Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-11642 State: PUBLISHED Published: 2018-07-03T17:00:00 Last Updated: 2024-08-05T08:17:07.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Permission Assignment on the /var/www/xms/cleanzip.sh shell script run periodically in Dialogic PowerMedia XMS through 3.5 allows local users to execute code as the root user. Additional Analyst Notes: - CVE Program Container: References: - https://d3adend.org/blog/?p=1398
CVE ID: CVE-2018-11643 State: PUBLISHED Published: 2018-07-03T17:00:00 Last Updated: 2024-08-05T08:17:08.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote authenticated users to execute arbitrary SQL commands via the filterPattern parameter. Additional Analyst Notes: - CVE Program Container: References: - https://d3adend.org/blog/?p=1398
CVE ID: CVE-2018-11645 State: PUBLISHED Published: 2018-06-01T12:00:00 Last Updated: 2024-08-05T08:17:08.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3768-1/ - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=b60d50b7567369ad856cebe1efb6cd7dd2284219 - https://bugs.ghostscript.com/show_bug.cgi?id=697193 - https://www.debian.org/security/2018/dsa-4336 - htt
cd7dd2284219 - https://bugs.ghostscript.com/show_bug.cgi?id=697193 - https://www.debian.org/security/2018/dsa-4336 - https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html - https://access.redhat.com/errata/RHSA-2019:2281
CVE ID: CVE-2018-11646 State: PUBLISHED Published: 2018-06-01T13:00:00 Last Updated: 2024-08-05T08:17:08.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44876/ - https://security.gentoo.org/glsa/201808-04 - https://bugzilla.gnome.org/show_bug.cgi?id=795740 - https://www.exploit-db.com/exploits/44842/ - https://bugs.webkit.org/show_bug.cgi
lla.gnome.org/show_bug.cgi?id=795740 - https://www.exploit-db.com/exploits/44842/ - https://bugs.webkit.org/show_bug.cgi?id=186164
CVE ID: CVE-2018-11647 State: PUBLISHED Published: 2018-06-17T16:00:00 Last Updated: 2024-08-05T08:17:08.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.js in oauth2orize-fprm before 0.2.1 has XSS via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jaredhanson/oauth2orize-fprm/blob/master/SECURITY-NOTICE.md - https://github.com/jaredhanson/oauth2orize-fprm/commit/2bf9faee787eb004abbdfb6f4cc2fb06653defd5
CVE ID: CVE-2018-11649 State: PUBLISHED Published: 2018-06-01T14:00:00Z Last Updated: 2024-09-17T02:11:23.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hue 3.12 has XSS via the /pig/save/ name and script parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Blck4/HUE-Exploit
CVE ID: CVE-2018-11650 State: PUBLISHED Published: 2018-06-01T14:00:00Z Last Updated: 2024-09-17T00:51:07.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Graylog2/graylog2-server/pull/4727 - https://www.graylog.org/post/announcing-graylog-v2-4-4
CVE ID: CVE-2018-11651 State: PUBLISHED Published: 2018-06-01T14:00:00Z Last Updated: 2024-09-17T04:15:18.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Graylog2/graylog2-server/pull/4739 - https://www.graylog.org/post/announcing-graylog-v2-4-4
CVE ID: CVE-2018-11652 State: PUBLISHED Published: 2018-06-01T15:00:00 Last Updated: 2024-08-05T08:17:07.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV report. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sullo/nikto/commit/e759b3300aace5314fe3d30800c8bd83c81c29f7 - https://www.exploit-db.com/exploits/44899/
CVE ID: CVE-2018-11653 State: PUBLISHED Published: 2018-08-24T21:00:00 Last Updated: 2024-08-05T08:17:08.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information disclosure in Netwave IP camera at //etc/RT2870STA.dat (via HTTP on port 8000) allows an unauthenticated attacker to exfiltrate sensitive information about the network configuration like the network SSID and password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SadFud/Exploits/tree/master/Real%20World/SCADA%20-%20IOT%20Systems/CVE-2018-11653
CVE ID: CVE-2018-11654 State: PUBLISHED Published: 2018-08-24T21:00:00 Last Updated: 2024-08-05T08:17:08.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information disclosure in Netwave IP camera at get_status.cgi (via HTTP on port 8000) allows an unauthenticated attacker to exfiltrate sensitive information from the device. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SadFud/Exploits/tree/master/Real%20World/SCADA%20-%20IOT%20Systems/CVE-2018-11654
CVE ID: CVE-2018-11655 State: PUBLISHED Published: 2018-06-01T15:00:00 Last Updated: 2024-08-05T08:17:08.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function GetImagePixelCache in MagickCore/cache.c, which allows attackers to cause a denial of service via a crafted CALS image file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/930
CVE ID: CVE-2018-11656 State: PUBLISHED Published: 2018-06-01T15:00:00 Last Updated: 2024-08-05T08:17:08.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c, which allows attackers to cause a denial of service via a crafted DCM image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/931 - https://usn.ubuntu.com/3681-1/
CVE ID: CVE-2018-11657 State: PUBLISHED Published: 2018-06-01T15:00:00Z Last Updated: 2024-09-17T00:01:15.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: ngiflib.c in MiniUPnP ngiflib 0.4 has an infinite loop in DecodeGifImg and LoadGif. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/miniupnp/ngiflib/issues/7
CVE ID: CVE-2018-11659 State: REJECTED Published: 2021-07-22T17:53:39 Last Updated: 2021-07-22T17:53:39 Description: No description available.
CVE ID: CVE-2018-11661 State: REJECTED Published: 2021-07-22T17:56:44 Last Updated: 2021-07-22T17:56:44 Description: No description available.
CVE ID: CVE-2018-11662 State: REJECTED Published: 2021-07-22T18:03:54 Last Updated: 2021-07-22T18:03:54 Description: No description available.
CVE ID: CVE-2018-11663 State: REJECTED Published: 2021-07-22T18:07:33 Last Updated: 2021-07-22T18:07:33 Description: No description available.
CVE ID: CVE-2018-11664 State: REJECTED Published: 2021-07-22T18:09:27 Last Updated: 2021-07-22T18:09:27 Description: No description available.
CVE ID: CVE-2018-11665 State: REJECTED Published: 2021-07-22T18:16:24 Last Updated: 2021-07-22T18:16:24 Description: No description available.
CVE ID: CVE-2018-11666 State: REJECTED Published: 2021-07-22T18:18:04 Last Updated: 2021-07-22T18:18:04 Description: No description available.
CVE ID: CVE-2018-11668 State: REJECTED Published: 2021-07-22T18:19:20 Last Updated: 2021-07-22T18:19:20 Description: No description available.
CVE ID: CVE-2018-11669 State: REJECTED Published: 2021-07-22T18:20:29 Last Updated: 2021-07-22T18:20:29 Description: No description available.
CVE ID: CVE-2018-11670 State: PUBLISHED Published: 2018-06-01T17:00:00 Last Updated: 2024-08-05T08:17:08.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that allows attackers to execute arbitrary PHP code via the content parameter to index.php?m=admin&c=media&a=fileconnect. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GreenCMS/GreenCMS/issues/108 - https://www.exploit-db.com/exploits/44825/
CVE ID: CVE-2018-11671 State: PUBLISHED Published: 2018-06-01T17:00:00 Last Updated: 2024-08-05T08:17:07.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that can add an admin account via index.php?m=admin&c=access&a=adduserhandle. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GreenCMS/GreenCMS/issues/109 - https://www.exploit-db.com/exploits/44826/
CVE ID: CVE-2018-11675 State: REJECTED Published: 2020-03-02T16:04:12 Last Updated: 2020-03-02T16:04:12 Description: No description available.
CVE ID: CVE-2018-11678 State: PUBLISHED Published: 2018-06-05T11:00:00 Last Updated: 2024-08-05T08:17:08.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins/box/users/users.plugin.php in Monstra CMS 3.0.4 allows Login Rate Limiting Bypass via manipulation of the login_attempts cookie. Additional Analyst Notes: - CVE Program Container: References: - http://abdilahrf.github.io/login-rate-limiting-bypass
CVE ID: CVE-2018-11679 State: PUBLISHED Published: 2018-06-02T12:00:00Z Last Updated: 2024-09-17T00:06:40.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability that can add an article via /index.php?case=table&act=add&table=archive&admin_dir=admin. Additional Analyst Notes: - CVE Program Container: References: - http://www.8sec.cc/archives/619 - http://www.8sec.cc/cmseasy_addarticle.txt
CVE ID: CVE-2018-11680 State: PUBLISHED Published: 2018-06-02T12:00:00Z Last Updated: 2024-09-17T04:24:29.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability in the rich text editor that can add an IFRAME element. This might be used in a DoS attack if a referenced remote URL is refreshed at a rapid rate. Additional Analyst Notes: - CVE Program Container: References: - http://www.8sec.cc/archives/619
CVE ID: CVE-2018-11681 State: PUBLISHED Published: 2018-06-02T13:00:00 Last Updated: 2024-08-05T08:17:08.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Default and unremovable support credentials (user:nwk password:nwk2) allow attackers to gain total super user control of an IoT device through a TELNET session to products using the RadioRA 2 Lutron integration protocol Revision M to Revision Y. NOTE: The vendor disputes this id as not being a vulnerability because what can be done through the ports revolve around controlling lighting, not code execution. A certain set of commands are listed, which bear some similarity to code, but they are not arbitrary and do not allow admi
certain set of commands are listed, which bear some similarity to code, but they are not arbitrary and do not allow admin-level control of a machine Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://sadfud.me/explotos/CVE-2018-11629 - https://reversecodes.wordpress.com/2018/06/02/0-day-tomando-el-control-de-las-instalaciones-de-la-nasa-en-cabo-canaveral/ - http://www.lutron.com/TechnicalDocumentLibrary/040249.pdf
CVE ID: CVE-2018-11682 State: PUBLISHED Published: 2018-06-02T13:00:00 Last Updated: 2024-08-05T08:17:07.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Default and unremovable support credentials allow attackers to gain total super user control of an IoT device through a TELNET session to products using the Stanza Lutron integration protocol Revision M to Revision Y. NOTE: The vendor disputes this id as not being a vulnerability because what can be done through the ports revolve around controlling lighting, not code execution. A certain set of commands are listed, which bear some similarity to code, but they are not arbitrary and do not allow admin-level control of a machine
listed, which bear some similarity to code, but they are not arbitrary and do not allow admin-level control of a machine Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://sadfud.me/explotos/CVE-2018-11629 - https://reversecodes.wordpress.com/2018/06/02/0-day-tomando-el-control-de-las-instalaciones-de-la-nasa-en-cabo-canaveral/ - http://www.lutron.com/TechnicalDocumentLibrary/040249.pdf
CVE ID: CVE-2018-11683 State: PUBLISHED Published: 2018-06-04T06:00:00 Last Updated: 2024-08-05T08:17:08.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3672-1/ - https://github.com/liblouis/liblouis/issues/591 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html
CVE ID: CVE-2018-11684 State: PUBLISHED Published: 2018-06-04T06:00:00 Last Updated: 2024-08-05T08:17:08.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3672-1/ - https://github.com/liblouis/liblouis/issues/592 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html
CVE ID: CVE-2018-11685 State: PUBLISHED Published: 2018-06-04T06:00:00 Last Updated: 2024-08-05T08:17:08.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3672-1/ - https://github.com/liblouis/liblouis/issues/593 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html
CVE ID: CVE-2018-11686 State: PUBLISHED Published: 2019-07-03T16:32:27 Last Updated: 2024-08-05T08:17:08.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php. Additional Analyst Notes: - CVE Program Container: References: - https://flowpaper.com/blog/ - https://redtimmysec.wordpress.com/2019/03/07/flexpaper-remote-code-execution
CVE ID: CVE-2018-11687 State: PUBLISHED Published: 2018-08-15T17:00:00 Last Updated: 2024-08-05T08:17:08.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin Red (BTCR), an Ethereum ERC20 token, allows the owner to accomplish an unauthorized increase of digital assets by providing a large address[] array, as exploited in the wild in May 2018, aka the "ownerUnderflow" issue. Additional Analyst Notes: - CVE Program Container: References: - https://www.anquanke.com/post/id/147913
CVE ID: CVE-2018-11688 State: PUBLISHED Published: 2018-06-13T16:00:00 Last Updated: 2024-08-05T08:17:08.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ignite Realtime Openfire before 3.9.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/
n credentials. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Jun/13 - https://vulmon.com/vulnerabilitydetails?qid=CVE-2018-11688 - http://packetstormsecurity.com/files/148057/Ignite-Realtime-Openfire-3.7.1-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/542060/100/0/threaded - http://seclists.org/fulldisclosure/2018/Jun/24 - https://github.com/igniterealtime/Openfire/compare/v3.9.1...v3.9.2 - https://github.com/igniterealtime/Openfire/commit/ed3492a24274fd454afe93a499db49f3d6335108#diff-3f607cf668ad8f1091e789a2c1dca32a
CVE ID: CVE-2018-11689 State: PUBLISHED Published: 2018-06-14T20:00:00 Last Updated: 2024-08-05T08:17:08.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewer_login_page data3 parameter. (The same Web Viewer codebase was transitioned from Samsung to Hanwha.) Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/542083/100/0/threaded - https://vulmon.com/vulnerabilitydetails?qid=CVE-2018-11689 - https://drive.google.com/file/d/1aWbvdrx1KRkUv4ikkm530a2N5qrxCLmr/view?usp=sharing - https://seclists.org/b
2018-11689 - https://drive.google.com/file/d/1aWbvdrx1KRkUv4ikkm530a2N5qrxCLmr/view?usp=sharing - https://seclists.org/bugtraq/2018/Jun/40
CVE ID: CVE-2018-11690 State: PUBLISHED Published: 2018-06-14T20:00:00 Last Updated: 2024-08-05T08:17:08.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: -
the victim's cookie-based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Jun/26 - https://vel.joomla.org/resolved/2155-gridbox-com-gridbox-multiple-vulnerabilities - https://vulmon.com/vulnerabilitydetails?qid=CVE-2018-11690 - http://packetstormsecurity.com/files/148127/Joomla-2.4.0-Gridbox-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/542066/100/0/threaded
CVE ID: CVE-2018-11691 State: PUBLISHED Published: 2019-05-14T15:09:34 Last Updated: 2024-08-05T08:17:08.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emerson DeltaV Smart Switch Command Center application, available in versions 11.3.x and 12.3.1, was unable to change the DeltaV Smart Switches’ management password upon commissioning. Emerson released patches for DeltaV workstations to address this issue, and the patches can be downloaded from Emerson’s Guardian Support Portal. Please refer to the DeltaV Security Notification DSN19003 (KBA NK-1900-0808) for more information about this issue. DeltaV versions 13.3 and higher use the Network Device Command Center application to
more information about this issue. DeltaV versions 13.3 and higher use the Network Device Command Center application to manage DeltaV Smart Switches, and this newer application is not impacted by this issue. After patching the Smart Switch Command Center, users are required to either commission the DeltaV Smart Switches or change password using the tool. Additional Analyst Notes: - CVE Program Container: References: - http://www.emerson.com/documents/automation/deltav-smart-switches-en-179014.pdf - https://www.us-cert.gov/ics/advisories/icsa-19-190-01 - http://www.securityfocus.com/bid/109110
CVE ID: CVE-2018-11692 State: PUBLISHED Published: 2018-06-04T06:00:00 Last Updated: 2024-08-05T08:17:08.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Canon LBP6650, LBP3370, LBP3460, and LBP7750C devices. It is possible to bypass the Administrator Mode authentication for /tlogin.cgi via vectors involving frame.cgi?page=DevStatus. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the default settings without using the countermeasures and best practices shown in the documentation Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44844/ - https://gist.github.com/huyk
Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44844/ - https://gist.github.com/huykha/2dfbe97810e96a05e67359fd9e7cc9ff
CVE ID: CVE-2018-11693 State: PUBLISHED Published: 2018-06-04T06:00:00 Last Updated: 2024-08-05T08:17:08.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::skip_over_scopes which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sass/libsass/issues/2661
CVE ID: CVE-2018-11694 State: PUBLISHED Published: 2018-06-04T06:00:00 Last Updated: 2024-08-05T08:17:08.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selector_append which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sass/libsass/issues/2663
CVE ID: CVE-2018-11695 State: PUBLISHED Published: 2018-06-04T06:00:00 Last Updated: 2024-08-05T08:17:08.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibSass <3.5.3. A NULL pointer dereference was found in the function Sass::Expand::operator which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sass/libsass/issues/2664 - https://github.com/sass/libsass/releases - https://github.com/sass/libsass/pull/2631
CVE ID: CVE-2018-11696 State: PUBLISHED Published: 2018-06-04T06:00:00 Last Updated: 2024-08-05T08:17:09.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Inspect::operator which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sass/libsass/issues/2665