Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-15499 State: PUBLISHED Published: 2018-08-24T19:00:00 Last Updated: 2024-08-05T09:54:03.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: GEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users to cause a denial of service (Race Condition and BSoD on Windows) by not checking that user-mode memory is available right before writing to it. A check is only performed at the beginning of a long subroutine. Additional Analyst Notes: - CVE Program Container: References: - https://downwithup.github.io/CVEPosts.html - https://github.com/DownWithUp/CVE-2018-15499
CVE ID: CVE-2018-15501 State: PUBLISHED Published: 2018-08-18T02:00:00 Last Updated: 2024-08-05T09:54:03.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote attacker can send a crafted smart-protocol "ng" packet that lacks a '\0' byte to trigger an out-of-bounds read that leads to DoS. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9406 - https://github.com/libgit2/libgit2/releases/tag/v0.27.4 - https://www.pro-linux.de/sicherheit/2/44650/denial-of-service-in-libgit2.html - https://bugzilla.suse.com/show_bug.cgi?id
ttps://www.pro-linux.de/sicherheit/2/44650/denial-of-service-in-libgit2.html - https://bugzilla.suse.com/show_bug.cgi?id=1104641 - https://lists.debian.org/debian-lts-announce/2018/08/msg00024.html - https://github.com/libgit2/libgit2/releases/tag/v0.26.6 - https://github.com/libgit2/libgit2/commit/1f9a8510e1d2f20ed7334eeeddb92c4dd8e7c649 - https://lists.debian.org/debian-lts-announce/2022/03/msg00031.html
CVE ID: CVE-2018-15502 State: PUBLISHED Published: 2018-09-12T16:00:00 Last Updated: 2024-08-05T09:54:03.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in Lone Wolf Technologies loadingDOCS 2018-08-13 allow remote attackers to download any confidential files via https requests for predictable URLs. Additional Analyst Notes: - CVE Program Container: References: - https://www.ezmax.ca/messages/CVE-2018-15502.html
CVE ID: CVE-2018-15503 State: PUBLISHED Published: 2018-08-18T02:00:00 Last Updated: 2024-08-05T09:54:03.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unpack implementation in Swoole version 4.0.4 lacks correct size checks in the deserialization process. An attacker can craft a serialized object to exploit this vulnerability and cause a SEGV. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/swoole/swoole-src/issues/1882 - https://github.com/swoole/swoole-src/commit/4cdbce5d9bf2fe596bb6acd7d6611f9e8c253a76 - https://x-c3ll.github.io/posts/swoole-deserialization-cve-2018-15503/
CVE ID: CVE-2018-15504 State: PUBLISHED Published: 2018-08-18T00:00:00 Last Updated: 2024-08-05T09:54:03.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which results in a NULL pointer dereference, as demonstrated by If-Modified-Since or If-Unmodified-Since with a month greater than 11. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/embedthis/appweb/commit/66067ae6d1fa08b37a270e7dc1821df52ed2daef - https://github.com/embedthis/appweb/issues/605 - https://github.com/embedthis/goahead/issues/
7a270e7dc1821df52ed2daef - https://github.com/embedthis/appweb/issues/605 - https://github.com/embedthis/goahead/issues/264 - https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved - https://supportportal.juniper.net/s/article/2019-07-Security-Bulletin-Junos-OS-J-Web-Denial-of-Service-due-to-multiple-vulnerabilities-in-Embedthis-Appweb-Server
CVE ID: CVE-2018-15505 State: PUBLISHED Published: 2018-08-18T00:00:00 Last Updated: 2024-08-05T09:54:03.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. An HTTP POST request with a specially crafted "Host" header field may cause a NULL pointer dereference and thus cause a denial of service, as demonstrated by the lack of a trailing ']' character in an IPv6 address. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/embedthis/appweb/issues/605 - https://github.com/embedthis/goahead/issues/264 - https://github.com/embedthis/appweb/commit/16e6979c82297d5fc4f8661e7a
https://github.com/embedthis/goahead/issues/264 - https://github.com/embedthis/appweb/commit/16e6979c82297d5fc4f8661e7ada975f51e4dfa9 - https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved?language=en_US
CVE ID: CVE-2018-15506 State: PUBLISHED Published: 2019-06-19T16:13:41 Last Updated: 2024-08-05T09:54:03.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BubbleUPnP 0.9 update 30, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. Remote, unauthenticated attackers can use this vulnerability to: (1) Access arbitrary files from the filesystem with the same permission as the user account running BubbleUPnP, (2) Initiate SMB connections to capture a NetNTLM challenge/response and crack the cleartext password, or (3) Initiate SMB connections to relay a NetNTLM challenge/response and achieve Remote Command Execution
ext password, or (3) Initiate SMB connections to relay a NetNTLM challenge/response and achieve Remote Command Execution in Windows domains. Additional Analyst Notes: - CVE Program Container: References: - https://www.bubblesoftapps.com/bubbleupnpserver2/docs/changelog.html
CVE ID: CVE-2018-15508 State: PUBLISHED Published: 2019-03-15T22:00:00 Last Updated: 2024-08-05T09:54:03.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to cause a denial of service via opening a connection on port 8083 to a device running the Five9 SoftPhone(issue 1 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://0tkombo.wixsite.com/0tkombo/blog/five9-dos-websocket-access
CVE ID: CVE-2018-15509 State: PUBLISHED Published: 2019-03-15T22:00:00 Last Updated: 2024-08-05T09:54:03.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control (issue 2 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://0tkombo.wixsite.com/0tkombo/blog/five9-dos-websocket-access
CVE ID: CVE-2018-15510 State: PUBLISHED Published: 2019-08-29T21:28:32 Last Updated: 2024-08-05T09:54:03.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://www.contextis.com/en/resources/advisories/cve-2018-15510
CVE ID: CVE-2018-15511 State: PUBLISHED Published: 2019-08-29T21:31:48 Last Updated: 2024-08-05T09:54:03.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the 'Notification template' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://www.contextis.com/en/resources/advisories/cve-2018-15511
CVE ID: CVE-2018-15512 State: PUBLISHED Published: 2019-08-29T21:17:51 Last Updated: 2024-08-05T09:54:03.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://www.contextis.com/en/resources/advisories/cve-2018-15512
CVE ID: CVE-2018-15513 State: PUBLISHED Published: 2019-08-29T21:21:51 Last Updated: 2024-08-05T09:54:03.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor role. Additional Analyst Notes: - CVE Program Container: References: - https://www.contextis.com/en/resources/advisories/cve-2018-15513
CVE ID: CVE-2018-15514 State: PUBLISHED Published: 2018-09-01T01:00:00 Last Updated: 2024-08-05T09:54:03.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce-win72 (stable) deserialized requests over the \\.\pipe\dockerBackend named pipe without verifying the validity of the deserialized .NET objects. This would allow a malicious user in the "docker-users" group (who may not otherwise have administrator access) to escalate to administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - https://srcincite.io/blog/2018/08/31/you-cant-contain-me-analyzing-and
yst Notes: - CVE Program Container: References: - https://srcincite.io/blog/2018/08/31/you-cant-contain-me-analyzing-and-exploiting-an-elevation-of-privilege-in-docker-for-windows.html - https://docs.docker.com/docker-for-windows/release-notes/ - https://docs.docker.com/docker-for-windows/edge-release-notes/ - http://www.securityfocus.com/bid/105202
CVE ID: CVE-2018-15515 State: PUBLISHED Published: 2019-01-31T19:00:00 Last Updated: 2024-08-05T09:54:03.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CaptivelPortal service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices will load a Trojan horse "quserex.dll" from the CaptivelPortal.exe subdirectory under the D-Link directory, which allows unprivileged local users to gain SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Nov/29 - http://packetstormsecurity.com/files/150244/D-LINK-Central-WifiManager-CWM-100-1.03-r0098-DLL-Hijacking.html
CVE ID: CVE-2018-15516 State: PUBLISHED Published: 2019-01-31T19:00:00 Last Updated: 2024-08-05T09:54:03.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices allows remote attackers to conduct a PORT command bounce scan via port 8000, resulting in SSRF. Additional Analyst Notes: - CVE Program Container: References: - https://vimeo.com/299797225 - http://seclists.org/fulldisclosure/2018/Nov/27 - http://packetstormsecurity.com/files/150242/D-LINK-Central-WifiManager-CWM-100-1.03-r0098-Man-In-The-Middle.html
CVE ID: CVE-2018-15517 State: PUBLISHED Published: 2019-01-31T19:00:00 Last Updated: 2024-08-05T09:54:03.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, leading to SSRF, as demonstrated by an index.php/System/MailConnect/host/127.0.0.1/port/22/secure/ URI. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150243/D-LINK-Central-WifiManager-CWM-100-1.03-r0098-Server-Side-Request-Forgery.html - http://seclists.org/fulldisclosure/2018/
-LINK-Central-WifiManager-CWM-100-1.03-r0098-Server-Side-Request-Forgery.html - http://seclists.org/fulldisclosure/2018/Nov/28
CVE ID: CVE-2018-15518 State: PUBLISHED Published: 2018-12-26T20:00:00 Last Updated: 2024-08-05T09:54:03.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2019/dsa-4374 - https://codereview.qt-project.org/#/c/236691/ - http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00066.html - https://lists.debian.org/debian-lts-announce/2019/01/msg00004.html - https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ - https://blog.
019/01/msg00004.html - https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ - https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ - https://codereview.qt-project.org/#/c/236691/ - https://lists.debian.org/debian-lts-announce/2019/05/msg00014.html - https://usn.ubuntu.com/4003-1/ - https://access.redhat.com/errata/RHSA-2019:2135 - https://access.redhat.com/errata/RHSA-2019:3390 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00057.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00071.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00073.html - http://lists.opensuse.org/op
sg00071.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00073.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00090.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00023.html
CVE ID: CVE-2018-15519 State: PUBLISHED Published: 2019-06-28T16:12:24 Last Updated: 2024-08-05T09:54:03.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various Lexmark devices have a Buffer Overflow (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/index?page=content&id=TE892
CVE ID: CVE-2018-15520 State: PUBLISHED Published: 2019-06-28T15:25:12 Last Updated: 2024-08-05T09:54:03.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various Lexmark devices have a Buffer Overflow (issue 2 of 2). Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/index?page=content&id=TE892
CVE ID: CVE-2018-15528 State: PUBLISHED Published: 2018-08-21T16:00:00 Last Updated: 2024-08-05T09:54:03.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross-Site Scripting exists in the Java System Solutions SSO plugin 4.0.13.1 for BMC MyIT. A remote attacker can abuse this issue to inject client-side scripts into the "select_sso()" function. The payload is triggered when the victim opens a prepared /ux/jss-sso/arslogin?[XSS] link and then clicks the "Login" button. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149007/BMC-MyIT-Java-System-Solutions-SSO-Plugin-4.0.13.1-Cross-Site-Scripting.html - http://seclis
rmsecurity.com/files/149007/BMC-MyIT-Java-System-Solutions-SSO-Plugin-4.0.13.1-Cross-Site-Scripting.html - http://seclists.org/bugtraq/2018/Aug/41
CVE ID: CVE-2018-15529 State: PUBLISHED Published: 2018-08-28T17:00:00 Last Updated: 2024-08-05T09:54:03.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability in maintenance.cgi in Mutiny "Monitoring Appliance" before 6.1.0-5263 allows authenticated users, with access to the admin interface, to inject arbitrary commands within the filename of a system upgrade upload. Additional Analyst Notes: - CVE Program Container: References: - https://doddsecurity.com/135/remote-command-execution-on-the-monitoring-appliances/ - https://github.com/doddr/Security-Advisories/tree/master/Mutiny/CVE-2018-15529 - http://packetstormsecurity.com/files/149065/Mutiny-Mon
com/doddr/Security-Advisories/tree/master/Mutiny/CVE-2018-15529 - http://packetstormsecurity.com/files/149065/Mutiny-Monitoring-Appliance-Command-Injection.html - https://www.mutiny.com/mutiny-support/release-summary/
CVE ID: CVE-2018-15530 State: PUBLISHED Published: 2019-05-13T12:46:10 Last Updated: 2024-08-05T09:54:03.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) in the web interface of the Xerox ColorQube 8580 allows remote persistent injection of custom HTML / JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://ysec.ch/?p=94
CVE ID: CVE-2018-15531 State: PUBLISHED Published: 2018-09-26T22:00:00 Last Updated: 2024-08-05T09:54:03.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2018/09/25/3 - https://github.com/javamelody/javamelody/commit/ef111822562d0b9365bd3e671a75b65bd0613353 - https://github.com/javamelody/javamelody/wiki/ReleaseNotes - https://jenkins.io/security/advisory/2018-09-25/
CVE ID: CVE-2018-15532 State: PUBLISHED Published: 2019-03-17T21:23:10 Last Updated: 2024-08-05T09:54:03.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: SynTP.sys in Synaptics Touchpad drivers before 2018-06-06 allows local users to obtain sensitive information about freed kernel addresses. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106799 - https://support.lenovo.com/us/en/product_security/LEN-23156 - https://www.synaptics.com/products/touchpad-family - https://www.synaptics.com/sites/default/files/touchpad-driver-security-brief-20190124.pdf
CVE ID: CVE-2018-15533 State: PUBLISHED Published: 2018-08-21T16:00:00 Last Updated: 2024-08-05T09:54:03.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting vulnerability exists in Geutebrueck re_porter 16 before 7.8.974.20 by appending a query string to /modifychannel/exec or /images/*.png on TCP port 12005. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149003/Geutebruck-re_porter-16-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/45242/
CVE ID: CVE-2018-15534 State: PUBLISHED Published: 2018-08-21T16:00:00 Last Updated: 2024-08-05T09:54:03.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Geutebrueck re_porter 16 before 7.8.974.20 has a possibility of unauthenticated access to sensitive information including usernames and hashes via a direct request for /statistics/gscsetup.xml on TCP port 12003. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149002/Geutebruck-re_porter-16-Credential-Disclosure.html - https://www.exploit-db.com/exploits/45240/
CVE ID: CVE-2018-15535 State: PUBLISHED Published: 2018-08-24T19:00:00 Last Updated: 2024-08-05T09:54:03.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: /filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize get_file sequences such as ".." that can resolve to a location that is outside of that directory, aka Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45271/ - http://seclists.org/fulldisclosure/2018/Aug/34
CVE ID: CVE-2018-15536 State: PUBLISHED Published: 2018-08-24T19:00:00 Last Updated: 2024-08-05T09:54:03.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: /filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 does not properly validate file paths in archives, allowing for the extraction of crafted archives to overwrite arbitrary files via an extract action, aka Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45271/ - http://seclists.org/fulldisclosure/2018/Aug/34
CVE ID: CVE-2018-15537 State: PUBLISHED Published: 2018-11-29T21:00:00 Last Updated: 2024-08-05T09:54:03.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload (with remote code execution) in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150330/OCS-Inventory-NG-ocsreports-Shell-Upload.html - http://seclists.org/fulldisclosure/2018/Nov/40
CVE ID: CVE-2018-15538 State: PUBLISHED Published: 2018-10-15T19:00:00 Last Updated: 2024-08-05T09:54:03.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Agentejo Cockpit has multiple Cross-Site Scripting vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Oct/30
CVE ID: CVE-2018-15539 State: PUBLISHED Published: 2018-10-15T19:00:00 Last Updated: 2024-08-05T09:54:03.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Agentejo Cockpit lacks an anti-CSRF protection mechanism. Thus, an attacker is able to change API tokens, passwords, etc. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Oct/30
CVE ID: CVE-2018-15540 State: PUBLISHED Published: 2018-10-15T19:00:00 Last Updated: 2024-08-05T09:54:03.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Oct/30
CVE ID: CVE-2018-15542 State: PUBLISHED Published: 2018-10-09T15:00:00 Last Updated: 2024-08-05T09:54:03.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return value to true. In other words, an attacker could authenticate with an arbitrary passcode. NOTE: the vendor indicates that this is not an attack of interest within the context of their threat model, which excludes Android devices on which rooting has occurred Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Containe
Android devices on which rooting has occurred Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/tanprathan/18d0f692a2485acfb5693e2f6dabeb5d
CVE ID: CVE-2018-15543 State: PUBLISHED Published: 2018-10-09T15:00:00 Last Updated: 2024-11-14T20:28:45.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. The FingerprintManager class for Biometric validation allows authentication bypass through the callback method from onAuthenticationFailed to onAuthenticationSucceeded with null, because the fingerprint API in conjunction with the Android keyGenerator class is not implemented. In other words, an attacker could authenticate with an arbitrary fingerprint. NOTE: the vendor indicates that this is not an attack of interest within the context of t
with an arbitrary fingerprint. NOTE: the vendor indicates that this is not an attack of interest within the context of their threat model, which excludes Android devices on which rooting has occurred Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/tanprathan/d286c0d5b02e344606287774304a1ccd
CVE ID: CVE-2018-15546 State: PUBLISHED Published: 2018-09-18T21:00:00 Last Updated: 2024-08-05T09:54:03.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://help.accusoft.com/PrizmDoc/v13.4/ReleaseNotes/index.htm - https://medium.com/%40mrnikhilsri/stored-cross-site-scripting-in-prizmdoc-13-3-and-before-cve-2018-15546-1938191845c5