Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-9020 State: PUBLISHED Published: 2018-03-26T02:00:00Z Last Updated: 2024-09-16T23:01:57.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Google Maps miniature. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/events-manager/#developers - https://www.gubello.me/blog/events-manager-authenticated-stored-xss/ - https://www.youtube.com/watch?v=40d7uXl36O4 - http://wp-events-plugin.com/blog/2018/01/15/events-manager-5-8-1-2-security-release/
CVE ID: CVE-2018-9021 State: PUBLISHED Published: 2018-06-18T18:00:00Z Last Updated: 2024-09-16T16:43:19.872Z Vendors: CA Technologies Products: CA Privileged Access Manager Problem Types: Authentication Bypass Description: An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commands with specially crafted requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104496 - https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html - http://packetstormsecurity.com/files/155576
tices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html - http://packetstormsecurity.com/files/155576/Broadcom-CA-Privileged-Access-Manager-2.8.2-Remote-Command-Execution.html
CVE ID: CVE-2018-9022 State: PUBLISHED Published: 2018-06-18T18:00:00Z Last Updated: 2024-09-17T01:51:32.045Z Vendors: CA Technologies Products: CA Privileged Access Manager Problem Types: Authentication Bypass Description: An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code or commands by poisoning a configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104496 - https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html - http://packetstormsecurity.com/fi
ecurity-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html - http://packetstormsecurity.com/files/155576/Broadcom-CA-Privileged-Access-Manager-2.8.2-Remote-Command-Execution.html
CVE ID: CVE-2018-9023 State: PUBLISHED Published: 2018-06-18T18:00:00Z Last Updated: 2024-09-16T22:01:45.304Z Vendors: CA Technologies Products: CA Privileged Access Manager Problem Types: Improper Input Validation Description: An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the update_crld script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104496 - https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html
CVE ID: CVE-2018-9024 State: PUBLISHED Published: 2018-06-18T18:00:00Z Last Updated: 2024-09-16T16:18:45.972Z Vendors: CA Technologies Products: CA Privileged Access Manager Problem Types: Improper Authentication Description: An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104496 - https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html
CVE ID: CVE-2018-9025 State: PUBLISHED Published: 2018-06-18T18:00:00Z Last Updated: 2024-09-16T22:35:11.606Z Vendors: CA Technologies Products: CA Privileged Access Manager Problem Types: Improper Input Validation Description: An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104496 - https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html
CVE ID: CVE-2018-9026 State: PUBLISHED Published: 2018-06-18T18:00:00Z Last Updated: 2024-09-16T19:10:25.410Z Vendors: CA Technologies Products: CA Privileged Access Manager Problem Types: Session Fixation Description: A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104496 - https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html
CVE ID: CVE-2018-9027 State: PUBLISHED Published: 2018-06-18T18:00:00Z Last Updated: 2024-09-17T03:43:13.156Z Vendors: CA Technologies Products: CA Privileged Access Manager Problem Types: Cross-site Scripting Description: A reflected cross-site scripting vulnerability in CA Privileged Access Manager 2.x allows remote attackers to execute malicious script with a specially crafted link. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104496 - https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html
CVE ID: CVE-2018-9028 State: PUBLISHED Published: 2018-06-18T18:00:00Z Last Updated: 2024-09-16T23:15:27.404Z Vendors: CA Technologies Products: CA Privileged Access Manager Problem Types: Weak Cryptography for Passwords Description: Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104496 - https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html
CVE ID: CVE-2018-9029 State: PUBLISHED Published: 2018-06-18T18:00:00Z Last Updated: 2024-09-17T00:06:35.624Z Vendors: CA Technologies Products: CA Privileged Access Manager Problem Types: Improper Input Validation Description: An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104496 - https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html
CVE ID: CVE-2018-9031 State: PUBLISHED Published: 2018-03-29T16:00:00 Last Updated: 2024-08-05T07:10:47.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login interface on TNLSoftSolutions Sentry Vision 3.x devices provides password disclosure by reading an "if(pwd ==" line in the HTML source code. This means, in effect, that authentication occurs only on the client side. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/pabloonicarres/c2c284ca7b025d629da39087445ed15d#file-sentryvision_authentication_bypass-sh - https://www.youtube.com/watch?v=pLMH9vGPRCo
CVE ID: CVE-2018-9032 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T07:10:47.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router (Hardware Version : A1, B1; Firmware Version : 1.02-2.06) devices potentially allows attackers to bypass SharePort Web Access Portal by directly visiting /category_view.php or /folder_view.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=Wmm4p8znS3s - https://www.exploit-db.com/exploits/44378/
CVE ID: CVE-2018-9034 State: PUBLISHED Published: 2018-04-04T19:00:00 Last Updated: 2024-08-05T07:10:47.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the tab GET parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44366/
CVE ID: CVE-2018-9035 State: PUBLISHED Published: 2018-04-04T19:00:00 Last Updated: 2024-08-05T07:10:47.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas into CSV files via the contact form. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44367/
CVE ID: CVE-2018-9036 State: PUBLISHED Published: 2018-06-20T15:00:00 Last Updated: 2024-08-05T07:10:47.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Jun/45
CVE ID: CVE-2018-9037 State: PUBLISHED Published: 2018-04-10T18:00:00 Last Updated: 2024-08-05T07:10:47.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monstra CMS 3.0.4 allows remote code execution via an upload_file request for a .zip file, which is automatically extracted and may contain .php files. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44621/ - https://github.com/monstra-cms/monstra/issues/433
CVE ID: CVE-2018-9038 State: PUBLISHED Published: 2018-04-10T18:00:00 Last Updated: 2024-08-05T07:10:47.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monstra CMS 3.0.4 allows remote attackers to delete files via an admin/index.php?id=filesmanager&delete_dir=./&path=uploads/ request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44512/ - https://github.com/monstra-cms/monstra/issues/434
CVE ID: CVE-2018-9039 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T07:10:47.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Octopus Deploy 2.0 and later before 2018.3.7, an authenticated user, with variable edit permissions, can scope some variables to targets greater than their permissions should allow. In other words, they can see machines beyond their team's scoped environments. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/4407 - https://octopus.com/downloads/compare?from=2018.3.6&to=2018.3.7
CVE ID: CVE-2018-9040 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T07:10:47.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060c4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win10_x64.sys-0x9c4060c4
CVE ID: CVE-2018-9041 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T07:10:47.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402004. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win10_x64.sys-0x9c402004
CVE ID: CVE-2018-9042 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T07:10:47.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402000. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win10_x64.sys-0x9c402000
CVE ID: CVE-2018-9043 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T07:10:47.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060d0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win10_x64.sys-0x9c4060d0
CVE ID: CVE-2018-9044 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T07:10:47.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win10_x64.sys-0x9c4060cc
CVE ID: CVE-2018-9045 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T07:10:47.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002849. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002849
CVE ID: CVE-2018-9046 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T07:10:47.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf100282d. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf100282d
CVE ID: CVE-2018-9047 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T07:10:47.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002841. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002841
CVE ID: CVE-2018-9048 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T07:10:47.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf100282c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf100282C
CVE ID: CVE-2018-9049 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T07:10:47.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002833. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002833
CVE ID: CVE-2018-9050 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T07:10:47.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf100202d. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf100202D
CVE ID: CVE-2018-9051 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T07:10:47.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002021. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002021
CVE ID: CVE-2018-9052 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T07:10:47.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf100283c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf100283c
CVE ID: CVE-2018-9053 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T07:10:47.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf10026cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf10026cc
CVE ID: CVE-2018-9054 State: PUBLISHED Published: 2018-03-27T03:00:00 Last Updated: 2024-08-05T07:10:47.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf100284c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf100284c
CVE ID: CVE-2018-9055 State: PUBLISHED Published: 2018-03-27T04:00:00 Last Updated: 2024-08-05T07:10:47.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103577 - https://github.com/mdadams/jasper/issues/172 - https://security.gentoo.org/glsa/201908-03 - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2018-9056 State: PUBLISHED Published: 2018-03-27T17:00:00 Last Updated: 2024-08-05T07:10:47.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.ucr.edu/~nael/pubs/asplos18.pdf - https://arstechnica.com/gadgets/2018/03/its-not-just-spectre-researchers-reveal-more-branch-prediction-attacks/
CVE ID: CVE-2018-9057 State: PUBLISHED Published: 2018-03-27T18:00:00 Last Updated: 2024-08-05T07:10:47.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: aws/resource_aws_iam_user_login_profile.go in the HashiCorp Terraform Amazon Web Services (AWS) provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/terraform-providers/terraform-provider-aws/pull/3934
CVE ID: CVE-2018-9058 State: PUBLISHED Published: 2018-03-27T21:00:00Z Last Updated: 2024-09-16T22:02:00.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Long Range Zip (aka lrzip) 0.631, there is an infinite loop in the runzip_fd function of runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ckolivas/lrzip/issues/93
CVE ID: CVE-2018-9059 State: PUBLISHED Published: 2018-04-20T21:00:00 Last Updated: 2024-08-05T07:10:47.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. NOTE: this may overlap CVE-2014-3791. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/147246/Easy-File-Sharing-Web-Server-7.2-Buffer-Overflow.html - https://www.exploit-db.com/exploits/44522/ - https://www.exploit-db.com/exploits/44485/
CVE ID: CVE-2018-9060 State: REJECTED Published: 2018-04-24T16:00:00 Last Updated: 2018-05-31T02:57:01 Description: No description available.
CVE ID: CVE-2018-9062 State: PUBLISHED Published: 2018-07-19T19:00:00 Last Updated: 2024-08-05T07:10:47.415Z Vendors: Lenovo Group Ltd. Products: some Lenovo ThinkPads Problem Types: Elevation of privilege Description: In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105387 - https://support.lenovo.com/us/en/solutions/LEN-20527
CVE ID: CVE-2018-9063 State: PUBLISHED Published: 2018-05-04T16:00:00Z Last Updated: 2024-09-16T20:12:36.388Z Vendors: Lenovo Group Ltd. Products: Lenovo System Update Problem Types: Buffer overflow Description: MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary code. No additional privilege is granted to the attacker beyond what is already possessed to run MapDrv. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfo
already possessed to run MapDrv. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104125 - https://support.lenovo.com/us/en/solutions/LEN-19625