - https://github.com/mumble-voip/mumble/pull/3512 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00045.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00058.html
CVE ID: CVE-2018-20744 State: PUBLISHED Published: 2019-01-28T08:00:00 Last Updated: 2024-08-05T12:12:28.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106834 - https://github.com/rs/cors/issues/55 - https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-chen.pdf
CVE ID: CVE-2018-20745 State: PUBLISHED Published: 2019-01-28T08:00:00Z Last Updated: 2024-09-17T00:56:20.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yii 2.x through 2.0.15.1 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems. Additional Analyst Notes: - CVE Program Container: References: - https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-chen.pdf - https://github.com/yiisoft/yii2/issues/16193
CVE ID: CVE-2018-20748 State: PUBLISHED Published: 2019-01-30T18:00:00 Last Updated: 2024-08-05T12:12:28.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/01/msg00029.html - https://github.com/LibVNC/libvncserver/commit/a64c3b37af9a6c8f8009d7516874b8d266b42bae - https://github.com/LibVNC/libvncserver/commit/e34bcbb759ca5bef85809967a268fdf214c1ad2c - https://github.com/LibVNC/libvncserver/issues/273 - https://github.c
r/commit/e34bcbb759ca5bef85809967a268fdf214c1ad2c - https://github.com/LibVNC/libvncserver/issues/273 - https://github.com/LibVNC/libvncserver/commit/c5ba3fee85a7ecbbca1df5ffd46d32b92757bc2a - https://github.com/LibVNC/libvncserver/commit/c2c4b81e6cb3b485fb1ec7ba9e7defeb889f6ba7 - https://usn.ubuntu.com/3877-1/ - https://www.openwall.com/lists/oss-security/2018/12/10/8 - https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html - https://usn.ubuntu.com/4547-1/ - https://usn.ubuntu.com/4587-1/ - https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
CVE ID: CVE-2018-20749 State: PUBLISHED Published: 2019-01-30T18:00:00 Last Updated: 2024-08-05T12:12:27.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/01/msg00029.html - http://www.securityfocus.com/bid/106825 - https://github.com/LibVNC/libvncserver/commit/15bb719c03cc70f14c36a843dcb16ed69b405707 - https://github.com/LibVNC/libvncserver/issues/273 - https://usn.ubuntu.com/3877-1/ - https://www.openwall.com/lists/oss-sec
ps://github.com/LibVNC/libvncserver/issues/273 - https://usn.ubuntu.com/3877-1/ - https://www.openwall.com/lists/oss-security/2018/12/10/8 - https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html - https://usn.ubuntu.com/4547-1/ - https://usn.ubuntu.com/4587-1/ - https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
CVE ID: CVE-2018-20750 State: PUBLISHED Published: 2019-01-30T18:00:00 Last Updated: 2024-08-05T12:12:28.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/01/msg00029.html - http://www.securityfocus.com/bid/106825 - https://github.com/LibVNC/libvncserver/issues/273 - https://github.com/LibVNC/libvncserver/commit/09e8fc02f59f16e2583b34fe1a270c238bd9ffec - https://usn.ubuntu.com/3877-1/ - https://www.openwall.com/lists/oss-se
commit/09e8fc02f59f16e2583b34fe1a270c238bd9ffec - https://usn.ubuntu.com/3877-1/ - https://www.openwall.com/lists/oss-security/2018/12/10/8 - https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html - https://usn.ubuntu.com/4547-1/ - https://usn.ubuntu.com/4587-1/ - https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
CVE ID: CVE-2018-20751 State: PUBLISHED Published: 2019-02-04T19:00:00Z Last Updated: 2024-09-17T02:01:42.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in crop_page in PoDoFo 0.9.6. For a crafted PDF document, pPage->GetObject()->GetDictionary().AddKey(PdfName("MediaBox"),var) can be problematic due to the function GetObject() being called for the pPage NULL pointer object. The value of pPage at this point is 0x0, which causes a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-crop_page-podofo-0-9-6/ - https://sourceforge.net/p/podo
ch.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-crop_page-podofo-0-9-6/ - https://sourceforge.net/p/podofo/tickets/33/
CVE ID: CVE-2018-20752 State: PUBLISHED Published: 2019-02-04T21:00:00 Last Updated: 2024-08-05T12:12:28.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Recon-ng before 4.9.5. Lack of validation in the modules/reporting/csv.py file allows CSV injection. More specifically, when a Twitter user possesses an Excel macro for a username, it will not be properly sanitized when exported to a CSV file. This can result in remote code execution for the attacker. Additional Analyst Notes: - CVE Program Container: References: - https://bitbucket.org/LaNMaSteR53/recon-ng/issues/285/csv-injection-vulnerability-identified-in - https://bitbucket.org/LaNMaSteR53/reco
t.org/LaNMaSteR53/recon-ng/issues/285/csv-injection-vulnerability-identified-in - https://bitbucket.org/LaNMaSteR53/recon-ng/commits/41e96fd58891439974fb0c920b349f8926c71d4c#chg-modules/reporting/csv.py