Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-18992 State: PUBLISHED Published: 2019-02-05T18:00:00Z Last Updated: 2024-09-16T18:09:12.562Z Vendors: ICS-CERT Products: LCDS Laquis SCADA Problem Types: CWE-74 Description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper sanitation, which may allow an attacker to execute remote code on the server. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01 - http://www.securityfocus.com/bid/106634
CVE ID: CVE-2018-18993 State: PUBLISHED Published: 2018-12-04T22:00:00 Last Updated: 2024-08-05T11:23:08.580Z Vendors: n/a Products: CX-One (CX-Programmer and CX-Server) Problem Types: CWE-121 Description: Two stack-based buffer overflow vulnerabilities have been discovered in CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior). When processing project files, the application allows input data to exceed the buffer. An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the application. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-ce
e privileges of the application. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-338-01 - http://www.securityfocus.com/bid/106106
CVE ID: CVE-2018-18994 State: PUBLISHED Published: 2019-03-27T17:38:14 Last Updated: 2024-08-05T11:23:08.915Z Vendors: LCDS Laquis Products: LCDS Laquis SCADA Problem Types: CWE-125 Description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows an out of bounds read when opening a specially crafted project file, which may cause a system crash or allow data exfiltration. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01
CVE ID: CVE-2018-18995 State: PUBLISHED Published: 2019-01-03T22:00:00 Last Updated: 2024-08-05T11:23:08.574Z Vendors: n/a Products: ABB GATE-E1 and GATE-E2 Problem Types: CWE-306 Description: Pluto Safety PLC Gateway Ethernet devices ABB GATE-E1 and GATE-E2 all versions do not allow authentication to be configured on administrative telnet or web interfaces, which could enable various effects vectors, including conducting device resets, reading or modifying registers, and changing configuration settings such as IP addresses. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-352-01 - http://www.securityfocus.com/bid/106247
CVE ID: CVE-2018-18996 State: PUBLISHED Published: 2019-02-05T18:00:00Z Last Updated: 2024-09-16T22:46:36.983Z Vendors: ICS-CERT Products: LCDS Laquis SCADA Problem Types: CWE-74 Description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper authorization or sanitation, which may allow an attacker to execute remote code on the server. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01 - http://www.securityfocus.com/bid/106634
CVE ID: CVE-2018-18997 State: PUBLISHED Published: 2019-01-03T22:00:00 Last Updated: 2024-08-05T11:23:08.565Z Vendors: n/a Products: ABB GATE-E1 and GATE-E2 Problem Types: CWE-79 Description: Pluto Safety PLC Gateway Ethernet devices in ABB GATE-E1 and GATE-E2 all versions allows an unauthenticated attacker using the administrative web interface to insert an HTML/Javascript payload into any of the device properties, which may allow an attacker to display/execute the payload in a visitor browser. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-352-01 - http://www.securityfocus.com/bid/106247
CVE ID: CVE-2018-18998 State: PUBLISHED Published: 2019-02-05T18:00:00Z Last Updated: 2024-09-16T20:16:26.205Z Vendors: ICS-CERT Products: LCDS Laquis SCADA Problem Types: CWE-798 Description: LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized access to the system with high privileges. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01 - http://www.securityfocus.com/bid/106634
CVE ID: CVE-2018-18999 State: PUBLISHED Published: 2018-12-19T18:00:00 Last Updated: 2024-08-05T11:23:08.967Z Vendors: n/a Products: WebAccess/SCADA Problem Types: CWE-20 Description: WebAccess/SCADA, WebAccess/SCADA Version 8.3.2 installed on Windows 2008 R2 SP1. Lack of proper validation of user supplied input may allow an attacker to cause the overflow of a buffer on the stack. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-45 - https://ics-cert.us-cert.gov/advisories/ICSA-18-352-02 - http://www.securityfocus.com/bid/106245
CVE ID: CVE-2018-1999001 State: PUBLISHED Published: 2018-07-23T19:00:00 Last Updated: 2024-08-05T12:47:57.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: A unauthorized modification of configuration vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in User.java that allows attackers to provide crafted login credentials that cause Jenkins to move the config.xml file from the Jenkins home directory. If Jenkins is started without this file present, it will revert to the legacy defaults of granting administrator access to anonymous users. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpuapr2022.html -
dditional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpuapr2022.html - https://jenkins.io/security/advisory/2018-07-18/#SECURITY-897
CVE ID: CVE-2018-1999002 State: PUBLISHED Published: 2018-07-23T19:00:00 Last Updated: 2024-08-05T12:47:57.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stapler/Stapler.java that allows attackers to send crafted HTTP requests returning the contents of any file on the Jenkins master file system that the Jenkins master has access to. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46453/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://jenkins.io/security/advisory/2018-07-
exploits/46453/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://jenkins.io/security/advisory/2018-07-18/#SECURITY-914
CVE ID: CVE-2018-1999003 State: PUBLISHED Published: 2018-07-23T19:00:00 Last Updated: 2024-08-05T12:47:57.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Improper authorization vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Queue.java that allows attackers with Overall/Read permission to cancel queued builds. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpuapr2022.html - https://jenkins.io/security/advisory/2018-07-18/#SECURITY-891
CVE ID: CVE-2018-1999004 State: PUBLISHED Published: 2018-07-23T19:00:00 Last Updated: 2024-08-05T12:47:57.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Improper authorization vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in SlaveComputer.java that allows attackers with Overall/Read permission to initiate agent launches, and abort in-progress agent launches. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpuapr2022.html - https://jenkins.io/security/advisory/2018-07-18/#SECURITY-892
CVE ID: CVE-2018-1999005 State: PUBLISHED Published: 2018-07-23T19:00:00 Last Updated: 2024-08-05T12:47:57.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in BuildTimelineWidget.java, BuildTimelineWidget/control.jelly that allows attackers with Job/Configure permission to define JavaScript that would be executed in another user's browser when that other user performs some UI actions. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpuapr2022.html - https://jenkins.io/security/advisory/2018-07-18/#SECURITY-944
CVE ID: CVE-2018-1999006 State: PUBLISHED Published: 2018-07-23T19:00:00Z Last Updated: 2024-09-16T19:14:39.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: A exposure of sensitive information vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Plugin.java that allows attackers to determine the date and time when a plugin HPI/JPI file was last extracted, which typically is the date of the most recent installation/upgrade. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-07-18/#SECURITY-925
CVE ID: CVE-2018-1999007 State: PUBLISHED Published: 2018-07-23T19:00:00 Last Updated: 2024-08-05T12:47:57.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stapler/Stapler.java that allows attackers with the ability to control the existence of some URLs in Jenkins to define JavaScript that would be executed in another user's browser when that other user views HTTP 404 error pages while Stapler debug mode is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpuapr2022.html - https:
al Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpuapr2022.html - https://jenkins.io/security/advisory/2018-07-18/#SECURITY-390
CVE ID: CVE-2018-1999008 State: PUBLISHED Published: 2018-07-23T15:00:00Z Last Updated: 2024-09-17T03:17:31.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: October CMS version prior to build 437 contains a Cross Site Scripting (XSS) vulnerability in the Media module and create folder functionality that can result in an Authenticated user with media module permission creating arbitrary folder name with XSS content. This attack appear to be exploitable via an Authenticated user with media module permission who can create arbitrary folder name (XSS). This vulnerability appears to have been fixed in build 437. Additional Analyst Notes: - CVE Program Container: References: - https
rability appears to have been fixed in build 437. Additional Analyst Notes: - CVE Program Container: References: - https://octobercms.com/support/article/rn-10
CVE ID: CVE-2018-1999009 State: PUBLISHED Published: 2018-07-23T15:00:00Z Last Updated: 2024-09-17T00:06:26.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php#244 (makeFileContents function) that can result in Sensitive information disclosure and remote code execution. This attack appear to be exploitable remotely if the /backend path is accessible. This vulnerability appears to have been fixed in Build 437. Additional Analyst Notes: - CVE Program Container: References: - http://octobercms.com/support/article/rn-10
CVE ID: CVE-2018-1999010 State: PUBLISHED Published: 2018-07-23T15:00:00 Last Updated: 2024-08-05T12:47:57.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in cced03dd667a5df6df8fd40d8de0bff477ee02e8 and later. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104896 - https://github.com/FFmpeg/FFmpeg/commit/cced03dd667a5df6df8fd40d
References: - http://www.securityfocus.com/bid/104896 - https://github.com/FFmpeg/FFmpeg/commit/cced03dd667a5df6df8fd40d8de0bff477ee02e8 - https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html
CVE ID: CVE-2018-1999011 State: PUBLISHED Published: 2018-07-23T15:00:00 Last Updated: 2024-08-05T12:47:57.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg before commit 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 contains a Buffer Overflow vulnerability in asf_o format demuxer that can result in heap-buffer-overflow that may result in remote code execution. This attack appears to be exploitable via specially crafted ASF file that has to be provided as input to FFmpeg. This vulnerability appears to have been fixed in 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 and later. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104896 -
69 and later. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104896 - https://github.com/FFmpeg/FFmpeg/commit/2b46ebdbff1d8dec7a3d8ea280a612b91a582869 - https://seclists.org/bugtraq/2019/May/60 - https://www.debian.org/security/2019/dsa-4449
CVE ID: CVE-2018-1999012 State: PUBLISHED Published: 2018-07-23T15:00:00 Last Updated: 2024-08-05T12:47:57.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop vulnerability in pva format demuxer that can result in a Vulnerability that allows attackers to consume excessive amount of resources like CPU and RAM. This attack appear to be exploitable via specially crafted PVA file has to be provided as input. This vulnerability appears to have been fixed in 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 and later. Additional Analyst Notes: - CVE Program Container: References: - http://www.securit
e4ece3b4b1701be894cd7c2e1 and later. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104896 - https://github.com/FFmpeg/FFmpeg/commit/9807d3976be0e92e4ece3b4b1701be894cd7c2e1 - https://lists.debian.org/debian-lts-announce/2019/03/msg00041.html
CVE ID: CVE-2018-1999013 State: PUBLISHED Published: 2018-07-23T15:00:00 Last Updated: 2024-08-05T12:47:57.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg before commit a7e032a277452366771951e29fd0bf2bd5c029f0 contains a use-after-free vulnerability in the realmedia demuxer that can result in vulnerability allows attacker to read heap memory. This attack appear to be exploitable via specially crafted RM file has to be provided as input. This vulnerability appears to have been fixed in a7e032a277452366771951e29fd0bf2bd5c029f0 and later. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104896 - https://github.com/FFmpeg/FF
yst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104896 - https://github.com/FFmpeg/FFmpeg/commit/a7e032a277452366771951e29fd0bf2bd5c029f0
CVE ID: CVE-2018-1999014 State: PUBLISHED Published: 2018-07-23T15:00:00 Last Updated: 2024-08-05T12:47:57.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS. This attack appear to be exploitable via specially crafted MXF file which has to be provided as input. This vulnerability appears to have been fixed in bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 and later. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104896 - https://github.com/FFmpeg/FFmpeg/commit/bab0716c7f4793ec42e05a5a
References: - http://www.securityfocus.com/bid/104896 - https://github.com/FFmpeg/FFmpeg/commit/bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75
CVE ID: CVE-2018-1999015 State: PUBLISHED Published: 2018-07-23T15:00:00 Last Updated: 2024-08-05T12:47:57.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg before commit 5aba5b89d0b1d73164d3b81764828bb8b20ff32a contains an out of array read vulnerability in ASF_F format demuxer that can result in heap memory reading. This attack appear to be exploitable via specially crafted ASF file that has to provided as input. This vulnerability appears to have been fixed in 5aba5b89d0b1d73164d3b81764828bb8b20ff32a and later. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104896 - https://github.com/FFmpeg/FFmpeg/commit/5aba5b89d0b1
Container: References: - http://www.securityfocus.com/bid/104896 - https://github.com/FFmpeg/FFmpeg/commit/5aba5b89d0b1d73164d3b81764828bb8b20ff32a
CVE ID: CVE-2018-1999016 State: PUBLISHED Published: 2018-07-23T15:00:00Z Last Updated: 2024-09-17T02:47:55.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pydio version 8.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in ./core/vendor/meenie/javascript-packer/example-inline.php line 48; ./core/vendor/dapphp/securimage/examples/test.mysql.static.php lines: 114,118 that can result in an unauthenticated remote attacker manipulating the web client via XSS code injection. This attack appear to be exploitable via the victim openning a specially crafted URL. This vulnerability appears to have been fixed in version 8.2.1. Additional Analyst Notes: - CVE Program
ly crafted URL. This vulnerability appears to have been fixed in version 8.2.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.mike-gualtieri.com/files/Pydio-8-VulnerabilityDisclosure-Jul18.txt - https://pydio.com/en/community/releases/pydio-core/pydio-821-security-release
CVE ID: CVE-2018-1999017 State: PUBLISHED Published: 2018-07-23T15:00:00Z Last Updated: 2024-09-16T17:38:54.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pydio version 8.2.0 and earlier contains a Server-Side Request Forgery (SSRF) vulnerability in plugins/action.updater/UpgradeManager.php Line: 154, getUpgradePath($url) that can result in an authenticated admin users requesting arbitrary URL's, pivoting requests through the server. This attack appears to be exploitable via the attacker gaining access to an administrative account, enters a URL into Upgrade Engine, and reloads the page or presses "Check Now". This vulnerability appears to have been fixed in 8.2.1. Additional
Engine, and reloads the page or presses "Check Now". This vulnerability appears to have been fixed in 8.2.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.mike-gualtieri.com/files/Pydio-8-VulnerabilityDisclosure-Jul18.txt - https://pydio.com/en/community/releases/pydio-core/pydio-821-security-release
CVE ID: CVE-2018-1999018 State: PUBLISHED Published: 2018-07-23T15:00:00Z Last Updated: 2024-09-16T18:33:28.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pydio version 8.2.1 and prior contains an Unvalidated user input leading to Remote Code Execution (RCE) vulnerability in plugins/action.antivirus/AntivirusScanner.php: Line 124, scanNow($nodeObject) that can result in An attacker gaining admin access and can then execute arbitrary commands on the underlying OS. This attack appear to be exploitable via The attacker edits the Antivirus Command in the antivirus plugin, and executes the payload by uploading any file within Pydio. Additional Analyst Notes: - CVE Program Contain
rus plugin, and executes the payload by uploading any file within Pydio. Additional Analyst Notes: - CVE Program Container: References: - https://www.mike-gualtieri.com/files/Pydio-8-VulnerabilityDisclosure-Jul18.txt
CVE ID: CVE-2018-1999019 State: PUBLISHED Published: 2018-07-23T15:00:00Z Last Updated: 2024-09-16T19:09:56.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chamilo LMS version 11.x contains an Unserialization vulnerability in the "hash" GET parameter for the api endpoint located at /webservices/api/v2.php that can result in Unauthenticated remote code execution. This attack appear to be exploitable via a simple GET request to the api endpoint. This vulnerability appears to have been fixed in After commit 0de84700648f098c1fbf6b807dee28ec640efe62. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chamilo/chamilo-lms/commit/0de84700648f098c1fbf6
nalyst Notes: - CVE Program Container: References: - https://github.com/chamilo/chamilo-lms/commit/0de84700648f098c1fbf6b807dee28ec640efe62 - https://ibb.co/jBxe6y
CVE ID: CVE-2018-1999020 State: PUBLISHED Published: 2018-07-23T15:00:00Z Last Updated: 2024-09-17T02:58:14.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Networking Foundation (ONF) ONOS version 1.13.2 and earlier version contains a Directory Traversal vulnerability in core/common/src/main/java/org/onosproject/common/app/ApplicationArchive.java line 35 that can result in arbitrary file deletion (overwrite). This attack appear to be exploitable via a specially crafted zip file should be uploaded. Additional Analyst Notes: - CVE Program Container: References: - http://gms.cl0udz.com/ONOS_app_overwrite.pdf - https://gerrit.onosproject.org/#/c/19043/
CVE ID: CVE-2018-1999021 State: PUBLISHED Published: 2018-07-23T15:00:00Z Last Updated: 2024-09-16T22:21:15.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gleezcms Gleez Cms version 1.3.0 contains a Cross Site Scripting (XSS) vulnerability in Profile page that can result in Inject arbitrary web script or HTML via the profile page editor. This attack appear to be exploitable via The victim must navigate to the attacker's profile page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gleez/cms/issues/797
CVE ID: CVE-2018-1999022 State: PUBLISHED Published: 2018-07-23T16:00:00Z Last Updated: 2024-09-16T16:38:06.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: PEAR HTML_QuickForm version 3.2.14 contains an eval injection (CWE-95) vulnerability in HTML_QuickForm's getSubmitValue method, HTML_QuickForm's validate method, HTML_QuickForm_hierselect's _setOptions method, HTML_QuickForm_element's _findValue method, HTML_QuickForm_element's _prepareValue method. that can result in Possible information disclosure, possible impact on data integrity and execution of arbitrary code. This attack appear to be exploitable via A specially crafted query string could be utilised, e.g. http://www
trary code. This attack appear to be exploitable via A specially crafted query string could be utilised, e.g. http://www.example.com/admin/add_practice_type_id[1]=fubar%27])%20OR%20die(%27OOK!%27);%20//&mode=live. This vulnerability appears to have been fixed in 3.2.15. Additional Analyst Notes: - CVE Program Container: References: - https://civicrm.org/advisory/civi-sa-2018-07-remote-code-execution-in-quickform - http://blog.pear.php.net/2018/07/19/security-vulnerability-announcement-html_quickform/
CVE ID: CVE-2018-1999023 State: PUBLISHED Published: 2018-07-23T16:00:00Z Last Updated: 2024-09-17T03:18:33.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection vulnerability in the Lua scripting engine that can result in code execution outside the sandbox. This attack appear to be exploitable via Loading specially-crafted saved games, networked games, replays, and player content. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/shikadiqueen/45951ddc981cf8e0d9a74e4b30400380