Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ences: - https://security.FreeBSD.org/advisories/FreeBSD-EN-18:11.listen.asc - https://www.flexera.com/company/secunia-research/advisories/SR-2018-21.html
CVE ID: CVE-2018-6926 State: PUBLISHED Published: 2018-02-12T17:00:00Z Last Updated: 2024-09-16T20:37:04.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: In app/Controller/ServersController.php in MISP 2.4.87, a server setting permitted the override of a path variable on certain Red Hed Enterprise Linux and CentOS systems (where rh_shell_fix was enabled), and consequently allowed site admins to inject arbitrary OS commands. The impact is limited by the setting being only accessible to the site administrator. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/0a2aa9d52492d960b9a161160acedbe9caaa4126
CVE ID: CVE-2018-6927 State: PUBLISHED Published: 2018-02-12T19:00:00 Last Updated: 2024-08-05T06:17:17.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: The futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact by triggering a negative wake or requeue value. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4187 - https://usn.ubuntu.com/3619-2/ - https://usn.ubuntu.com/3697-1/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fbe0e839d1e22d88810f3ee3e2f1479be4c0aa4
7-1/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fbe0e839d1e22d88810f3ee3e2f1479be4c0aa4a - https://access.redhat.com/errata/RHSA-2018:1062 - https://access.redhat.com/errata/RHSA-2018:0654 - https://github.com/torvalds/linux/commit/fbe0e839d1e22d88810f3ee3e2f1479be4c0aa4a - https://usn.ubuntu.com/3697-2/ - http://www.securityfocus.com/bid/103023 - https://access.redhat.com/errata/RHSA-2018:0676 - https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.15 - https://usn.ubuntu.com/3698-1/ - https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html - https://usn.ubuntu.com/3619-1/ - https://usn.ubuntu.com/3698-2/
CVE ID: CVE-2018-6928 State: PUBLISHED Published: 2018-02-13T17:00:00 Last Updated: 2024-08-05T06:17:17.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall News Website Script 2.0.4 has SQL Injection via a search term. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44030/
CVE ID: CVE-2018-6930 State: PUBLISHED Published: 2018-02-13T05:00:00 Last Updated: 2024-08-05T06:17:17.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer over-read in the ComputeResizeImage function in the MagickCore/accelerate.c file of ImageMagick 7.0.7-22 allows a remote attacker to cause a denial of service (application crash) via a maliciously crafted pict file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/967
CVE ID: CVE-2018-6934 State: PUBLISHED Published: 2018-04-12T22:00:00 Last Updated: 2024-08-05T06:17:17.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSRF exists in student/personal-info in PHP Scripts Mall Online Tutoring Script 2.0.3. Additional Analyst Notes: - CVE Program Container: References: - https://0day4u.wordpress.com/2018/03/12/97/
CVE ID: CVE-2018-6935 State: PUBLISHED Published: 2018-04-12T22:00:00 Last Updated: 2024-08-05T06:17:17.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Student Profile Management System Script v2.0.6 has XSS via the Name field to list_student.php. Additional Analyst Notes: - CVE Program Container: References: - https://0day4u.wordpress.com/2018/03/19/student-profile-management-system-script-stored-xss/
CVE ID: CVE-2018-6936 State: PUBLISHED Published: 2018-02-21T22:00:00 Last Updated: 2024-08-05T06:17:17.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44219/ - https://0day4u.wordpress.com/2018/02/21/d-link-dir-600m-wireless-stored-xss/
CVE ID: CVE-2018-6940 State: PUBLISHED Published: 2018-02-20T15:00:00 Last Updated: 2024-08-05T06:17:17.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote Code Execution in conjunction with CSRF. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/146373/NAT32-Build-22284-Remote-Command-Execution.html - https://www.exploit-db.com/exploits/44033/ - http://www.securityfocus.com/archive/1/541777/100/0/threaded - http://hyp3rlinx.altervista.org/advisories/NAT32-REMOTE-COMMAND-EXECUTION-CVE-2018-6940.txt
CVE ID: CVE-2018-6941 State: PUBLISHED Published: 2018-02-20T15:00:00 Last Updated: 2024-08-05T06:17:17.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: A /shell?cmd= CSRF issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote Code Execution in conjunction with XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44034/ - http://packetstormsecurity.com/files/146402/NAT32-Build-22284-Remote-Command-Execution-CSRF.html - http://hyp3rlinx.altervista.org/advisories/NAT32-REMOTE-COMMAND-EXECUTION-CSRF-CVE-2018-6941.txt
CVE ID: CVE-2018-6942 State: PUBLISHED Published: 2018-02-13T05:00:00 Last Updated: 2024-08-05T06:17:17.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file. Additional Analyst Notes: - CVE Program Container: References: - https://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=29c759284e305ec428703c9a5831d0b1fc3497ef - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5736 - https://usn.ubuntu.com/3572-1/ - https://www.oracle.com/security-alerts/cpuapr2020.html - http://lists.opensuse.org/opens
ttps://usn.ubuntu.com/3572-1/ - https://www.oracle.com/security-alerts/cpuapr2020.html - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00054.html
CVE ID: CVE-2018-6943 State: PUBLISHED Published: 2018-02-16T14:00:00 Last Updated: 2024-08-05T06:17:17.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: core/lib/upload/um-image-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerability because it fails to properly sanitize user input passed to the $temp variable. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/146403/WordPress-UltimateMember-2.0-Cross-Site-Scripting.html - https://wpvulndb.com/vulnerabilities/9705
CVE ID: CVE-2018-6944 State: PUBLISHED Published: 2018-02-16T14:00:00 Last Updated: 2024-08-05T06:17:17.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: core/lib/upload/um-file-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerability because it fails to properly sanitize user input passed to the $temp variable. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/146403/WordPress-UltimateMember-2.0-Cross-Site-Scripting.html - https://wpvulndb.com/vulnerabilities/9705
CVE ID: CVE-2018-6947 State: PUBLISHED Published: 2018-02-28T22:00:00 Last Updated: 2024-08-05T06:17:17.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit), and denial of service for Windows 8 and 10. Additional Analyst Notes: - CVE Program Container: References: - https://www.fidusinfosec.com/nomachine-road-code-execution-without-fuzzing-cve-2018-6947/ - https://www.exploit-db.com/exploits/44168/ - https://www.nomachine.com/SU02P00194 - htt
without-fuzzing-cve-2018-6947/ - https://www.exploit-db.com/exploits/44168/ - https://www.nomachine.com/SU02P00194 - https://www.exploit-db.com/exploits/44167/ - https://www.nomachine.com/SU02P00195 - https://www.nomachine.com/TR02P08408
CVE ID: CVE-2018-6948 State: PUBLISHED Published: 2018-02-13T17:00:00Z Last Updated: 2024-09-16T20:59:11.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CCN-lite 2, the function ccnl_prefix_to_str_detailed can cause a buffer overflow, when writing a prefix to the buffer buf. The maximal size of the prefix is CCNL_MAX_PREFIX_SIZE; the buffer has the size CCNL_MAX_PREFIX_SIZE. However, when NFN is enabled, additional characters are written to the buffer (e.g., the "NFN" and "R2C" tags). Therefore, sending an NFN-R2C packet with a prefix of size CCNL_MAX_PREFIX_SIZE can cause an overflow of buf inside ccnl_prefix_to_str_detailed. Additional Analyst Notes: - CVE Program Contai
FIX_SIZE can cause an overflow of buf inside ccnl_prefix_to_str_detailed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cn-uofbasel/ccn-lite/issues/193
CVE ID: CVE-2018-6951 State: PUBLISHED Published: 2018-02-13T19:00:00 Last Updated: 2024-08-05T06:17:17.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3624-1/ - https://git.savannah.gnu.org/cgit/patch.git/commit/?id=f290f48a621867084884bfff87f8093c15195e6a - http://www.securityfocus.com/bid/103044 - https://savannah.gnu.org/bugs/index.php?53132 - https://securit
093c15195e6a - http://www.securityfocus.com/bid/103044 - https://savannah.gnu.org/bugs/index.php?53132 - https://security.gentoo.org/glsa/201904-17
CVE ID: CVE-2018-6952 State: PUBLISHED Published: 2018-02-13T19:00:00 Last Updated: 2024-08-05T06:17:17.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/bugs/index.php?53133 - http://www.securityfocus.com/bid/103047 - https://security.gentoo.org/glsa/201904-17 - https://access.redhat.com/errata/RHSA-2019:2033
CVE ID: CVE-2018-6953 State: PUBLISHED Published: 2018-02-13T20:00:00Z Last Updated: 2024-09-16T20:41:39.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the actual component length, which has a resultant buffer overflow and out-of-bounds memory accesses. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cn-uofbasel/ccn-lite/issues/195
CVE ID: CVE-2018-6954 State: PUBLISHED Published: 2018-02-13T20:00:00.000Z Last Updated: 2025-06-09T15:54:51.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protected_symlinks sysctl is turned on. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://usn.ubuntu.com/3816-2/ - https://github.com/systemd/systemd/issues/
iner: - CISA ADP Vulnrichment: References: - https://usn.ubuntu.com/3816-2/ - https://github.com/systemd/systemd/issues/7986 - https://usn.ubuntu.com/3816-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00062.html - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2018-6957 State: PUBLISHED Published: 2018-03-15T19:00:00Z Last Updated: 2024-09-16T23:06:38.093Z Vendors: VMware Products: Workstation, Fusion Problem Types: Denial-of-service vulnerability Description: VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by opening a large number of VNC sessions. Note: In order for exploitation to be possible on Workstation and Fusion, VNC must be manually enabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103431 - http://www.securitytracker.com/id/1040539 - https://www.vmware.com/security/adv
ttp://www.securityfocus.com/bid/103431 - http://www.securitytracker.com/id/1040539 - https://www.vmware.com/security/advisories/VMSA-2018-0008.html
CVE ID: CVE-2018-6958 State: PUBLISHED Published: 2018-04-13T13:00:00Z Last Updated: 2024-09-17T02:57:48.139Z Vendors: VMware Products: vRealize Automation Problem Types: DOM-based cross-site scripting (XSS) vulnerability Description: VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scripting (XSS) attack. Exploitation of this issue may lead to the compromise of the vRA user's workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103752 - http://www.vmware.com/security/advisories/VMSA-2018-0009.html - http://www.securitytracker.com/id/1040676
CVE ID: CVE-2018-6959 State: PUBLISHED Published: 2018-04-13T13:00:00Z Last Updated: 2024-09-16T19:01:02.071Z Vendors: VMware Products: vRealize Automation Problem Types: Missing renewal of session tokens vulnerability Description: VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. Exploitation of this issue may lead to the hijacking of a valid vRA user's session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103752 - http://www.vmware.com/security/advisories/VMSA-2018-0009.html - http://www.securitytracker.com/id/1040676
CVE ID: CVE-2018-6960 State: PUBLISHED Published: 2018-04-20T13:00:00Z Last Updated: 2024-09-16T23:16:44.294Z Vendors: VMware Products: Horizon DaaS Problem Types: Broken authentication vulnerability Description: VMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may allow an attacker to bypass two-factor authentication. Note: In order to exploit this issue, an attacker must have a legitimate account on Horizon DaaS. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103938 - https://www.vmware.com/security/advisories/VMSA-2018-0010.html - http://www.securitytracker.com/id/1040731
CVE ID: CVE-2018-6961 State: PUBLISHED Published: 2018-06-11T22:00:00.000Z Last Updated: 2025-10-21T23:45:50.384Z Vendors: VMware Products: NSX SD-WAN by VeloCloud Problem Types: Command Injection Description: VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this service from the product in future releases. Successful exploitation of this issue could result in remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.secur
de execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/104185 - https://www.exploit-db.com/exploits/44959/ - http://www.securitytracker.com/id/1041210 - http://www.vmware.com/security/advisories/VMSA-2018-0011.html
CVE ID: CVE-2018-6962 State: PUBLISHED Published: 2018-05-22T13:00:00Z Last Updated: 2024-09-16T23:15:38.296Z Vendors: VMware Products: Fusion Problem Types: Signature bypass vulnerability Description: VMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may lead to a local privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104235 - http://www.securitytracker.com/id/1040957 - https://www.vmware.com/security/advisories/VMSA-2018-0013.html
CVE ID: CVE-2018-6963 State: PUBLISHED Published: 2018-05-22T13:00:00Z Last Updated: 2024-09-16T16:53:07.561Z Vendors: VMware Products: Workstation, Fusion Problem Types: Multiple Denial-of-service vulnerabilities Description: VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due to NULL pointer dereference issues in the RPC handler. Successful exploitation of these issues may allow an attacker with limited privileges on the guest machine trigger a denial-of-Service of their guest machine. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104237 - http://www.sec
dditional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104237 - http://www.securitytracker.com/id/1040957 - https://www.vmware.com/security/advisories/VMSA-2018-0013.html
CVE ID: CVE-2018-6964 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-17T01:11:38.927Z Vendors: VMware Products: Horizon Client for Linux Problem Types: Local privilege escalation vulnerability Description: VMware Horizon Client for Linux (4.x before 4.8.0 and prior) contains a local privilege escalation vulnerability due to insecure usage of SUID binary. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on a Linux machine where Horizon Client is installed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040989 - https://www.vmware.com/security/advisories/VMSA-2018
ontainer: References: - http://www.securitytracker.com/id/1040989 - https://www.vmware.com/security/advisories/VMSA-2018-0014.html - http://www.securityfocus.com/bid/104315
CVE ID: CVE-2018-6965 State: PUBLISHED Published: 2018-07-09T20:00:00Z Last Updated: 2024-09-17T01:10:40.499Z Vendors: VMware Products: VMware ESXi, Workstation, and Fusion Problem Types: Out-of-bounds read vulnerability Description: VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs, a different vulnerability than CVE-2018-6966 and CVE-2018-6967. Additional Analyst Notes: - CVE Program Container: References: - http://www
bility than CVE-2018-6966 and CVE-2018-6967. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104709 - http://www.securitytracker.com/id/1041208 - https://www.vmware.com/security/advisories/VMSA-2018-0016.html
CVE ID: CVE-2018-6966 State: PUBLISHED Published: 2018-07-09T20:00:00Z Last Updated: 2024-09-16T23:22:13.262Z Vendors: VMware Products: VMware ESXi, Workstation, and Fusion Problem Types: Out-of-bounds read vulnerability Description: VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs, a different vulnerability than CVE-2018-6965 and CVE-2018-6967. Additional Analyst Notes: - CVE Program Container: References: - http://www
bility than CVE-2018-6965 and CVE-2018-6967. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104709 - http://www.securitytracker.com/id/1041208 - https://www.vmware.com/security/advisories/VMSA-2018-0016.html
CVE ID: CVE-2018-6967 State: PUBLISHED Published: 2018-07-09T20:00:00Z Last Updated: 2024-09-17T03:32:54.900Z Vendors: VMware Products: VMware ESXi, Workstation, and Fusion Problem Types: Out-of-bounds read vulnerability Description: VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs, a different vulnerability than CVE-2018-6965 and CVE-2018-6966. Additional Analyst Notes: - CVE Program Container: References: - http://www
bility than CVE-2018-6965 and CVE-2018-6966. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104709 - http://www.securitytracker.com/id/1041208 - https://www.vmware.com/security/advisories/VMSA-2018-0016.html
CVE ID: CVE-2018-6968 State: PUBLISHED Published: 2018-06-11T22:00:00Z Last Updated: 2024-09-16T20:58:09.872Z Vendors: VMware Products: AirWatch Agent Problem Types: Remote Code Execution Description: The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remote code execution vulnerability in real time File Manager capabilities. This vulnerability may allow for unauthorized creation and execution of files in the Agent sandbox and other publicly accessible directories such as those on the SD card by a malicious administrator. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VM
nistrator. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2018-0015.html - http://www.securityfocus.com/bid/104441 - http://www.securitytracker.com/id/1041060
CVE ID: CVE-2018-6969 State: PUBLISHED Published: 2018-07-13T13:00:00Z Last Updated: 2024-09-17T03:42:42.563Z Vendors: VMware Products: VMware Tools Problem Types: Out-of-bounds read vulnerability Description: VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. Successful exploitation of this issue may lead to information disclosure or may allow attackers to escalate their privileges on the guest VMs. In order to be able to exploit this issue, file sharing must be enabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041291 - https://www.vmware.com/security/advisories/VMSA-2018-0017.html - ht
ences: - http://www.securitytracker.com/id/1041291 - https://www.vmware.com/security/advisories/VMSA-2018-0017.html - http://www.securityfocus.com/bid/104737
CVE ID: CVE-2018-6970 State: PUBLISHED Published: 2018-08-13T21:00:00Z Last Updated: 2024-09-17T02:00:49.779Z Vendors: VMware Products: VMware Horizon 6, Horizon 7, and Horizon Client Problem Types: Out-of-bounds read vulnerability Description: VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bounds read vulnerability in the Message Framework library. Successfully exploiting this issue may allow a less-privileged user to leak information from a privileged process running on a system where Horizon Connection Server, Horizon Agent or Horizon Client are installed. Note: This issue doesn't apply to Horizon