Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-6405 State: PUBLISHED Published: 2018-01-30T21:00:00 Last Updated: 2024-08-05T06:01:49.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap, greenmap, and bluemap variable can be overwritten by a new pointer. The previous pointer is lost, which leads to a memory leak. This allows remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/964
CVE ID: CVE-2018-6406 State: PUBLISHED Published: 2018-01-30T21:00:00Z Last Updated: 2024-09-17T03:33:34.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does not validate the child_frame_length data obtained from a .webm file, which allows remote attackers to cause an information leak or a denial of service (heap-based buffer over-read and later out-of-bounds write), or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/webm/issues/detail?id=1492 - https://github.com/dwfault/PoCs/blob/master/libwebm%20Pa
ces: - https://bugs.chromium.org/p/webm/issues/detail?id=1492 - https://github.com/dwfault/PoCs/blob/master/libwebm%20ParseVP9SuperFrameIndex%20memory%20corruption/libwebm%20ParseVP9SuperFrameIndex%20OOB%20read.md
CVE ID: CVE-2018-6407 State: PUBLISHED Published: 2018-01-30T21:00:00Z Last Updated: 2024-09-16T19:56:48.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. An unauthenticated attacker can crash a device by sending a POST request with a huge body size to /hy-cgi/devices.cgi?cmd=searchlandevice. The crash completely freezes the device. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dreadlocked/ConceptronicIPCam_MultipleVulnerabilities/
CVE ID: CVE-2018-6408 State: PUBLISHED Published: 2018-01-30T21:00:00Z Last Updated: 2024-09-16T16:18:15.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. CSRF exists in hy-cgi/user.cgi, as demonstrated by changing an administrator password or adding a new administrator account. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dreadlocked/ConceptronicIPCam_MultipleVulnerabilities/
CVE ID: CVE-2018-6409 State: PUBLISHED Published: 2018-05-26T22:00:00 Last Updated: 2024-08-05T06:01:49.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored files gets the path from the database. Modifying the name of the file to serve on the corresponding ap_form table leads to a path traversal vulnerability via the download.php q parameter. Additional Analyst Notes: - CVE Program Container: References: - https://metalamin.github.io/MachForm-not-0-day-EN/ - https://www.exploit-db.com/exploits/44804/ - https://www.machform.com/blog-machform-423-security-release/
CVE ID: CVE-2018-6410 State: PUBLISHED Published: 2018-05-26T22:00:00 Last Updated: 2024-08-05T06:01:49.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Appnitro MachForm before 4.2.3. There is a download.php SQL injection via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - https://metalamin.github.io/MachForm-not-0-day-EN/ - https://www.exploit-db.com/exploits/44804/ - https://www.machform.com/blog-machform-423-security-release/
CVE ID: CVE-2018-6411 State: PUBLISHED Published: 2018-05-26T22:00:00 Last Updated: 2024-08-05T06:01:49.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Appnitro MachForm before 4.2.3. When the form is set to filter a blacklist, it automatically adds dangerous extensions to the filters. If the filter is set to a whitelist, the dangerous extensions can be bypassed through ap_form_elements SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://metalamin.github.io/MachForm-not-0-day-EN/ - https://www.exploit-db.com/exploits/44804/ - https://www.machform.com/blog-machform-423-security-release/
CVE ID: CVE-2018-6412 State: PUBLISHED Published: 2018-01-31T07:00:00 Last Updated: 2024-08-05T06:01:49.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the function sbusfb_ioctl_helper() in drivers/video/fbdev/sbuslib.c in the Linux kernel through 4.15, an integer signedness error allows arbitrary information leakage for the FBIOPUTCMAP_SPARC and FBIOGETCMAP_SPARC commands. Additional Analyst Notes: - CVE Program Container: References: - https://marc.info/?l=linux-fbdev&m=151734425901499&w=2 - https://github.com/torvalds/linux/commit/250c6c49e3b68756b14983c076183568636e2bde - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=250c6c49e3b68756b14983c0
3c076183568636e2bde - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=250c6c49e3b68756b14983c076183568636e2bde
CVE ID: CVE-2018-6413 State: PUBLISHED Published: 2018-04-18T15:00:00 Last Updated: 2024-08-05T06:01:49.119Z Vendors: hikvision Products: DS-2CD9111-S Problem Types: Buffer Overflow Description: There is a buffer overflow in the Hikvision Camera DS-2CD9111-S of V4.1.2 build 160203 and before, and this vulnerability allows remote attackers to launch a denial of service attack (service interruption) via a crafted network setting interface request. Additional Analyst Notes: - CVE Program Container: References: - http://www1.hikvision.com/cn/support_det_591_i514.html
CVE ID: CVE-2018-6414 State: PUBLISHED Published: 2018-08-13T15:00:00 Last Updated: 2024-08-05T06:01:49.275Z Vendors: hikvision Products: DS-2DE4xxxW,DS-2DE5xxxW,DS-2DE7xxxW Problem Types: Buffer Overflow Description: A buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker to send a specially crafted message to affected devices. Due to the insufficient input validation, successful exploit can corrupt memory and lead to arbitrary code execution or crash the process. Additional Analyst Notes: - CVE Program Container: References: - https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification--buffer-overflow-vulnerability-i
ps://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification--buffer-overflow-vulnerability-in-some-hik/
CVE ID: CVE-2018-6433 State: PUBLISHED Published: 2018-11-08T14:00:00 Last Updated: 2024-08-05T06:01:49.265Z Vendors: Brocade Communications Systems, Inc. Products: Brocade Fabric OS Problem Types: Privilege Escalation Description: A vulnerability in the secryptocfg export command of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to bypass the export file access restrictions and initiate a file copy from the source to a remote system. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-728
CVE ID: CVE-2018-6434 State: PUBLISHED Published: 2018-11-08T14:00:00 Last Updated: 2024-08-05T06:01:49.060Z Vendors: Brocade Communications Systems, Inc. Products: Brocade Fabric OS Problem Types: Session Hijacking Description: A vulnerability in the web management interface of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow attackers to intercept or manipulate a user's session ID. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-736
CVE ID: CVE-2018-6435 State: PUBLISHED Published: 2018-11-08T14:00:00 Last Updated: 2024-08-05T06:01:49.098Z Vendors: Brocade Communications Systems, Inc. Products: Brocade Fabric OS Problem Types: Privilege Escalation Description: A Vulnerability in the secryptocfg command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, and gain root access. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-729
CVE ID: CVE-2018-6436 State: PUBLISHED Published: 2018-11-08T19:00:00 Last Updated: 2024-08-05T06:01:49.262Z Vendors: Brocade Communications Systems, Inc. Products: Brocade Fabric OS Problem Types: Privilege Escalation Description: A Vulnerability in the firmwaredownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-730
CVE ID: CVE-2018-6437 State: PUBLISHED Published: 2018-11-08T19:00:00 Last Updated: 2024-08-05T06:01:49.267Z Vendors: Brocade Communications Systems, Inc. Products: Brocade Fabric OS Problem Types: Privilege Escalation Description: A Vulnerability in the help command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-731
CVE ID: CVE-2018-6438 State: PUBLISHED Published: 2018-11-08T19:00:00 Last Updated: 2024-08-05T06:01:49.249Z Vendors: Brocade Communications Systems, Inc. Products: Brocade Fabric OS Problem Types: Privilege Escalation Description: A Vulnerability in the supportsave command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-731
CVE ID: CVE-2018-6439 State: PUBLISHED Published: 2018-12-03T22:00:00Z Last Updated: 2024-09-16T17:54:15.646Z Vendors: Brocade Communications Systems, Inc. Products: Brocade Fabric OS Problem Types: Privilege Escalation Description: A Vulnerability in the configdownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-730
CVE ID: CVE-2018-6440 State: PUBLISHED Published: 2018-12-03T22:00:00Z Last Updated: 2024-09-16T23:56:21.213Z Vendors: Brocade Communications Systems, Inc. Products: Brocade Fabric OS Problem Types: Information Exposure Description: A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote unauthenticated attackers to obtain sensitive information and possibly cause a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-733
CVE ID: CVE-2018-6441 State: PUBLISHED Published: 2018-11-08T14:00:00 Last Updated: 2024-08-05T06:01:49.084Z Vendors: Brocade Communications Systems, Inc. Products: Brocade Fabric OS Problem Types: Privilege Escalation Description: A vulnerability in Secure Shell implementation of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to provide arbitrary environment variables, and bypass the restricted configuration shell. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-734
CVE ID: CVE-2018-6442 State: PUBLISHED Published: 2018-11-08T14:00:00 Last Updated: 2024-08-05T06:01:49.263Z Vendors: Brocade Communications Systems, Inc. Products: Brocade Fabric OS Problem Types: Code Injection Description: A vulnerability in the Brocade Webtools firmware update section of Brocade Fabric OS before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote authenticated attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-735
CVE ID: CVE-2018-6443 State: PUBLISHED Published: 2019-01-22T17:00:00 Last Updated: 2024-08-05T06:01:49.272Z Vendors: Brocade Communications Systems, Inc. Products: Brocade Network Advisor Problem Types: Use of Hard-coded Credentials Description: A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications. A remote unauthenticated user who has access to Network Advisor client libraries and able to decrypt the Jboss credentials could gain access to the Jboss web console. Additional Analyst Not
t libraries and able to decrypt the Jboss credentials could gain access to the Jboss web console. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-743 - https://security.netapp.com/advisory/ntap-20190411-0005/ - http://packetstormsecurity.com/files/153035/Brocade-Network-Advisor-14.4.1-Unauthenticated-Remote-Code-Execution.html
CVE ID: CVE-2018-6444 State: PUBLISHED Published: 2019-01-22T17:00:00 Last Updated: 2024-08-05T06:01:49.247Z Vendors: Brocade Communications Systems, Inc. Products: Brocade Network Advisor Problem Types: Remote Code Execution Description: A Vulnerability in Brocade Network Advisor versions before 14.1.0 could allow a remote unauthenticated attacker to execute arbitray code. The vulnerability could also be exploited to execute arbitrary OS Commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-744 - https://security.netapp.com/advisory/ntap-20190411-0005/ - https://
rity-advisories/brocade-security-advisory-2018-744 - https://security.netapp.com/advisory/ntap-20190411-0005/ - https://support.lenovo.com/us/en/product_security/LEN-25655
CVE ID: CVE-2018-6445 State: PUBLISHED Published: 2019-01-22T17:00:00 Last Updated: 2024-08-05T06:01:49.281Z Vendors: Brocade Communications Systems, Inc. Products: Brocade Network Advisor Problem Types: Improper Access Control Description: A Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote unauthenticated attacker to export the current user database which includes the encrypted (not hashed) password of the systems. The attacker could gain access to the Brocade Network Advisor System after extracting/decrypting the passwords. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-
nalyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-745 - https://security.netapp.com/advisory/ntap-20190411-0005/ - https://support.lenovo.com/us/en/product_security/LEN-25655
CVE ID: CVE-2018-6446 State: PUBLISHED Published: 2020-06-29T17:43:11 Last Updated: 2024-08-05T06:01:49.253Z Vendors: n/a Products: Brocade Network Advisor Problem Types: Privilege Escalation Description: A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-841
CVE ID: CVE-2018-6447 State: PUBLISHED Published: 2020-09-25T13:06:37 Last Updated: 2024-08-05T06:01:49.255Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Reflective XSS Vulnerability Description: A Reflective XSS Vulnerability in HTTP Management Interface in Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g could allow authenticated attackers with access to the web interface to hijack a user’s session and take over the account. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1073
CVE ID: CVE-2018-6448 State: PUBLISHED Published: 2020-09-25T13:08:37 Last Updated: 2024-08-05T06:01:49.089Z Vendors: n/a Products: Brocade Fabric OS Problem Types: denial of service attack Description: A vulnerability in the management interface in Brocade Fabric OS Versions before Brocade Fabric OS v9.0.0 could allow a remote attacker to perform a denial of service attack on the vulnerable host. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1075
CVE ID: CVE-2018-6449 State: PUBLISHED Published: 2020-09-25T13:08:25 Last Updated: 2024-08-05T06:01:49.098Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Host Header Injection Description: Host Header Injection vulnerability in the http management interface in Brocade Fabric OS versions before v9.0.0 could allow a remote attacker to exploit this vulnerability by injecting arbitrary HTTP headers Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1077
CVE ID: CVE-2018-6458 State: PUBLISHED Published: 2018-05-11T21:00:00 Last Updated: 2024-08-05T06:01:49.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Easy Hosting Control Panel (EHCP) v0.37.12.b allows remote attackers to conduct cross-site request forgery (CSRF) attacks by leveraging lack of CSRF protection. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/147555/Easy-Hosting-Control-Panel-0.37.12.b-Cross-Site-Request-Forgery.html - http://hyp3rlinx.altervista.org/advisories/EHCP-v0.37.12.b-MULTIPLE-CSRF.txt
CVE ID: CVE-2018-6459 State: PUBLISHED Published: 2018-02-20T15:00:00 Last Updated: 2024-08-05T06:01:49.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in strongSwan 5.6.1 allows remote attackers to cause a denial of service via a crafted RSASSA-PSS signature that lacks a mask generation function parameter. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-16 - https://www.strongswan.org/blog/2018/02/19/strongswan-vulnerability-%28cve-2018-6459%29.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html
CVE ID: CVE-2018-6460 State: PUBLISHED Published: 2018-01-31T17:00:00 Last Updated: 2024-08-05T06:01:49.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hotspot Shield runs a webserver with a static IP address 127.0.0.1 and port 895. The web server uses JSONP and hosts sensitive information including configuration. User controlled input is not sufficiently filtered: an unauthenticated attacker can send a POST request to /status.js with the parameter func=$_APPLOG.Rfunc and extract sensitive information about the machine, including whether the user is connected to a VPN, to which VPN he/she is connected, and what is their real IP address. Additional Analyst Notes: - CVE Program
d to a VPN, to which VPN he/she is connected, and what is their real IP address. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.securiteam.com/index.php/archives/3604 - https://www.exploit-db.com/exploits/44042/
CVE ID: CVE-2018-6461 State: PUBLISHED Published: 2018-02-05T07:00:00 Last Updated: 2024-08-05T06:01:49.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: March Hare WINCVS before 2.8.01 build 6610, and CVS Suite before 2009R2 build 6610, contains an Insecure Library Loading vulnerability in the wincvs2.exe or wincvs.exe file, which may allow local users to gain privileges via a Trojan horse Python or TCL DLL file in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://hyp3rlinx.altervista.org/advisories/CVS-SUITE-2009R2-INSECURE-LIBRARY-LOADING-CVE-2018-6461.txt - http://packetstormsecurity.com/files/146267/WINCVS-2009R2-DLL-Hij
TE-2009R2-INSECURE-LIBRARY-LOADING-CVE-2018-6461.txt - http://packetstormsecurity.com/files/146267/WINCVS-2009R2-DLL-Hijacking.html - http://march-hare.com/cvspro/vulnwincvs.htm - http://seclists.org/fulldisclosure/2018/Feb/24
CVE ID: CVE-2018-6462 State: PUBLISHED Published: 2018-01-31T18:00:00 Last Updated: 2024-08-05T06:01:49.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead of 8 bpc, which might allow remote attackers to execute arbitrary code via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://www.tracker-software.com/company/news_press_events/view/179 - https://herolab.usd.de/wp-content/uploads/sites/4/2018/07/usd20180019.txt
CVE ID: CVE-2018-6464 State: PUBLISHED Published: 2018-01-31T18:00:00Z Last Updated: 2024-09-17T00:56:44.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simditor v2.3.11 allows XSS via crafted use of svg/onload=alert in a TEXTAREA element, as demonstrated by Firefox 54.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Heartway/simditor/blob/master/simditor.docx
CVE ID: CVE-2018-6465 State: PUBLISHED Published: 2018-01-31T18:00:00 Last Updated: 2024-08-05T06:01:49.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/propertyhive/#developers - https://wpvulndb.com/vulnerabilities/9020 - https://wordpress.org/support/topic/wordpress-propertyhive-1-4-14-cross-site-scripting/ - https://packetstormsecurity.com/files/146174/WordPress-Propertyhive-1.4.14-Cross-Site-Scripting.html
CVE ID: CVE-2018-6466 State: PUBLISHED Published: 2018-02-06T14:00:00 Last Updated: 2024-08-05T06:01:49.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSS_set parameter to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AntsKnows/CVE/blob/master/WP_Plugin_Flickr-rss
CVE ID: CVE-2018-6467 State: PUBLISHED Published: 2018-02-06T14:00:00 Last Updated: 2024-08-05T06:01:49.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: The flickrRSS plugin 5.3.1 for WordPress has CSRF via wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AntsKnows/CVE/blob/master/WP_Plugin_Flickr-rss