Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-9107 State: PUBLISHED Published: 2018-03-28T04:00:00 Last Updated: 2024-08-05T07:17:51.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a value that is mishandled in a CSV export. Additional Analyst Notes: - CVE Program Container: References: - https://www.acyba.com/acymailing/change-log.html - https://www.exploit-db.com/exploits/44369/ - https://vel.joomla.org/resolved/2136-acymailing-5-9-5-csv-injection - https://vel.joomla.org/articles/2140-introducing-csv-injection
CVE ID: CVE-2018-9108 State: PUBLISHED Published: 2018-03-28T04:00:00Z Last Updated: 2024-09-16T18:33:35.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSRF in /admin/user/manage/add in QuickAppsCMS 2.0.0-beta2 allows an unauthorized remote attacker to create an account with admin privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/quickapps/cms/issues/187
CVE ID: CVE-2018-9109 State: PUBLISHED Published: 2018-03-28T06:00:00 Last Updated: 2024-08-05T07:17:51.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Studio 42 elFinder before 2.1.36 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Studio-42/elFinder/commit/157f471d7e48f190f74e66eb5bc73360b5352fd3 - https://github.com/Studio-42/elFinder/wiki/Advisory-about-vulnerability-of-CVE-2018-9109-and-CVE-201
b5bc73360b5352fd3 - https://github.com/Studio-42/elFinder/wiki/Advisory-about-vulnerability-of-CVE-2018-9109-and-CVE-2018-9110 - https://github.com/Studio-42/elFinder/releases/tag/2.1.36
CVE ID: CVE-2018-9110 State: PUBLISHED Published: 2018-03-28T14:00:00 Last Updated: 2024-08-05T07:17:51.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process. NOTE: this issue exists because of an incomplete fix for CVE-2018-9109. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Studio-42/elFinder/releases/tag/2.1.37 - https://github.com/Studio-42/elFinder/wiki/Advisory-abou
: - https://github.com/Studio-42/elFinder/releases/tag/2.1.37 - https://github.com/Studio-42/elFinder/wiki/Advisory-about-vulnerability-of-CVE-2018-9109-and-CVE-2018-9110 - https://github.com/Studio-42/elFinder/commit/e6351557b86cc10a7651253d2d2aff7f6b918f8e
CVE ID: CVE-2018-9111 State: PUBLISHED Published: 2018-05-10T03:00:00 Last Updated: 2024-08-05T07:17:51.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) exists on the Foxconn FEMTO AP-FC4064-T AP_GT_B38_5.8.3lb15-W47 LTE Build 15 via the configuration of a user account. An attacker can execute arbitrary script on an unsuspecting user's browser. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/ChuanYuan-Huang/a92b8b32980123d5fa9bf5a8299114bf
CVE ID: CVE-2018-9112 State: PUBLISHED Published: 2018-05-10T03:00:00 Last Updated: 2024-08-05T07:17:50.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: A low privileged admin account with a weak default password of admin exists on the Foxconn FEMTO AP-FC4064-T AP_GT_B38_5.8.3lb15-W47 LTE Build 15. In addition, its web management page relies on the existence or values of cookies when performing security-critical operations. One can gain privileges by modifying cookies. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/ChuanYuan-Huang/a92b8b32980123d5fa9bf5a8299114bf
CVE ID: CVE-2018-9113 State: PUBLISHED Published: 2018-04-26T06:00:00 Last Updated: 2024-08-05T07:17:51.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Centers for Disease Control and Prevention MicrobeTRACE 0.1.12 allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV file with an initial '><script type="text/javascript" src=' line. Fix released on 2018-03-29. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wshepherd0010/advisories/blob/master/CVE-2018-9113.md - https://github.com/CDCgov/MicrobeTRACE/releases/tag/v0.1.12 - https://github.com/CDCgov/MicrobeTrace/commit/e60c5fefb1b4740d42d99b634d3d3c4e
DCgov/MicrobeTRACE/releases/tag/v0.1.12 - https://github.com/CDCgov/MicrobeTrace/commit/e60c5fefb1b4740d42d99b634d3d3c4e66290f01
CVE ID: CVE-2018-9115 State: PUBLISHED Published: 2018-04-04T19:00:00 Last Updated: 2024-08-05T07:17:51.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Systematic SitaWare 6.4 SP2 does not validate input from other sources sufficiently. e.g., information utilizing the NVG interface. An attacker can freeze the Situational Layer, which means that the Situational Picture is no longer updated. Unfortunately, the user cannot notice until he tries to work with that layer. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/141099 - https://packetstormsecurity.com/files/146982 - https://www.exploit-db.com/exploits/443
loud.com/vulnerabilities/141099 - https://packetstormsecurity.com/files/146982 - https://www.exploit-db.com/exploits/44375/
CVE ID: CVE-2018-9116 State: PUBLISHED Published: 2018-03-29T07:00:00 Last Updated: 2024-08-05T07:17:51.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XXE vulnerability within WireMock before 2.16.0 allows a remote unauthenticated attacker to access local files and internal resources and potentially cause a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21topic/wiremock-user/PQ1UQzKZVl0
CVE ID: CVE-2018-9117 State: PUBLISHED Published: 2018-03-29T07:00:00 Last Updated: 2024-08-05T07:17:51.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: WireMock before 2.16.0 contains a vulnerability that allows a remote unauthenticated attacker to access local files beyond the application directory via a specially crafted XML request, aka Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21topic/wiremock-user/PQ1UQzKZVl0
CVE ID: CVE-2018-9118 State: PUBLISHED Published: 2018-04-12T15:00:00 Last Updated: 2024-08-05T07:17:51.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44417/ - https://wpvulndb.com/vulnerabilities/9056 - https://99robots.com/docs/wp-background-takeover-advertisements/
CVE ID: CVE-2018-9119 State: PUBLISHED Published: 2018-04-04T00:00:00 Last Updated: 2024-08-05T07:17:50.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: An attacker with physical access to a BrilliantTS FUZE card (MCU firmware 0.1.73, BLE firmware 0.7.4) can unlock the card, extract credit card numbers, and tamper with data on the card via Bluetooth because no authentication is needed, as demonstrated by gatttool. Additional Analyst Notes: - CVE Program Container: References: - https://www.reddit.com/r/netsec/comments/89qrp1/stealing_credit_cards_from_fuze_via_bluetooth/ - https://blog.ice9.us/2018/04/stealing-credit-cards-from-fuze-bluetooth.html - https://ice9.us/advisories/
a_bluetooth/ - https://blog.ice9.us/2018/04/stealing-credit-cards-from-fuze-bluetooth.html - https://ice9.us/advisories/ICE9-2018-001.txt - https://www.elttam.com/blog/fuzereview/#content
CVE ID: CVE-2018-9120 State: PUBLISHED Published: 2018-03-29T05:00:00Z Last Updated: 2024-09-16T17:42:52.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=QqJFh3Ame9g - https://www.seekurity.com/blog/general/multiple-cross-site-scripting-vulnerabilities-in-crea8social-social-network-script/
CVE ID: CVE-2018-9121 State: PUBLISHED Published: 2018-03-29T05:00:00Z Last Updated: 2024-09-17T03:38:46.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post comment. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=bCf0hO9upto - https://www.seekurity.com/blog/general/multiple-cross-site-scripting-vulnerabilities-in-crea8social-social-network-script/
CVE ID: CVE-2018-9122 State: PUBLISHED Published: 2018-03-29T05:00:00Z Last Updated: 2024-09-17T00:50:39.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Crea8social 2018.2, there is Reflected Cross-Site Scripting via the term parameter to the /search URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=QqJFh3Ame9g - https://www.seekurity.com/blog/general/multiple-cross-site-scripting-vulnerabilities-in-crea8social-social-network-script/
CVE ID: CVE-2018-9123 State: PUBLISHED Published: 2018-03-29T05:00:00Z Last Updated: 2024-09-17T00:51:46.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Crea8social 2018.2, there is Stored Cross-Site Scripting via a User Profile. Additional Analyst Notes: - CVE Program Container: References: - https://www.seekurity.com/blog/general/multiple-cross-site-scripting-vulnerabilities-in-crea8social-social-network-script/
CVE ID: CVE-2018-9126 State: PUBLISHED Published: 2018-04-04T19:00:00 Last Updated: 2024-08-05T07:17:51.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web.config file, and consequently discover database credentials, via the /GetCSS.ashx/?CP=%2fweb.config URI. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/146999/DotNetNuke-DNNarticle-Directory-Traversal.html - https://www.exploit-db.com/exploits/44414/
CVE ID: CVE-2018-9127 State: PUBLISHED Published: 2018-04-02T17:00:00 Last Updated: 2024-08-05T07:17:51.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Botan 2.2.0 - 2.4.0 (fixed in 2.5.0) improperly handled wildcard certificates and could accept certain certificates as valid for hostnames when, under RFC 6125 rules, they should not match. This only affects certificates issued to the same domain as the host, so to impersonate a host one must already have a wildcard certificate matching other hosts in the same domain. For example, b*.example.com would match some hostnames that do not begin with a 'b' character. Additional Analyst Notes: - CVE Program Container: References: - h
ome hostnames that do not begin with a 'b' character. Additional Analyst Notes: - CVE Program Container: References: - https://botan.randombit.net/security.html
CVE ID: CVE-2018-9128 State: PUBLISHED Published: 2018-04-01T07:00:00 Last Updated: 2024-08-05T07:17:51.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: DVD X Player Standard 5.5.3.9 has a Buffer Overflow via a crafted .plf file, a related issue to CVE-2007-3068. Additional Analyst Notes: - CVE Program Container: References: - https://0day4u.wordpress.com/2018/03/30/buffer-overflow-on-dvd-x-player-standard-5-5-3-9/ - https://www.exploit-db.com/exploits/44438/ - https://www.exploit-db.com/exploits/46584/ - http://packetstormsecurity.com/files/152177/DVD-X-Player-5.5.3-Buffer-Overflow.html
CVE ID: CVE-2018-9129 State: PUBLISHED Published: 2018-08-15T18:00:00 Last Updated: 2024-08-05T07:17:51.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange (IKE) handshake implementation used for IPsec based VPN connections. Additional Analyst Notes: - CVE Program Container: References: - https://web-in-security.blogspot.com/2018/08/practical-bleichenbacher-attacks-on-ipsec-ike.html - ftp://ftp.zyxel.com/USG110/firmware/USG110_4.32%28AAPH.0%29C0_2.pdf - https://www.zyxel.com/support/bleichenbacher_attack_vulnerability.shtml
CVE ID: CVE-2018-9130 State: PUBLISHED Published: 2018-03-30T08:00:00 Last Updated: 2024-08-05T07:17:51.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBOS 4.4.3 has XSS via a company full name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cnonce/IBOS_4.4.3/blob/master/Cross%20Site%20Scripting.md - https://cnonce.github.io/2018/03/29/IBOS-4-4-3%E5%AD%98%E5%82%A8%E5%9E%8Bxss/
CVE ID: CVE-2018-9131 State: REJECTED Published: 2018-04-24T16:00:00 Last Updated: 2018-05-31T11:57:01 Description: No description available.
CVE ID: CVE-2018-9132 State: PUBLISHED Published: 2018-03-30T08:00:00 Last Updated: 2024-08-05T07:17:51.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/133 - https://lists.debian.org/debian-lts-announce/2018/05/msg00017.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/47KZ5RYWQMBN5DVDITBVRDNDCSFNBJ3V/ - https://lists.fedora
rchives/list/package-announce%40lists.fedoraproject.org/message/47KZ5RYWQMBN5DVDITBVRDNDCSFNBJ3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LBFCINUX3XXAPPH77OH6NKACBPFBQXXW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CQNIJH5EQV2D6KEFGY2467ZS4I7TZLXP/
CVE ID: CVE-2018-9133 State: PUBLISHED Published: 2018-03-30T08:00:00 Last Updated: 2024-08-05T07:17:51.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes) with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/1072 - https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html
CVE ID: CVE-2018-9134 State: PUBLISHED Published: 2018-03-30T16:00:00 Last Updated: 2024-08-05T07:17:51.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: file_manage_control.php in DedeCMS 5.7 has CSRF in an fmdo=rename action, as demonstrated by renaming an arbitrary file under uploads/userup to a .php file under the web root to achieve PHP code execution. This uses the oldfilename and newfilename parameters. Additional Analyst Notes: - CVE Program Container: References: - https://xz.aliyun.com/t/2234
CVE ID: CVE-2018-9135 State: PUBLISHED Published: 2018-03-30T08:00:00 Last Updated: 2024-08-05T07:17:51.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1009
CVE ID: CVE-2018-9136 State: PUBLISHED Published: 2018-03-30T08:00:00 Last Updated: 2024-08-05T07:17:51.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a crafted .exe file, a different vulnerability than CVE-2018-8821. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigric3/poc2
CVE ID: CVE-2018-9137 State: PUBLISHED Published: 2018-04-19T08:00:00 Last Updated: 2024-08-05T07:17:51.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open-AudIT before 2.2 has CSV Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44511/ - https://community.opmantek.com/display/OA/Errata+-+2.1+Security+Update%2C+April+2018
CVE ID: CVE-2018-9138 State: PUBLISHED Published: 2018-03-30T08:00:00 Last Updated: 2024-08-05T07:17:51.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_nested_args, demangle_args, do_arg, and do_type. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=23008 - https://usn.ubuntu.com/4326-1/ - https://usn.ubuntu.com/4336-1/
CVE ID: CVE-2018-9139 State: PUBLISHED Published: 2018-03-30T08:00:00 Last Updated: 2024-08-05T07:17:51.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Samsung mobile devices with N(7.x) software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2018-9140 State: PUBLISHED Published: 2018-03-30T08:00:00 Last Updated: 2024-08-05T07:17:51.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Samsung mobile devices with M(6.0) software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2018-9141 State: PUBLISHED Published: 2018-03-30T08:00:00 Last Updated: 2024-08-05T07:17:51.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software, Gallery allows remote attackers to execute arbitrary code via a BMP file with a crafted resolution, aka SVE-2017-11105. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2018-9142 State: PUBLISHED Published: 2018-03-30T08:00:00 Last Updated: 2024-08-05T07:17:51.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Samsung mobile devices with N(7.x) software, attackers can install an arbitrary APK in the Secure Folder SD Card area because of faulty validation of a package signature and package name, aka SVE-2017-10932. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2018-9143 State: PUBLISHED Published: 2018-03-30T08:00:00 Last Updated: 2024-08-05T07:17:51.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Samsung mobile devices with M(6.0) and N(7.x) software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2018-9144 State: PUBLISHED Published: 2018-03-30T08:00:00 Last Updated: 2024-08-05T07:17:51.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Exiv2 0.26, there is an out-of-bounds read in Exiv2::Internal::binaryToString in image.cpp. It could result in denial of service or information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/254 - https://github.com/xiaoqx/pocs/tree/master/exiv2 - https://security.gentoo.org/glsa/201811-14
CVE ID: CVE-2018-9145 State: PUBLISHED Published: 2018-03-30T08:00:00 Last Updated: 2024-08-05T07:17:51.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the DataBuf class in include/exiv2/types.hpp in Exiv2 0.26, an issue exists in the constructor with an initial buffer size. A large size value may lead to a SIGABRT during an attempt at memory allocation. NOTE: some third parties have been unable to reproduce the SIGABRT when using the 4-DataBuf-abort-1 PoC file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=1087879 - https://github.com/xiaoqx/pocs/tree/master/exiv2 - https://security.gentoo.org/glsa/201811-14 -
how_bug.cgi?id=1087879 - https://github.com/xiaoqx/pocs/tree/master/exiv2 - https://security.gentoo.org/glsa/201811-14 - https://bugzilla.redhat.com/show_bug.cgi?id=1564281
CVE ID: CVE-2018-9146 State: REJECTED Published: 2018-03-30T08:00:00 Last Updated: 2018-04-20T14:57:01 Description: No description available.
CVE ID: CVE-2018-9147 State: PUBLISHED Published: 2018-03-30T16:00:00 Last Updated: 2024-08-05T07:17:52.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerabilities in version 7.5.7 of Gespage software allow remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/user_reg.jsp. Additional Analyst Notes: - CVE Program Container: References: - https://gurelahmet.com/cve-2018-9147-gespage-7-5-7-cross-site-scripting-xss-vulnerability/
CVE ID: CVE-2018-9148 State: PUBLISHED Published: 2018-03-30T19:00:00 Last Updated: 2024-08-05T07:17:51.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Western Digital WD My Cloud v04.05.00-320 devices embed the session token (aka PHPSESSID) in filenames, which makes it easier for attackers to bypass authentication by listing a directory. NOTE: this can be exploited in conjunction with CVE-2018-7171 for remote authentication bypass within a product that uses My Cloud. Additional Analyst Notes: - CVE Program Container: References: - https://exploit-db.com/exploits/44350/
CVE ID: CVE-2018-9149 State: PUBLISHED Published: 2018-04-01T18:00:00 Last Updated: 2024-08-05T07:17:51.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zyxel Multy X (AC3000 Tri-Band WiFi System) device doesn't use a suitable mechanism to protect the UART. After an attacker dismantles the device and uses a USB-to-UART cable to connect the device, he can use the 1234 password for the root account to login to the system. Furthermore, an attacker can start the device's TELNET service as a backdoor. Additional Analyst Notes: - CVE Program Container: References: - https://www.slideshare.net/secret/qrHwDOJ71eLg7f
CVE ID: CVE-2018-9151 State: PUBLISHED Published: 2018-03-30T19:00:00 Last Updated: 2024-08-05T07:17:51.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference bug in the function ObReferenceObjectByHandle in the Kingsoft Internet Security 9+ kernel driver KWatch3.sys allows local non-privileged users to crash the system via IOCTL 0x80030030. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Mar/78
CVE ID: CVE-2018-9153 State: PUBLISHED Published: 2018-04-15T14:00:00 Last Updated: 2024-08-05T07:17:51.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: The plugin upload component in Z-BlogPHP 1.5.1 allows remote attackers to execute arbitrary PHP code via the app_id parameter to zb_users/plugin/AppCentre/plugin_edit.php because of an unanchored regular expression, a different vulnerability than CVE-2018-8893. The component must be accessed directly by an administrator, or through CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://xz.aliyun.com/t/2277